Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/c13e12-e50d-4338-8a2f-fffb5a4e762a/1/TZujR0bUSxP2nFOtEl3apkifV5U.mft
File: TZujR0bUSxP2nFOtEl3apkifV5U.mft (raw, json)
Hash identifier: KwmkFeBeX04OcacRgjhHJ6JCAG8zyq6pI7vIROhwbKk=
Subject key identifier: 80:04:AD:BC:5B:3F:F0:40:69:A9:C5:1E:4F:A0:E2:69:05:EC:A2:24
Authority key identifier: 4D:9B:A3:47:46:D4:4B:13:F6:9C:53:AD:12:5D:DA:A6:48:9F:57:95
Certificate issuer: /CN=4d9ba34746d44b13f69c53ad125ddaa6489f5795
Certificate serial: 019F916C35F7149FB54736469C7FD4FCE0F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TZujR0bUSxP2nFOtEl3apkifV5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/c13e12-e50d-4338-8a2f-fffb5a4e762a/1/TZujR0bUSxP2nFOtEl3apkifV5U.mft
Manifest number: 40
Signing time: Fri 24 Jul 2026 00:00:15 +0000
Manifest this update: Fri 24 Jul 2026 00:00:15 +0000
Manifest next update: Sat 25 Jul 2026 00:00:15 +0000
Files and hashes: 1: DaA_4Jlo0vCjiqyQ9Zy7aoC9TDs.roa (hash: xtXG2aAxB/H8VWm8zgz3IAcnfc0DerNKgS8NAIUzC58=)
2: TZujR0bUSxP2nFOtEl3apkifV5U.crl (hash: mIKeBdF7qcH34T/nJ3VH1Wn1i8Sgr9ZYKqjm+OGeH/s=)
3: pYetnom_wA_ScRV12GudzaQxL8Q.roa (hash: mTXvpDjqAr8VlbSF6rMZfNW8ZydFcM0VEr1K9O3/BqU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/c13e12-e50d-4338-8a2f-fffb5a4e762a/1/TZujR0bUSxP2nFOtEl3apkifV5U.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/c13e12-e50d-4338-8a2f-fffb5a4e762a/1/TZujR0bUSxP2nFOtEl3apkifV5U.mft
rsync://rpki.ripe.net/repository/DEFAULT/TZujR0bUSxP2nFOtEl3apkifV5U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:6c:35:f7:14:9f:b5:47:36:46:9c:7f:d4:fc:e0:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d9ba34746d44b13f69c53ad125ddaa6489f5795
Validity
Not Before: Jul 24 00:00:15 2026 GMT
Not After : Jul 25 00:00:15 2026 GMT
Subject: CN=8004adbc5b3ff04069a9c51e4fa0e26905eca224
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:b9:94:6f:8c:58:29:54:db:db:52:68:96:f4:
a0:45:db:87:f2:5b:d2:b6:4f:99:e4:8a:b0:46:76:
3b:43:dd:3a:9a:4e:74:ac:f7:f5:b9:a0:44:71:8a:
11:8a:95:41:06:81:29:be:68:30:64:50:f1:f0:48:
eb:63:16:86:bd:bf:19:d4:d6:0d:cc:57:c5:de:2b:
2d:03:87:be:19:2b:2c:08:91:0e:2f:0c:36:17:1d:
ba:0b:ff:53:72:ca:87:03:3b:fd:da:d8:d6:08:2d:
06:33:c5:6c:3b:a5:0b:32:15:a1:9c:98:63:47:68:
06:cf:9e:28:a2:0d:52:12:82:82:45:d8:3b:e6:d1:
f9:40:45:46:75:84:ec:c1:87:a8:eb:99:4e:23:28:
75:00:4c:2e:a6:9f:74:e8:bc:2e:f9:c8:60:99:e3:
41:0d:4e:08:2e:cc:76:3c:02:16:7e:2f:fb:67:07:
5e:1e:f7:b3:fe:99:4c:68:f1:e1:db:08:43:85:37:
a3:71:9b:d9:c4:11:bd:ae:96:fd:ac:3c:84:53:89:
98:72:42:1e:c8:ef:de:7d:bd:30:9c:b6:db:5d:e5:
10:c3:4e:e5:db:f2:2a:65:06:2f:f1:49:af:f4:24:
47:ff:ea:eb:b5:b0:c4:4f:17:39:d5:25:6e:29:00:
ff:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:04:AD:BC:5B:3F:F0:40:69:A9:C5:1E:4F:A0:E2:69:05:EC:A2:24
X509v3 Authority Key Identifier:
keyid:4D:9B:A3:47:46:D4:4B:13:F6:9C:53:AD:12:5D:DA:A6:48:9F:57:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TZujR0bUSxP2nFOtEl3apkifV5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/c13e12-e50d-4338-8a2f-fffb5a4e762a/1/TZujR0bUSxP2nFOtEl3apkifV5U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/c13e12-e50d-4338-8a2f-fffb5a4e762a/1/TZujR0bUSxP2nFOtEl3apkifV5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:24:df:0e:15:0e:0e:71:34:3f:61:ca:02:da:c1:a3:b7:fc:
2d:20:60:2a:1a:51:be:ab:4a:2c:a0:0a:dc:22:20:09:7f:cb:
f0:22:4e:b1:d8:12:c3:92:ca:49:4a:55:55:bc:88:b8:c8:61:
6d:b1:67:5e:1f:82:d0:7c:87:ef:af:13:8d:a6:b4:15:69:5d:
42:44:a2:2a:05:f7:df:91:1f:40:b8:23:00:00:36:64:13:e4:
93:1d:66:0c:5f:59:87:d4:95:53:a6:3e:47:07:49:94:67:bf:
b0:e2:6b:12:a2:3f:7d:38:84:5a:7c:33:c7:b8:ce:d0:a2:c6:
4c:ad:1d:2e:21:a5:d1:c4:46:16:74:94:af:5d:26:0c:13:2e:
70:49:3e:d9:89:2e:af:ca:0c:18:07:53:6b:28:96:e3:57:7e:
25:e5:57:82:39:b9:e0:69:57:fb:1f:79:b9:ac:15:d9:1b:d6:
98:d8:62:93:3c:c0:6e:a0:02:a0:70:d9:50:8d:fa:d6:d6:cb:
df:1d:3d:f6:d9:ab:4d:c0:ba:20:4b:81:b1:b7:cb:f5:29:ff:
6c:77:51:ac:e6:02:37:bf:ad:59:05:ed:cd:d5:12:78:cd:2b:
f5:4c:f5:58:16:95:da:0d:e5:8a:e7:54:05:e1:10:2c:83:96:
27:9c:f5:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:16:15 2026 by rpki-client