Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/bf66dd-6237-48de-aed7-a7c59ddcf76b/1/TMvF4EXqpfdiqRRiRMGSSLYrqXY.mft
File: TMvF4EXqpfdiqRRiRMGSSLYrqXY.mft (raw, json)
Hash identifier: NB3qFVgEX0ZgKaRS+gTJMNXi0cuJjRbKDM92xnp8B1A=
Subject key identifier: 48:2D:C4:FB:21:CF:9A:24:52:2A:40:86:B7:D3:67:20:33:93:31:81
Authority key identifier: 4C:CB:C5:E0:45:EA:A5:F7:62:A9:14:62:44:C1:92:48:B6:2B:A9:76
Certificate issuer: /CN=4ccbc5e045eaa5f762a9146244c19248b62ba976
Certificate serial: 019F91DA90B0427EC73B3D4CDD6D161A2EF8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TMvF4EXqpfdiqRRiRMGSSLYrqXY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/bf66dd-6237-48de-aed7-a7c59ddcf76b/1/TMvF4EXqpfdiqRRiRMGSSLYrqXY.mft
Manifest number: 19CE
Signing time: Fri 24 Jul 2026 02:00:47 +0000
Manifest this update: Fri 24 Jul 2026 02:00:47 +0000
Manifest next update: Sat 25 Jul 2026 02:00:47 +0000
Files and hashes: 1: OivHzY1Owmf_t0MGp9f5pENVwKc.roa (hash: AGN5cPkAaLuiB5y5JBq+hIUbcPiUDqUPHZPobtq+scE=)
2: TMvF4EXqpfdiqRRiRMGSSLYrqXY.crl (hash: XVutPzXW2H5IL1u0JzocpQPTpnM3E9xpGsSKWghJtTk=)
3: x3MPjpAMv8jy4dhfPiDorj_3tLI.roa (hash: 0SB+6P5HbotJTZwxWuM7rwLO4yE+FQC9GnNEzbQTjX0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/bf66dd-6237-48de-aed7-a7c59ddcf76b/1/TMvF4EXqpfdiqRRiRMGSSLYrqXY.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/bf66dd-6237-48de-aed7-a7c59ddcf76b/1/TMvF4EXqpfdiqRRiRMGSSLYrqXY.mft
rsync://rpki.ripe.net/repository/DEFAULT/TMvF4EXqpfdiqRRiRMGSSLYrqXY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:da:90:b0:42:7e:c7:3b:3d:4c:dd:6d:16:1a:2e:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ccbc5e045eaa5f762a9146244c19248b62ba976
Validity
Not Before: Jul 24 02:00:47 2026 GMT
Not After : Jul 25 02:00:47 2026 GMT
Subject: CN=482dc4fb21cf9a24522a4086b7d3672033933181
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:c5:ba:52:e2:71:3f:aa:19:60:16:a7:62:ef:
e3:fa:a1:7e:c4:64:61:e6:a8:b3:42:a5:8a:78:9a:
20:2f:c7:76:2d:ac:85:b9:73:d6:d1:97:6e:95:9b:
ec:76:f4:ac:5d:3a:dd:e2:67:3e:38:27:7f:17:d3:
32:65:f8:22:46:9d:f6:96:01:eb:8a:99:99:3b:8d:
40:03:3f:dd:5d:39:44:31:70:9c:4e:10:09:5f:9a:
5b:a1:27:0b:38:17:26:ae:83:6e:ad:5b:f1:ca:4c:
b5:c6:e2:1f:41:6c:3d:a0:76:4e:27:fe:7e:0c:76:
62:3b:f1:27:62:7a:93:6f:89:7e:58:8a:5e:8e:b6:
d1:03:97:7d:7b:73:53:dc:d0:4c:45:71:98:12:82:
c0:63:2e:40:f2:25:64:a3:21:ca:da:c8:21:85:8b:
d5:0b:5b:c0:9d:3c:db:4d:12:a9:ed:27:94:05:10:
02:e9:28:e5:4a:76:71:55:3a:5c:17:b3:7d:3c:46:
e8:b9:51:60:d7:04:a1:12:b4:78:55:57:98:be:d1:
c0:d8:bb:9d:b5:50:10:e4:bd:8a:e6:6b:a5:00:17:
3c:57:d2:63:00:e8:cb:04:79:a0:0b:1e:1d:24:ba:
1c:9d:bc:da:7d:f0:5d:67:db:51:87:81:ba:7a:7a:
2d:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:2D:C4:FB:21:CF:9A:24:52:2A:40:86:B7:D3:67:20:33:93:31:81
X509v3 Authority Key Identifier:
keyid:4C:CB:C5:E0:45:EA:A5:F7:62:A9:14:62:44:C1:92:48:B6:2B:A9:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TMvF4EXqpfdiqRRiRMGSSLYrqXY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/bf66dd-6237-48de-aed7-a7c59ddcf76b/1/TMvF4EXqpfdiqRRiRMGSSLYrqXY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/bf66dd-6237-48de-aed7-a7c59ddcf76b/1/TMvF4EXqpfdiqRRiRMGSSLYrqXY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:70:70:d1:d1:5c:75:a7:87:51:4a:e7:1c:95:7d:77:cf:79:
65:d1:59:f9:a9:4c:3c:71:d8:6f:9f:65:f6:6f:a4:64:e0:71:
3c:8a:7a:fb:fb:2f:02:3e:c0:ec:7b:de:27:71:a4:be:67:45:
cf:bf:ec:d9:d5:fb:cd:4d:63:5d:95:1e:a0:8b:92:e6:9a:3c:
80:8d:a2:96:7a:16:87:cd:3b:4c:bf:1f:62:22:ff:8f:fe:0d:
48:30:6e:2e:79:85:35:9c:38:4f:d8:20:4f:79:1b:40:91:03:
ee:b4:68:42:c9:93:a1:b2:f0:5c:7c:7f:44:ea:48:76:3b:91:
2d:b6:45:14:5e:ab:69:d5:de:13:c2:84:4e:ef:89:d2:a9:26:
b2:ad:3b:73:1b:b4:e3:fe:a0:6b:6d:69:1e:4c:83:15:c2:27:
bd:d5:cc:cc:27:15:34:fc:ec:d8:3e:4c:4e:16:80:ef:55:84:
61:c9:93:c0:35:a0:66:d4:8a:5f:7d:8c:fa:88:cb:80:30:3b:
65:7b:35:c9:f2:bc:5c:af:a8:fc:65:6c:6d:a6:e4:b2:fa:92:
32:5d:f5:6a:d2:f6:16:13:8a:19:2c:25:32:25:3c:12:31:9f:
3d:a2:4c:f1:33:48:5c:95:92:a8:35:27:6d:50:5d:67:44:6d:
c7:7f:a4:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:55:45 2026 by rpki-client