Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/30/2c58d4-7a73-4d62-af86-26f0666590ed/1/Txf-YMOq5IFd21vYFp7wiLD_iAA.mft
File: Txf-YMOq5IFd21vYFp7wiLD_iAA.mft (raw, json)
Hash identifier: pDFWw+mVgcRlrvsvQvgT64HcMX2XvD6aQtT5ac8Xd7I=
Subject key identifier: 79:05:CD:A9:61:EF:40:00:1F:90:5F:10:AE:F2:E8:24:8E:E4:3D:72
Authority key identifier: 4F:17:FE:60:C3:AA:E4:81:5D:DB:5B:D8:16:9E:F0:88:B0:FF:88:00
Certificate issuer: /CN=4f17fe60c3aae4815ddb5bd8169ef088b0ff8800
Certificate serial: 01A1A85DDE72FA3B50A6490CFD9F8E5AAB33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Txf-YMOq5IFd21vYFp7wiLD_iAA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/2c58d4-7a73-4d62-af86-26f0666590ed/1/Txf-YMOq5IFd21vYFp7wiLD_iAA.mft
Manifest number: 01DC
Signing time: Wed 04 Nov 2026 21:01:26 +0000
Manifest this update: Wed 04 Nov 2026 21:01:26 +0000
Manifest next update: Thu 05 Nov 2026 21:01:26 +0000
Files and hashes: 1: 8QmLJNa-_EnzDtcCcd2zqbb73Z8.asa (hash: E1mQECWPw1tiHBtWESa7EJB6He3X4+7LGeXYc5u2GM4=)
2: Txf-YMOq5IFd21vYFp7wiLD_iAA.crl (hash: RsJAKTv7mbSCPMef7MHBjsqZnD5WR9GkXqU70QZq9Sg=)
3: sfOsjn-CrEsbuGZfo_GU02Seuc0.roa (hash: QuCtUcV2rfjyf/avZCog8Qa9or52pG6qZ7ZDsQCk2sE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/2c58d4-7a73-4d62-af86-26f0666590ed/1/Txf-YMOq5IFd21vYFp7wiLD_iAA.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/2c58d4-7a73-4d62-af86-26f0666590ed/1/Txf-YMOq5IFd21vYFp7wiLD_iAA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Txf-YMOq5IFd21vYFp7wiLD_iAA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 19:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:a8:5d:de:72:fa:3b:50:a6:49:0c:fd:9f:8e:5a:ab:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f17fe60c3aae4815ddb5bd8169ef088b0ff8800
Validity
Not Before: Nov 4 21:01:26 2026 GMT
Not After : Nov 5 21:01:26 2026 GMT
Subject: CN=7905cda961ef40001f905f10aef2e8248ee43d72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:83:fd:0b:a7:d5:bd:96:d5:9b:e0:b5:ab:44:
a1:72:22:b7:1e:dd:64:af:e9:f1:88:48:d3:ba:9c:
7e:d1:7c:3c:5d:b8:be:2d:18:52:e0:81:97:78:1f:
7c:db:11:b7:28:e5:5f:0f:22:39:31:1c:f2:ed:03:
9b:ed:b6:28:cb:dc:b1:fd:7f:af:3d:a0:63:0a:b9:
be:6a:6e:c0:c2:aa:23:23:9c:41:e7:04:38:a9:08:
3c:3f:f7:16:d5:dc:fd:7d:a7:d9:cb:29:f4:60:92:
7f:b7:be:55:88:59:ef:ad:dd:2f:c6:d7:23:f4:eb:
e8:45:18:7c:2f:a8:67:7d:63:84:7c:89:56:71:65:
52:82:ad:3b:1e:6a:3a:f3:fe:68:e8:83:0a:be:a9:
6d:5a:17:3e:e5:99:28:21:86:59:78:61:8c:48:dd:
a2:2c:82:e9:30:de:27:df:82:36:19:d4:48:af:c4:
31:02:0a:0a:71:3a:43:42:f5:b9:e5:f5:50:da:7e:
3e:fb:ee:00:bb:d6:58:94:f7:fd:57:5d:f3:17:1f:
fd:18:1f:d8:94:35:9f:83:e3:ea:5c:f3:b9:5c:76:
75:1b:4f:30:e5:e8:73:87:3b:62:f8:d4:e6:59:e4:
e0:8e:dc:5b:eb:06:ca:41:d7:8a:ec:67:c4:6b:81:
b4:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:05:CD:A9:61:EF:40:00:1F:90:5F:10:AE:F2:E8:24:8E:E4:3D:72
X509v3 Authority Key Identifier:
keyid:4F:17:FE:60:C3:AA:E4:81:5D:DB:5B:D8:16:9E:F0:88:B0:FF:88:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Txf-YMOq5IFd21vYFp7wiLD_iAA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/2c58d4-7a73-4d62-af86-26f0666590ed/1/Txf-YMOq5IFd21vYFp7wiLD_iAA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/2c58d4-7a73-4d62-af86-26f0666590ed/1/Txf-YMOq5IFd21vYFp7wiLD_iAA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:b6:5c:43:b5:75:90:a9:f8:35:35:b7:f0:d1:e2:a5:be:f7:
88:15:91:0b:3d:94:b8:bb:15:af:a1:07:e2:05:c1:63:a5:fb:
11:28:de:83:0f:cf:38:18:9d:1d:2b:f8:87:7b:2b:45:18:6b:
00:a9:35:da:41:90:3e:68:3d:7b:b2:9f:f7:4d:5e:e8:9b:4c:
e6:c4:e3:d6:9c:5b:9f:30:5f:a5:51:96:aa:43:c7:27:8f:16:
9c:72:b9:c9:52:2a:60:be:62:91:00:33:e5:9a:51:39:48:14:
b1:56:52:46:80:1f:cc:74:1c:15:e7:26:61:ab:bd:ce:ca:fc:
d2:7d:02:7d:a1:da:3c:d5:a7:fb:31:1c:2e:ad:96:18:a8:fc:
ec:b4:9b:31:a1:3f:e7:2a:a8:32:87:2e:46:a4:7d:9b:23:78:
ee:f1:5e:32:f8:ae:8c:5c:63:b4:93:8d:82:57:a6:24:bc:24:
b6:1e:a3:39:2b:0a:ed:01:51:f8:d1:c4:c1:9e:10:fa:a0:56:
54:f1:d9:5b:67:ec:ae:79:56:42:e0:6a:d4:65:43:ef:31:54:
ec:92:d8:80:6f:06:6f:f6:5b:4f:b1:7c:69:fb:5e:d7:b0:76:
13:4c:89:85:c6:6b:53:55:58:ee:fd:96:70:eb:61:b3:e8:57:
8e:0e:25:e9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGoXd5y+jtQpkkM/Z+OWqszMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMTdmZTYwYzNhYWU0ODE1ZGRiNWJkODE2OWVmMDg4YjBm
Zjg4MDAwHhcNMjYxMTA0MjEwMTI2WhcNMjYxMTA1MjEwMTI2WjAzMTEwLwYDVQQD
Eyg3OTA1Y2RhOTYxZWY0MDAwMWY5MDVmMTBhZWYyZTgyNDhlZTQzZDcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy4P9C6fVvZbVm+C1q0ShciK3Ht1k
r+nxiEjTupx+0Xw8Xbi+LRhS4IGXeB982xG3KOVfDyI5MRzy7QOb7bYoy9yx/X+v
PaBjCrm+am7AwqojI5xB5wQ4qQg8P/cW1dz9fafZyyn0YJJ/t75ViFnvrd0vxtcj
9OvoRRh8L6hnfWOEfIlWcWVSgq07Hmo68/5o6IMKvqltWhc+5ZkoIYZZeGGMSN2i
LILpMN4n34I2GdRIr8QxAgoKcTpDQvW55fVQ2n4+++4Au9ZYlPf9V13zFx/9GB/Y
lDWfg+PqXPO5XHZ1G08w5ehzhzti+NTmWeTgjtxb6wbKQdeK7GfEa4G0uwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHkFzalh70AAH5BfEK7y6CSO5D1yMB8GA1UdIwQY
MBaAFE8X/mDDquSBXdtb2Bae8Iiw/4gAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhmLVlNT3E1SUZkMjF2WUZwN3dpTERfaUFBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC8yYzU4ZDQtN2E3My00ZDYyLWFmODYt
MjZmMDY2NjU5MGVkLzEvVHhmLVlNT3E1SUZkMjF2WUZwN3dpTERfaUFBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC8yYzU4ZDQtN2E3My00ZDYyLWFmODYtMjZmMDY2NjU5MGVk
LzEvVHhmLVlNT3E1SUZkMjF2WUZwN3dpTERfaUFBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgbZcQ7V1
kKn4NTW38NHipb73iBWRCz2UuLsVr6EH4gXBY6X7ESjegw/POBidHSv4h3srRRhr
AKk12kGQPmg9e7Kf901e6JtM5sTj1pxbnzBfpVGWqkPHJ48WnHK5yVIqYL5ikQAz
5ZpROUgUsVZSRoAfzHQcFecmYau9zsr80n0CfaHaPNWn+zEcLq2WGKj87LSbMaE/
5yqoMocuRqR9myN47vFeMviujFxjtJONglemJLwkth6jOSsK7QFR+NHEwZ4Q+qBW
VPHZW2fsrnlWQuBq1GVD7zFU7JLYgG8Gb/ZbT7F8afte17B2E0yJhcZrU1VY7v2W
cOths+hXjg4l6Q==
-----END CERTIFICATE-----
Generated at Thu Nov 5 05:37:17 2026 by rpki-client