
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/a35f7f-2194-46d3-91bd-cc0f50bda159/1/TN1pc0k84MOEm4uRm3UCul-gE9c.mft
File: TN1pc0k84MOEm4uRm3UCul-gE9c.mft (raw, json)
Hash identifier: TPLLghBUE1e7NL1rO73J8XRf1n28od7mre1MeCx7FOM=
Subject key identifier: DD:17:A6:96:90:FC:B7:19:A4:CA:FC:49:0F:E6:73:88:5B:DB:C0:7F
Authority key identifier: 4C:DD:69:73:49:3C:E0:C3:84:9B:8B:91:9B:75:02:BA:5F:A0:13:D7
Certificate issuer: /CN=4cdd6973493ce0c3849b8b919b7502ba5fa013d7
Certificate serial: 019F9022FAD9C07563AE9CD2D01E785E3C7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TN1pc0k84MOEm4uRm3UCul-gE9c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/a35f7f-2194-46d3-91bd-cc0f50bda159/1/TN1pc0k84MOEm4uRm3UCul-gE9c.mft
Manifest number: 064E
Signing time: Thu 23 Jul 2026 18:00:39 +0000
Manifest this update: Thu 23 Jul 2026 18:00:39 +0000
Manifest next update: Fri 24 Jul 2026 18:00:39 +0000
Files and hashes: 1: 8xG2LUgGMoQo1E0oFZXCsLklpt8.roa (hash: P+5MDoFv+VPER4lMcHzaG5Ao7rqloC0fCfPVJFO8gkg=)
2: NNU8m-ZbGaDewKa80bazCk_gHuc.roa (hash: jNBremlwULSnHvNbBnehGqtceTysa0l4mhsoPRNxZdE=)
3: TN1pc0k84MOEm4uRm3UCul-gE9c.crl (hash: p9sNdv4IP6AKtv8KoUVjqzqLz+0QgkALwjLzIlVp9xI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/a35f7f-2194-46d3-91bd-cc0f50bda159/1/TN1pc0k84MOEm4uRm3UCul-gE9c.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/a35f7f-2194-46d3-91bd-cc0f50bda159/1/TN1pc0k84MOEm4uRm3UCul-gE9c.mft
rsync://rpki.ripe.net/repository/DEFAULT/TN1pc0k84MOEm4uRm3UCul-gE9c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:22:fa:d9:c0:75:63:ae:9c:d2:d0:1e:78:5e:3c:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cdd6973493ce0c3849b8b919b7502ba5fa013d7
Validity
Not Before: Jul 23 18:00:39 2026 GMT
Not After : Jul 24 18:00:39 2026 GMT
Subject: CN=dd17a69690fcb719a4cafc490fe673885bdbc07f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:b9:bd:b8:c4:c2:64:91:4f:d4:79:4d:c5:db:
ef:85:b0:64:b5:52:b3:aa:2c:8c:ed:64:7f:c0:6d:
71:cc:66:60:34:13:fd:2b:40:37:f4:58:3e:07:10:
c7:47:71:11:f5:86:3c:ae:2d:3e:19:f0:c9:b5:30:
53:68:34:7f:ad:28:0d:b0:b4:9b:11:97:f3:19:fb:
1f:c7:4e:94:59:03:70:fe:8a:86:98:94:79:a0:8d:
d5:22:23:32:77:6b:69:d3:d2:fd:ca:bc:31:7c:9d:
3c:94:98:e5:64:ee:27:da:a9:48:f8:3e:13:ec:4a:
fc:76:2b:b5:ae:ff:dd:79:94:1d:ec:9a:61:44:da:
85:b7:f2:8d:f7:e2:23:c2:cb:04:20:45:dd:dd:0c:
f6:11:df:03:53:08:54:c1:1e:93:f8:11:b3:f0:cb:
24:46:92:69:fa:af:da:f2:cd:b1:85:a2:63:c9:16:
46:1c:c9:b1:8c:26:5a:c2:c9:7e:67:11:eb:54:1b:
d5:13:a0:f0:9c:f5:ba:10:e5:2f:c2:7a:9c:b4:1a:
75:64:24:4a:70:97:b9:db:de:8f:dc:9a:6e:c8:6a:
3b:9e:e1:86:1a:7f:0b:ef:f0:36:3f:de:39:95:9c:
72:7a:86:3b:c1:4e:0d:21:81:a1:a4:29:82:12:17:
5b:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:17:A6:96:90:FC:B7:19:A4:CA:FC:49:0F:E6:73:88:5B:DB:C0:7F
X509v3 Authority Key Identifier:
keyid:4C:DD:69:73:49:3C:E0:C3:84:9B:8B:91:9B:75:02:BA:5F:A0:13:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TN1pc0k84MOEm4uRm3UCul-gE9c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/a35f7f-2194-46d3-91bd-cc0f50bda159/1/TN1pc0k84MOEm4uRm3UCul-gE9c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/a35f7f-2194-46d3-91bd-cc0f50bda159/1/TN1pc0k84MOEm4uRm3UCul-gE9c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:31:55:62:e3:9b:11:a8:8a:77:d2:5d:53:2c:39:8f:ec:a4:
13:28:29:e6:51:a3:84:d8:fa:33:a2:3a:51:c2:68:4b:1c:f3:
79:e9:69:02:c4:26:e3:36:78:74:cd:00:27:1b:b0:da:ed:f2:
a8:cf:c3:ea:69:d1:ba:5f:99:69:41:8d:08:17:85:59:d9:1e:
bb:ac:91:39:a0:c4:c6:4d:45:31:a3:d6:55:52:8f:fb:fb:61:
2c:0c:74:17:be:e7:75:64:77:62:54:e9:87:98:c3:df:d8:01:
83:f3:7c:b8:7c:1e:c1:af:60:de:62:be:3f:39:4d:34:65:76:
fd:1b:4e:fa:ab:72:bd:eb:11:63:27:7d:80:01:7d:c7:ae:b8:
86:fb:13:af:78:11:93:83:30:34:27:0f:3f:c9:b6:e6:4a:7d:
eb:7a:b9:b0:03:58:70:86:6d:73:a5:37:14:f1:b0:d4:f4:44:
c3:71:ef:08:58:37:dc:8f:2e:72:60:1f:25:9d:aa:93:af:78:
8c:04:9b:1b:e6:54:f0:bb:98:21:c1:27:70:f6:c0:fd:75:78:
e9:d6:81:37:a1:16:cf:12:4b:f9:0b:b3:86:7b:88:10:20:65:
d2:7b:b3:a6:ef:ee:dd:33:13:51:0c:0b:61:8c:49:01:a8:71:
c3:5b:20:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:21:00 2026 by rpki-client