Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/da4e46-2a93-44a4-b8e3-c2133dd81b56/1/TS-f1cihTNyfMcRYXNYNtXz_tMI.mft
File: TS-f1cihTNyfMcRYXNYNtXz_tMI.mft (raw, json)
Hash identifier: bA3w5isp+8qWx6126sb7yg8jrIPnbJ0o/gQ36IN8p70=
Subject key identifier: 6B:5D:FD:7C:06:DC:9C:DC:EB:CB:D3:CF:11:39:E9:1F:DD:07:B4:F1
Authority key identifier: 4D:2F:9F:D5:C8:A1:4C:DC:9F:31:C4:58:5C:D6:0D:B5:7C:FF:B4:C2
Certificate issuer: /CN=4d2f9fd5c8a14cdc9f31c4585cd60db57cffb4c2
Certificate serial: 019FAABE897C66650BB854C4C7C301792948
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TS-f1cihTNyfMcRYXNYNtXz_tMI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/da4e46-2a93-44a4-b8e3-c2133dd81b56/1/TS-f1cihTNyfMcRYXNYNtXz_tMI.mft
Manifest number: 1097
Signing time: Tue 28 Jul 2026 22:00:41 +0000
Manifest this update: Tue 28 Jul 2026 22:00:41 +0000
Manifest next update: Wed 29 Jul 2026 22:00:41 +0000
Files and hashes: 1: 1-PcZA739O5jfsTyXtX2e6TIscS4.roa (hash: 8TW2rD12HBFWQAtxdbCJfapV59e5j+ulrB4BqMjg04I=)
2: 3bJDocgywntndtsfu_qK9cHpMt8.roa (hash: yNfaNNmmyD1SlEI3Ljm5OugJbl2m1Klcep+P5DT4G+s=)
3: O7SMXsiP2jcDC8ds3aHzihHcVV4.roa (hash: dRUITjUibnbbNquhA0z/5LyEKxqqyfiN2wuu/O3f8z4=)
4: TS-f1cihTNyfMcRYXNYNtXz_tMI.crl (hash: oIf0dx//z5NKtZYgb/pYQUoWJSyR9W4eEXZSSSdkuZA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/da4e46-2a93-44a4-b8e3-c2133dd81b56/1/TS-f1cihTNyfMcRYXNYNtXz_tMI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/da4e46-2a93-44a4-b8e3-c2133dd81b56/1/TS-f1cihTNyfMcRYXNYNtXz_tMI.mft
rsync://rpki.ripe.net/repository/DEFAULT/TS-f1cihTNyfMcRYXNYNtXz_tMI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 22:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:be:89:7c:66:65:0b:b8:54:c4:c7:c3:01:79:29:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d2f9fd5c8a14cdc9f31c4585cd60db57cffb4c2
Validity
Not Before: Jul 28 22:00:41 2026 GMT
Not After : Jul 29 22:00:41 2026 GMT
Subject: CN=6b5dfd7c06dc9cdcebcbd3cf1139e91fdd07b4f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:81:69:02:37:d5:cd:14:36:9d:29:b2:75:90:
6a:10:61:54:e1:b8:0c:b9:44:c7:4e:26:83:0c:ba:
3d:b2:44:b0:a6:f9:6e:09:12:1a:5e:b2:96:9e:81:
74:9f:77:f4:99:46:99:5a:3d:37:e2:c9:e9:36:57:
17:15:f0:13:03:1e:c1:39:df:09:2d:57:3e:21:fd:
86:ce:11:7f:fa:a4:b3:fc:ce:c6:99:5a:71:5e:41:
cb:e0:e7:00:4b:03:eb:6d:66:f8:ce:77:13:9e:bf:
f9:48:18:0c:69:0d:72:34:0e:94:c5:4d:ae:ac:f2:
63:b3:9f:53:5c:c2:d9:1e:70:27:aa:85:4f:90:f6:
78:84:25:63:1d:11:92:57:cf:c7:7a:ac:f8:d6:63:
40:87:a6:86:a5:41:e7:bc:de:e3:2d:b0:4a:ad:d2:
30:98:36:78:1e:08:c9:97:93:24:0d:f1:33:82:7a:
10:fc:75:95:f5:27:84:0d:2d:3c:d2:21:41:50:e0:
29:ce:59:30:f4:82:3b:00:4f:de:41:32:f4:78:38:
b3:ab:8d:a9:1f:6f:79:07:1a:c6:96:65:e8:db:77:
2a:e6:5e:74:52:29:cc:91:d2:df:92:42:ad:d2:83:
a3:f6:b1:e2:47:30:85:92:2e:cf:e3:03:d4:5a:c8:
fd:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:5D:FD:7C:06:DC:9C:DC:EB:CB:D3:CF:11:39:E9:1F:DD:07:B4:F1
X509v3 Authority Key Identifier:
keyid:4D:2F:9F:D5:C8:A1:4C:DC:9F:31:C4:58:5C:D6:0D:B5:7C:FF:B4:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TS-f1cihTNyfMcRYXNYNtXz_tMI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/da4e46-2a93-44a4-b8e3-c2133dd81b56/1/TS-f1cihTNyfMcRYXNYNtXz_tMI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/da4e46-2a93-44a4-b8e3-c2133dd81b56/1/TS-f1cihTNyfMcRYXNYNtXz_tMI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:f6:18:d9:6f:32:44:fc:e1:d6:fc:cc:cd:91:7b:26:d5:59:
ed:37:c2:49:09:c1:20:1f:67:c9:1f:60:9f:b1:fa:09:f2:79:
eb:4a:42:de:9d:f2:6f:70:32:e7:94:1c:b2:e1:19:2a:a3:73:
dd:c9:ce:1a:ae:3f:fb:5d:35:b4:c2:00:c9:2f:84:7e:fd:36:
93:ae:87:7f:15:b2:b5:91:6c:11:1d:64:df:1f:e5:4f:4a:80:
97:ba:25:c1:55:f3:7d:57:5b:c6:1f:99:da:54:70:20:be:c4:
99:9a:ec:a4:e6:29:61:01:af:ed:4b:d6:e5:73:60:59:74:a5:
eb:6b:74:a5:77:84:fc:0d:1f:fd:d2:0b:7d:34:90:1f:fe:12:
e3:0f:96:63:e1:6c:6a:fc:ee:40:ba:03:2d:d7:57:e1:66:36:
1d:cc:d5:f0:ae:25:1d:0a:4c:3a:d8:1d:cc:d5:6a:8b:05:88:
b8:e8:01:3d:21:1c:9f:3f:4d:22:31:b5:16:ca:02:0a:d4:84:
db:dd:47:a1:81:f6:51:21:b5:97:97:64:3d:44:0c:85:f6:c2:
6c:16:01:d7:f6:78:c2:3a:17:31:ae:ef:d6:52:1a:98:12:e9:
1e:a3:7f:85:11:7e:cf:dc:0d:79:fc:23:dd:cb:64:6d:22:1b:
3e:3f:37:3b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+qvol8ZmULuFTEx8MBeSlIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRkMmY5ZmQ1YzhhMTRjZGM5ZjMxYzQ1ODVjZDYwZGI1N2Nm
ZmI0YzIwHhcNMjYwNzI4MjIwMDQxWhcNMjYwNzI5MjIwMDQxWjAzMTEwLwYDVQQD
Eyg2YjVkZmQ3YzA2ZGM5Y2RjZWJjYmQzY2YxMTM5ZTkxZmRkMDdiNGYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlIFpAjfVzRQ2nSmydZBqEGFU4bgM
uUTHTiaDDLo9skSwpvluCRIaXrKWnoF0n3f0mUaZWj034snpNlcXFfATAx7BOd8J
LVc+If2GzhF/+qSz/M7GmVpxXkHL4OcASwPrbWb4zncTnr/5SBgMaQ1yNA6UxU2u
rPJjs59TXMLZHnAnqoVPkPZ4hCVjHRGSV8/Heqz41mNAh6aGpUHnvN7jLbBKrdIw
mDZ4HgjJl5MkDfEzgnoQ/HWV9SeEDS080iFBUOApzlkw9II7AE/eQTL0eDizq42p
H295BxrGlmXo23cq5l50UinMkdLfkkKt0oOj9rHiRzCFki7P4wPUWsj92QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGtd/XwG3Jzc68vTzxE56R/dB7TxMB8GA1UdIwQY
MBaAFE0vn9XIoUzcnzHEWFzWDbV8/7TCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVFMtZjFjaWhUTnlmTWNSWVhOWU50WHpfdE1JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS9kYTRlNDYtMmE5My00NGE0LWI4ZTMt
YzIxMzNkZDgxYjU2LzEvVFMtZjFjaWhUTnlmTWNSWVhOWU50WHpfdE1JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS9kYTRlNDYtMmE5My00NGE0LWI4ZTMtYzIxMzNkZDgxYjU2
LzEvVFMtZjFjaWhUTnlmTWNSWVhOWU50WHpfdE1JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAivYY2W8y
RPzh1vzMzZF7JtVZ7TfCSQnBIB9nyR9gn7H6CfJ560pC3p3yb3Ay55QcsuEZKqNz
3cnOGq4/+101tMIAyS+Efv02k66HfxWytZFsER1k3x/lT0qAl7olwVXzfVdbxh+Z
2lRwIL7EmZrspOYpYQGv7UvW5XNgWXSl62t0pXeE/A0f/dILfTSQH/4S4w+WY+Fs
avzuQLoDLddX4WY2HczV8K4lHQpMOtgdzNVqiwWIuOgBPSEcnz9NIjG1FsoCCtSE
291HoYH2USG1l5dkPUQMhfbCbBYB1/Z4wjoXMa7v1lIamBLpHqN/hRF+z9wNefwj
3ctkbSIbPj83Ow==
-----END CERTIFICATE-----
Generated at Wed Jul 29 08:50:30 2026 by rpki-client