Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/c45a9c-b983-43f6-a449-cd9d6ac801bd/1/TJJlcZbTk2DzIBM49LE4Bbpp4jA.mft
File: TJJlcZbTk2DzIBM49LE4Bbpp4jA.mft (raw, json)
Hash identifier: 97xiNhQUzMbAsC7td8hJloCGjHGWC2LxjgCAUCdhu1s=
Subject key identifier: F3:67:37:C0:EE:48:9E:0A:53:53:26:6A:39:F6:AD:3B:C0:ED:DA:82
Authority key identifier: 4C:92:65:71:96:D3:93:60:F3:20:13:38:F4:B1:38:05:BA:69:E2:30
Certificate issuer: /CN=4c92657196d39360f3201338f4b13805ba69e230
Certificate serial: 019F93FFF3359D74EFC707E53615CF4AFB3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TJJlcZbTk2DzIBM49LE4Bbpp4jA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/c45a9c-b983-43f6-a449-cd9d6ac801bd/1/TJJlcZbTk2DzIBM49LE4Bbpp4jA.mft
Manifest number: 09
Signing time: Fri 24 Jul 2026 12:00:52 +0000
Manifest this update: Fri 24 Jul 2026 12:00:52 +0000
Manifest next update: Sat 25 Jul 2026 12:00:52 +0000
Files and hashes: 1: GsCWehWfuR0Y5YAQxihGBdvrxRg.roa (hash: z7BYtMDbjCrW08d8JA7x90045Wib1Z+pxaVr97f8FKU=)
2: NNYJKSx4PH4wHLznLKSJ_tdSV74.roa (hash: tz4qDyJHR65GtxJWUzlYMsmg6QvJmo2pArNsj2Sgvek=)
3: TJJlcZbTk2DzIBM49LE4Bbpp4jA.crl (hash: cFw+BGLGNDIKzTXpyCmyhjIp55wwMFv32DlR1B5aCRc=)
4: luf1YTB9xStV-pMcK9RhrzVtwoI.roa (hash: diCNzTBi/BtQjQQlSYdbD6MqDG03HWPnxAs6lAtK11o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/c45a9c-b983-43f6-a449-cd9d6ac801bd/1/TJJlcZbTk2DzIBM49LE4Bbpp4jA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/c45a9c-b983-43f6-a449-cd9d6ac801bd/1/TJJlcZbTk2DzIBM49LE4Bbpp4jA.mft
rsync://rpki.ripe.net/repository/DEFAULT/TJJlcZbTk2DzIBM49LE4Bbpp4jA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:ff:f3:35:9d:74:ef:c7:07:e5:36:15:cf:4a:fb:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c92657196d39360f3201338f4b13805ba69e230
Validity
Not Before: Jul 24 12:00:52 2026 GMT
Not After : Jul 25 12:00:52 2026 GMT
Subject: CN=f36737c0ee489e0a5353266a39f6ad3bc0edda82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:74:c4:2a:1d:b9:f3:c0:7a:a2:0e:1c:91:81:
a8:ab:73:60:61:07:67:ef:9e:2f:65:d7:b3:f5:8b:
bd:24:07:91:ce:56:f4:63:a3:6b:d2:98:06:a6:62:
ef:ce:c2:8a:a1:91:b0:27:a7:f0:27:30:ad:a7:4e:
f0:6e:68:26:2c:6b:79:c1:d0:26:62:5a:5d:9f:72:
62:4f:a3:d0:6c:a2:ce:11:03:d2:1a:62:6c:2f:51:
1d:a6:4a:45:91:44:f9:6e:17:f2:c4:78:5a:e2:ea:
77:39:2e:5a:d2:2a:af:fe:70:80:46:aa:8a:b7:06:
fe:b0:c1:62:85:b1:f3:ed:d5:77:8d:31:53:66:ee:
db:85:20:c0:dd:1d:5a:ae:06:d9:3d:73:82:63:6d:
a0:72:fb:e3:84:de:b1:00:06:5e:42:a1:43:d2:bf:
4d:65:d1:8a:f8:76:a9:5b:90:a5:72:88:c6:41:87:
7e:91:9b:94:a7:7f:c7:23:17:7c:1a:06:64:ec:2c:
a1:d9:b7:f4:e4:22:ce:2b:b2:f0:8b:14:fc:e3:29:
d1:1d:a7:d6:d2:dc:60:d1:89:b6:80:d3:72:bc:77:
3b:2a:1b:86:d1:0c:74:8a:0e:88:f1:4d:60:13:30:
a0:26:5b:9e:5f:98:6c:f7:ea:3e:45:8b:ad:fd:92:
da:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:67:37:C0:EE:48:9E:0A:53:53:26:6A:39:F6:AD:3B:C0:ED:DA:82
X509v3 Authority Key Identifier:
keyid:4C:92:65:71:96:D3:93:60:F3:20:13:38:F4:B1:38:05:BA:69:E2:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TJJlcZbTk2DzIBM49LE4Bbpp4jA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/c45a9c-b983-43f6-a449-cd9d6ac801bd/1/TJJlcZbTk2DzIBM49LE4Bbpp4jA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/c45a9c-b983-43f6-a449-cd9d6ac801bd/1/TJJlcZbTk2DzIBM49LE4Bbpp4jA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:94:66:75:aa:b4:72:86:55:dd:d9:32:bb:13:f3:c2:e2:e4:
ef:04:d0:e7:0b:77:89:b5:31:ab:d2:76:f5:c5:2e:3b:2d:67:
0b:cc:08:65:f7:08:e9:ae:8d:38:17:cd:cb:e0:05:5f:4d:0d:
1c:f9:72:ec:0b:34:c2:5e:c8:b4:bf:36:5d:2a:45:90:cf:80:
31:d7:76:1d:c6:28:40:2a:eb:af:6c:18:d9:72:cd:e5:cf:a1:
4f:18:51:b5:5a:d7:d8:ef:cf:55:bc:5f:a1:fb:19:c5:79:82:
12:18:9e:04:fb:bf:b9:83:27:a5:bb:d4:df:58:37:74:ad:28:
66:76:a2:e0:64:45:15:17:ba:67:ce:76:7e:30:19:99:37:42:
b8:0d:a2:f8:d1:7d:85:0c:41:80:38:09:7f:9c:85:dd:e3:e2:
c1:cd:e6:f0:d2:31:9f:2d:b4:ea:a3:5f:e3:3b:36:88:ca:67:
a3:91:65:a5:c7:4a:ce:bb:6d:f2:f0:3b:f8:b8:9d:dd:0c:b7:
31:35:51:d0:03:5e:e0:fb:a7:4e:ed:c5:33:2c:8c:86:a7:8a:
32:4d:4f:c4:49:9a:9a:cd:2f:1d:b5:9c:9c:8e:08:47:7e:60:
7e:90:d5:36:5c:a6:6d:79:3e:de:86:e1:74:85:40:64:85:1f:
db:e2:de:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:48:01 2026 by rpki-client