Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/f7a87a-c184-4904-94e3-2685986f6d01/1/TsTzl1j2BWug1JKloEudaGbGApI.mft
File: TsTzl1j2BWug1JKloEudaGbGApI.mft (raw, json)
Hash identifier: SBEpCGkNnoxI15Y8ouVFJCEdizUSi4mpfVi6BcIBT0k=
Subject key identifier: E6:4A:FC:0E:5E:AF:62:A0:F4:90:A8:CD:06:88:F4:B7:04:49:0E:36
Authority key identifier: 4E:C4:F3:97:58:F6:05:6B:A0:D4:92:A5:A0:4B:9D:68:66:C6:02:92
Certificate issuer: /CN=4ec4f39758f6056ba0d492a5a04b9d6866c60292
Certificate serial: 019F916CE05480A7CD8E5245D087180DD6E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TsTzl1j2BWug1JKloEudaGbGApI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/f7a87a-c184-4904-94e3-2685986f6d01/1/TsTzl1j2BWug1JKloEudaGbGApI.mft
Manifest number: 40
Signing time: Fri 24 Jul 2026 00:00:59 +0000
Manifest this update: Fri 24 Jul 2026 00:00:59 +0000
Manifest next update: Sat 25 Jul 2026 00:00:59 +0000
Files and hashes: 1: HGyrrFsoh_dkrLZZtnTJsMYjPOg.roa (hash: m3qcvytC4O+9pABPedPudw1QdoZyvWEqd2L9LP+DeoM=)
2: S8ku3gf4vWkmxFBDkBkEiAy9So4.roa (hash: DxiREQgQfDk48dsaRbdhgiH4PUmwi+B75L8QRMAKRYY=)
3: TsTzl1j2BWug1JKloEudaGbGApI.crl (hash: oJgoUs+hx034xL0XLAPzU59NV3bJ9/Af0xXVtf3Zamg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/f7a87a-c184-4904-94e3-2685986f6d01/1/TsTzl1j2BWug1JKloEudaGbGApI.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/f7a87a-c184-4904-94e3-2685986f6d01/1/TsTzl1j2BWug1JKloEudaGbGApI.mft
rsync://rpki.ripe.net/repository/DEFAULT/TsTzl1j2BWug1JKloEudaGbGApI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 00:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:6c:e0:54:80:a7:cd:8e:52:45:d0:87:18:0d:d6:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ec4f39758f6056ba0d492a5a04b9d6866c60292
Validity
Not Before: Jul 24 00:00:59 2026 GMT
Not After : Jul 25 00:00:59 2026 GMT
Subject: CN=e64afc0e5eaf62a0f490a8cd0688f4b704490e36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:d1:32:9a:fc:83:fb:31:cf:60:c9:fc:3f:cf:
7f:34:69:a6:15:95:8d:68:9a:d5:5e:01:32:d4:78:
3c:ef:dc:5c:ef:e9:00:1b:63:fd:1f:ee:89:dd:db:
32:17:db:80:9b:18:47:8d:70:b3:41:c3:2e:b7:9a:
3a:d2:6d:e6:42:25:34:fb:b0:94:b5:40:73:92:da:
e5:e9:e2:17:64:bd:94:11:35:c4:16:05:82:08:42:
99:a0:93:87:98:a5:46:1a:d4:b8:cb:1c:23:81:d8:
27:06:6a:7a:3e:12:9f:6e:46:00:bf:4d:cf:f2:4d:
6e:db:a3:63:5c:6d:97:76:da:a8:a1:82:e6:21:7f:
26:d3:f9:b2:30:2d:1b:84:d7:c3:78:aa:f1:12:d2:
c6:6b:1f:4a:32:82:c9:f9:a6:e9:8e:e4:a1:3a:9a:
b3:fc:eb:71:b4:ad:d4:1d:d5:f0:ff:27:ed:df:f6:
b2:cf:5f:51:66:86:ea:17:18:6f:57:fc:6e:c3:4e:
d3:bc:f4:63:89:03:d6:a4:54:0a:9e:09:61:75:28:
d9:61:63:36:7e:a2:5b:78:19:18:a5:88:43:dd:5c:
35:4f:11:98:eb:09:1f:14:79:b7:45:a0:43:65:0e:
3a:5c:0c:b9:1a:ba:eb:82:53:d7:04:32:98:23:d4:
2c:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:4A:FC:0E:5E:AF:62:A0:F4:90:A8:CD:06:88:F4:B7:04:49:0E:36
X509v3 Authority Key Identifier:
keyid:4E:C4:F3:97:58:F6:05:6B:A0:D4:92:A5:A0:4B:9D:68:66:C6:02:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TsTzl1j2BWug1JKloEudaGbGApI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/f7a87a-c184-4904-94e3-2685986f6d01/1/TsTzl1j2BWug1JKloEudaGbGApI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/f7a87a-c184-4904-94e3-2685986f6d01/1/TsTzl1j2BWug1JKloEudaGbGApI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:dd:0b:3b:74:e7:5f:91:c6:3e:be:51:4c:cb:e0:be:04:01:
42:ec:2c:bc:56:5c:92:91:ca:4f:69:70:0e:20:3c:17:d5:48:
3a:7b:71:1b:ad:33:f6:3a:15:04:39:83:98:60:bb:df:86:65:
e6:32:4f:ba:34:a3:6b:5a:52:e9:6d:d1:4b:86:c9:30:c2:65:
a7:41:eb:0c:1a:34:9a:79:e2:7e:cc:33:61:8a:e3:a9:b6:18:
47:73:e0:27:02:7b:2e:5d:ca:a8:25:56:08:63:1e:d5:1d:e9:
ea:14:f8:4c:be:6a:95:10:e8:98:cf:40:8e:94:61:b7:8b:77:
27:da:bb:c0:d2:1e:cb:0d:92:8a:59:64:c5:9e:f8:56:f0:f5:
b2:81:41:a4:00:33:c9:40:73:cc:2a:44:15:57:51:a2:4e:58:
4f:58:3a:69:0f:58:ec:89:6d:5e:06:06:73:85:e0:2a:3f:05:
fb:24:64:b5:48:82:00:81:07:1d:e2:a4:dd:6f:4a:c9:9e:a8:
76:42:08:69:8b:0a:d1:b1:ff:46:b9:d1:42:23:67:81:f8:11:
d8:3e:07:80:35:8e:e4:6f:13:45:38:2b:19:dd:dc:92:35:4c:
00:3c:46:9c:c0:0a:4f:61:c9:43:92:de:9d:61:c6:40:d8:99:
fd:87:aa:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:59:56 2026 by rpki-client