Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/7bd729-98e5-43ff-afe6-187b1f77c1a5/1/TJMCnFsmOc0pufndUpTMlO9S1q8.mft
File: TJMCnFsmOc0pufndUpTMlO9S1q8.mft (raw, json)
Hash identifier: 1RASI4OtIgtrQ15UinzT4qn/UdAxyr6qPWhM8EfuFb0=
Subject key identifier: 68:46:38:60:5A:F4:56:A7:09:0D:8F:CE:94:79:79:46:0B:57:4B:2A
Authority key identifier: 4C:93:02:9C:5B:26:39:CD:29:B9:F9:DD:52:94:CC:94:EF:52:D6:AF
Certificate issuer: /CN=4c93029c5b2639cd29b9f9dd5294cc94ef52d6af
Certificate serial: 019F8EA2EDF3E1DC388E6EFD05F736705556
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TJMCnFsmOc0pufndUpTMlO9S1q8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/7bd729-98e5-43ff-afe6-187b1f77c1a5/1/TJMCnFsmOc0pufndUpTMlO9S1q8.mft
Manifest number: 0FF7
Signing time: Thu 23 Jul 2026 11:01:10 +0000
Manifest this update: Thu 23 Jul 2026 11:01:10 +0000
Manifest next update: Fri 24 Jul 2026 11:01:10 +0000
Files and hashes: 1: TJMCnFsmOc0pufndUpTMlO9S1q8.crl (hash: yuXcfCpnIYy3Z2IJ+keMFnC0ONkhaxcuqEZv/Yre+v4=)
2: if79kuvwD_kMklv-rjGuATeymik.asa (hash: NqixgtAGzUBisDt8U3Oiw2PBnZVG/SzSQ5d4+iMf5Og=)
3: o-GuySAZav0PksHcDzno-EypQJ0.roa (hash: /pzSPA6PGMWrOD+vCeL5sGDbZ/TBSHFZKj+LgOJi0Mo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/7bd729-98e5-43ff-afe6-187b1f77c1a5/1/TJMCnFsmOc0pufndUpTMlO9S1q8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/7bd729-98e5-43ff-afe6-187b1f77c1a5/1/TJMCnFsmOc0pufndUpTMlO9S1q8.mft
rsync://rpki.ripe.net/repository/DEFAULT/TJMCnFsmOc0pufndUpTMlO9S1q8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 11:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8e:a2:ed:f3:e1:dc:38:8e:6e:fd:05:f7:36:70:55:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c93029c5b2639cd29b9f9dd5294cc94ef52d6af
Validity
Not Before: Jul 23 11:01:10 2026 GMT
Not After : Jul 24 11:01:10 2026 GMT
Subject: CN=684638605af456a7090d8fce947979460b574b2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:4f:7a:c6:fc:92:be:aa:57:62:35:27:f9:d5:
48:6d:50:5e:22:98:24:36:0b:9c:d2:d2:10:a8:16:
a3:51:7d:9a:a5:3d:b3:a0:48:c4:b4:35:4f:88:02:
24:b6:42:57:b3:a0:ac:b9:3d:7a:e7:55:2b:a8:e8:
d3:f4:ac:80:cf:e5:7f:c3:44:ba:72:0a:17:5d:c2:
ef:c5:d3:5d:d4:88:53:3f:64:56:ce:3f:28:7d:ac:
40:90:d3:77:df:c1:69:75:3a:52:e2:49:e4:ed:9f:
03:1b:98:ff:4b:65:82:03:0e:7b:c9:e7:31:c2:18:
02:36:f2:74:70:66:ea:65:b1:77:5c:9e:dc:65:76:
0e:1d:3a:48:94:76:08:a1:e0:00:b7:01:95:5b:78:
7c:df:56:7c:7a:6d:cb:bd:ed:b9:c5:b4:c4:85:c7:
d6:3c:33:b5:7d:ef:0f:90:5e:45:df:45:14:30:1d:
3c:1b:62:6a:48:3d:73:8e:c1:2e:e9:2a:26:f8:ce:
b1:5d:64:8e:82:02:76:44:da:38:d3:98:6d:8c:f6:
d5:d5:d7:2c:d8:72:30:84:46:67:29:37:46:95:a5:
ff:94:b8:7b:97:98:a5:5c:0e:80:ed:80:fb:23:ed:
1c:c6:23:26:bb:b6:d2:1d:1e:37:28:b8:9b:c1:09:
83:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:46:38:60:5A:F4:56:A7:09:0D:8F:CE:94:79:79:46:0B:57:4B:2A
X509v3 Authority Key Identifier:
keyid:4C:93:02:9C:5B:26:39:CD:29:B9:F9:DD:52:94:CC:94:EF:52:D6:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TJMCnFsmOc0pufndUpTMlO9S1q8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/7bd729-98e5-43ff-afe6-187b1f77c1a5/1/TJMCnFsmOc0pufndUpTMlO9S1q8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/7bd729-98e5-43ff-afe6-187b1f77c1a5/1/TJMCnFsmOc0pufndUpTMlO9S1q8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:9d:28:62:a0:46:fa:b9:4e:4f:4d:02:ed:d5:7f:80:82:88:
02:78:d7:42:bf:28:d8:62:7b:14:e0:0a:d3:42:59:a4:81:a4:
7e:03:27:f8:68:d1:f6:a2:d8:7b:89:ee:09:49:a5:ea:b8:fb:
35:78:e3:9e:b7:84:dd:00:f7:3e:2e:78:a0:08:4a:8c:b0:4f:
61:f2:30:a9:0a:8a:6f:00:7d:f4:af:ba:78:a8:c6:f8:76:bb:
18:54:4e:0f:43:fa:d3:70:15:99:d8:1c:26:32:c0:bc:59:f1:
2e:ce:b4:1e:f4:1c:22:fc:ac:65:35:63:ec:7d:74:4d:29:ce:
20:37:96:41:ca:34:3d:38:dd:ca:b3:0a:94:d2:bf:c2:be:bc:
f1:0a:4b:39:d1:42:52:e9:cb:28:6a:c4:76:7f:bc:17:58:cc:
1c:ae:7e:1a:20:ff:f1:ea:93:0d:02:74:8c:e3:cf:79:ff:b2:
61:da:ea:4d:85:7f:75:7f:93:f3:f3:b9:03:ef:46:ad:5b:cd:
14:63:84:35:fe:6d:25:d6:6f:fc:be:d3:36:2a:ae:d2:f2:9a:
1f:b6:1f:76:1b:71:de:eb:47:55:52:a5:ba:a4:1b:72:dc:29:
15:d9:ae:5b:65:85:41:f7:50:18:c4:5f:d9:07:59:0d:59:05:
e0:2b:df:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:03:21 2026 by rpki-client