Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/1d0c39-2555-468f-be66-ff9bab90af18/1/tmxJhc1gZDIg4GSi4RTXj1sDnCs.mft
File: tmxJhc1gZDIg4GSi4RTXj1sDnCs.mft (raw, json)
Hash identifier: 38lDjifo0tfQu0wjDL/hiOb+6WWpA6NCrtaZF9hgK5o=
Subject key identifier: 4C:CD:28:76:7A:CC:B4:E3:24:F1:8A:EE:DB:15:E3:51:46:A1:ED:BB
Authority key identifier: B6:6C:49:85:CD:60:64:32:20:E0:64:A2:E1:14:D7:8F:5B:03:9C:2B
Certificate issuer: /CN=b66c4985cd60643220e064a2e114d78f5b039c2b
Certificate serial: 019F93C8DA083565872ECD8BB263A2C87B88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tmxJhc1gZDIg4GSi4RTXj1sDnCs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/1d0c39-2555-468f-be66-ff9bab90af18/1/tmxJhc1gZDIg4GSi4RTXj1sDnCs.mft
Manifest number: 0C16
Signing time: Fri 24 Jul 2026 11:00:41 +0000
Manifest this update: Fri 24 Jul 2026 11:00:41 +0000
Manifest next update: Sat 25 Jul 2026 11:00:41 +0000
Files and hashes: 1: 4rBeJt2gTE44sAknjaU9icbf798.roa (hash: ZYDnszD6TdxQH5b/70FLacYtJ5dXx4AM/j4gatDDLJQ=)
2: FznKlNjPtV7CgIvm3j4yrj4Hfic.roa (hash: FZIfFOE2MnfZCsnXNURSud4raCCnVXaurgVHkGDoOTc=)
3: tmxJhc1gZDIg4GSi4RTXj1sDnCs.crl (hash: fmt8lX9fImd2/XwmJ3/V8B3TSmQsxqpxk4Z/tH3ZU7c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/1d0c39-2555-468f-be66-ff9bab90af18/1/tmxJhc1gZDIg4GSi4RTXj1sDnCs.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/1d0c39-2555-468f-be66-ff9bab90af18/1/tmxJhc1gZDIg4GSi4RTXj1sDnCs.mft
rsync://rpki.ripe.net/repository/DEFAULT/tmxJhc1gZDIg4GSi4RTXj1sDnCs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:c8:da:08:35:65:87:2e:cd:8b:b2:63:a2:c8:7b:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b66c4985cd60643220e064a2e114d78f5b039c2b
Validity
Not Before: Jul 24 11:00:41 2026 GMT
Not After : Jul 25 11:00:41 2026 GMT
Subject: CN=4ccd28767accb4e324f18aeedb15e35146a1edbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:73:ac:ee:dc:6b:ef:4a:18:76:98:8a:2d:f3:
da:19:2b:bd:5f:02:32:0f:a7:1a:31:24:bc:23:ca:
cb:6b:87:c9:91:db:7f:f1:7b:82:c7:22:3b:d5:10:
3c:15:18:af:7f:b7:40:17:c3:4d:30:42:f0:25:70:
23:21:82:bf:fb:03:20:e6:ca:4b:0e:88:8e:2d:f2:
94:f2:7f:63:14:84:c7:1b:cb:7f:98:dd:da:de:4e:
9a:28:0a:36:0a:69:09:15:29:5d:7f:92:99:64:8d:
4f:41:d0:06:d2:3f:a4:8a:36:52:c3:a1:a9:03:b0:
c3:02:0f:3c:55:61:bc:81:d5:dc:2c:3a:7e:12:3c:
8f:73:d9:f5:27:50:d4:d5:3f:b4:2a:a7:53:4f:82:
a2:d1:33:7b:c0:27:f5:d3:32:81:ff:b9:ae:80:53:
f2:36:d6:85:b5:6f:2d:1c:47:7d:ab:92:de:e5:52:
0c:19:60:6f:92:ad:fc:ec:45:1a:ac:98:90:42:cd:
35:3f:67:e8:bf:55:08:7f:b4:f2:82:e4:82:8b:08:
34:08:ca:60:7b:09:50:cb:24:29:26:ea:1d:d5:34:
f0:2b:90:57:64:37:84:10:09:93:06:d1:11:0e:75:
9e:af:b7:97:02:c9:04:46:55:34:05:c5:76:1c:87:
b4:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:CD:28:76:7A:CC:B4:E3:24:F1:8A:EE:DB:15:E3:51:46:A1:ED:BB
X509v3 Authority Key Identifier:
keyid:B6:6C:49:85:CD:60:64:32:20:E0:64:A2:E1:14:D7:8F:5B:03:9C:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tmxJhc1gZDIg4GSi4RTXj1sDnCs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/1d0c39-2555-468f-be66-ff9bab90af18/1/tmxJhc1gZDIg4GSi4RTXj1sDnCs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/1d0c39-2555-468f-be66-ff9bab90af18/1/tmxJhc1gZDIg4GSi4RTXj1sDnCs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:49:b4:2b:1f:11:3a:84:0f:87:b9:21:0c:f2:95:de:cf:a0:
a7:60:f2:00:31:bb:8c:87:f0:4f:b1:93:11:b8:f8:4a:54:91:
34:54:41:5e:4d:a8:b3:ee:b5:2d:59:76:05:e0:e9:7a:57:86:
86:52:b3:de:dd:6b:d2:c2:c3:85:c5:d2:a3:0f:c3:7a:53:6b:
7d:44:a5:2e:e5:94:b3:95:fe:89:3e:ea:54:6f:d9:95:30:d4:
fe:65:f8:9f:fe:74:3b:d9:41:cd:30:a9:5b:0a:07:a5:ed:f9:
a6:38:10:34:50:20:24:02:71:0f:7f:f1:65:0e:6f:46:ae:0d:
6e:18:be:85:8d:17:fd:41:16:26:dd:9d:80:6e:7c:07:d7:3f:
f1:35:96:d9:92:a6:bc:e1:05:cf:a0:83:b3:74:d3:89:45:22:
c3:a8:ff:9b:52:95:7c:80:dd:45:7a:e2:0c:0c:01:6a:2a:dc:
e8:30:c5:82:ca:ef:73:da:5e:e9:9c:24:a8:b5:98:a5:77:67:
58:11:2e:61:10:fd:2b:ed:9a:7b:39:2c:be:13:2c:71:31:2a:
d8:a8:be:db:9e:ae:03:6e:42:cd:e3:49:8a:48:ff:63:e4:35:
09:9b:84:90:d5:2e:48:8f:ae:c3:6a:43:d5:7c:da:db:04:c8:
47:f1:b8:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:18:41 2026 by rpki-client