Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/786b51-e2df-4fd6-9c9b-f567c3e9f5ff/1/TsOgYsuW2aPyGostqEj4HG9zv5U.mft
File: TsOgYsuW2aPyGostqEj4HG9zv5U.mft (raw, json)
Hash identifier: S6NXPhzHvZGkOBuOyNxUS6T9i47WPK6BJrodsWxw1vs=
Subject key identifier: BA:4F:BE:CF:81:BF:D9:4F:C3:17:31:01:86:F9:27:39:CD:E4:9F:3A
Authority key identifier: 4E:C3:A0:62:CB:96:D9:A3:F2:1A:8B:2D:A8:48:F8:1C:6F:73:BF:95
Certificate issuer: /CN=4ec3a062cb96d9a3f21a8b2da848f81c6f73bf95
Certificate serial: 019F924909BAD8BF7FECEEDF2765B32B3A89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TsOgYsuW2aPyGostqEj4HG9zv5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/786b51-e2df-4fd6-9c9b-f567c3e9f5ff/1/TsOgYsuW2aPyGostqEj4HG9zv5U.mft
Manifest number: 1962
Signing time: Fri 24 Jul 2026 04:01:27 +0000
Manifest this update: Fri 24 Jul 2026 04:01:27 +0000
Manifest next update: Sat 25 Jul 2026 04:01:27 +0000
Files and hashes: 1: TsOgYsuW2aPyGostqEj4HG9zv5U.crl (hash: iXyqx6VXRGYlolqy0kHhlsHwq9aRFnlmS8tPHI5jL4M=)
2: cMSq_NcYXBjORlEeP54TeKaU-zc.roa (hash: AnKK7epayFvj9OjYad7fK2xMQOaLyQs9vYbQVKbmXI8=)
3: svmsZH4j3FCzPSNp-bJETBP8qzs.roa (hash: enOf8GhkIm48YbUB7aWnRSzpdWjW5NG5zxx4fZ/PPB4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/786b51-e2df-4fd6-9c9b-f567c3e9f5ff/1/TsOgYsuW2aPyGostqEj4HG9zv5U.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/786b51-e2df-4fd6-9c9b-f567c3e9f5ff/1/TsOgYsuW2aPyGostqEj4HG9zv5U.mft
rsync://rpki.ripe.net/repository/DEFAULT/TsOgYsuW2aPyGostqEj4HG9zv5U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 04:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:49:09:ba:d8:bf:7f:ec:ee:df:27:65:b3:2b:3a:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ec3a062cb96d9a3f21a8b2da848f81c6f73bf95
Validity
Not Before: Jul 24 04:01:27 2026 GMT
Not After : Jul 25 04:01:27 2026 GMT
Subject: CN=ba4fbecf81bfd94fc317310186f92739cde49f3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:82:65:89:34:08:9c:a7:89:3a:af:27:b8:b5:
20:f8:9f:0e:be:be:a8:40:c2:cb:0d:2b:74:a6:6d:
b6:a6:27:ed:1b:43:3a:da:40:ef:c4:95:b8:8a:92:
1d:ea:2b:d6:60:40:3b:d3:23:3f:5e:c8:29:8e:7e:
38:16:f3:02:d5:8e:e5:07:64:24:58:de:a0:5d:b1:
49:51:5e:34:00:69:d6:4b:57:ca:da:b5:b4:02:d8:
7b:bd:18:4f:ba:ce:3e:7e:c0:d4:e7:77:23:c8:0c:
87:44:fe:57:70:04:32:0b:27:01:6e:b3:a3:85:94:
db:03:ce:53:73:49:9a:63:43:2c:00:c5:52:9c:4c:
fd:65:80:34:03:40:c4:d8:99:60:0b:78:46:22:75:
81:a6:8b:3c:0d:2a:0e:2e:07:60:ff:5f:40:98:3b:
cb:33:f6:e9:98:a2:77:19:24:17:d9:e7:33:d0:af:
4c:fe:26:a5:54:f2:0e:2c:eb:c7:af:e5:17:8d:3d:
c0:e0:0c:04:f0:9f:66:1b:92:90:d2:64:5e:1d:1b:
2b:32:37:df:1f:91:e9:dd:c2:ed:cc:1e:ee:1f:97:
75:ab:06:57:ca:d7:b8:62:9c:91:24:2f:0d:b6:a9:
aa:35:44:72:24:27:8b:07:14:95:d3:0c:c1:09:21:
63:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:4F:BE:CF:81:BF:D9:4F:C3:17:31:01:86:F9:27:39:CD:E4:9F:3A
X509v3 Authority Key Identifier:
keyid:4E:C3:A0:62:CB:96:D9:A3:F2:1A:8B:2D:A8:48:F8:1C:6F:73:BF:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TsOgYsuW2aPyGostqEj4HG9zv5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/786b51-e2df-4fd6-9c9b-f567c3e9f5ff/1/TsOgYsuW2aPyGostqEj4HG9zv5U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/786b51-e2df-4fd6-9c9b-f567c3e9f5ff/1/TsOgYsuW2aPyGostqEj4HG9zv5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:c5:2a:d6:30:2e:fd:99:a2:17:e7:4d:2b:af:72:5f:c6:fc:
3c:6f:aa:73:ca:15:5f:ac:2c:38:ba:96:2d:76:7e:5b:7b:74:
4a:f1:ad:c9:09:fb:e2:e6:04:b8:ed:78:a7:cb:0c:86:e7:ab:
be:a8:93:61:4f:a1:93:f6:b0:66:25:d5:3b:9d:eb:20:dc:11:
bb:bd:eb:97:32:41:c0:45:36:ba:0e:da:a3:50:23:ed:72:b1:
63:32:c0:8c:66:b3:f5:d5:2d:86:b8:c4:1c:61:76:22:6f:d6:
49:56:79:44:fc:f3:42:1a:95:f6:7a:0d:2e:71:40:81:6d:f5:
47:14:76:8f:c1:03:21:88:6e:48:70:fb:71:4a:96:14:f2:b0:
c4:6f:7f:1f:30:7c:e0:db:2b:fa:d1:f1:12:e3:87:51:02:d4:
66:da:7c:0c:32:fe:43:af:37:97:67:6b:0f:c8:be:fe:fe:ac:
8c:f6:bb:27:b9:cf:cc:fb:05:dd:1c:24:d8:2e:24:ae:46:72:
0c:68:72:16:6a:e5:61:ee:35:b0:f3:25:79:db:f2:e9:96:88:
b4:58:7e:f0:5d:e3:67:a3:51:72:c9:93:9c:6f:11:fa:69:0e:
46:42:08:38:d8:69:0f:bd:df:79:48:6a:5f:cc:60:ab:00:f7:
f8:e0:d4:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:44:21 2026 by rpki-client