Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/c8b40c-2c0b-47ff-b921-e631463b123b/1/Tml3iQJzeX38xAIrkMBGF-sd8Sk.mft
File: Tml3iQJzeX38xAIrkMBGF-sd8Sk.mft (raw, json)
Hash identifier: mySSWVSVc1PkW4L9d9jRNUpsd1Azrt2TSHvxJPsKRRo=
Subject key identifier: FE:DB:DE:A5:AF:BC:F1:27:4E:79:56:EE:BE:4B:4A:8B:99:76:AF:81
Authority key identifier: 4E:69:77:89:02:73:79:7D:FC:C4:02:2B:90:C0:46:17:EB:1D:F1:29
Certificate issuer: /CN=4e6977890273797dfcc4022b90c04617eb1df129
Certificate serial: 019F954A755238771068278B61151ED2ED48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tml3iQJzeX38xAIrkMBGF-sd8Sk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/c8b40c-2c0b-47ff-b921-e631463b123b/1/Tml3iQJzeX38xAIrkMBGF-sd8Sk.mft
Manifest number: 42
Signing time: Fri 24 Jul 2026 18:01:52 +0000
Manifest this update: Fri 24 Jul 2026 18:01:52 +0000
Manifest next update: Sat 25 Jul 2026 18:01:52 +0000
Files and hashes: 1: 76fuJqCnyM96XEK3XxGjc6ze908.roa (hash: th/ZnBNOEGf6s4sOu5GgwpSyFXSOhHyXMejJbNorthU=)
2: Tml3iQJzeX38xAIrkMBGF-sd8Sk.crl (hash: a3t5GnBlNSJjndlqwasyuhKZloNJ8U9d21Pa7by+B8A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/c8b40c-2c0b-47ff-b921-e631463b123b/1/Tml3iQJzeX38xAIrkMBGF-sd8Sk.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/c8b40c-2c0b-47ff-b921-e631463b123b/1/Tml3iQJzeX38xAIrkMBGF-sd8Sk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tml3iQJzeX38xAIrkMBGF-sd8Sk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 16:41:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:4a:75:52:38:77:10:68:27:8b:61:15:1e:d2:ed:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e6977890273797dfcc4022b90c04617eb1df129
Validity
Not Before: Jul 24 18:01:52 2026 GMT
Not After : Jul 25 18:01:52 2026 GMT
Subject: CN=fedbdea5afbcf1274e7956eebe4b4a8b9976af81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:6d:ba:53:ea:a8:37:87:8f:26:46:1c:6d:a5:
ef:ed:34:82:6f:c1:55:4c:ca:6a:0e:9c:02:e0:01:
63:4a:21:c4:0c:0e:5a:ed:96:e9:7e:a1:76:43:eb:
31:c6:c1:33:0d:66:93:c6:8c:8b:c6:5d:72:d6:f4:
bf:7e:9d:ac:8d:55:c7:73:60:33:74:94:06:cf:10:
b9:ac:91:ba:7e:03:56:cf:54:51:c6:3b:bd:13:28:
70:00:61:2b:3a:44:5b:91:97:9e:a9:be:2a:c8:9d:
b6:28:a5:d3:7d:e5:55:5f:d7:57:19:1b:c4:e4:45:
de:25:32:ca:31:b5:33:a5:6a:19:fb:b0:93:b3:dd:
2d:bf:fc:0a:87:45:f3:b9:2d:50:60:87:a3:29:12:
fa:dc:0f:a5:20:0b:c1:a2:b3:d4:e9:7a:c3:95:6c:
cb:de:42:56:ec:b7:2e:09:98:79:83:c2:f5:76:76:
04:8d:a1:c6:70:fc:cb:97:6e:7b:51:00:4d:d8:d5:
44:bb:7c:40:02:43:53:9a:2c:b7:96:33:05:9c:68:
3d:a1:f1:b5:c6:26:68:83:f4:f9:a2:42:23:75:39:
12:a6:89:32:c2:5d:e5:73:b0:08:49:6a:9d:6a:c4:
64:36:76:83:88:f9:d9:23:f4:43:25:b5:39:40:39:
95:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:DB:DE:A5:AF:BC:F1:27:4E:79:56:EE:BE:4B:4A:8B:99:76:AF:81
X509v3 Authority Key Identifier:
keyid:4E:69:77:89:02:73:79:7D:FC:C4:02:2B:90:C0:46:17:EB:1D:F1:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tml3iQJzeX38xAIrkMBGF-sd8Sk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/c8b40c-2c0b-47ff-b921-e631463b123b/1/Tml3iQJzeX38xAIrkMBGF-sd8Sk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/c8b40c-2c0b-47ff-b921-e631463b123b/1/Tml3iQJzeX38xAIrkMBGF-sd8Sk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:1a:6d:68:c3:c8:d2:57:9e:0d:4f:b3:18:53:95:7e:e5:f0:
88:ac:a1:33:10:c4:4c:8e:e8:24:3b:0f:aa:9d:53:12:cd:3e:
4a:93:75:58:ce:29:7c:85:c0:fa:70:a3:f5:1a:57:98:97:38:
6e:6c:73:fa:4e:d5:2b:f4:e9:15:8e:db:31:22:29:42:9b:2e:
b0:5c:17:9b:fc:5a:23:cb:23:0c:5f:0b:97:9d:01:9a:7b:47:
1c:96:1b:93:5b:b0:93:67:96:94:c9:52:8b:69:5b:24:aa:15:
31:f0:91:88:34:ee:d2:14:bc:3c:88:2b:ab:32:98:67:c8:d6:
c8:51:f1:0f:92:56:a7:22:45:c9:37:6e:f6:47:09:e9:31:f2:
a2:89:b9:9e:8c:fd:9a:9f:2b:d1:ee:b7:80:2a:e6:43:69:30:
a6:c7:2e:ab:c1:26:db:cd:cc:2f:61:3c:18:12:0c:4d:5f:f9:
1d:c0:a0:27:0b:e9:42:91:b6:3b:4f:96:59:fc:79:35:b5:58:
2a:14:51:16:13:4e:09:d0:a6:96:dc:23:b9:f5:81:8f:1d:ff:
be:74:c0:b4:a6:f5:3a:de:e3:20:9e:ac:5a:02:57:cb:84:3b:
92:64:f6:f6:14:97:d8:0d:08:95:bf:b6:c0:3c:29:cb:34:4b:
ea:92:bc:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:23:57 2026 by rpki-client