Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/7bd729-98e5-43ff-afe6-187b1f77c1a5/1/TJMCnFsmOc0pufndUpTMlO9S1q8.mft
File: TJMCnFsmOc0pufndUpTMlO9S1q8.mft (raw, json)
Hash identifier: qzDtFz8ZTtyK8r8sYMk4P9so3eFpZFjO1maEXweh/tw=
Subject key identifier: 29:F0:D8:04:C1:63:38:F1:0B:E1:83:7E:61:A6:DD:C8:A1:9B:AF:7D
Authority key identifier: 4C:93:02:9C:5B:26:39:CD:29:B9:F9:DD:52:94:CC:94:EF:52:D6:AF
Certificate issuer: /CN=4c93029c5b2639cd29b9f9dd5294cc94ef52d6af
Certificate serial: 019E1DFE4C60059CEA0592EAC9C9B1C885F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TJMCnFsmOc0pufndUpTMlO9S1q8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/7bd729-98e5-43ff-afe6-187b1f77c1a5/1/TJMCnFsmOc0pufndUpTMlO9S1q8.mft
Manifest number: 0F38
Signing time: Tue 12 May 2026 21:01:05 +0000
Manifest this update: Tue 12 May 2026 21:01:05 +0000
Manifest next update: Wed 13 May 2026 21:01:05 +0000
Files and hashes: 1: MmCHZ1tigLx6qv-0vdY9p2DTybw.asa (hash: q4g5QLnj5C7tBM9YSoS7cbGeaJrSGDWbXD0wfTvKfKk=)
2: TJMCnFsmOc0pufndUpTMlO9S1q8.crl (hash: S6sIdPW8v1AYO2WqjMzv5qcB9DkOS/L6KVnUujDfoDQ=)
3: o-GuySAZav0PksHcDzno-EypQJ0.roa (hash: /pzSPA6PGMWrOD+vCeL5sGDbZ/TBSHFZKj+LgOJi0Mo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/7bd729-98e5-43ff-afe6-187b1f77c1a5/1/TJMCnFsmOc0pufndUpTMlO9S1q8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/7bd729-98e5-43ff-afe6-187b1f77c1a5/1/TJMCnFsmOc0pufndUpTMlO9S1q8.mft
rsync://rpki.ripe.net/repository/DEFAULT/TJMCnFsmOc0pufndUpTMlO9S1q8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 21:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:fe:4c:60:05:9c:ea:05:92:ea:c9:c9:b1:c8:85:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c93029c5b2639cd29b9f9dd5294cc94ef52d6af
Validity
Not Before: May 12 21:01:05 2026 GMT
Not After : May 13 21:01:05 2026 GMT
Subject: CN=29f0d804c16338f10be1837e61a6ddc8a19baf7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:89:6d:c3:82:fc:59:bc:19:f6:ed:75:19:c0:
13:dc:89:7b:00:bd:84:62:8e:a6:ce:40:1a:d8:61:
0c:68:40:39:7f:8e:f8:4a:73:19:df:81:f5:6a:b9:
71:5c:d1:d6:b6:22:63:d4:38:6b:06:de:ea:d6:6b:
b1:fa:34:e7:5e:7d:60:74:74:40:93:85:27:2b:b0:
e0:ea:46:8f:c1:e7:a2:a2:7b:ea:32:45:5a:24:ca:
34:df:0e:a1:94:93:fb:ea:fb:76:2e:ff:79:ac:a5:
80:00:26:08:23:d0:88:0c:a9:cb:28:cd:9d:5f:3c:
cc:a0:32:0e:9e:23:c9:a4:56:15:5a:fc:8a:02:47:
c5:03:01:d5:25:e6:6a:4e:f2:c4:4b:5c:ef:ad:2b:
31:d4:33:3e:7c:c4:29:6e:24:ba:2a:df:61:1a:23:
7d:7e:b4:39:f7:f5:f9:ed:62:78:57:8f:ff:20:18:
2b:e7:e7:47:e0:21:4b:f1:60:51:c9:9d:db:10:33:
87:a3:3f:a9:39:59:a6:60:5d:ee:bc:cc:32:43:59:
33:60:9a:04:e0:02:8c:fd:00:30:00:57:8f:a8:0f:
2b:d0:1b:d0:7c:b1:80:c5:85:7e:56:ff:01:34:be:
6e:92:5f:46:fa:40:2c:d5:1e:49:7a:6b:07:61:f6:
92:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:F0:D8:04:C1:63:38:F1:0B:E1:83:7E:61:A6:DD:C8:A1:9B:AF:7D
X509v3 Authority Key Identifier:
keyid:4C:93:02:9C:5B:26:39:CD:29:B9:F9:DD:52:94:CC:94:EF:52:D6:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TJMCnFsmOc0pufndUpTMlO9S1q8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/7bd729-98e5-43ff-afe6-187b1f77c1a5/1/TJMCnFsmOc0pufndUpTMlO9S1q8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/7bd729-98e5-43ff-afe6-187b1f77c1a5/1/TJMCnFsmOc0pufndUpTMlO9S1q8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:11:a8:17:bc:92:cd:0f:de:fd:52:a0:41:3f:e2:6a:a0:73:
f0:d1:10:dd:15:e9:1e:9a:64:29:da:7b:6a:62:24:63:f6:1e:
63:e3:10:b0:7e:5e:bb:8b:28:b9:ea:db:84:87:5b:af:e9:68:
46:ff:78:05:a0:65:52:f3:de:8f:ad:a9:cf:72:0b:57:bc:ba:
02:e6:b5:c3:f4:d6:46:39:b1:83:98:9a:18:0d:98:d9:9b:9c:
d3:c9:3b:03:17:d9:dd:73:9b:b1:6e:84:25:d9:82:15:a1:0e:
d6:b5:6c:8b:d1:8a:9d:09:7c:3e:53:50:37:23:78:90:0b:a2:
34:aa:29:fd:5f:9b:e5:af:04:3e:2a:2e:16:41:02:27:3d:5b:
7a:20:64:0a:b9:79:10:dc:e2:63:ab:29:0e:c4:85:eb:63:44:
c4:ca:f2:58:4f:f6:2c:e4:d8:02:a1:26:11:7e:07:97:52:da:
72:29:76:a5:12:05:e0:8d:3d:77:e4:61:2a:75:69:91:e0:bd:
9f:fd:b5:61:85:1e:ed:23:fc:b9:69:5f:b4:87:b4:d7:04:d3:
ff:a5:c9:18:ec:78:d9:46:04:b2:21:d0:b3:35:d1:f1:26:4a:
fb:7c:41:7e:12:6e:65:09:f3:71:37:ec:71:a0:54:d8:ec:2e:
20:99:f7:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:43:49 2026 by rpki-client