Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/778af2-b2c0-4704-9fa2-2841013bccb4/1/TCowVuYlkkn0ZvAFW7Ebg6ajCkI.mft
File: TCowVuYlkkn0ZvAFW7Ebg6ajCkI.mft (raw, json)
Hash identifier: lx3b/osucoz5iMZ7GZpjjOZj+i/uxOdaKg+TwbU+FrQ=
Subject key identifier: 1D:1B:43:5C:1F:37:A4:CC:FD:B9:78:14:9A:9F:13:CD:C4:70:3A:F9
Authority key identifier: 4C:2A:30:56:E6:25:92:49:F4:66:F0:05:5B:B1:1B:83:A6:A3:0A:42
Certificate issuer: /CN=4c2a3056e6259249f466f0055bb11b83a6a30a42
Certificate serial: 019FA97571B40F3668C90A57F21C41CFF28E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TCowVuYlkkn0ZvAFW7Ebg6ajCkI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/778af2-b2c0-4704-9fa2-2841013bccb4/1/TCowVuYlkkn0ZvAFW7Ebg6ajCkI.mft
Manifest number: 0922
Signing time: Tue 28 Jul 2026 16:01:14 +0000
Manifest this update: Tue 28 Jul 2026 16:01:14 +0000
Manifest next update: Wed 29 Jul 2026 16:01:14 +0000
Files and hashes: 1: TCowVuYlkkn0ZvAFW7Ebg6ajCkI.crl (hash: k+goJlVM0nrXclWMoUNOVxCME+/S+E4Ur0UK62+hhZo=)
2: eN5E1N2fbNIwZ9RyYdP9j32arcA.roa (hash: Vg/cG2oIlWZ3XVorMkNOVvWySOFv00wWS3oGrbEzxmU=)
3: w9YEoSGGw5FqZxEAWpHoaM4fdnU.roa (hash: +H9ZxdN0LwsnaJ4J/ES/yJYI9G3YZQK2l2602ElBkSM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/778af2-b2c0-4704-9fa2-2841013bccb4/1/TCowVuYlkkn0ZvAFW7Ebg6ajCkI.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/778af2-b2c0-4704-9fa2-2841013bccb4/1/TCowVuYlkkn0ZvAFW7Ebg6ajCkI.mft
rsync://rpki.ripe.net/repository/DEFAULT/TCowVuYlkkn0ZvAFW7Ebg6ajCkI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 16:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:75:71:b4:0f:36:68:c9:0a:57:f2:1c:41:cf:f2:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c2a3056e6259249f466f0055bb11b83a6a30a42
Validity
Not Before: Jul 28 16:01:14 2026 GMT
Not After : Jul 29 16:01:14 2026 GMT
Subject: CN=1d1b435c1f37a4ccfdb978149a9f13cdc4703af9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:1f:33:6e:15:d6:d4:b5:01:6b:9f:73:0e:fd:
ce:c4:cb:ce:02:dc:05:a8:20:02:ad:de:2e:cb:7c:
77:b1:94:dd:c3:d5:58:dc:19:21:1b:e6:71:98:ad:
77:a8:57:60:31:f4:47:94:94:8a:ab:a1:b0:ad:11:
dc:2c:d3:8b:d0:e7:30:eb:91:a2:c9:1f:c0:68:28:
6b:e6:d9:77:bd:48:ea:74:cc:6c:9a:ed:37:39:e3:
19:29:ad:cb:da:76:fc:4a:77:0c:73:2a:7d:d4:c2:
c8:89:af:40:fa:67:72:49:fe:c8:88:31:6d:c4:94:
62:ca:62:74:88:87:cc:2d:3a:e0:f5:2a:3f:c0:ca:
93:69:52:bb:bc:0a:11:be:1f:a6:a3:ee:7f:cc:48:
45:cd:37:94:fb:33:5e:95:06:cf:22:4f:a3:3f:ad:
26:f5:6b:7a:86:36:16:ad:ac:e4:22:40:6e:15:0e:
f4:b7:9d:8b:73:56:ac:fb:ed:c0:c6:30:db:40:11:
f5:a8:95:6b:39:d4:1d:b6:22:81:b6:08:79:47:80:
a6:26:24:3e:ff:e2:e0:34:7c:1f:18:14:c7:ae:fd:
50:5c:3e:84:59:e7:e3:1c:90:e9:a9:56:d6:6a:d3:
d6:0a:54:93:a1:20:d9:1a:bd:73:7d:3d:94:e8:9d:
73:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:1B:43:5C:1F:37:A4:CC:FD:B9:78:14:9A:9F:13:CD:C4:70:3A:F9
X509v3 Authority Key Identifier:
keyid:4C:2A:30:56:E6:25:92:49:F4:66:F0:05:5B:B1:1B:83:A6:A3:0A:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TCowVuYlkkn0ZvAFW7Ebg6ajCkI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/778af2-b2c0-4704-9fa2-2841013bccb4/1/TCowVuYlkkn0ZvAFW7Ebg6ajCkI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/778af2-b2c0-4704-9fa2-2841013bccb4/1/TCowVuYlkkn0ZvAFW7Ebg6ajCkI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:d8:ff:a9:90:06:15:10:f8:39:f8:b1:b8:e8:42:bd:e0:5f:
3e:33:d8:ea:95:b6:b2:00:f2:0c:f6:f5:82:a4:8a:12:0e:b1:
26:97:4a:99:7b:78:5f:32:ef:5f:ec:38:15:76:e9:2f:51:ab:
f7:f9:4b:cc:fa:f1:bd:16:69:38:ae:2b:e7:4c:2d:84:02:a1:
2d:5c:73:12:0c:2d:77:c1:df:7c:0f:3a:63:a3:fa:fd:cc:f5:
11:20:59:4c:12:73:25:c0:ff:30:6b:4e:77:c9:f3:b7:ec:29:
3f:c2:73:f3:2b:71:93:8e:b1:c6:3d:c1:2a:95:cf:2d:95:b5:
26:b2:fd:bd:57:72:b6:60:0b:f8:8f:3e:a3:24:c0:13:64:14:
93:2b:2b:71:c9:bb:c8:ce:68:76:25:80:5e:8d:75:a4:df:0c:
61:bd:c8:82:1a:36:88:ca:2a:2e:30:4c:a9:e4:1a:f3:33:84:
de:d7:4f:4f:1d:77:d3:fa:18:44:84:54:ba:70:5d:b9:e6:ef:
b0:11:ce:d9:da:a9:f9:1e:b6:1d:98:63:6d:c2:d2:3c:bd:ee:
e8:80:73:c7:43:2c:e3:dd:d8:42:44:c1:1a:69:ac:92:64:a5:
82:de:cc:68:bd:d5:f2:2f:ce:22:69:40:05:69:f6:06:1b:0b:
a7:cd:14:45
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+pdXG0DzZoyQpX8hxBz/KOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjMmEzMDU2ZTYyNTkyNDlmNDY2ZjAwNTViYjExYjgzYTZh
MzBhNDIwHhcNMjYwNzI4MTYwMTE0WhcNMjYwNzI5MTYwMTE0WjAzMTEwLwYDVQQD
EygxZDFiNDM1YzFmMzdhNGNjZmRiOTc4MTQ5YTlmMTNjZGM0NzAzYWY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiR8zbhXW1LUBa59zDv3OxMvOAtwF
qCACrd4uy3x3sZTdw9VY3BkhG+ZxmK13qFdgMfRHlJSKq6GwrRHcLNOL0Ocw65Gi
yR/AaChr5tl3vUjqdMxsmu03OeMZKa3L2nb8SncMcyp91MLIia9A+mdySf7IiDFt
xJRiymJ0iIfMLTrg9So/wMqTaVK7vAoRvh+mo+5/zEhFzTeU+zNelQbPIk+jP60m
9Wt6hjYWrazkIkBuFQ70t52Lc1as++3AxjDbQBH1qJVrOdQdtiKBtgh5R4CmJiQ+
/+LgNHwfGBTHrv1QXD6EWefjHJDpqVbWatPWClSToSDZGr1zfT2U6J1zswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB0bQ1wfN6TM/bl4FJqfE83EcDr5MB8GA1UdIwQY
MBaAFEwqMFbmJZJJ9GbwBVuxG4OmowpCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVENvd1Z1WWxra24wWnZBRlc3RWJnNmFqQ2tJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC83NzhhZjItYjJjMC00NzA0LTlmYTIt
Mjg0MTAxM2JjY2I0LzEvVENvd1Z1WWxra24wWnZBRlc3RWJnNmFqQ2tJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC83NzhhZjItYjJjMC00NzA0LTlmYTItMjg0MTAxM2JjY2I0
LzEvVENvd1Z1WWxra24wWnZBRlc3RWJnNmFqQ2tJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYNj/qZAG
FRD4OfixuOhCveBfPjPY6pW2sgDyDPb1gqSKEg6xJpdKmXt4XzLvX+w4FXbpL1Gr
9/lLzPrxvRZpOK4r50wthAKhLVxzEgwtd8HffA86Y6P6/cz1ESBZTBJzJcD/MGtO
d8nzt+wpP8Jz8ytxk46xxj3BKpXPLZW1JrL9vVdytmAL+I8+oyTAE2QUkysrccm7
yM5odiWAXo11pN8MYb3Igho2iMoqLjBMqeQa8zOE3tdPTx130/oYRIRUunBduebv
sBHO2dqp+R62HZhjbcLSPL3u6IBzx0Ms493YQkTBGmmskmSlgt7MaL3V8i/OImlA
BWn2BhsLp80URQ==
-----END CERTIFICATE-----
Generated at Wed Jul 29 00:26:15 2026 by rpki-client