Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/c9d523-0bb9-4573-9595-76a3a10a26f2/1/TdA6WGuXinCqqC4JWKkBUucmedk.mft
File: TdA6WGuXinCqqC4JWKkBUucmedk.mft (raw, json)
Hash identifier: Mc3vdEy8KCPaCMurgWQLtR7/bLlpwaxLVoMqSqU5U1U=
Subject key identifier: F5:3F:61:F0:B0:5C:5D:11:C7:E5:39:9A:89:C0:22:80:18:3D:0F:F9
Authority key identifier: 4D:D0:3A:58:6B:97:8A:70:AA:A8:2E:09:58:A9:01:52:E7:26:79:D9
Certificate issuer: /CN=4dd03a586b978a70aaa82e0958a90152e72679d9
Certificate serial: 019FAA87C547D8F1C78691F4B36369A5AA97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TdA6WGuXinCqqC4JWKkBUucmedk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/c9d523-0bb9-4573-9595-76a3a10a26f2/1/TdA6WGuXinCqqC4JWKkBUucmedk.mft
Manifest number: 0C34
Signing time: Tue 28 Jul 2026 21:00:52 +0000
Manifest this update: Tue 28 Jul 2026 21:00:52 +0000
Manifest next update: Wed 29 Jul 2026 21:00:52 +0000
Files and hashes: 1: FKpOhOuuXOF2CQyUBzWT1pdpVqc.roa (hash: ysT9E+YNysEYFfe5RzvJVpbtqR6v2fUqt40v4tEcOBQ=)
2: TdA6WGuXinCqqC4JWKkBUucmedk.crl (hash: Tq60P6cqM/j/81XHLDHInNBPrdmvpJ0Lsw9DVUOULzY=)
3: ttNXspnBYOBylc9inYKHFOll37k.roa (hash: RLGAiX60Eg9+/H6cmMZLT7RRPoDY5hArHpeHbk6ZQf8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/c9d523-0bb9-4573-9595-76a3a10a26f2/1/TdA6WGuXinCqqC4JWKkBUucmedk.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/c9d523-0bb9-4573-9595-76a3a10a26f2/1/TdA6WGuXinCqqC4JWKkBUucmedk.mft
rsync://rpki.ripe.net/repository/DEFAULT/TdA6WGuXinCqqC4JWKkBUucmedk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 21:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:87:c5:47:d8:f1:c7:86:91:f4:b3:63:69:a5:aa:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4dd03a586b978a70aaa82e0958a90152e72679d9
Validity
Not Before: Jul 28 21:00:52 2026 GMT
Not After : Jul 29 21:00:52 2026 GMT
Subject: CN=f53f61f0b05c5d11c7e5399a89c02280183d0ff9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:e8:23:51:90:7b:96:34:95:b3:d3:9b:bc:b8:
db:16:cf:9d:f3:c9:ec:c6:18:36:c9:ea:d9:2c:1a:
34:30:43:e0:89:37:5a:4f:b1:ec:60:76:b5:e2:d4:
dd:94:8c:12:05:bd:cb:fb:f2:5c:b5:e9:05:36:1e:
26:5e:21:70:c5:6a:0c:b7:88:6d:da:b3:7c:83:17:
34:d0:18:4f:6c:76:d1:b6:ec:a4:2c:e1:3b:90:fe:
be:c2:fd:c6:50:03:80:9b:85:22:2f:33:ea:92:79:
48:9b:66:88:5b:fa:22:f4:28:b0:29:ad:3d:fc:31:
54:4e:98:4d:13:52:ca:07:78:c5:27:19:5e:d2:e6:
6e:d9:98:5b:e3:8a:e6:2e:a4:e6:74:53:33:6e:ac:
51:67:71:0c:80:04:1c:00:d2:47:03:1b:b5:19:c4:
28:ec:63:3c:c3:3f:01:04:66:c9:e2:6e:86:23:79:
56:a9:38:92:c8:e7:52:44:cd:f4:19:65:1f:e8:31:
16:ff:14:26:32:f7:dc:4a:75:6b:97:22:f5:5a:2d:
49:b7:55:56:4d:a2:bc:45:fa:bb:8b:c0:ea:77:35:
a9:54:96:4c:fa:b3:5b:6a:a7:59:55:0e:ae:5d:c8:
2e:2b:47:c1:57:39:73:4b:a0:9c:74:ae:81:bf:e4:
b0:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:3F:61:F0:B0:5C:5D:11:C7:E5:39:9A:89:C0:22:80:18:3D:0F:F9
X509v3 Authority Key Identifier:
keyid:4D:D0:3A:58:6B:97:8A:70:AA:A8:2E:09:58:A9:01:52:E7:26:79:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TdA6WGuXinCqqC4JWKkBUucmedk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/c9d523-0bb9-4573-9595-76a3a10a26f2/1/TdA6WGuXinCqqC4JWKkBUucmedk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/c9d523-0bb9-4573-9595-76a3a10a26f2/1/TdA6WGuXinCqqC4JWKkBUucmedk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:dd:4b:fb:b0:d1:75:6b:41:a3:12:8c:4a:bc:e4:ce:eb:e4:
3b:3a:b7:93:7d:d9:84:04:47:9d:ea:4f:f9:e7:73:9a:c0:04:
3a:aa:93:3e:50:1e:8e:5b:e2:85:8f:d5:90:dc:2a:45:e6:6b:
31:d3:9d:0c:b4:e1:63:0d:5f:2e:b6:c6:ba:6a:8d:25:11:a9:
fa:81:19:1b:dc:9e:28:3c:6d:12:0c:3a:27:68:f8:4f:a3:cb:
1b:34:c0:d8:bc:68:9c:37:a5:53:48:48:99:bb:5c:36:46:44:
30:2e:d3:87:4e:89:76:a0:37:e4:aa:c9:56:cd:c7:ce:93:0f:
1b:69:9b:1b:da:b1:3d:6d:6b:f7:25:2b:c8:9c:23:92:cf:73:
ae:2c:f4:2a:f5:d4:ff:84:46:c9:a6:ac:06:92:fe:b2:c7:33:
f7:e7:d4:46:af:d7:a9:fc:6c:8c:ce:15:1a:25:84:7c:29:ae:
67:0b:0b:04:46:c5:dd:34:0c:2c:a5:ce:33:90:24:49:07:42:
0f:68:fd:1b:86:e6:8e:eb:71:06:08:36:14:9a:6b:20:2a:64:
7a:3d:55:4f:e7:ba:0a:f4:22:24:27:89:74:0a:b7:ed:3f:97:
1d:2e:5d:d3:e2:61:3a:ec:0b:89:30:e9:b2:07:5a:0a:7f:38:
e8:64:71:a5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+qh8VH2PHHhpH0s2NppaqXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRkZDAzYTU4NmI5NzhhNzBhYWE4MmUwOTU4YTkwMTUyZTcy
Njc5ZDkwHhcNMjYwNzI4MjEwMDUyWhcNMjYwNzI5MjEwMDUyWjAzMTEwLwYDVQQD
EyhmNTNmNjFmMGIwNWM1ZDExYzdlNTM5OWE4OWMwMjI4MDE4M2QwZmY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoegjUZB7ljSVs9ObvLjbFs+d88ns
xhg2yerZLBo0MEPgiTdaT7HsYHa14tTdlIwSBb3L+/JctekFNh4mXiFwxWoMt4ht
2rN8gxc00BhPbHbRtuykLOE7kP6+wv3GUAOAm4UiLzPqknlIm2aIW/oi9CiwKa09
/DFUTphNE1LKB3jFJxle0uZu2Zhb44rmLqTmdFMzbqxRZ3EMgAQcANJHAxu1GcQo
7GM8wz8BBGbJ4m6GI3lWqTiSyOdSRM30GWUf6DEW/xQmMvfcSnVrlyL1Wi1Jt1VW
TaK8Rfq7i8DqdzWpVJZM+rNbaqdZVQ6uXcguK0fBVzlzS6CcdK6Bv+SwhQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPU/YfCwXF0Rx+U5monAIoAYPQ/5MB8GA1UdIwQY
MBaAFE3QOlhrl4pwqqguCVipAVLnJnnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVGRBNldHdVhpbkNxcUM0SldLa0JVdWNtZWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9jOWQ1MjMtMGJiOS00NTczLTk1OTUt
NzZhM2ExMGEyNmYyLzEvVGRBNldHdVhpbkNxcUM0SldLa0JVdWNtZWRrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS9jOWQ1MjMtMGJiOS00NTczLTk1OTUtNzZhM2ExMGEyNmYy
LzEvVGRBNldHdVhpbkNxcUM0SldLa0JVdWNtZWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgd1L+7DR
dWtBoxKMSrzkzuvkOzq3k33ZhARHnepP+edzmsAEOqqTPlAejlvihY/VkNwqReZr
MdOdDLThYw1fLrbGumqNJRGp+oEZG9yeKDxtEgw6J2j4T6PLGzTA2LxonDelU0hI
mbtcNkZEMC7Th06JdqA35KrJVs3HzpMPG2mbG9qxPW1r9yUryJwjks9zriz0KvXU
/4RGyaasBpL+sscz9+fURq/XqfxsjM4VGiWEfCmuZwsLBEbF3TQMLKXOM5AkSQdC
D2j9G4bmjutxBgg2FJprICpkej1VT+e6CvQiJCeJdAq37T+XHS5d0+JhOuwLiTDp
sgdaCn846GRxpQ==
-----END CERTIFICATE-----
Generated at Wed Jul 29 04:12:24 2026 by rpki-client