Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5c/7358bd-c72f-4d9b-bb0d-0b4f717aa363/1/TVg7b1bPCSco3lk62VKuoZzjGIY.mft
File: TVg7b1bPCSco3lk62VKuoZzjGIY.mft (raw, json)
Hash identifier: E+LxjJsKizZxXg2HJnqp+mHegLQAH1A5JcLapodalXQ=
Subject key identifier: 87:1F:E6:AF:BE:46:6F:21:92:78:82:F2:D7:3A:65:EE:03:6C:08:FB
Authority key identifier: 4D:58:3B:6F:56:CF:09:27:28:DE:59:3A:D9:52:AE:A1:9C:E3:18:86
Certificate issuer: /CN=4d583b6f56cf092728de593ad952aea19ce31886
Certificate serial: 01A0D2A637E3BA710F500CC7AFA2ADCE2A85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TVg7b1bPCSco3lk62VKuoZzjGIY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/7358bd-c72f-4d9b-bb0d-0b4f717aa363/1/TVg7b1bPCSco3lk62VKuoZzjGIY.mft
Manifest number: 19C3
Signing time: Thu 24 Sep 2026 09:01:43 +0000
Manifest this update: Thu 24 Sep 2026 09:01:43 +0000
Manifest next update: Fri 25 Sep 2026 09:01:43 +0000
Files and hashes: 1: Js7glNIVHR31KzAH-Y9le6lg8Gc.roa (hash: 7RXrZN2yFu7MFj+qcU08ae6A+XIej9sHLn+Y/9HM9Vs=)
2: NXEJCiLPkkdBY9NTGhgdROtpXxc.roa (hash: UlDG/6GGWJgKzbG+s5oTy9rF68mX0nNsKBfB2sUaPZc=)
3: TVg7b1bPCSco3lk62VKuoZzjGIY.crl (hash: ijlEwHIYzYdgZRNw5Y9xwFSDg1/08NYlStY2AGOP9q8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/7358bd-c72f-4d9b-bb0d-0b4f717aa363/1/TVg7b1bPCSco3lk62VKuoZzjGIY.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/7358bd-c72f-4d9b-bb0d-0b4f717aa363/1/TVg7b1bPCSco3lk62VKuoZzjGIY.mft
rsync://rpki.ripe.net/repository/DEFAULT/TVg7b1bPCSco3lk62VKuoZzjGIY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 09:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:a6:37:e3:ba:71:0f:50:0c:c7:af:a2:ad:ce:2a:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d583b6f56cf092728de593ad952aea19ce31886
Validity
Not Before: Sep 24 09:01:43 2026 GMT
Not After : Sep 25 09:01:43 2026 GMT
Subject: CN=871fe6afbe466f21927882f2d73a65ee036c08fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:31:e5:59:a8:d2:cc:a3:84:f4:e6:08:68:5e:
ac:be:b9:1f:db:97:c4:91:8d:0c:36:77:32:fe:e6:
f0:09:bf:99:a9:17:51:b8:38:0b:5b:86:89:ce:7c:
45:7d:4e:aa:1e:43:0d:11:c3:ad:ea:cb:64:f0:e6:
8e:a3:fc:15:51:04:3a:0f:74:fc:85:d8:68:92:64:
4e:7d:97:0f:64:87:1c:cc:78:2e:4e:84:2c:e6:19:
1f:46:1f:45:4b:39:47:0f:cb:6d:c7:82:88:d7:ae:
d0:38:48:0e:84:9d:70:af:f1:ea:3e:54:d5:be:58:
fd:a0:c6:b6:c5:85:01:67:a2:a5:74:d3:09:55:fc:
35:c4:a6:96:3c:bd:67:29:33:0b:46:29:40:2d:09:
6d:15:44:4f:44:5a:b9:59:0a:da:2b:a4:b8:3a:fc:
78:42:91:a6:b3:15:3b:80:6e:5e:74:ef:a9:a9:de:
3c:f0:fe:53:7b:7e:b8:f1:a1:4e:13:99:31:70:cd:
8d:39:41:bd:f2:ee:74:bf:c3:70:0d:f1:6d:6d:73:
6c:78:91:e8:a7:12:47:11:54:f0:08:3c:20:90:46:
40:bf:8e:81:b1:fa:01:d0:ab:3e:79:bc:b2:61:f1:
fd:f8:64:1b:55:58:88:6d:5e:f2:bd:e8:41:5f:71:
83:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:1F:E6:AF:BE:46:6F:21:92:78:82:F2:D7:3A:65:EE:03:6C:08:FB
X509v3 Authority Key Identifier:
keyid:4D:58:3B:6F:56:CF:09:27:28:DE:59:3A:D9:52:AE:A1:9C:E3:18:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TVg7b1bPCSco3lk62VKuoZzjGIY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/7358bd-c72f-4d9b-bb0d-0b4f717aa363/1/TVg7b1bPCSco3lk62VKuoZzjGIY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/7358bd-c72f-4d9b-bb0d-0b4f717aa363/1/TVg7b1bPCSco3lk62VKuoZzjGIY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:06:11:1e:74:b1:ac:13:68:6d:f2:41:48:70:51:81:ec:64:
89:47:8a:95:29:3f:ab:8c:d8:7b:4d:a5:f6:52:af:2e:27:8c:
3d:ae:be:c3:fd:e4:76:82:50:e7:f5:b4:86:23:0e:04:6d:fe:
61:51:aa:34:20:e4:59:8b:a6:bb:b1:22:44:3a:77:69:dd:4b:
44:05:65:4c:f5:d4:32:9c:ba:9f:80:ab:c1:1d:06:94:54:4f:
e7:24:85:2d:3c:1b:de:ed:8b:34:a0:d7:69:bd:fc:e3:55:bd:
5f:72:de:df:de:e2:d2:a3:94:91:ac:ad:1a:23:24:ac:8c:46:
b6:b1:38:36:ee:ac:86:ff:1f:5e:cc:7f:55:3d:cd:9a:eb:ee:
ba:a5:35:14:5d:77:f4:0d:02:cb:84:a8:97:de:74:73:01:b9:
c5:07:b7:3a:ef:32:88:ea:c4:78:2a:4c:ba:98:86:93:0e:92:
01:ad:7c:f6:b7:99:80:82:0b:63:dd:37:72:78:06:00:b0:84:
1c:1d:37:a5:e2:a1:94:07:69:64:5b:47:f1:10:2c:68:f5:9b:
60:c2:53:4b:b5:52:94:fb:f7:a5:d7:63:33:05:62:9c:23:0c:
dd:ca:7a:fd:e8:a3:80:bd:d3:9c:f5:75:69:80:9a:4f:c6:9e:
63:d0:56:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 17:22:21 2026 by rpki-client