Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/e4e07e-15fc-4942-842a-538509f3a789/1/TSPi7bMh4ailzp7j4tlapA8N6KA.mft
File: TSPi7bMh4ailzp7j4tlapA8N6KA.mft (raw, json)
Hash identifier: GLZXPJRrZx5Tg/bSWJTBNl3I4nEYzEBw6TQYBo1dl94=
Subject key identifier: 6A:E2:6E:AA:79:57:78:45:1C:9E:1A:CF:E4:23:AA:02:39:00:0E:F0
Authority key identifier: 4D:23:E2:ED:B3:21:E1:A8:A5:CE:9E:E3:E2:D9:5A:A4:0F:0D:E8:A0
Certificate issuer: /CN=4d23e2edb321e1a8a5ce9ee3e2d95aa40f0de8a0
Certificate serial: 019F9248D3F01A9775B3486689A403E7BF5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TSPi7bMh4ailzp7j4tlapA8N6KA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/e4e07e-15fc-4942-842a-538509f3a789/1/TSPi7bMh4ailzp7j4tlapA8N6KA.mft
Manifest number: 0E7D
Signing time: Fri 24 Jul 2026 04:01:14 +0000
Manifest this update: Fri 24 Jul 2026 04:01:14 +0000
Manifest next update: Sat 25 Jul 2026 04:01:14 +0000
Files and hashes: 1: JXFUH416zwkJgWarbpHaBu4OjrM.roa (hash: 4a95XnQ0KPTukf9VV0SjrYCDAkfbYBMqoLt/hvW2kls=)
2: Ne3vXvFZfDJtHFxRi2iyMMXZXak.roa (hash: 90S1YKvYb+j9r5QawOi7WPQ7WUn8bPfBJqf4jlJtVS4=)
3: TSPi7bMh4ailzp7j4tlapA8N6KA.crl (hash: lRcLy6WtWdeJHk+RySKUb1Bb4XjAv8hxiYvluSxzkSs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/e4e07e-15fc-4942-842a-538509f3a789/1/TSPi7bMh4ailzp7j4tlapA8N6KA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/e4e07e-15fc-4942-842a-538509f3a789/1/TSPi7bMh4ailzp7j4tlapA8N6KA.mft
rsync://rpki.ripe.net/repository/DEFAULT/TSPi7bMh4ailzp7j4tlapA8N6KA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 04:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:48:d3:f0:1a:97:75:b3:48:66:89:a4:03:e7:bf:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d23e2edb321e1a8a5ce9ee3e2d95aa40f0de8a0
Validity
Not Before: Jul 24 04:01:14 2026 GMT
Not After : Jul 25 04:01:14 2026 GMT
Subject: CN=6ae26eaa795778451c9e1acfe423aa0239000ef0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:df:d2:b7:d3:22:38:bc:7c:5b:e6:6c:c9:40:
c8:f9:28:21:91:20:59:fa:b4:7f:6c:2d:bb:e1:4a:
a6:f3:95:f0:25:d1:a3:e0:73:95:29:3c:39:6e:13:
25:a0:68:ca:d9:ad:c0:1a:c0:57:f8:59:a7:58:95:
49:28:fc:1b:57:62:ed:9e:71:5b:cf:90:69:88:fe:
c9:ee:63:54:2d:b5:d2:90:dd:c5:cc:93:ac:a7:ca:
ca:91:0b:73:64:45:99:08:b4:e1:0f:f9:9e:f6:a9:
d1:81:f8:8b:c4:12:6d:14:c6:58:f2:7e:29:ca:3a:
48:19:2e:6d:23:df:2c:80:39:16:e8:3f:ee:f3:50:
5c:ec:7e:c3:11:0a:f3:cd:0f:9e:8c:fa:ea:3f:a7:
b8:a0:4a:4f:76:38:7f:26:2d:88:f2:25:a9:47:89:
68:c6:71:b0:84:ce:fb:7d:fa:c2:e6:c8:d7:42:94:
8d:87:06:1c:5a:cf:9e:be:6f:97:54:e6:48:55:59:
58:45:7c:38:59:7e:49:7f:a9:1e:8d:c1:6f:77:41:
15:25:04:8c:0b:4b:e0:26:0d:a2:05:4a:38:ce:e0:
4b:19:41:bd:74:54:e7:fd:66:63:15:4b:5c:c2:6e:
b2:81:75:90:7b:05:bf:72:e2:ae:19:1a:6d:29:1d:
1c:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:E2:6E:AA:79:57:78:45:1C:9E:1A:CF:E4:23:AA:02:39:00:0E:F0
X509v3 Authority Key Identifier:
keyid:4D:23:E2:ED:B3:21:E1:A8:A5:CE:9E:E3:E2:D9:5A:A4:0F:0D:E8:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TSPi7bMh4ailzp7j4tlapA8N6KA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/e4e07e-15fc-4942-842a-538509f3a789/1/TSPi7bMh4ailzp7j4tlapA8N6KA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/e4e07e-15fc-4942-842a-538509f3a789/1/TSPi7bMh4ailzp7j4tlapA8N6KA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:b4:94:56:17:46:c5:fe:83:b8:a0:4e:69:ae:e3:1d:e4:5e:
ac:1f:ff:a4:d2:9d:89:e7:17:3a:da:da:c7:eb:52:ae:0d:3b:
67:d7:f6:f9:30:22:ca:84:4d:ff:40:31:cd:30:4a:0b:ee:e1:
fb:d7:fc:c8:28:c0:d1:bd:83:a0:ee:e9:d6:a6:93:43:50:4d:
3e:09:f4:a7:b7:1f:1a:1f:6d:c7:c5:4a:69:cf:6f:dc:a4:62:
f8:49:e8:dd:ce:19:d0:8d:cd:66:28:c4:46:fc:2f:b5:61:21:
ce:b2:a2:19:e5:fd:02:83:71:90:17:10:7b:4a:8a:11:07:f5:
b5:85:26:37:c8:a2:78:f6:54:bc:1b:a0:55:1d:14:b7:f2:b9:
ee:3e:b0:9a:0d:0c:bf:e6:72:33:06:85:0d:af:55:14:e2:30:
52:89:38:ab:99:3b:e4:d5:60:27:ad:0c:07:25:0c:5b:94:50:
d6:b0:90:90:6b:c5:41:b6:d9:a1:f7:9b:e8:7c:8d:66:59:c6:
b0:04:0b:9e:c7:90:62:41:9c:a4:f6:38:99:dd:99:69:da:98:
80:06:ea:66:b9:f2:fa:9d:3e:6b:8f:25:fd:36:fe:97:58:cb:
25:2c:05:58:e1:4d:30:b8:6c:4e:20:c3:cf:05:49:c1:5a:9d:
dd:da:fe:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:17:02 2026 by rpki-client