Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/4921f0-5c5c-4014-8ced-1b03e5894e05/1/TMpSYQx3wkBpxqZZ9fdYYkRNIdE.mft
File: TMpSYQx3wkBpxqZZ9fdYYkRNIdE.mft (raw, json)
Hash identifier: yPm3r2cKwId+cCbcNZVnJYtZbGGSqOyTHYuIhXI+PPs=
Subject key identifier: EE:A7:8C:10:9B:6C:1A:98:1B:8D:F0:01:4C:C1:79:DD:07:01:11:C7
Authority key identifier: 4C:CA:52:61:0C:77:C2:40:69:C6:A6:59:F5:F7:58:62:44:4D:21:D1
Certificate issuer: /CN=4cca52610c77c24069c6a659f5f75862444d21d1
Certificate serial: 019F909198BFA4D3CC058E1FE9D0C6949EAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TMpSYQx3wkBpxqZZ9fdYYkRNIdE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/4921f0-5c5c-4014-8ced-1b03e5894e05/1/TMpSYQx3wkBpxqZZ9fdYYkRNIdE.mft
Manifest number: 0212
Signing time: Thu 23 Jul 2026 20:01:28 +0000
Manifest this update: Thu 23 Jul 2026 20:01:28 +0000
Manifest next update: Fri 24 Jul 2026 20:01:28 +0000
Files and hashes: 1: 7zHV66w7Bkb2Ny1dDTCLE7Wl8ao.asa (hash: lHxtADA9XD8WHImnlrIbVNB8iNbIHqkbRGv2EysJnKE=)
2: TMpSYQx3wkBpxqZZ9fdYYkRNIdE.crl (hash: 5WUF7fUZEj2I70OVcaRkgAqfEbjvTa8DuszhvXhy6WQ=)
3: xG9NFV14N6jhxkLPrteP6dgm9Uo.asa (hash: j7yw0JA2orCei5mBZaM+jkEs+OnrVp/04Pg2/7YewKU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/4921f0-5c5c-4014-8ced-1b03e5894e05/1/TMpSYQx3wkBpxqZZ9fdYYkRNIdE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/4921f0-5c5c-4014-8ced-1b03e5894e05/1/TMpSYQx3wkBpxqZZ9fdYYkRNIdE.mft
rsync://rpki.ripe.net/repository/DEFAULT/TMpSYQx3wkBpxqZZ9fdYYkRNIdE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:91:98:bf:a4:d3:cc:05:8e:1f:e9:d0:c6:94:9e:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cca52610c77c24069c6a659f5f75862444d21d1
Validity
Not Before: Jul 23 20:01:28 2026 GMT
Not After : Jul 24 20:01:28 2026 GMT
Subject: CN=eea78c109b6c1a981b8df0014cc179dd070111c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:24:fa:f4:e6:14:d5:cb:ab:f7:d3:17:b1:06:
72:6a:0a:d6:08:48:5f:b4:a3:e2:44:82:d1:19:26:
05:c6:16:7b:e6:89:a3:3e:d2:83:84:7d:af:be:c1:
47:a2:26:7b:aa:3c:a8:7b:5e:68:0c:e8:07:3b:92:
20:7b:7e:ca:e9:7a:47:9f:a6:8f:15:f1:ac:14:b5:
55:11:6f:16:6d:55:2a:18:84:6b:fc:2b:49:c2:3e:
61:e0:57:b1:4a:93:af:96:7e:fc:84:cb:4a:35:22:
0a:a8:eb:49:3c:06:1e:04:c9:75:98:10:ff:78:bb:
6c:5d:7d:2c:2f:c5:31:f8:ae:b6:96:9a:f7:69:49:
bd:62:bb:52:39:d0:65:85:2f:fb:c9:6a:a3:03:07:
ab:ab:f0:03:b0:d0:ef:29:85:34:7e:ae:66:4a:49:
20:0b:37:5e:61:80:b2:b6:55:d1:f8:87:ee:5f:02:
2d:27:b1:cc:75:a0:53:86:fc:4a:43:3f:b9:02:33:
92:1b:2d:a1:61:8a:7b:e5:ed:a0:9d:78:8d:16:81:
28:4b:e1:34:75:5b:2b:39:d2:45:75:1f:f6:4c:fc:
09:d3:be:b2:a7:eb:4e:6f:eb:ee:55:3d:95:57:19:
16:41:ef:6c:36:54:92:a8:e8:18:0d:e9:ee:c0:9f:
1f:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:A7:8C:10:9B:6C:1A:98:1B:8D:F0:01:4C:C1:79:DD:07:01:11:C7
X509v3 Authority Key Identifier:
keyid:4C:CA:52:61:0C:77:C2:40:69:C6:A6:59:F5:F7:58:62:44:4D:21:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TMpSYQx3wkBpxqZZ9fdYYkRNIdE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/4921f0-5c5c-4014-8ced-1b03e5894e05/1/TMpSYQx3wkBpxqZZ9fdYYkRNIdE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/4921f0-5c5c-4014-8ced-1b03e5894e05/1/TMpSYQx3wkBpxqZZ9fdYYkRNIdE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:3b:7c:15:d6:7f:5c:10:ba:0a:80:3f:4b:01:2c:d4:a7:ae:
b1:7f:4e:76:d1:94:d4:a9:c1:80:da:0d:86:cc:96:d2:44:9a:
57:fc:f4:27:49:67:5a:ed:86:eb:44:b6:64:5b:cb:d4:83:69:
0d:09:16:51:fa:eb:a6:cd:56:51:f5:5b:b8:38:12:89:94:00:
9e:57:e7:0b:22:da:bb:3f:7a:57:c7:55:d3:cd:dc:c4:29:eb:
db:42:5d:e3:fa:18:fe:21:3a:43:73:2e:93:f2:00:d0:56:86:
66:31:b8:d3:67:5a:03:47:90:aa:87:90:04:bb:39:48:77:90:
1a:58:61:56:11:2e:39:b9:c2:f9:87:89:22:f1:4b:28:89:88:
ba:be:02:0b:d1:ee:08:4d:2c:28:4c:01:08:ec:68:ed:ae:1a:
4b:e8:62:1a:66:05:9a:6e:aa:18:98:c7:7f:a2:61:68:e2:92:
15:8b:17:1e:8f:ea:c1:0e:c5:18:50:79:0a:99:2c:74:06:28:
15:94:9d:f7:e7:ee:6e:34:30:5e:0e:3a:3b:93:e1:f9:c2:62:
20:a5:7b:5d:cd:b1:e1:3c:3c:b1:09:fd:24:5c:f3:d0:86:c6:
c1:56:cd:5e:ed:f3:0f:ad:13:ad:ce:4c:a6:84:bf:80:5b:97:
07:c4:62:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:13:01 2026 by rpki-client