Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/8008fe-175b-41bf-b1d6-2ce0eb458788/1/TFFjb96QX4Uh9BFHnoEyHNz0kEk.mft
File: TFFjb96QX4Uh9BFHnoEyHNz0kEk.mft (raw, json)
Hash identifier: QgVt6NdWkgCwtkNQcIC8575Hz452QJ99/WNJa+IpjuE=
Subject key identifier: 32:6A:38:46:21:71:18:41:E5:B5:2D:FC:90:0C:FB:1E:2B:39:11:4B
Authority key identifier: 4C:51:63:6F:DE:90:5F:85:21:F4:11:47:9E:81:32:1C:DC:F4:90:49
Certificate issuer: /CN=4c51636fde905f8521f411479e81321cdcf49049
Certificate serial: 019F9436B48AAABF05E4BC32F09BE604AEB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TFFjb96QX4Uh9BFHnoEyHNz0kEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/8008fe-175b-41bf-b1d6-2ce0eb458788/1/TFFjb96QX4Uh9BFHnoEyHNz0kEk.mft
Manifest number: 0C58
Signing time: Fri 24 Jul 2026 13:00:40 +0000
Manifest this update: Fri 24 Jul 2026 13:00:40 +0000
Manifest next update: Sat 25 Jul 2026 13:00:40 +0000
Files and hashes: 1: TFFjb96QX4Uh9BFHnoEyHNz0kEk.crl (hash: FcNQIx2M419H1IZv+fsRa901TU5hFl90HrKZVGYG8GU=)
2: btVJTycrOu73mUIXm-DmnQZDlPs.roa (hash: XGmN+HVfqx/2ED53etC2ojf1SMKcGmAltxqzFq/xltI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/8008fe-175b-41bf-b1d6-2ce0eb458788/1/TFFjb96QX4Uh9BFHnoEyHNz0kEk.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/8008fe-175b-41bf-b1d6-2ce0eb458788/1/TFFjb96QX4Uh9BFHnoEyHNz0kEk.mft
rsync://rpki.ripe.net/repository/DEFAULT/TFFjb96QX4Uh9BFHnoEyHNz0kEk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 13:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:36:b4:8a:aa:bf:05:e4:bc:32:f0:9b:e6:04:ae:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c51636fde905f8521f411479e81321cdcf49049
Validity
Not Before: Jul 24 13:00:40 2026 GMT
Not After : Jul 25 13:00:40 2026 GMT
Subject: CN=326a384621711841e5b52dfc900cfb1e2b39114b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:3a:20:ed:38:93:5a:ec:4f:69:7a:9e:33:55:
4d:9d:c8:e2:85:21:93:8d:41:f3:5a:f8:62:69:ab:
60:0e:91:cb:ce:37:0a:95:56:7a:c1:43:cc:6c:dc:
96:c9:f2:df:01:0a:0e:fc:f4:05:ff:6b:65:fe:af:
88:ba:2c:24:22:a5:21:c6:c5:1e:1f:61:83:78:8d:
0e:88:ab:b3:5e:32:e1:8c:8b:2e:c2:f5:9c:b1:6d:
ee:ab:54:ce:ad:b0:42:01:3b:34:59:65:21:5d:cd:
20:5e:e3:3c:f2:2c:89:73:21:2e:51:e8:f4:55:a6:
39:06:af:b8:90:f1:0d:d3:84:26:81:ab:18:00:fb:
0a:a0:86:a4:11:8d:91:e4:75:7f:3a:16:0a:86:28:
28:32:6f:51:64:12:ac:f7:53:9b:3f:32:7a:f9:7f:
b7:d3:21:eb:c1:e7:d3:c8:0c:38:ef:cc:db:58:55:
b7:5d:26:d4:91:a6:93:da:fa:d5:ae:e3:25:d1:4a:
10:70:93:59:61:53:9b:ab:ea:4d:63:ea:ef:1f:69:
50:fd:84:02:1a:80:19:54:37:56:d0:45:cc:b7:bf:
c2:68:f6:1d:d4:6e:9d:db:d9:9a:3b:bf:be:cd:52:
ea:1c:08:03:b9:92:f8:7e:07:04:ee:4b:bb:4c:f5:
68:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:6A:38:46:21:71:18:41:E5:B5:2D:FC:90:0C:FB:1E:2B:39:11:4B
X509v3 Authority Key Identifier:
keyid:4C:51:63:6F:DE:90:5F:85:21:F4:11:47:9E:81:32:1C:DC:F4:90:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TFFjb96QX4Uh9BFHnoEyHNz0kEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/8008fe-175b-41bf-b1d6-2ce0eb458788/1/TFFjb96QX4Uh9BFHnoEyHNz0kEk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/8008fe-175b-41bf-b1d6-2ce0eb458788/1/TFFjb96QX4Uh9BFHnoEyHNz0kEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:48:ca:49:5b:55:21:1a:43:f6:8e:4a:81:69:5e:f4:07:b9:
44:8d:9d:a9:26:bb:9f:55:74:50:7c:a7:a9:54:f3:24:23:dd:
ea:af:c2:a5:fe:a7:bd:56:62:8b:92:7e:94:53:f8:e1:65:c5:
a6:d1:63:07:cd:d1:ec:39:68:85:3a:93:60:92:bc:24:72:0b:
60:da:09:9c:1b:15:13:69:1c:1a:c5:44:83:9c:e7:86:50:24:
1b:44:1a:38:de:22:a9:2b:95:3f:b9:b6:30:66:38:a8:e8:59:
f6:11:eb:4d:81:f8:f8:2d:97:47:1a:fa:fc:c9:25:fb:e0:df:
07:71:ff:85:14:a8:63:c4:e2:f7:11:8b:38:13:ba:66:5e:a9:
37:d7:06:50:69:39:0e:4d:df:eb:71:ea:7b:7d:37:57:d6:74:
ff:fa:a9:77:65:2e:38:70:93:99:b1:2d:65:c6:76:34:2c:7a:
51:c2:5a:83:4d:83:f2:cb:cd:a6:de:28:5d:a2:20:d0:82:bd:
7f:c6:1c:88:8b:bf:e5:43:e9:1c:73:75:64:54:19:7b:86:59:
81:8b:dd:55:4b:30:bf:69:e2:1c:17:5c:05:99:7a:5a:f9:eb:
13:46:c5:0a:b5:a1:af:59:a5:a2:7f:ff:2b:cf:a9:12:77:52:
84:39:9d:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:46:59 2026 by rpki-client