Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/3965b0-fee9-49bf-a54d-a8d838438d8a/1/TkwTiahJ713MuDA3A7iYyR5j0U8.mft
File: TkwTiahJ713MuDA3A7iYyR5j0U8.mft (raw, json)
Hash identifier: JRTF9Qm5sLlXPYxijdlmZ1jSPk9aG/JUBPCxFVUwdSc=
Subject key identifier: B4:B6:77:32:80:7D:74:FE:E5:AF:F2:4D:85:5F:08:7C:06:D7:39:5C
Authority key identifier: 4E:4C:13:89:A8:49:EF:5D:CC:B8:30:37:03:B8:98:C9:1E:63:D1:4F
Certificate issuer: /CN=4e4c1389a849ef5dccb8303703b898c91e63d14f
Certificate serial: 019F92ED9A3397750CE4F97CA6E93ADC6C17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TkwTiahJ713MuDA3A7iYyR5j0U8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/3965b0-fee9-49bf-a54d-a8d838438d8a/1/TkwTiahJ713MuDA3A7iYyR5j0U8.mft
Manifest number: 12C3
Signing time: Fri 24 Jul 2026 07:01:12 +0000
Manifest this update: Fri 24 Jul 2026 07:01:12 +0000
Manifest next update: Sat 25 Jul 2026 07:01:12 +0000
Files and hashes: 1: OTmYG5w2zWjBDBJnDDKBYpbFxQE.roa (hash: wOCD2A3JYKhAmA4Jxehzqr2P6WlUUR1QNP5GZ7+5dNU=)
2: TkwTiahJ713MuDA3A7iYyR5j0U8.crl (hash: +5jDWfM2HxbCQ1xS8xlzsE4aE5hz6O2D0KMo39MG1IU=)
3: fPUxVV7UyTZqibxa_fO2Z7Dv9bw.roa (hash: rWKalIAkW6Zh9W6BAPZNwld+hHBcJmoL3lPHNNP3Pi4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/3965b0-fee9-49bf-a54d-a8d838438d8a/1/TkwTiahJ713MuDA3A7iYyR5j0U8.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/3965b0-fee9-49bf-a54d-a8d838438d8a/1/TkwTiahJ713MuDA3A7iYyR5j0U8.mft
rsync://rpki.ripe.net/repository/DEFAULT/TkwTiahJ713MuDA3A7iYyR5j0U8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 07:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:ed:9a:33:97:75:0c:e4:f9:7c:a6:e9:3a:dc:6c:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e4c1389a849ef5dccb8303703b898c91e63d14f
Validity
Not Before: Jul 24 07:01:12 2026 GMT
Not After : Jul 25 07:01:12 2026 GMT
Subject: CN=b4b67732807d74fee5aff24d855f087c06d7395c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:80:47:df:b6:c6:59:fa:55:64:8d:c2:f6:35:
54:d1:c8:12:9f:d5:8f:19:37:0e:d2:4c:22:d1:84:
1c:93:11:9b:a9:d1:5b:ee:38:98:d6:4e:ba:bf:a5:
9f:3c:dc:58:73:b0:ff:b8:70:96:a9:bf:fd:69:88:
bb:18:29:68:f0:21:4b:c3:c9:b0:4b:57:26:59:ed:
39:bc:dd:6e:e5:28:59:48:5b:73:a4:49:62:28:10:
57:54:59:04:2e:c7:e8:34:6f:87:42:57:e6:c0:23:
cc:ed:e3:ed:2c:56:48:5e:df:36:d0:ac:97:1d:4a:
0e:cc:93:51:a0:b3:3c:27:42:38:52:0e:46:e4:c6:
de:18:b7:29:8a:80:01:48:44:ce:ee:b2:6f:30:e6:
d5:e5:94:93:70:cf:e6:88:28:9e:e1:fd:c6:a4:1a:
77:63:33:b7:f7:86:70:14:8c:63:93:fe:4a:19:79:
0a:ea:d7:25:02:10:39:cd:86:5b:df:f9:8d:b6:51:
9e:33:e1:ec:52:f1:ca:1f:82:cd:98:fe:62:c9:ff:
4d:a2:2a:69:85:27:b2:62:61:f7:58:32:a1:4d:ef:
c8:6c:c9:95:bb:58:41:0d:32:b3:8b:14:04:8f:f2:
66:7a:f1:64:e3:a8:2a:1d:81:4d:4d:85:80:fd:12:
1f:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:B6:77:32:80:7D:74:FE:E5:AF:F2:4D:85:5F:08:7C:06:D7:39:5C
X509v3 Authority Key Identifier:
keyid:4E:4C:13:89:A8:49:EF:5D:CC:B8:30:37:03:B8:98:C9:1E:63:D1:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TkwTiahJ713MuDA3A7iYyR5j0U8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/3965b0-fee9-49bf-a54d-a8d838438d8a/1/TkwTiahJ713MuDA3A7iYyR5j0U8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/3965b0-fee9-49bf-a54d-a8d838438d8a/1/TkwTiahJ713MuDA3A7iYyR5j0U8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:9c:64:d2:e5:df:0e:1d:5d:f7:3d:90:4e:95:c2:3f:1e:cc:
d9:08:41:29:a7:57:06:ae:8c:8e:8b:25:01:d4:54:92:5c:0e:
6a:76:02:76:13:16:da:3e:b4:6d:56:f9:ed:ba:69:ed:9a:a0:
e1:17:d4:54:29:7f:90:63:0d:c8:d0:f3:24:3f:e2:58:3d:a6:
38:57:17:3f:a5:af:7e:a9:51:e2:06:63:c8:9c:e0:da:64:b6:
82:05:4b:da:52:8a:9e:e5:0b:67:49:44:fa:1f:d3:9e:f7:59:
04:1a:d6:77:4d:db:88:49:c7:b5:8f:9d:da:6c:0f:95:03:d6:
ff:8a:15:6c:00:e1:db:8b:15:2e:16:ff:ac:1c:92:00:b1:8c:
cf:18:f1:a6:7b:29:9a:bb:94:e2:71:06:00:48:07:4f:45:3a:
2c:11:26:a2:84:72:dc:5d:1b:8c:ba:fd:a6:a9:2c:1b:ab:65:
e6:0a:14:25:d5:20:a2:fb:89:36:ac:d7:0f:66:66:62:57:44:
d3:be:6c:5c:ba:6a:db:0a:0d:37:f8:5e:44:1f:66:fa:13:63:
0c:0d:4a:6a:a7:1b:f2:8f:be:15:10:7b:a9:45:8a:ed:1a:a1:
9f:47:0d:0c:10:45:dd:8e:50:8e:ff:1b:8e:53:23:13:b5:d6:
f6:f0:19:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:56:41 2026 by rpki-client