Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/359d71-1e9e-439f-93f1-1f5428684fc7/1/tgcVWH7cyzJajXwPWkLY8EOHHbc.mft
File: tgcVWH7cyzJajXwPWkLY8EOHHbc.mft (raw, json)
Hash identifier: YHpJ+WPTnLBgZAcGK0AhDGKmYb5RzRAl6BbRBB4tqsc=
Subject key identifier: FC:CA:05:F6:74:94:E7:AC:1B:A7:2E:F1:EF:36:81:44:F3:FD:71:A0
Authority key identifier: B6:07:15:58:7E:DC:CB:32:5A:8D:7C:0F:5A:42:D8:F0:43:87:1D:B7
Certificate issuer: /CN=b60715587edccb325a8d7c0f5a42d8f043871db7
Certificate serial: 019FACAC985E31122BC4DFCA203D576F5A72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tgcVWH7cyzJajXwPWkLY8EOHHbc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/359d71-1e9e-439f-93f1-1f5428684fc7/1/tgcVWH7cyzJajXwPWkLY8EOHHbc.mft
Manifest number: 04FA
Signing time: Wed 29 Jul 2026 07:00:19 +0000
Manifest this update: Wed 29 Jul 2026 07:00:19 +0000
Manifest next update: Thu 30 Jul 2026 07:00:19 +0000
Files and hashes: 1: eB4gEEpPyWFq6clsUK7vv51vvfQ.roa (hash: vOzaKzOf/nV2cWIeYZMZ7vTHjq9ov1FtZCm3hsoyh/8=)
2: tgcVWH7cyzJajXwPWkLY8EOHHbc.crl (hash: N0NnqT6cFn5F2aqVdH5fvcntrlwBS5ncEIiaxcJdJN8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/359d71-1e9e-439f-93f1-1f5428684fc7/1/tgcVWH7cyzJajXwPWkLY8EOHHbc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/359d71-1e9e-439f-93f1-1f5428684fc7/1/tgcVWH7cyzJajXwPWkLY8EOHHbc.mft
rsync://rpki.ripe.net/repository/DEFAULT/tgcVWH7cyzJajXwPWkLY8EOHHbc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:ac:98:5e:31:12:2b:c4:df:ca:20:3d:57:6f:5a:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b60715587edccb325a8d7c0f5a42d8f043871db7
Validity
Not Before: Jul 29 07:00:19 2026 GMT
Not After : Jul 30 07:00:19 2026 GMT
Subject: CN=fcca05f67494e7ac1ba72ef1ef368144f3fd71a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:83:2e:23:19:1f:2b:1f:e0:99:89:8c:41:68:
55:62:72:33:f9:7b:71:51:6e:cc:c8:8b:35:c7:c2:
42:f5:50:d7:04:9a:de:7b:62:0b:c4:71:d8:63:04:
bd:e9:2a:47:3a:8a:b5:4f:ab:c4:06:f9:46:e6:82:
6e:e2:0e:1d:23:a9:a7:bc:51:fb:f7:bc:0f:41:c2:
5d:2c:0f:05:f1:1f:4b:c6:eb:c4:8c:e5:ce:d3:6c:
7d:cc:7a:d9:20:47:da:25:0b:f0:3e:57:ab:d0:43:
c2:6b:1a:4c:77:8b:ce:4f:01:bb:e0:0f:42:5f:af:
c5:5c:d9:2b:55:78:93:10:1a:74:c6:1a:c3:3a:9f:
4a:28:67:dc:71:85:25:f4:91:4c:48:3d:13:a5:9e:
63:ad:51:b0:0d:6f:5c:61:c9:8d:a6:30:24:0d:f6:
5b:05:07:2d:5d:41:a3:d7:0c:8e:85:93:da:e0:96:
41:7f:b8:fe:8f:05:f9:81:ff:9e:fd:1e:1e:c8:3f:
2b:46:76:07:76:ae:ea:1b:36:7f:8b:58:2f:d5:36:
af:bc:b4:6a:57:fb:d8:ea:d6:54:06:13:b9:ab:23:
84:1f:da:83:fc:d7:58:d9:25:8d:7a:f0:76:a4:ea:
be:d6:87:a1:62:66:35:6d:c7:7e:10:aa:fd:15:12:
55:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:CA:05:F6:74:94:E7:AC:1B:A7:2E:F1:EF:36:81:44:F3:FD:71:A0
X509v3 Authority Key Identifier:
keyid:B6:07:15:58:7E:DC:CB:32:5A:8D:7C:0F:5A:42:D8:F0:43:87:1D:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tgcVWH7cyzJajXwPWkLY8EOHHbc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/359d71-1e9e-439f-93f1-1f5428684fc7/1/tgcVWH7cyzJajXwPWkLY8EOHHbc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/359d71-1e9e-439f-93f1-1f5428684fc7/1/tgcVWH7cyzJajXwPWkLY8EOHHbc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:fc:00:eb:22:76:62:a1:c7:aa:29:2f:63:da:63:0e:6c:c3:
20:76:4d:2c:79:4c:06:2d:85:16:a8:7e:76:59:5d:5e:5a:07:
d7:b1:c7:f8:79:eb:f3:80:cc:90:c5:00:6e:5c:9f:26:50:16:
61:5b:dd:65:aa:5a:7a:b7:55:d4:43:cf:6d:16:b5:5b:90:47:
72:2d:a6:e9:c9:46:ca:87:63:22:72:63:8c:a1:df:8e:87:eb:
ae:23:3c:25:0a:30:fb:c2:28:3f:47:52:35:9d:92:99:a8:9c:
99:66:13:af:7b:2d:83:6c:90:b5:78:38:d9:d3:81:21:65:8f:
58:6c:5c:67:f8:68:04:70:1c:fc:2a:a1:3a:bc:0c:d6:f3:6a:
28:cd:b0:e2:29:5a:7e:b2:d0:08:01:6a:33:18:c9:b4:b7:fa:
c4:97:c1:23:b4:90:d8:17:61:cc:80:2a:3e:bc:fb:89:e1:ff:
9c:48:16:1b:97:4b:e2:38:16:63:ae:01:21:2b:ce:96:a6:ac:
62:3c:e3:78:c5:b0:02:64:d7:f0:4b:67:b4:ba:68:1b:bc:32:
d0:81:7c:20:79:99:1a:ba:05:1c:37:78:a2:e8:36:bf:8b:9a:
2d:60:f9:4f:76:41:23:38:d5:a0:6b:ef:3e:aa:34:79:6f:09:
08:89:9d:de
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+srJheMRIrxN/KID1Xb1pyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI2MDcxNTU4N2VkY2NiMzI1YThkN2MwZjVhNDJkOGYwNDM4
NzFkYjcwHhcNMjYwNzI5MDcwMDE5WhcNMjYwNzMwMDcwMDE5WjAzMTEwLwYDVQQD
EyhmY2NhMDVmNjc0OTRlN2FjMWJhNzJlZjFlZjM2ODE0NGYzZmQ3MWEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/IMuIxkfKx/gmYmMQWhVYnIz+Xtx
UW7MyIs1x8JC9VDXBJree2ILxHHYYwS96SpHOoq1T6vEBvlG5oJu4g4dI6mnvFH7
97wPQcJdLA8F8R9LxuvEjOXO02x9zHrZIEfaJQvwPler0EPCaxpMd4vOTwG74A9C
X6/FXNkrVXiTEBp0xhrDOp9KKGfccYUl9JFMSD0TpZ5jrVGwDW9cYcmNpjAkDfZb
BQctXUGj1wyOhZPa4JZBf7j+jwX5gf+e/R4eyD8rRnYHdq7qGzZ/i1gv1TavvLRq
V/vY6tZUBhO5qyOEH9qD/NdY2SWNevB2pOq+1oehYmY1bcd+EKr9FRJVlQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPzKBfZ0lOesG6cu8e82gUTz/XGgMB8GA1UdIwQY
MBaAFLYHFVh+3MsyWo18D1pC2PBDhx23MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdGdjVldIN2N5ekphalh3UFdrTFk4RU9ISGJjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi8zNTlkNzEtMWU5ZS00MzlmLTkzZjEt
MWY1NDI4Njg0ZmM3LzEvdGdjVldIN2N5ekphalh3UFdrTFk4RU9ISGJjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi8zNTlkNzEtMWU5ZS00MzlmLTkzZjEtMWY1NDI4Njg0ZmM3
LzEvdGdjVldIN2N5ekphalh3UFdrTFk4RU9ISGJjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYPwA6yJ2
YqHHqikvY9pjDmzDIHZNLHlMBi2FFqh+dlldXloH17HH+Hnr84DMkMUAblyfJlAW
YVvdZapaerdV1EPPbRa1W5BHci2m6clGyodjInJjjKHfjofrriM8JQow+8IoP0dS
NZ2SmaicmWYTr3stg2yQtXg42dOBIWWPWGxcZ/hoBHAc/CqhOrwM1vNqKM2w4ila
frLQCAFqMxjJtLf6xJfBI7SQ2BdhzIAqPrz7ieH/nEgWG5dL4jgWY64BISvOlqas
YjzjeMWwAmTX8EtntLpoG7wy0IF8IHmZGroFHDd4oug2v4uaLWD5T3ZBIzjVoGvv
Pqo0eW8JCImd3g==
-----END CERTIFICATE-----
Generated at Wed Jul 29 09:39:55 2026 by rpki-client