Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/6dcc50-025c-4c20-8699-bced579c0b7b/1/TZkZWi_leH1dYCYBjDUY88HlABk.mft
File: TZkZWi_leH1dYCYBjDUY88HlABk.mft (raw, json)
Hash identifier: 5j1j5bxq6QinaAoPQzgHgWBAQA9BhdA6VBWYgJi1hUw=
Subject key identifier: F9:97:0F:49:3D:AF:92:FA:C5:F3:F6:2A:11:B0:E1:76:E9:6F:F8:59
Authority key identifier: 4D:99:19:5A:2F:E5:78:7D:5D:60:26:01:8C:35:18:F3:C1:E5:00:19
Certificate issuer: /CN=4d99195a2fe5787d5d6026018c3518f3c1e50019
Certificate serial: 019FAA88BAA1CB472CCDACEAB9857BB92A35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TZkZWi_leH1dYCYBjDUY88HlABk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/6dcc50-025c-4c20-8699-bced579c0b7b/1/TZkZWi_leH1dYCYBjDUY88HlABk.mft
Manifest number: 4D
Signing time: Tue 28 Jul 2026 21:01:55 +0000
Manifest this update: Tue 28 Jul 2026 21:01:55 +0000
Manifest next update: Wed 29 Jul 2026 21:01:55 +0000
Files and hashes: 1: TZkZWi_leH1dYCYBjDUY88HlABk.crl (hash: 27+lVy+y52EQvF7wFWSX7qUnV2UTxc8ntYeAIkU/LWk=)
2: iZEmjwEPRyx8QyyQn4gnbiaigT4.roa (hash: I3dS4NuQKJEmxy0uXjJxX1xrNFM+VLP6Pll5fzdeVhg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/6dcc50-025c-4c20-8699-bced579c0b7b/1/TZkZWi_leH1dYCYBjDUY88HlABk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/6dcc50-025c-4c20-8699-bced579c0b7b/1/TZkZWi_leH1dYCYBjDUY88HlABk.mft
rsync://rpki.ripe.net/repository/DEFAULT/TZkZWi_leH1dYCYBjDUY88HlABk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 21:01:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:88:ba:a1:cb:47:2c:cd:ac:ea:b9:85:7b:b9:2a:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d99195a2fe5787d5d6026018c3518f3c1e50019
Validity
Not Before: Jul 28 21:01:55 2026 GMT
Not After : Jul 29 21:01:55 2026 GMT
Subject: CN=f9970f493daf92fac5f3f62a11b0e176e96ff859
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:84:23:fb:06:87:0b:36:6a:8c:47:e1:3e:36:
f2:f4:23:27:77:9b:84:77:cf:b2:d5:3c:ad:0a:08:
56:7a:ad:19:33:71:91:5b:14:a9:f5:68:78:71:5e:
cf:f5:fc:82:c4:ef:c0:c3:01:eb:f2:5e:37:58:db:
4f:d5:7e:00:98:00:bc:46:e9:4c:eb:2c:96:8d:f4:
22:16:f5:23:8c:5f:25:d9:f5:08:5d:03:92:92:29:
3e:15:11:6f:e4:e9:e4:9c:ce:0d:32:14:fd:46:08:
36:42:e5:d8:66:b0:8d:44:45:c8:8f:c4:0f:9f:c3:
d7:db:4c:d9:ed:fe:44:20:eb:ca:8d:93:8d:bd:47:
a3:1d:2f:ad:76:15:d6:fe:af:d9:87:a2:f8:dd:29:
4e:6b:19:5b:0f:4b:74:94:2f:ec:1d:48:57:df:97:
de:1c:d5:81:8e:05:6c:6a:2e:6c:d4:69:03:b7:1c:
69:e9:ac:60:bf:5e:19:e6:34:42:69:40:0d:b3:6f:
0c:fc:ab:73:4e:f3:bd:22:1a:aa:b5:24:c0:4c:c6:
9d:8a:6e:52:e5:87:3b:05:91:cf:45:5f:d2:84:bc:
af:5b:7e:94:07:14:44:f9:0b:45:a4:18:69:ad:3b:
73:a7:50:8c:b9:a8:b6:20:36:f9:03:17:17:82:64:
38:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:97:0F:49:3D:AF:92:FA:C5:F3:F6:2A:11:B0:E1:76:E9:6F:F8:59
X509v3 Authority Key Identifier:
keyid:4D:99:19:5A:2F:E5:78:7D:5D:60:26:01:8C:35:18:F3:C1:E5:00:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TZkZWi_leH1dYCYBjDUY88HlABk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/6dcc50-025c-4c20-8699-bced579c0b7b/1/TZkZWi_leH1dYCYBjDUY88HlABk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/6dcc50-025c-4c20-8699-bced579c0b7b/1/TZkZWi_leH1dYCYBjDUY88HlABk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:8e:46:09:4e:f3:73:3e:6e:44:cf:12:71:ac:4e:3b:f8:0f:
8c:b1:39:41:1f:ea:f0:03:9a:71:b4:09:a2:2b:e8:ac:3b:08:
77:fe:74:85:35:df:97:30:ce:94:f0:7c:6c:67:8c:62:12:8d:
05:48:96:b7:77:88:b9:6c:e9:ad:11:57:7e:97:45:c8:9b:04:
22:9a:4f:cf:c5:04:85:b7:ba:f3:9a:7d:4e:86:33:4a:67:5c:
4c:e7:90:9d:d2:f2:13:8f:72:48:26:91:cf:85:2c:22:c7:ec:
27:c9:a7:98:78:e0:4b:40:62:c9:85:b7:e9:09:71:8b:4a:6f:
0e:26:63:d4:fe:5e:56:62:52:73:44:2f:0a:75:ff:4c:20:f6:
35:05:0c:b7:57:36:b7:d4:30:15:ea:ed:49:d5:c5:8c:b5:f4:
2e:b9:f6:ff:19:bc:e3:2d:f9:18:af:c0:58:b9:15:d4:f5:64:
fb:86:ff:8a:0a:ad:2d:b2:5e:33:c7:e5:00:cc:2d:95:e6:e3:
eb:87:57:ec:cc:f4:73:66:d0:56:72:b3:6e:85:40:f1:82:83:
2d:51:12:26:55:ca:05:63:d5:ee:e0:c3:1a:61:3e:af:85:84:
59:ee:6a:73:ab:92:d0:48:fc:48:5f:34:04:8f:b5:a1:7f:68:
3c:e6:f1:0a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+qiLqhy0cszazquYV7uSo1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRkOTkxOTVhMmZlNTc4N2Q1ZDYwMjYwMThjMzUxOGYzYzFl
NTAwMTkwHhcNMjYwNzI4MjEwMTU1WhcNMjYwNzI5MjEwMTU1WjAzMTEwLwYDVQQD
EyhmOTk3MGY0OTNkYWY5MmZhYzVmM2Y2MmExMWIwZTE3NmU5NmZmODU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAioQj+waHCzZqjEfhPjby9CMnd5uE
d8+y1TytCghWeq0ZM3GRWxSp9Wh4cV7P9fyCxO/AwwHr8l43WNtP1X4AmAC8RulM
6yyWjfQiFvUjjF8l2fUIXQOSkik+FRFv5OnknM4NMhT9Rgg2QuXYZrCNREXIj8QP
n8PX20zZ7f5EIOvKjZONvUejHS+tdhXW/q/Zh6L43SlOaxlbD0t0lC/sHUhX35fe
HNWBjgVsai5s1GkDtxxp6axgv14Z5jRCaUANs28M/KtzTvO9IhqqtSTATMadim5S
5Yc7BZHPRV/ShLyvW36UBxRE+QtFpBhprTtzp1CMuai2IDb5AxcXgmQ4XQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPmXD0k9r5L6xfP2KhGw4Xbpb/hZMB8GA1UdIwQY
MBaAFE2ZGVov5Xh9XWAmAYw1GPPB5QAZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVFprWldpX2xlSDFkWUNZQmpEVVk4OEhsQUJrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy82ZGNjNTAtMDI1Yy00YzIwLTg2OTkt
YmNlZDU3OWMwYjdiLzEvVFprWldpX2xlSDFkWUNZQmpEVVk4OEhsQUJrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy82ZGNjNTAtMDI1Yy00YzIwLTg2OTktYmNlZDU3OWMwYjdi
LzEvVFprWldpX2xlSDFkWUNZQmpEVVk4OEhsQUJrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZo5GCU7z
cz5uRM8ScaxOO/gPjLE5QR/q8AOacbQJoivorDsId/50hTXflzDOlPB8bGeMYhKN
BUiWt3eIuWzprRFXfpdFyJsEIppPz8UEhbe685p9ToYzSmdcTOeQndLyE49ySCaR
z4UsIsfsJ8mnmHjgS0BiyYW36Qlxi0pvDiZj1P5eVmJSc0QvCnX/TCD2NQUMt1c2
t9QwFertSdXFjLX0Lrn2/xm84y35GK/AWLkV1PVk+4b/igqtLbJeM8flAMwtlebj
64dX7Mz0c2bQVnKzboVA8YKDLVESJlXKBWPV7uDDGmE+r4WEWe5qc6uS0Ej8SF80
BI+1oX9oPObxCg==
-----END CERTIFICATE-----
Generated at Wed Jul 29 04:14:43 2026 by rpki-client