Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/65a4c2-34b3-4205-afd1-c5481db3718d/1/TSkoLUc3P5QvCti5HtlAk7Zuo68.mft
File: TSkoLUc3P5QvCti5HtlAk7Zuo68.mft (raw, json)
Hash identifier: XZQGDMhow1r/G+A9kvAWrVbQnd815o6Jzrtz6XGLzTk=
Subject key identifier: 4C:C6:28:08:60:13:43:16:66:01:51:D8:52:44:FD:E6:76:17:22:73
Authority key identifier: 4D:29:28:2D:47:37:3F:94:2F:0A:D8:B9:1E:D9:40:93:B6:6E:A3:AF
Certificate issuer: /CN=4d29282d47373f942f0ad8b91ed94093b66ea3af
Certificate serial: 019F93242AC69A68C567289DD88D364379CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TSkoLUc3P5QvCti5HtlAk7Zuo68.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/65a4c2-34b3-4205-afd1-c5481db3718d/1/TSkoLUc3P5QvCti5HtlAk7Zuo68.mft
Manifest number: 1950
Signing time: Fri 24 Jul 2026 08:00:48 +0000
Manifest this update: Fri 24 Jul 2026 08:00:48 +0000
Manifest next update: Sat 25 Jul 2026 08:00:48 +0000
Files and hashes: 1: PNfIBENqPn1C2ky1c3Y7NiG7Ymw.roa (hash: DgC7dqgRapp52CiQQUrzN9ZAbunqBU0/xi2SXO7kKV0=)
2: TSkoLUc3P5QvCti5HtlAk7Zuo68.crl (hash: 3S1Oa+xhwE0S/wSpPwRni/8qww2OZ8srlll3u2fT2EA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/65a4c2-34b3-4205-afd1-c5481db3718d/1/TSkoLUc3P5QvCti5HtlAk7Zuo68.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/65a4c2-34b3-4205-afd1-c5481db3718d/1/TSkoLUc3P5QvCti5HtlAk7Zuo68.mft
rsync://rpki.ripe.net/repository/DEFAULT/TSkoLUc3P5QvCti5HtlAk7Zuo68.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:24:2a:c6:9a:68:c5:67:28:9d:d8:8d:36:43:79:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d29282d47373f942f0ad8b91ed94093b66ea3af
Validity
Not Before: Jul 24 08:00:48 2026 GMT
Not After : Jul 25 08:00:48 2026 GMT
Subject: CN=4cc6280860134316660151d85244fde676172273
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:de:8c:80:b6:b5:0c:23:6b:6b:b5:bc:ea:dd:
ee:33:d4:14:32:2a:9d:f8:08:e3:2f:c3:9a:ea:40:
89:32:c2:68:24:a8:46:ee:d2:4a:50:15:42:f4:98:
2f:9b:81:78:46:b1:8e:96:e3:f2:38:7a:9b:4a:61:
1c:05:88:b2:10:3d:ea:b4:36:17:cf:e7:07:fc:f3:
a1:fd:b8:34:45:0d:c2:1f:0b:1b:e3:cb:e5:46:e3:
6c:98:1e:ae:f1:3d:02:c9:f6:ad:a2:58:d9:bc:bb:
eb:70:82:0b:48:79:80:3b:10:a0:70:a0:5f:56:d8:
40:c9:c6:0c:74:94:0c:d1:ac:31:f9:ec:00:43:0c:
64:55:26:67:34:2b:b1:65:fe:74:a8:8c:bb:c0:e4:
49:d7:6d:d3:b0:64:f2:41:d8:99:66:4e:19:23:8b:
25:d1:bb:9b:b8:4f:2a:bb:85:a4:bb:46:32:1e:81:
47:94:a3:33:4d:88:b2:57:ba:c2:a7:5e:40:7d:7d:
ba:6d:c0:2a:4c:97:de:1e:25:23:26:9b:be:dc:47:
c6:6a:63:f4:31:90:b0:4c:a2:00:0c:ea:af:bc:94:
df:70:ce:6b:e8:60:f6:99:99:8a:59:38:44:c7:a3:
b5:51:53:e1:ad:d3:96:85:41:cb:4c:fc:6a:11:50:
cb:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:C6:28:08:60:13:43:16:66:01:51:D8:52:44:FD:E6:76:17:22:73
X509v3 Authority Key Identifier:
keyid:4D:29:28:2D:47:37:3F:94:2F:0A:D8:B9:1E:D9:40:93:B6:6E:A3:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TSkoLUc3P5QvCti5HtlAk7Zuo68.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/65a4c2-34b3-4205-afd1-c5481db3718d/1/TSkoLUc3P5QvCti5HtlAk7Zuo68.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/65a4c2-34b3-4205-afd1-c5481db3718d/1/TSkoLUc3P5QvCti5HtlAk7Zuo68.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:fb:36:83:3b:4e:9e:03:d5:46:08:75:9e:99:77:eb:cf:3a:
8c:c9:33:44:74:f4:6a:3c:05:12:7a:66:4b:e1:d1:c1:38:16:
b9:0e:64:fb:a8:df:dd:b3:e7:76:e5:f3:cb:67:b5:6d:4b:29:
55:05:08:ad:5d:fe:b2:7c:d2:0f:88:9a:91:11:3e:a6:be:1a:
bc:6c:7d:38:25:13:bf:dd:12:ec:c3:c8:1b:fc:1c:c7:77:bf:
78:1f:88:6b:5d:16:2e:62:c6:0c:a1:9f:c5:e8:84:f9:5e:30:
35:70:aa:07:3f:cb:3e:60:aa:75:2d:8e:f5:65:39:d1:e5:7f:
9e:c8:26:77:93:10:72:4d:f1:45:94:cf:0b:7c:af:88:8b:51:
59:e7:9b:f9:69:c4:fc:0c:de:d0:27:c9:1d:bb:b8:85:d8:70:
55:76:49:f4:c4:a2:96:0b:38:16:91:17:5d:d4:69:9e:c3:93:
b8:2f:74:da:76:54:8e:ef:96:4d:52:ba:0c:f3:c7:9e:65:69:
6f:47:fc:29:8c:75:3c:4d:27:13:e8:37:56:77:56:4f:9b:9b:
c3:8a:e1:25:71:86:ac:4a:3f:f2:97:d0:66:ce:1e:34:b8:70:
30:85:38:c4:7a:7a:ce:39:32:23:bf:5d:fc:40:d0:8d:5e:83:
42:cc:79:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:35:22 2026 by rpki-client