
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/9ff43e-f817-4ebe-a0d9-7a18931d985b/1/tn8bh-Z1L0VDm4UozJaLR3CloPs.mft
File: tn8bh-Z1L0VDm4UozJaLR3CloPs.mft (raw, json)
Hash identifier: dyMQ1/IhCV+rbRCmzA/V7qPLzKUlDdSzO1DuNeRDMl4=
Subject key identifier: 76:54:42:32:CE:97:12:DE:14:77:3C:1C:A5:2A:AD:E5:C9:43:AD:0B
Authority key identifier: B6:7F:1B:87:E6:75:2F:45:43:9B:85:28:CC:96:8B:47:70:A5:A0:FB
Certificate issuer: /CN=b67f1b87e6752f45439b8528cc968b4770a5a0fb
Certificate serial: 019FABD0FB11F36103A7D709C2174C974018
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tn8bh-Z1L0VDm4UozJaLR3CloPs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/9ff43e-f817-4ebe-a0d9-7a18931d985b/1/tn8bh-Z1L0VDm4UozJaLR3CloPs.mft
Manifest number: 19D2
Signing time: Wed 29 Jul 2026 03:00:27 +0000
Manifest this update: Wed 29 Jul 2026 03:00:27 +0000
Manifest next update: Thu 30 Jul 2026 03:00:27 +0000
Files and hashes: 1: LQJRQQjbwBZBO6fcDK7TBARIRcA.roa (hash: kgMdOcv0hribs4xM8yAxDMw6nXQ/d8F0OHR9C1YIdKg=)
2: tn8bh-Z1L0VDm4UozJaLR3CloPs.crl (hash: e2qsjtJUnjDZrqC9+n7OAWC3P2sY7xExGkwxqyM7s7M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/9ff43e-f817-4ebe-a0d9-7a18931d985b/1/tn8bh-Z1L0VDm4UozJaLR3CloPs.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/9ff43e-f817-4ebe-a0d9-7a18931d985b/1/tn8bh-Z1L0VDm4UozJaLR3CloPs.mft
rsync://rpki.ripe.net/repository/DEFAULT/tn8bh-Z1L0VDm4UozJaLR3CloPs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:d0:fb:11:f3:61:03:a7:d7:09:c2:17:4c:97:40:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b67f1b87e6752f45439b8528cc968b4770a5a0fb
Validity
Not Before: Jul 29 03:00:27 2026 GMT
Not After : Jul 30 03:00:27 2026 GMT
Subject: CN=76544232ce9712de14773c1ca52aade5c943ad0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:b6:67:2e:3b:2b:46:70:2b:ba:f7:19:46:17:
b0:a6:37:97:6c:1c:9e:44:c0:00:fa:74:de:03:20:
6a:60:02:bf:ec:2a:4a:5a:ab:c2:01:f1:e0:e6:28:
34:2a:f5:fc:b7:3a:6a:4d:74:b7:3a:b6:4e:fc:be:
a1:39:13:43:6a:3c:d9:2f:d6:08:d2:a9:46:aa:63:
17:fd:6c:7d:28:6c:11:5a:8c:36:c4:07:e4:61:29:
f9:fb:5b:70:2e:d2:42:65:42:57:88:53:46:4e:bc:
9d:61:5d:99:b2:88:ed:59:15:d5:ad:ab:f1:6e:4f:
1f:66:be:7c:33:0c:94:27:2b:7f:be:0d:52:b0:c0:
6b:77:bc:f1:10:5f:e3:ca:ac:0c:c6:63:8e:3e:d8:
47:3b:a2:09:cc:e8:18:74:91:43:98:9f:4c:58:e2:
6c:08:c9:03:d3:c2:20:43:2e:23:eb:77:2e:06:37:
39:2b:fb:9f:63:92:44:16:e0:fd:17:55:9e:43:94:
bf:ee:14:b1:3b:e0:52:1d:3a:25:2d:c8:5c:dd:4b:
0f:9f:f9:60:4a:70:d1:c2:dd:04:96:3c:64:02:ab:
c6:28:2d:89:4a:69:ca:e2:ff:f1:73:0a:d3:f0:41:
1f:62:25:3f:43:1c:77:53:39:f0:56:01:b5:9f:99:
74:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:54:42:32:CE:97:12:DE:14:77:3C:1C:A5:2A:AD:E5:C9:43:AD:0B
X509v3 Authority Key Identifier:
keyid:B6:7F:1B:87:E6:75:2F:45:43:9B:85:28:CC:96:8B:47:70:A5:A0:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tn8bh-Z1L0VDm4UozJaLR3CloPs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/9ff43e-f817-4ebe-a0d9-7a18931d985b/1/tn8bh-Z1L0VDm4UozJaLR3CloPs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/9ff43e-f817-4ebe-a0d9-7a18931d985b/1/tn8bh-Z1L0VDm4UozJaLR3CloPs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:62:32:ca:6f:dc:24:be:56:39:42:54:d8:7b:63:b8:7c:fb:
da:56:e9:d7:9d:91:45:f2:43:04:b0:a6:ee:70:35:46:ad:91:
38:85:e5:ed:1c:26:e7:d0:04:a1:b4:b9:00:a5:12:9d:cc:df:
c0:ed:1c:f0:8f:4e:4b:cf:a1:79:fa:74:27:dd:4d:f9:84:01:
64:b9:67:f8:3f:aa:5b:23:e1:55:0a:9f:a7:19:ef:30:d7:2d:
7a:3a:de:ec:51:18:26:dd:41:f1:59:fe:6d:01:9f:b9:34:76:
cd:61:e3:a8:2d:45:be:b9:d9:3c:30:9c:cd:e6:9c:60:b2:cc:
93:4d:dc:92:7e:0c:e7:3e:de:bd:af:81:7b:8c:75:30:d8:e4:
ca:e5:47:e0:f3:bd:dd:40:0a:3a:1b:62:13:a8:ea:27:cb:3c:
3f:60:03:29:32:98:fe:1f:0a:8d:d4:59:ef:79:c3:0d:8c:e5:
22:f7:df:cc:a2:ea:73:90:7c:30:29:62:e0:d9:2e:3c:07:98:
dc:f4:5f:42:59:56:56:ed:79:e2:f3:84:c8:13:79:c3:fd:09:
42:a6:69:89:1b:31:ff:0f:84:cd:4a:64:37:40:a6:b7:19:93:
0b:f2:96:a3:7f:94:d3:2f:81:ba:18:ca:c7:83:71:eb:79:1f:
8e:ee:45:22
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+r0PsR82EDp9cJwhdMl0AYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI2N2YxYjg3ZTY3NTJmNDU0MzliODUyOGNjOTY4YjQ3NzBh
NWEwZmIwHhcNMjYwNzI5MDMwMDI3WhcNMjYwNzMwMDMwMDI3WjAzMTEwLwYDVQQD
Eyg3NjU0NDIzMmNlOTcxMmRlMTQ3NzNjMWNhNTJhYWRlNWM5NDNhZDBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAybZnLjsrRnAruvcZRhewpjeXbBye
RMAA+nTeAyBqYAK/7CpKWqvCAfHg5ig0KvX8tzpqTXS3OrZO/L6hORNDajzZL9YI
0qlGqmMX/Wx9KGwRWow2xAfkYSn5+1twLtJCZUJXiFNGTrydYV2ZsojtWRXVravx
bk8fZr58MwyUJyt/vg1SsMBrd7zxEF/jyqwMxmOOPthHO6IJzOgYdJFDmJ9MWOJs
CMkD08IgQy4j63cuBjc5K/ufY5JEFuD9F1WeQ5S/7hSxO+BSHTolLchc3UsPn/lg
SnDRwt0EljxkAqvGKC2JSmnK4v/xcwrT8EEfYiU/Qxx3UznwVgG1n5l04QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHZUQjLOlxLeFHc8HKUqreXJQ60LMB8GA1UdIwQY
MBaAFLZ/G4fmdS9FQ5uFKMyWi0dwpaD7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdG44YmgtWjFMMFZEbTRVb3pKYUxSM0Nsb1BzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi85ZmY0M2UtZjgxNy00ZWJlLWEwZDkt
N2ExODkzMWQ5ODViLzEvdG44YmgtWjFMMFZEbTRVb3pKYUxSM0Nsb1BzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Zi85ZmY0M2UtZjgxNy00ZWJlLWEwZDktN2ExODkzMWQ5ODVi
LzEvdG44YmgtWjFMMFZEbTRVb3pKYUxSM0Nsb1BzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALGIyym/c
JL5WOUJU2HtjuHz72lbp152RRfJDBLCm7nA1Rq2ROIXl7Rwm59AEobS5AKUSnczf
wO0c8I9OS8+hefp0J91N+YQBZLln+D+qWyPhVQqfpxnvMNctejre7FEYJt1B8Vn+
bQGfuTR2zWHjqC1FvrnZPDCczeacYLLMk03ckn4M5z7eva+Be4x1MNjkyuVH4PO9
3UAKOhtiE6jqJ8s8P2ADKTKY/h8KjdRZ73nDDYzlIvffzKLqc5B8MCli4NkuPAeY
3PRfQllWVu154vOEyBN5w/0JQqZpiRsx/w+EzUpkN0CmtxmTC/KWo3+U0y+BuhjK
x4Nx63kfju5FIg==
-----END CERTIFICATE-----
Generated at Wed Jul 29 07:28:57 2026 by rpki-client