Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/a9e57e-2479-4576-b275-87433157a25b/1/TfkmWGAQlO1kmFxkxpUr40FjAc4.mft
File: TfkmWGAQlO1kmFxkxpUr40FjAc4.mft (raw, json)
Hash identifier: wA6D4yE+V0+STcsD4iwcaTibGATnt2hN+zaBDIjN5EM=
Subject key identifier: A4:66:94:BC:DB:64:97:CF:C2:9D:EA:A7:BE:FD:57:CC:7D:FA:2B:F6
Authority key identifier: 4D:F9:26:58:60:10:94:ED:64:98:5C:64:C6:95:2B:E3:41:63:01:CE
Certificate issuer: /CN=4df92658601094ed64985c64c6952be3416301ce
Certificate serial: 019F8E6C2FA1E86F819C22F95430E36CB74E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TfkmWGAQlO1kmFxkxpUr40FjAc4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/a9e57e-2479-4576-b275-87433157a25b/1/TfkmWGAQlO1kmFxkxpUr40FjAc4.mft
Manifest number: 0C35
Signing time: Thu 23 Jul 2026 10:01:22 +0000
Manifest this update: Thu 23 Jul 2026 10:01:22 +0000
Manifest next update: Fri 24 Jul 2026 10:01:22 +0000
Files and hashes: 1: TT7AxVwRgLIDSeadKvoi71E8vK0.asa (hash: o3OsuB0V5ph9dQ1ef1EOSm9Ca3120WnHHtR+xfhJuI4=)
2: TfkmWGAQlO1kmFxkxpUr40FjAc4.crl (hash: 3byYZB3zsAXPJ9DmHqPPZWHd0ZVe16CC046jIS0+EGI=)
3: vkkRAkl-IwQNmrBge38zIHM1u4s.roa (hash: ww7yIGrhLBt5cEWEEdI9G55jx6vHqfpMgzLOawUYyek=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/a9e57e-2479-4576-b275-87433157a25b/1/TfkmWGAQlO1kmFxkxpUr40FjAc4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/a9e57e-2479-4576-b275-87433157a25b/1/TfkmWGAQlO1kmFxkxpUr40FjAc4.mft
rsync://rpki.ripe.net/repository/DEFAULT/TfkmWGAQlO1kmFxkxpUr40FjAc4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 10:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8e:6c:2f:a1:e8:6f:81:9c:22:f9:54:30:e3:6c:b7:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4df92658601094ed64985c64c6952be3416301ce
Validity
Not Before: Jul 23 10:01:22 2026 GMT
Not After : Jul 24 10:01:22 2026 GMT
Subject: CN=a46694bcdb6497cfc29deaa7befd57cc7dfa2bf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:c4:f9:2f:c1:2b:ea:15:31:e2:d4:fd:a3:b3:
e5:db:18:fb:c3:ce:d0:64:33:1e:e5:62:38:66:33:
70:46:27:4f:73:26:50:d4:27:f8:26:92:e9:35:4b:
fb:f8:73:11:d2:e5:91:36:73:67:1a:47:ec:71:0b:
1b:bf:6f:0f:01:61:49:35:80:2d:68:d0:ca:60:ea:
0e:a8:ed:f9:1f:dc:d9:16:57:11:74:e3:1a:ab:7d:
da:14:6d:d5:8d:2b:e9:3e:20:32:5d:25:61:af:2f:
9c:4d:32:da:09:e0:9b:c9:f1:0a:7a:06:b8:fb:8c:
7f:cc:93:21:76:50:6c:c3:d5:52:3b:6d:b6:44:94:
4c:b9:6b:e7:fc:03:69:06:df:12:6a:47:e9:01:3a:
77:02:b8:d3:f2:7e:7b:99:6b:95:1e:29:2c:8b:67:
96:b7:34:4a:24:c1:e0:e5:f7:e8:84:35:90:1f:3c:
7c:01:4c:7a:3f:1e:42:a4:49:27:14:ec:1d:84:aa:
22:bb:df:08:7a:b7:df:af:79:85:33:ef:87:93:41:
93:c9:85:0e:b4:aa:43:79:75:a9:f4:c2:b6:c8:49:
b3:9e:ca:33:9d:db:26:80:05:5d:b5:ef:91:57:9c:
6d:7e:71:9e:1a:cb:ed:97:f3:51:58:13:df:f4:8a:
8f:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:66:94:BC:DB:64:97:CF:C2:9D:EA:A7:BE:FD:57:CC:7D:FA:2B:F6
X509v3 Authority Key Identifier:
keyid:4D:F9:26:58:60:10:94:ED:64:98:5C:64:C6:95:2B:E3:41:63:01:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TfkmWGAQlO1kmFxkxpUr40FjAc4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/a9e57e-2479-4576-b275-87433157a25b/1/TfkmWGAQlO1kmFxkxpUr40FjAc4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/a9e57e-2479-4576-b275-87433157a25b/1/TfkmWGAQlO1kmFxkxpUr40FjAc4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:96:9a:f0:37:42:73:cf:7d:28:0c:fc:e8:5a:3d:cb:b2:dd:
69:d4:43:99:88:1b:36:ad:0b:4b:e2:e5:18:9a:bf:1b:6c:08:
8b:ba:80:fa:a7:65:21:6e:a2:03:ed:1c:7e:e0:97:8b:62:f9:
84:ff:9a:80:08:5c:1a:6f:8d:df:a5:45:f4:ce:02:41:f8:a8:
7c:a1:74:08:f0:a5:31:6d:91:b0:b8:8f:e1:b7:bb:24:f2:05:
51:69:d8:b8:09:6b:2d:23:9e:27:d3:2f:db:5f:84:42:05:66:
a6:05:39:73:f4:5b:b7:cc:15:c1:47:c5:cf:e1:ca:2e:3a:0c:
0f:a3:75:92:ad:1b:c7:09:38:69:15:ca:65:ba:88:43:aa:ec:
16:89:27:ab:82:08:e6:3e:07:ed:07:40:4e:e4:ad:49:21:3a:
41:3f:d0:93:d7:05:70:05:0e:77:35:2f:22:1b:fc:36:03:6c:
e0:5b:03:52:6c:99:12:c9:e5:db:1c:ad:dd:4f:df:96:8e:64:
af:29:89:18:66:78:40:6d:7d:59:e2:84:ea:d4:b8:4f:c5:0a:
8d:c4:5a:26:7e:42:f0:0f:54:1b:0a:c4:3c:72:0f:15:df:0f:
65:a3:11:d7:50:f1:6a:88:2e:b4:52:c0:9e:97:c0:cd:17:12:
85:0b:33:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:08:49 2026 by rpki-client