Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/cfef67-efdf-49ba-b96b-65fc33de4f39/1/tFDTEy3hvC3SZdbhr8b7FrbsGwg.mft
File: tFDTEy3hvC3SZdbhr8b7FrbsGwg.mft (raw, json)
Hash identifier: m4knfmI9YcOzXwT1F65dQs90PpnruL2c88iPmoxATYk=
Subject key identifier: 0F:88:EA:83:88:17:31:2C:44:49:D6:0F:CA:FB:F2:F2:88:04:29:55
Authority key identifier: B4:50:D3:13:2D:E1:BC:2D:D2:65:D6:E1:AF:C6:FB:16:B6:EC:1B:08
Certificate issuer: /CN=b450d3132de1bc2dd265d6e1afc6fb16b6ec1b08
Certificate serial: 019FAC3F0B0F1B13E9067832AEC81BE69885
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tFDTEy3hvC3SZdbhr8b7FrbsGwg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/cfef67-efdf-49ba-b96b-65fc33de4f39/1/tFDTEy3hvC3SZdbhr8b7FrbsGwg.mft
Manifest number: 017B
Signing time: Wed 29 Jul 2026 05:00:40 +0000
Manifest this update: Wed 29 Jul 2026 05:00:40 +0000
Manifest next update: Thu 30 Jul 2026 05:00:40 +0000
Files and hashes: 1: tFDTEy3hvC3SZdbhr8b7FrbsGwg.crl (hash: VMkWUZAazDEQOUP4628PfVgkUSN4RTORlKQSelrfmE4=)
2: vqtiNCqmFTgZhluRAF9PxU_CVW0.roa (hash: SZBzR5bl2Fh4kMVH7fOKYHImik+Vj2jtIZ9kmUmZ24o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/cfef67-efdf-49ba-b96b-65fc33de4f39/1/tFDTEy3hvC3SZdbhr8b7FrbsGwg.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/cfef67-efdf-49ba-b96b-65fc33de4f39/1/tFDTEy3hvC3SZdbhr8b7FrbsGwg.mft
rsync://rpki.ripe.net/repository/DEFAULT/tFDTEy3hvC3SZdbhr8b7FrbsGwg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:3f:0b:0f:1b:13:e9:06:78:32:ae:c8:1b:e6:98:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b450d3132de1bc2dd265d6e1afc6fb16b6ec1b08
Validity
Not Before: Jul 29 05:00:40 2026 GMT
Not After : Jul 30 05:00:40 2026 GMT
Subject: CN=0f88ea838817312c4449d60fcafbf2f288042955
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:a2:ef:8f:32:50:37:69:cf:2a:60:43:1c:17:
17:37:90:8a:87:b5:66:a6:72:b6:9c:a7:5f:74:39:
80:52:c1:a1:75:71:0c:f9:ea:cb:b9:70:16:38:20:
90:49:5f:ef:14:1d:74:17:2a:29:a2:0e:c9:a1:ac:
b2:07:45:f9:12:62:a0:fb:68:73:cc:16:77:b9:b6:
c7:7f:1a:d1:b9:cb:b1:d9:22:38:fb:e5:f9:a5:8d:
51:a8:f4:a1:2c:a9:fd:09:63:c1:c4:f4:fe:34:78:
05:fe:17:73:76:0f:64:7a:19:ac:97:7a:08:ab:2a:
6f:79:94:03:41:78:1b:e3:b7:5a:dd:8b:e1:0e:10:
ce:2f:24:4e:79:33:4c:70:31:a9:15:a1:7d:a0:05:
04:80:a9:ff:fd:82:57:a7:d3:da:00:e0:18:9d:3b:
dd:9a:34:e8:1f:fb:1d:fc:09:6f:f4:4c:64:8f:14:
a6:51:45:82:f0:d2:ab:ad:66:ec:02:03:b3:f1:44:
b2:02:df:3e:b3:fc:70:ce:9b:38:bc:4c:94:4f:76:
f2:a8:30:80:1e:12:9f:64:05:0a:e9:17:d5:39:50:
f0:e5:12:ac:3c:ea:df:41:5d:90:9f:eb:d5:86:c2:
74:9a:67:6e:eb:9e:b7:aa:a1:a8:70:eb:3d:3c:0c:
96:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:88:EA:83:88:17:31:2C:44:49:D6:0F:CA:FB:F2:F2:88:04:29:55
X509v3 Authority Key Identifier:
keyid:B4:50:D3:13:2D:E1:BC:2D:D2:65:D6:E1:AF:C6:FB:16:B6:EC:1B:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tFDTEy3hvC3SZdbhr8b7FrbsGwg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/cfef67-efdf-49ba-b96b-65fc33de4f39/1/tFDTEy3hvC3SZdbhr8b7FrbsGwg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/cfef67-efdf-49ba-b96b-65fc33de4f39/1/tFDTEy3hvC3SZdbhr8b7FrbsGwg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:fc:37:c6:92:8f:73:d1:82:9f:a6:12:f1:4f:31:44:97:3e:
62:8d:a2:14:a3:fb:8c:cb:25:73:2c:4b:74:01:62:fb:ba:d7:
56:e1:a7:f0:40:44:d8:65:58:31:b5:fe:e3:cc:b8:4c:0e:5e:
ab:4e:18:44:e6:98:0d:97:21:90:fd:cd:0f:c7:1d:94:8f:2a:
d3:99:69:0c:31:31:1f:86:4d:ed:02:49:ba:33:f3:5c:e2:c3:
94:ae:6b:f9:33:60:7d:bb:31:c0:c1:c5:6d:05:8b:8d:ab:bc:
01:32:1d:00:2d:5f:5e:7d:d0:81:b4:92:78:42:8b:3b:ff:62:
ae:a2:71:80:f4:74:bf:f8:ee:e5:e1:9f:28:2c:1a:9b:ca:3f:
02:91:f4:30:80:fc:e3:2e:56:28:74:16:33:3e:9b:d8:5b:49:
b2:17:b3:86:6a:ab:f4:1f:16:37:43:18:e2:ee:5a:92:97:67:
e6:94:02:c8:43:61:24:f5:46:b2:20:b6:19:fe:ca:56:2e:5f:
b1:99:85:72:de:7e:3e:c7:5f:2f:3a:56:4b:c4:98:60:2a:c2:
93:51:fa:11:0f:8c:c4:33:fb:09:3c:c6:6d:88:f2:c0:89:a8:
66:c4:ef:66:b8:31:4e:84:55:13:47:d6:45:37:e7:4b:fc:89:
7e:2e:46:d5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+sPwsPGxPpBngyrsgb5piFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0NTBkMzEzMmRlMWJjMmRkMjY1ZDZlMWFmYzZmYjE2YjZl
YzFiMDgwHhcNMjYwNzI5MDUwMDQwWhcNMjYwNzMwMDUwMDQwWjAzMTEwLwYDVQQD
EygwZjg4ZWE4Mzg4MTczMTJjNDQ0OWQ2MGZjYWZiZjJmMjg4MDQyOTU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtaLvjzJQN2nPKmBDHBcXN5CKh7Vm
pnK2nKdfdDmAUsGhdXEM+erLuXAWOCCQSV/vFB10Fyopog7JoayyB0X5EmKg+2hz
zBZ3ubbHfxrRucux2SI4++X5pY1RqPShLKn9CWPBxPT+NHgF/hdzdg9kehmsl3oI
qypveZQDQXgb47da3YvhDhDOLyROeTNMcDGpFaF9oAUEgKn//YJXp9PaAOAYnTvd
mjToH/sd/Alv9ExkjxSmUUWC8NKrrWbsAgOz8USyAt8+s/xwzps4vEyUT3byqDCA
HhKfZAUK6RfVOVDw5RKsPOrfQV2Qn+vVhsJ0mmdu6563qqGocOs9PAyWtQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA+I6oOIFzEsREnWD8r78vKIBClVMB8GA1UdIwQY
MBaAFLRQ0xMt4bwt0mXW4a/G+xa27BsIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdEZEVEV5M2h2QzNTWmRiaHI4YjdGcmJzR3dnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS9jZmVmNjctZWZkZi00OWJhLWI5NmIt
NjVmYzMzZGU0ZjM5LzEvdEZEVEV5M2h2QzNTWmRiaHI4YjdGcmJzR3dnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MS9jZmVmNjctZWZkZi00OWJhLWI5NmItNjVmYzMzZGU0ZjM5
LzEvdEZEVEV5M2h2QzNTWmRiaHI4YjdGcmJzR3dnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANfw3xpKP
c9GCn6YS8U8xRJc+Yo2iFKP7jMslcyxLdAFi+7rXVuGn8EBE2GVYMbX+48y4TA5e
q04YROaYDZchkP3ND8cdlI8q05lpDDExH4ZN7QJJujPzXOLDlK5r+TNgfbsxwMHF
bQWLjau8ATIdAC1fXn3QgbSSeEKLO/9irqJxgPR0v/ju5eGfKCwam8o/ApH0MID8
4y5WKHQWMz6b2FtJshezhmqr9B8WN0MY4u5akpdn5pQCyENhJPVGsiC2Gf7KVi5f
sZmFct5+PsdfLzpWS8SYYCrCk1H6EQ+MxDP7CTzGbYjywImoZsTvZrgxToRVE0fW
RTfnS/yJfi5G1Q==
-----END CERTIFICATE-----
Generated at Wed Jul 29 06:45:41 2026 by rpki-client