Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/b5fb58-928c-438f-bcef-858f8aca323f/1/TJ--R1YCj6QYejmVlfrGXDwcQ8Y.mft
File: TJ--R1YCj6QYejmVlfrGXDwcQ8Y.mft (raw, json)
Hash identifier: B9fFw2xqet3N9aFHpmT+XjKv2phWVg8Q82HWZgJKPpg=
Subject key identifier: 05:8D:7A:69:C7:A7:E3:D3:23:E2:C2:CA:06:DA:19:5E:1E:4C:70:2A
Authority key identifier: 4C:9F:BE:47:56:02:8F:A4:18:7A:39:95:95:FA:C6:5C:3C:1C:43:C6
Certificate issuer: /CN=4c9fbe4756028fa4187a399595fac65c3c1c43c6
Certificate serial: 019E1FB60B0E54A525EEE187E0AE3308620F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TJ--R1YCj6QYejmVlfrGXDwcQ8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/b5fb58-928c-438f-bcef-858f8aca323f/1/TJ--R1YCj6QYejmVlfrGXDwcQ8Y.mft
Manifest number: 0B4F
Signing time: Wed 13 May 2026 05:01:24 +0000
Manifest this update: Wed 13 May 2026 05:01:24 +0000
Manifest next update: Thu 14 May 2026 05:01:24 +0000
Files and hashes: 1: TJ--R1YCj6QYejmVlfrGXDwcQ8Y.crl (hash: +vrKzjRSybmug3zGDKPDcg34IeHE8a7BZB6kcO46dFY=)
2: aC8UNmy0l7OgPQTZ2nVPiNtSCxQ.roa (hash: L0i81KYUigHRpwI1gm1ehZ81UJds6Brs5hjYir4TlR0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/b5fb58-928c-438f-bcef-858f8aca323f/1/TJ--R1YCj6QYejmVlfrGXDwcQ8Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/b5fb58-928c-438f-bcef-858f8aca323f/1/TJ--R1YCj6QYejmVlfrGXDwcQ8Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/TJ--R1YCj6QYejmVlfrGXDwcQ8Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 05:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:b6:0b:0e:54:a5:25:ee:e1:87:e0:ae:33:08:62:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c9fbe4756028fa4187a399595fac65c3c1c43c6
Validity
Not Before: May 13 05:01:24 2026 GMT
Not After : May 14 05:01:24 2026 GMT
Subject: CN=058d7a69c7a7e3d323e2c2ca06da195e1e4c702a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:0b:47:24:35:a5:1d:3e:bb:2b:4e:51:36:28:
99:f8:70:02:0e:c5:20:07:16:11:af:79:66:1d:d4:
f0:7f:50:15:0a:d5:07:8b:f4:f8:56:91:8b:92:20:
61:5c:0c:b0:aa:fa:bb:1f:f3:85:fc:ea:d7:e9:ba:
19:3d:20:c7:cd:3c:32:37:d1:87:ee:9e:f3:7a:50:
52:98:5e:31:ed:b2:39:08:d1:1c:9e:f1:c9:73:f5:
8e:de:12:75:63:2a:e1:9b:3a:83:24:61:b9:0f:e4:
60:64:4a:63:06:56:15:06:13:1d:13:40:26:4e:0f:
a9:a3:6b:ae:8a:e6:13:8e:db:cc:d9:15:59:88:ae:
de:5d:5d:68:1e:cd:8f:15:a9:21:3f:5b:73:8b:d1:
9d:fe:ad:05:77:ae:7f:70:0d:e8:4f:83:83:e3:ce:
d6:e4:82:02:93:09:b2:ad:c2:dd:fb:39:da:50:3c:
7c:e7:37:25:ed:77:82:39:65:2d:ae:6a:61:a7:28:
6b:79:dc:72:80:e2:85:a8:da:a2:01:7a:f8:cd:6b:
e7:d3:c2:b1:5e:f2:20:43:06:6f:6f:01:c3:a5:1b:
11:f1:3a:d3:14:f3:ad:8f:58:fb:44:98:2b:fb:94:
f2:7b:70:4c:48:fe:0d:e9:ad:b3:05:e5:a8:44:dc:
4b:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:8D:7A:69:C7:A7:E3:D3:23:E2:C2:CA:06:DA:19:5E:1E:4C:70:2A
X509v3 Authority Key Identifier:
keyid:4C:9F:BE:47:56:02:8F:A4:18:7A:39:95:95:FA:C6:5C:3C:1C:43:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TJ--R1YCj6QYejmVlfrGXDwcQ8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/b5fb58-928c-438f-bcef-858f8aca323f/1/TJ--R1YCj6QYejmVlfrGXDwcQ8Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/b5fb58-928c-438f-bcef-858f8aca323f/1/TJ--R1YCj6QYejmVlfrGXDwcQ8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:1f:83:b8:ed:00:11:76:73:c9:13:3a:09:4c:a7:35:b0:34:
dd:c5:28:0c:c5:45:0d:9b:43:9b:3e:34:e6:18:91:06:f7:70:
d6:dc:82:0e:e1:42:e2:6e:4f:00:7e:90:0f:d7:fd:1a:b4:91:
c8:13:37:03:cb:1f:39:bf:54:10:cc:f6:09:68:4a:b9:f7:19:
64:61:15:a8:b2:e8:16:1c:94:84:a2:f5:d6:e6:a1:bc:1b:ad:
b5:91:49:1c:b8:c0:b6:02:93:a0:ec:44:5d:37:b4:39:3f:d5:
75:40:e5:44:79:1a:91:c3:48:aa:3d:b8:68:1e:3f:f0:a1:09:
86:1c:41:01:74:81:b4:5e:65:11:86:1e:c2:43:b4:7a:3b:e9:
a4:d5:9f:cb:34:bd:a4:ac:64:b9:80:d1:c6:54:15:ff:00:c1:
82:42:12:f7:58:bc:df:a9:4c:40:e5:7a:2a:e4:d6:28:08:56:
67:47:b4:99:80:40:16:16:0f:68:39:c1:a5:26:ae:4d:46:ec:
61:d4:de:cb:2a:29:aa:75:5a:3d:d6:aa:22:f3:b5:3f:20:b9:
60:d2:ce:5b:3b:70:84:6b:40:7a:fe:21:9f:07:5f:28:1e:b9:
60:68:37:09:bd:61:ed:88:7e:12:f7:49:04:2e:d5:e3:66:2e:
0a:f4:13:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:49:38 2026 by rpki-client