Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/87dadf-29d9-49d3-8ac6-4cc40ffd796d/1/TtDR6dtwOHtHkQsCFmwVFVR5now.mft
File: TtDR6dtwOHtHkQsCFmwVFVR5now.mft (raw, json)
Hash identifier: bPAcAVf6+CqMJqLadi6WKq25mjN4xegidbD+fpzHWj8=
Subject key identifier: 97:80:D0:7B:7E:3E:F1:0D:FE:21:9F:02:F6:C6:C3:40:16:0B:D2:BA
Authority key identifier: 4E:D0:D1:E9:DB:70:38:7B:47:91:0B:02:16:6C:15:15:54:79:9E:8C
Certificate issuer: /CN=4ed0d1e9db70387b47910b02166c151554799e8c
Certificate serial: 019FA8990E1D78A421736CD316E80F3F3F6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TtDR6dtwOHtHkQsCFmwVFVR5now.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/87dadf-29d9-49d3-8ac6-4cc40ffd796d/1/TtDR6dtwOHtHkQsCFmwVFVR5now.mft
Manifest number: 4C
Signing time: Tue 28 Jul 2026 12:00:30 +0000
Manifest this update: Tue 28 Jul 2026 12:00:30 +0000
Manifest next update: Wed 29 Jul 2026 12:00:30 +0000
Files and hashes: 1: GarD_CcyC8vH0Ew6FZexXJqsz3o.roa (hash: +xW0rSQLKtAW1Hp3b5Pv8qHOc3WB4PYX3/XibxiP1hA=)
2: TtDR6dtwOHtHkQsCFmwVFVR5now.crl (hash: 2nXdpLSyXeqAGryz1WbQczKIQ4rkx7OpRTUZsoQuZSI=)
3: br6axYGXcxv_9-Dchpg7P4DBzJE.roa (hash: 9eR+zwavNrHlgbbzIncH+OZak7hXd7F3p0WzOsUw9aE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/87dadf-29d9-49d3-8ac6-4cc40ffd796d/1/TtDR6dtwOHtHkQsCFmwVFVR5now.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/87dadf-29d9-49d3-8ac6-4cc40ffd796d/1/TtDR6dtwOHtHkQsCFmwVFVR5now.mft
rsync://rpki.ripe.net/repository/DEFAULT/TtDR6dtwOHtHkQsCFmwVFVR5now.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 12:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:99:0e:1d:78:a4:21:73:6c:d3:16:e8:0f:3f:3f:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ed0d1e9db70387b47910b02166c151554799e8c
Validity
Not Before: Jul 28 12:00:30 2026 GMT
Not After : Jul 29 12:00:30 2026 GMT
Subject: CN=9780d07b7e3ef10dfe219f02f6c6c340160bd2ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:8f:87:82:55:59:a8:f9:c2:c1:81:42:f0:43:
fd:68:c1:c9:85:ef:21:d5:84:4a:ca:99:0a:32:80:
74:6c:72:8a:42:fe:ba:89:ee:bb:f0:8f:14:03:61:
ce:02:80:24:c7:b9:9e:60:64:9f:f5:bb:a1:67:40:
74:9a:ed:f8:b1:dd:f9:84:0f:2d:de:6d:ca:fb:15:
f5:5d:5f:af:5b:57:de:c5:1c:98:cf:6c:f4:5b:d8:
94:4e:0d:b0:43:95:5d:52:2b:19:15:56:04:38:b8:
c8:8f:31:da:51:8f:b2:78:db:22:0e:ab:f3:c1:2a:
10:08:aa:d4:e5:a6:54:db:17:eb:80:5b:e9:d1:e3:
69:16:88:54:df:bb:b4:fb:d8:22:d6:f6:2c:df:6e:
bb:97:29:cf:e0:90:e4:ea:cb:a4:44:6d:86:3a:fa:
af:b3:55:1a:0c:5b:69:97:4a:36:70:db:06:1c:d4:
e5:11:7c:72:74:43:24:28:74:d6:74:af:63:6d:e0:
93:2d:a8:23:33:30:f3:e6:02:9a:f9:df:c3:7d:0a:
9c:1b:fc:a1:ff:87:9b:25:b9:8c:bd:74:6c:35:6d:
ea:f5:d4:44:d0:cf:89:b4:85:a8:c5:0c:aa:0e:96:
fb:24:41:f5:33:b6:46:87:29:3f:94:2a:e9:61:32:
67:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:80:D0:7B:7E:3E:F1:0D:FE:21:9F:02:F6:C6:C3:40:16:0B:D2:BA
X509v3 Authority Key Identifier:
keyid:4E:D0:D1:E9:DB:70:38:7B:47:91:0B:02:16:6C:15:15:54:79:9E:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TtDR6dtwOHtHkQsCFmwVFVR5now.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/87dadf-29d9-49d3-8ac6-4cc40ffd796d/1/TtDR6dtwOHtHkQsCFmwVFVR5now.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/87dadf-29d9-49d3-8ac6-4cc40ffd796d/1/TtDR6dtwOHtHkQsCFmwVFVR5now.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:79:7f:da:af:80:1b:f3:ca:15:3c:bc:68:65:15:50:d2:2f:
e7:f2:d4:74:c8:bc:55:d2:55:b1:65:c4:e7:10:87:05:92:b7:
da:5a:80:bf:95:1f:f0:e6:54:a4:08:64:88:72:2c:89:b7:f7:
61:87:85:9c:3e:cc:d5:fc:04:58:9b:0a:0f:93:e2:6b:49:86:
78:ef:8a:f9:32:f8:cd:5e:b1:c9:d0:9e:3a:22:8a:7c:32:67:
7e:6a:f7:a9:ed:cf:f4:83:88:bd:9c:02:47:1a:80:72:51:d4:
8c:1a:3e:af:7b:bf:52:0c:38:34:ce:6b:df:2e:9c:3e:b3:05:
39:d1:91:97:f5:34:7c:c3:b6:8b:f6:87:bf:16:0a:8a:55:ff:
8f:52:00:ed:48:8f:24:11:76:a3:63:f1:67:09:0f:cc:9f:88:
6d:35:22:3f:36:87:45:b0:51:5f:02:85:97:ec:97:fd:76:8a:
14:e9:d7:f1:e1:ce:ad:28:9f:66:ee:04:27:9f:2b:5b:62:93:
c1:e5:32:39:67:d4:c4:c4:ec:2f:0c:78:0b:a7:5c:af:00:d0:
f8:d2:03:28:d0:14:a1:cb:3f:7d:bf:4b:3b:a0:9b:dc:da:5b:
35:88:dc:b2:31:3d:0e:44:b5:a1:b2:67:99:43:23:42:0a:02:
d7:f7:c5:82
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+omQ4deKQhc2zTFugPPz9uMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRlZDBkMWU5ZGI3MDM4N2I0NzkxMGIwMjE2NmMxNTE1NTQ3
OTllOGMwHhcNMjYwNzI4MTIwMDMwWhcNMjYwNzI5MTIwMDMwWjAzMTEwLwYDVQQD
Eyg5NzgwZDA3YjdlM2VmMTBkZmUyMTlmMDJmNmM2YzM0MDE2MGJkMmJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyY+HglVZqPnCwYFC8EP9aMHJhe8h
1YRKypkKMoB0bHKKQv66ie678I8UA2HOAoAkx7meYGSf9buhZ0B0mu34sd35hA8t
3m3K+xX1XV+vW1fexRyYz2z0W9iUTg2wQ5VdUisZFVYEOLjIjzHaUY+yeNsiDqvz
wSoQCKrU5aZU2xfrgFvp0eNpFohU37u0+9gi1vYs3267lynP4JDk6sukRG2GOvqv
s1UaDFtpl0o2cNsGHNTlEXxydEMkKHTWdK9jbeCTLagjMzDz5gKa+d/DfQqcG/yh
/4ebJbmMvXRsNW3q9dRE0M+JtIWoxQyqDpb7JEH1M7ZGhyk/lCrpYTJnVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJeA0Ht+PvEN/iGfAvbGw0AWC9K6MB8GA1UdIwQY
MBaAFE7Q0enbcDh7R5ELAhZsFRVUeZ6MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHREUjZkdHdPSHRIa1FzQ0Ztd1ZGVlI1bm93LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi84N2RhZGYtMjlkOS00OWQzLThhYzYt
NGNjNDBmZmQ3OTZkLzEvVHREUjZkdHdPSHRIa1FzQ0Ztd1ZGVlI1bm93Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi84N2RhZGYtMjlkOS00OWQzLThhYzYtNGNjNDBmZmQ3OTZk
LzEvVHREUjZkdHdPSHRIa1FzQ0Ztd1ZGVlI1bm93LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOnl/2q+A
G/PKFTy8aGUVUNIv5/LUdMi8VdJVsWXE5xCHBZK32lqAv5Uf8OZUpAhkiHIsibf3
YYeFnD7M1fwEWJsKD5Pia0mGeO+K+TL4zV6xydCeOiKKfDJnfmr3qe3P9IOIvZwC
RxqAclHUjBo+r3u/Ugw4NM5r3y6cPrMFOdGRl/U0fMO2i/aHvxYKilX/j1IA7UiP
JBF2o2PxZwkPzJ+IbTUiPzaHRbBRXwKFl+yX/XaKFOnX8eHOrSifZu4EJ58rW2KT
weUyOWfUxMTsLwx4C6dcrwDQ+NIDKNAUocs/fb9LO6Cb3NpbNYjcsjE9DkS1obJn
mUMjQgoC1/fFgg==
-----END CERTIFICATE-----
Generated at Tue Jul 28 15:37:32 2026 by rpki-client