Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/309d36-c420-4321-9540-f3df673ea58c/1/TRUn0YOb-DA2DXFZATQ1Tm2QRpc.mft
File: TRUn0YOb-DA2DXFZATQ1Tm2QRpc.mft (raw, json)
Hash identifier: PWJAJNvpwUGMcOEHSq4gDsWJANrHJ6jq4D3PIhVtbCo=
Subject key identifier: F8:D2:E5:8B:28:5D:C2:5C:D8:E1:35:BE:5B:F2:EF:80:18:49:E1:E6
Authority key identifier: 4D:15:27:D1:83:9B:F8:30:36:0D:71:59:01:34:35:4E:6D:90:46:97
Certificate issuer: /CN=4d1527d1839bf830360d71590134354e6d904697
Certificate serial: 019F92ECD9C62E815F87FC285F632C196034
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TRUn0YOb-DA2DXFZATQ1Tm2QRpc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/309d36-c420-4321-9540-f3df673ea58c/1/TRUn0YOb-DA2DXFZATQ1Tm2QRpc.mft
Manifest number: 19C9
Signing time: Fri 24 Jul 2026 07:00:23 +0000
Manifest this update: Fri 24 Jul 2026 07:00:23 +0000
Manifest next update: Sat 25 Jul 2026 07:00:23 +0000
Files and hashes: 1: 5IRwRfh8Fym_BtVi99L5BSoQylk.roa (hash: zVO1DYlBvdQtHAVcl2WpceQxT4SVa8kf2zP0TMDOH1A=)
2: TRUn0YOb-DA2DXFZATQ1Tm2QRpc.crl (hash: 460exQJlV5efmve9qYY1uvvXQupIP53XZTiZlWsI1BE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/309d36-c420-4321-9540-f3df673ea58c/1/TRUn0YOb-DA2DXFZATQ1Tm2QRpc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/309d36-c420-4321-9540-f3df673ea58c/1/TRUn0YOb-DA2DXFZATQ1Tm2QRpc.mft
rsync://rpki.ripe.net/repository/DEFAULT/TRUn0YOb-DA2DXFZATQ1Tm2QRpc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:ec:d9:c6:2e:81:5f:87:fc:28:5f:63:2c:19:60:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d1527d1839bf830360d71590134354e6d904697
Validity
Not Before: Jul 24 07:00:23 2026 GMT
Not After : Jul 25 07:00:23 2026 GMT
Subject: CN=f8d2e58b285dc25cd8e135be5bf2ef801849e1e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:f1:76:b7:f4:33:dc:f7:d8:ed:a4:b9:9c:2a:
5e:5a:f1:3e:b9:bb:a7:df:8d:d7:81:84:f6:ba:68:
ea:a3:78:43:19:a8:00:13:43:31:48:79:08:f6:a1:
b8:02:ab:1e:d6:a8:49:56:59:18:e1:ea:4a:b1:bd:
3e:62:95:fe:20:5c:5c:63:2b:11:ce:d6:4a:a3:31:
56:7d:ca:71:8c:59:e3:ee:e8:73:a0:d0:bb:46:43:
a0:3e:fc:f6:06:a3:a9:4a:07:63:b0:bb:d3:fb:5b:
5d:0e:68:3a:89:8a:fb:8c:b6:31:1b:bd:84:b6:a3:
e9:14:80:0e:8c:be:15:0b:cd:f3:8c:36:4d:9a:63:
51:f0:7f:42:23:5d:df:bb:25:15:9c:80:17:e6:98:
48:ed:3a:5a:b4:ae:c4:9f:64:75:cc:3f:e5:63:cb:
c8:b8:29:a4:d4:45:d2:eb:b4:c3:31:03:0f:50:6a:
67:76:e8:46:02:92:bb:de:d7:ae:7e:6f:59:38:c2:
d0:99:ca:f8:c6:83:b2:0b:20:e6:15:e3:0e:24:2d:
d6:15:bb:7c:e8:01:f3:71:af:c9:97:52:66:7c:b9:
06:c3:95:f7:1f:7b:4c:a2:d1:84:26:35:ce:23:05:
1c:59:a0:6c:ca:ad:dd:1b:6b:a0:d7:19:60:d2:79:
db:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:D2:E5:8B:28:5D:C2:5C:D8:E1:35:BE:5B:F2:EF:80:18:49:E1:E6
X509v3 Authority Key Identifier:
keyid:4D:15:27:D1:83:9B:F8:30:36:0D:71:59:01:34:35:4E:6D:90:46:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TRUn0YOb-DA2DXFZATQ1Tm2QRpc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/309d36-c420-4321-9540-f3df673ea58c/1/TRUn0YOb-DA2DXFZATQ1Tm2QRpc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/309d36-c420-4321-9540-f3df673ea58c/1/TRUn0YOb-DA2DXFZATQ1Tm2QRpc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:7c:6d:7c:85:e6:fc:22:81:e2:b1:4c:70:db:dd:4d:5a:13:
00:7a:7d:cf:ba:64:cd:74:f7:af:77:4a:fa:b0:bc:95:48:d1:
2b:88:37:1a:fb:b5:5f:0a:f7:58:14:63:40:43:a3:51:d2:73:
7a:70:fa:0c:bf:e7:87:85:a8:ef:a7:88:3d:4f:05:bc:32:3c:
f5:63:b4:ef:30:24:f9:45:ab:ce:d8:bd:e8:40:9a:bc:fb:cd:
17:ed:1e:c7:e0:f2:d0:ff:3c:a1:3f:56:e0:ef:eb:e7:22:bc:
3d:33:37:cc:87:05:f1:c8:84:c3:c4:71:55:87:4a:ef:8a:59:
28:7a:d7:03:b8:51:d2:02:96:cf:54:68:39:d1:28:40:dc:61:
d2:c4:72:a5:ec:7b:a8:70:c7:86:ea:a7:c3:3e:d1:5c:c3:d3:
74:29:51:86:b4:be:8b:a3:af:cd:d6:3a:bf:46:2e:6a:fd:79:
06:55:11:f1:29:82:55:ed:af:4b:39:eb:d7:72:8a:60:f9:7a:
6b:84:d9:87:29:7d:65:78:c9:8f:ac:8e:8f:a3:d6:1e:00:ad:
47:cb:94:22:80:3d:8f:7b:0f:ed:b8:34:fd:17:c2:64:a1:72:
d1:ff:82:52:db:34:35:4a:b8:b3:76:e3:03:58:01:da:db:e0:
c1:a9:38:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:27:52 2026 by rpki-client