
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/c3a85d-9d0b-4562-9238-46ee0cd7fcba/1/TsoQXOSvbCHNQp6ZLQbqfQbYpW0.mft
File: TsoQXOSvbCHNQp6ZLQbqfQbYpW0.mft (raw, json)
Hash identifier: TJaIV0jH5RyoJ4yy4mFfqej7P+Phz2sukeld2+hH944=
Subject key identifier: BC:AF:00:C9:A6:DB:12:72:C0:41:BE:9A:02:F2:19:FE:E6:A5:D0:40
Authority key identifier: 4E:CA:10:5C:E4:AF:6C:21:CD:42:9E:99:2D:06:EA:7D:06:D8:A5:6D
Certificate issuer: /CN=4eca105ce4af6c21cd429e992d06ea7d06d8a56d
Certificate serial: 019F943752ABDC875ACBA3AFD6A1277368B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TsoQXOSvbCHNQp6ZLQbqfQbYpW0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/c3a85d-9d0b-4562-9238-46ee0cd7fcba/1/TsoQXOSvbCHNQp6ZLQbqfQbYpW0.mft
Manifest number: 19CD
Signing time: Fri 24 Jul 2026 13:01:21 +0000
Manifest this update: Fri 24 Jul 2026 13:01:21 +0000
Manifest next update: Sat 25 Jul 2026 13:01:21 +0000
Files and hashes: 1: AwY5mgjpthmtObHXqwAVAnajhhs.roa (hash: Ynq5lonnqADLu0ss1thtGFYZaU4FINs+79TFKUmEVMc=)
2: FEE0W1FvUWZY1yNTAUusq7fzBQA.roa (hash: Hd0jbgNDlWlFVrZYfQAqVLAGgeJbu+X/gxILT2NBZwY=)
3: HBpn81d4cG4_UILVsdO8exzlDsY.roa (hash: kRgmgXZK5yKUe+saBJuegm6bkvNmijxbzes8bqH8BJE=)
4: Kpj-186fjuAYRRYnilKKfHVGN8E.roa (hash: W4eIu6BlkL603t8W8JuwGE33q4DgMOfHpuuHjrT/r2s=)
5: NueqQvkP6OwbYq3KeGusJiI5nB4.roa (hash: Iwo1uDTct62657OX8teLFspmVyOSx/FLeOTjd7KJmFk=)
6: TsoQXOSvbCHNQp6ZLQbqfQbYpW0.crl (hash: ztRUgQHpI22vd6/rU24s+rQW1K+fMTxMc6vmMZ7PkkQ=)
7: XhbfkmgppgGaa0jwxEEK1QpmG_o.roa (hash: RblW9p63Q8/3oZMyKn6Kq61NaEzW9XB/T1oxdZPwAPk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/c3a85d-9d0b-4562-9238-46ee0cd7fcba/1/TsoQXOSvbCHNQp6ZLQbqfQbYpW0.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/c3a85d-9d0b-4562-9238-46ee0cd7fcba/1/TsoQXOSvbCHNQp6ZLQbqfQbYpW0.mft
rsync://rpki.ripe.net/repository/DEFAULT/TsoQXOSvbCHNQp6ZLQbqfQbYpW0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:37:52:ab:dc:87:5a:cb:a3:af:d6:a1:27:73:68:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4eca105ce4af6c21cd429e992d06ea7d06d8a56d
Validity
Not Before: Jul 24 13:01:21 2026 GMT
Not After : Jul 25 13:01:21 2026 GMT
Subject: CN=bcaf00c9a6db1272c041be9a02f219fee6a5d040
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:ba:35:db:00:5d:9c:c8:96:bf:77:f6:e1:35:
88:fc:25:ff:83:14:c8:ab:fb:ae:6e:38:84:82:06:
8f:77:60:78:57:5c:db:8a:25:81:e8:79:b5:10:88:
f0:c2:c0:dd:4e:fa:20:1f:d7:bf:10:f9:18:68:75:
d4:f5:1d:dc:92:5e:bc:e2:14:67:a3:b3:49:1c:88:
d2:1a:01:07:12:a7:bc:17:76:c0:18:1f:8a:7d:9f:
95:17:49:2e:f4:ef:88:94:36:f7:e3:1c:e7:92:f5:
72:d8:40:b7:2e:b0:99:f0:36:69:99:28:f6:7f:7e:
b8:ab:04:68:58:5d:14:d6:e8:84:a9:c5:18:b1:b7:
72:9e:1e:37:9d:a3:93:cb:f0:67:ea:50:1d:ac:17:
35:6e:fe:a9:b1:28:4e:0b:0a:67:bd:c2:df:9b:13:
fb:14:7e:38:9c:38:89:3b:8d:cf:a4:c5:d8:85:2e:
30:b9:d3:05:67:7c:c2:ff:27:12:02:af:52:3a:98:
3f:06:0e:36:62:ed:9b:9a:a6:21:4d:a5:24:8b:a0:
e2:ae:4e:67:46:14:a6:e8:28:62:3f:aa:90:1d:c2:
e0:a3:64:5a:fc:2b:e1:f5:4f:40:af:06:c6:c2:e8:
a9:36:48:5b:92:03:a1:b0:d9:97:c1:a7:0b:1c:33:
ba:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:AF:00:C9:A6:DB:12:72:C0:41:BE:9A:02:F2:19:FE:E6:A5:D0:40
X509v3 Authority Key Identifier:
keyid:4E:CA:10:5C:E4:AF:6C:21:CD:42:9E:99:2D:06:EA:7D:06:D8:A5:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TsoQXOSvbCHNQp6ZLQbqfQbYpW0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/c3a85d-9d0b-4562-9238-46ee0cd7fcba/1/TsoQXOSvbCHNQp6ZLQbqfQbYpW0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/c3a85d-9d0b-4562-9238-46ee0cd7fcba/1/TsoQXOSvbCHNQp6ZLQbqfQbYpW0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:56:07:fb:70:94:36:65:3d:82:c6:2b:45:12:59:63:7c:06:
40:30:62:74:04:26:61:21:12:eb:06:3f:dc:d1:33:9e:8b:27:
4e:2b:c0:c3:59:38:5b:cc:5e:c8:4a:9f:87:4a:3e:dd:e5:e7:
e9:6b:f2:09:bd:fb:9e:28:9f:e8:f5:c2:4d:90:c6:6e:55:43:
d5:8a:27:d7:d2:93:ee:e6:b7:5c:22:b9:5d:70:6b:7d:07:f8:
0a:78:22:14:a4:d9:26:1b:f8:cb:bb:cf:6e:5d:eb:b5:06:98:
b9:90:da:2d:de:94:03:98:a5:fa:73:23:f8:94:b5:41:c4:df:
23:4e:39:15:d9:84:cf:91:94:f6:6c:bf:dc:ef:9f:ef:77:d9:
61:71:33:44:70:73:29:44:35:63:32:48:9c:00:66:0c:b6:ae:
f3:6f:4d:c6:b2:77:fd:88:fd:46:5e:87:18:86:2e:cc:d8:43:
d7:13:9c:1d:6c:ba:35:a3:41:83:7c:5c:53:58:c6:0a:db:f8:
21:09:64:9a:18:0c:fb:a3:e9:aa:d2:50:39:7d:cb:3e:2d:26:
51:05:16:f9:1c:2b:96:02:f7:a0:d7:bb:cb:a3:e9:c1:ee:83:
a4:a9:33:76:6e:02:1e:ec:90:02:37:5c:8d:b2:17:bd:cb:bc:
00:1b:7e:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:01:18 2026 by rpki-client