Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/2c58d4-7a73-4d62-af86-26f0666590ed/1/Txf-YMOq5IFd21vYFp7wiLD_iAA.mft
File: Txf-YMOq5IFd21vYFp7wiLD_iAA.mft (raw, json)
Hash identifier: 8bbGCb7ypmfIXKyO7e9TTjeRt/JnEfo+8z3xpmLIWKw=
Subject key identifier: 4C:76:59:59:34:9B:C5:EF:2D:D8:51:20:F9:A6:C3:EE:01:AC:76:53
Authority key identifier: 4F:17:FE:60:C3:AA:E4:81:5D:DB:5B:D8:16:9E:F0:88:B0:FF:88:00
Certificate issuer: /CN=4f17fe60c3aae4815ddb5bd8169ef088b0ff8800
Certificate serial: 019FAA87343C8BD0C9A0D245129836716E5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Txf-YMOq5IFd21vYFp7wiLD_iAA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/2c58d4-7a73-4d62-af86-26f0666590ed/1/Txf-YMOq5IFd21vYFp7wiLD_iAA.mft
Manifest number: D4
Signing time: Tue 28 Jul 2026 21:00:15 +0000
Manifest this update: Tue 28 Jul 2026 21:00:15 +0000
Manifest next update: Wed 29 Jul 2026 21:00:15 +0000
Files and hashes: 1: 8QmLJNa-_EnzDtcCcd2zqbb73Z8.asa (hash: E1mQECWPw1tiHBtWESa7EJB6He3X4+7LGeXYc5u2GM4=)
2: Txf-YMOq5IFd21vYFp7wiLD_iAA.crl (hash: 2JxZ3ZS8mXjUwwHCckMWEWfQAVwCBIEqaukCbsL5LlY=)
3: sfOsjn-CrEsbuGZfo_GU02Seuc0.roa (hash: QuCtUcV2rfjyf/avZCog8Qa9or52pG6qZ7ZDsQCk2sE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/2c58d4-7a73-4d62-af86-26f0666590ed/1/Txf-YMOq5IFd21vYFp7wiLD_iAA.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/2c58d4-7a73-4d62-af86-26f0666590ed/1/Txf-YMOq5IFd21vYFp7wiLD_iAA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Txf-YMOq5IFd21vYFp7wiLD_iAA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 21:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:87:34:3c:8b:d0:c9:a0:d2:45:12:98:36:71:6e:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f17fe60c3aae4815ddb5bd8169ef088b0ff8800
Validity
Not Before: Jul 28 21:00:15 2026 GMT
Not After : Jul 29 21:00:15 2026 GMT
Subject: CN=4c765959349bc5ef2dd85120f9a6c3ee01ac7653
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:df:44:c1:2b:5c:02:da:61:be:af:a4:13:fe:
ad:df:63:db:6e:e6:e7:f3:a1:47:3b:40:a3:d5:cd:
91:ff:df:cf:24:73:d1:94:f6:8c:c1:fd:31:d0:8f:
51:6c:39:45:88:a0:db:35:b3:5a:46:5f:7f:94:28:
26:57:04:d4:f8:5f:68:68:dc:75:67:62:93:c7:7a:
72:67:81:15:a0:21:d0:50:d7:8f:d1:b5:a9:27:52:
ce:0f:24:36:15:1d:04:4b:96:47:33:5e:cb:33:f9:
eb:85:39:7d:e3:4b:b6:b9:ee:e2:b1:5d:ad:59:55:
30:54:a7:e6:91:6d:b3:44:21:d8:3d:23:3d:11:fd:
9e:37:a7:ea:14:26:22:72:f3:8b:f5:2f:8c:f4:d2:
4e:20:b1:53:15:36:18:90:c5:9b:c1:b6:ac:0b:bc:
dd:bb:50:dd:45:68:64:00:e1:71:ba:68:df:bc:b0:
aa:6b:e6:4e:4d:ef:e3:aa:b5:4f:94:29:cc:e6:ce:
6f:0b:e5:c7:2a:37:b6:cc:f5:fa:e7:cf:2f:9b:28:
d0:a2:02:6e:b1:e7:f6:41:c3:54:44:46:a0:10:fc:
10:56:90:f8:24:c0:a7:3e:8e:7e:27:0f:54:4f:02:
e8:70:f2:2b:f0:1f:45:fa:23:f2:04:fd:ef:e8:7d:
e2:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:76:59:59:34:9B:C5:EF:2D:D8:51:20:F9:A6:C3:EE:01:AC:76:53
X509v3 Authority Key Identifier:
keyid:4F:17:FE:60:C3:AA:E4:81:5D:DB:5B:D8:16:9E:F0:88:B0:FF:88:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Txf-YMOq5IFd21vYFp7wiLD_iAA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/2c58d4-7a73-4d62-af86-26f0666590ed/1/Txf-YMOq5IFd21vYFp7wiLD_iAA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/2c58d4-7a73-4d62-af86-26f0666590ed/1/Txf-YMOq5IFd21vYFp7wiLD_iAA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:0a:05:b1:73:69:9b:69:e9:69:a8:8b:3a:1e:54:62:f2:d0:
31:0c:cd:81:9c:6a:1d:5f:ae:2c:e0:c4:9f:3e:7c:14:94:ae:
5b:6e:84:96:2a:35:4e:b6:a7:df:9f:8d:40:20:e0:26:12:c9:
f9:54:fb:1b:84:18:a8:eb:ce:91:e8:e9:b1:14:b1:6d:94:db:
ff:45:54:3f:72:e3:97:8a:3e:d9:5b:ce:32:86:95:a9:89:ef:
3a:32:b6:49:df:1a:a9:ca:4e:e7:fd:6e:c6:51:ea:48:ff:6a:
33:6d:8e:44:6f:3b:d2:53:ef:83:39:5d:29:1e:28:2f:78:ab:
0f:46:3a:64:c1:1b:d2:d6:4d:8c:c8:72:9e:89:b6:d6:81:aa:
e4:f3:f8:92:fc:71:13:54:1f:a3:f1:72:65:44:24:e8:e2:43:
b7:53:8d:89:27:3b:3f:d1:d1:d9:1b:f0:02:64:93:a9:a3:64:
cb:90:2f:ca:e2:c1:cb:2f:c8:7a:e3:48:c8:fc:35:74:58:5f:
e1:fd:ce:11:39:c6:86:71:24:e1:f3:76:3e:d3:63:01:09:e0:
32:e4:b0:46:0b:2f:92:04:17:1f:bb:f0:9f:28:bf:1f:69:04:
6a:8c:8a:8a:55:8b:eb:15:84:cc:5f:ad:72:08:6b:a4:6e:fe:
2c:75:5f:1b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+qhzQ8i9DJoNJFEpg2cW5fMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMTdmZTYwYzNhYWU0ODE1ZGRiNWJkODE2OWVmMDg4YjBm
Zjg4MDAwHhcNMjYwNzI4MjEwMDE1WhcNMjYwNzI5MjEwMDE1WjAzMTEwLwYDVQQD
Eyg0Yzc2NTk1OTM0OWJjNWVmMmRkODUxMjBmOWE2YzNlZTAxYWM3NjUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnd9EwStcAtphvq+kE/6t32Pbbubn
86FHO0Cj1c2R/9/PJHPRlPaMwf0x0I9RbDlFiKDbNbNaRl9/lCgmVwTU+F9oaNx1
Z2KTx3pyZ4EVoCHQUNeP0bWpJ1LODyQ2FR0ES5ZHM17LM/nrhTl940u2ue7isV2t
WVUwVKfmkW2zRCHYPSM9Ef2eN6fqFCYicvOL9S+M9NJOILFTFTYYkMWbwbasC7zd
u1DdRWhkAOFxumjfvLCqa+ZOTe/jqrVPlCnM5s5vC+XHKje2zPX6588vmyjQogJu
sef2QcNUREagEPwQVpD4JMCnPo5+Jw9UTwLocPIr8B9F+iPyBP3v6H3imQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEx2WVk0m8XvLdhRIPmmw+4BrHZTMB8GA1UdIwQY
MBaAFE8X/mDDquSBXdtb2Bae8Iiw/4gAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhmLVlNT3E1SUZkMjF2WUZwN3dpTERfaUFBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC8yYzU4ZDQtN2E3My00ZDYyLWFmODYt
MjZmMDY2NjU5MGVkLzEvVHhmLVlNT3E1SUZkMjF2WUZwN3dpTERfaUFBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC8yYzU4ZDQtN2E3My00ZDYyLWFmODYtMjZmMDY2NjU5MGVk
LzEvVHhmLVlNT3E1SUZkMjF2WUZwN3dpTERfaUFBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgAoFsXNp
m2npaaiLOh5UYvLQMQzNgZxqHV+uLODEnz58FJSuW26Elio1Tran35+NQCDgJhLJ
+VT7G4QYqOvOkejpsRSxbZTb/0VUP3Ljl4o+2VvOMoaVqYnvOjK2Sd8aqcpO5/1u
xlHqSP9qM22ORG870lPvgzldKR4oL3irD0Y6ZMEb0tZNjMhynom21oGq5PP4kvxx
E1Qfo/FyZUQk6OJDt1ONiSc7P9HR2RvwAmSTqaNky5AvyuLByy/IeuNIyPw1dFhf
4f3OETnGhnEk4fN2PtNjAQngMuSwRgsvkgQXH7vwnyi/H2kEaoyKilWL6xWEzF+t
cghrpG7+LHVfGw==
-----END CERTIFICATE-----
Generated at Wed Jul 29 02:28:12 2026 by rpki-client