Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/7872e4-2f36-4df3-ba73-347e4752e3e1/1/TN1jtCEsiaIBb65iUXoYbJUHfZ8.mft
File: TN1jtCEsiaIBb65iUXoYbJUHfZ8.mft (raw, json)
Hash identifier: drEGlTlApkQo9q0/j4Z+xz8hyMeUGiDhCKMgIir0bHo=
Subject key identifier: 92:CC:AD:25:CE:B3:A4:B2:87:19:E7:0A:6F:46:01:7A:38:BC:BF:16
Authority key identifier: 4C:DD:63:B4:21:2C:89:A2:01:6F:AE:62:51:7A:18:6C:95:07:7D:9F
Certificate issuer: /CN=4cdd63b4212c89a2016fae62517a186c95077d9f
Certificate serial: 019F9022B762EFA51258CBF579BBBE65E81F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TN1jtCEsiaIBb65iUXoYbJUHfZ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/7872e4-2f36-4df3-ba73-347e4752e3e1/1/TN1jtCEsiaIBb65iUXoYbJUHfZ8.mft
Manifest number: 18
Signing time: Thu 23 Jul 2026 18:00:21 +0000
Manifest this update: Thu 23 Jul 2026 18:00:21 +0000
Manifest next update: Fri 24 Jul 2026 18:00:21 +0000
Files and hashes: 1: J__T5-RaWiidTGfsx3Bz5OB7Ax0.roa (hash: 9rcHA6YsVht5FpBD34N2HuiPufLi4hvOJBRxEbLFAAk=)
2: TN1jtCEsiaIBb65iUXoYbJUHfZ8.crl (hash: mzBLwrCbGLtzD2j/PlPBxI2knzbeS4QT/QpLIz1f7Ek=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/7872e4-2f36-4df3-ba73-347e4752e3e1/1/TN1jtCEsiaIBb65iUXoYbJUHfZ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/7872e4-2f36-4df3-ba73-347e4752e3e1/1/TN1jtCEsiaIBb65iUXoYbJUHfZ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/TN1jtCEsiaIBb65iUXoYbJUHfZ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 18:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:22:b7:62:ef:a5:12:58:cb:f5:79:bb:be:65:e8:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cdd63b4212c89a2016fae62517a186c95077d9f
Validity
Not Before: Jul 23 18:00:21 2026 GMT
Not After : Jul 24 18:00:21 2026 GMT
Subject: CN=92ccad25ceb3a4b28719e70a6f46017a38bcbf16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:e2:1e:c3:0e:0b:a6:54:76:d5:fe:c3:57:9b:
6e:e0:d6:8d:4e:36:47:0d:88:7c:08:b6:ea:a9:8d:
47:db:4e:d4:6e:d8:92:87:9d:cc:fc:36:93:09:84:
6b:97:fd:49:51:fc:ee:45:35:8f:ae:c3:b4:22:22:
3d:37:ac:0d:7e:67:63:2e:a1:e7:a0:ff:0e:1c:d1:
29:a7:d2:e4:ce:cc:39:19:86:4f:cb:1a:6c:42:53:
4f:c8:4c:80:b2:7a:08:ab:f9:8b:13:63:5b:03:1f:
e0:28:e5:7a:20:28:1a:ac:27:fa:c1:09:07:b0:38:
55:b8:f9:24:6f:31:f2:03:2d:c9:b2:44:b7:83:61:
88:96:b3:d8:50:fa:c0:d0:a9:cf:9a:56:b4:6b:0d:
7b:6d:7c:a4:b0:d1:7e:03:90:32:c7:45:4a:91:d1:
55:eb:b0:94:1c:40:00:db:d3:8d:8d:22:9c:07:4b:
ec:bc:82:73:f2:5b:d1:3e:1d:c0:a9:01:a5:05:ea:
ef:0b:bc:c2:5b:c2:e5:cb:b2:2b:1b:c8:04:3a:a3:
ed:2d:ca:39:c5:2b:50:bb:0c:71:59:f0:dc:91:f1:
e2:6e:61:5c:24:94:56:56:5a:8a:cb:fe:14:d5:ee:
00:7a:9a:f5:e3:7e:cb:e9:49:e5:8c:22:31:7c:23:
81:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:CC:AD:25:CE:B3:A4:B2:87:19:E7:0A:6F:46:01:7A:38:BC:BF:16
X509v3 Authority Key Identifier:
keyid:4C:DD:63:B4:21:2C:89:A2:01:6F:AE:62:51:7A:18:6C:95:07:7D:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TN1jtCEsiaIBb65iUXoYbJUHfZ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/7872e4-2f36-4df3-ba73-347e4752e3e1/1/TN1jtCEsiaIBb65iUXoYbJUHfZ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/7872e4-2f36-4df3-ba73-347e4752e3e1/1/TN1jtCEsiaIBb65iUXoYbJUHfZ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:52:12:ec:29:d0:5d:f2:93:d4:2f:42:04:7f:af:87:96:3d:
43:fd:21:35:80:96:07:06:ee:e9:fc:c1:29:87:4f:13:94:58:
d4:08:2c:fb:be:26:06:20:a4:de:be:ec:48:a4:90:63:13:61:
46:dc:16:5c:5d:e9:c6:c7:93:57:04:14:2b:9d:e0:bb:a6:9f:
3e:d4:ee:b1:6d:04:e9:69:03:23:51:89:74:a0:58:2b:e2:a4:
0a:4c:98:b4:74:21:dd:0d:11:9a:26:1e:58:63:7f:55:ee:6c:
d1:0b:d9:81:44:76:78:fd:c0:fd:95:d6:83:b9:02:f5:80:c0:
be:1c:d6:83:96:71:d4:06:8a:68:ee:e2:3a:e3:65:df:50:fa:
b5:93:eb:7e:89:09:f9:5f:d2:22:ab:be:90:98:d3:2a:04:24:
9f:02:9a:a2:05:cf:21:13:24:17:24:15:0c:a5:50:55:30:2b:
e7:05:58:e1:91:08:f4:3b:ba:9c:1a:c6:57:5e:49:18:ef:29:
e2:81:a2:ba:81:c3:94:f4:0b:91:df:2c:e8:b3:1c:b6:25:c6:
6c:82:cb:69:bd:57:81:67:ca:d8:d7:18:48:35:73:0d:90:8b:
46:92:45:b4:d3:4f:ad:d0:fe:d7:c2:ee:d8:c4:97:3f:e4:03:
20:e5:57:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:37:58 2026 by rpki-client