Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/f1d976-726b-4cb7-9fa2-02b33582c747/1/tZtlS0KDPTZojjeakhvrrswwd2I.mft
File: tZtlS0KDPTZojjeakhvrrswwd2I.mft (raw, json)
Hash identifier: 3LSRdr1OK2xFiZFO3JBoVfooJPy4SkI+jIVtSQ1mcHk=
Subject key identifier: 83:67:2D:D1:0F:D8:A4:07:09:A5:F6:1E:FE:9D:88:D2:30:D5:6A:C1
Authority key identifier: B5:9B:65:4B:42:83:3D:36:68:8E:37:9A:92:1B:EB:AE:CC:30:77:62
Certificate issuer: /CN=b59b654b42833d36688e379a921bebaecc307762
Certificate serial: 019FAC76958601A4E44BFA65F50E56F291CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tZtlS0KDPTZojjeakhvrrswwd2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/f1d976-726b-4cb7-9fa2-02b33582c747/1/tZtlS0KDPTZojjeakhvrrswwd2I.mft
Manifest number: 4E
Signing time: Wed 29 Jul 2026 06:01:20 +0000
Manifest this update: Wed 29 Jul 2026 06:01:20 +0000
Manifest next update: Thu 30 Jul 2026 06:01:20 +0000
Files and hashes: 1: P1tf3TOfH-5BUA4TlKHVZFLsg9E.roa (hash: Ou5jVY+Wu+51dLZB22miAYmWfU4viS5vwM+gRlM0aZU=)
2: tZtlS0KDPTZojjeakhvrrswwd2I.crl (hash: VUH7izXBMg3Vi+BUTv9vFOGHaBs6amO+Hki0A9UujqU=)
3: whrEFYh55PfP3rH9r88LFTEnY0U.roa (hash: TH01oABU19/I/IoXNBdj7bjG3uEgkQpDazrpyE0JmkM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/f1d976-726b-4cb7-9fa2-02b33582c747/1/tZtlS0KDPTZojjeakhvrrswwd2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/f1d976-726b-4cb7-9fa2-02b33582c747/1/tZtlS0KDPTZojjeakhvrrswwd2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/tZtlS0KDPTZojjeakhvrrswwd2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 06:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:76:95:86:01:a4:e4:4b:fa:65:f5:0e:56:f2:91:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b59b654b42833d36688e379a921bebaecc307762
Validity
Not Before: Jul 29 06:01:20 2026 GMT
Not After : Jul 30 06:01:20 2026 GMT
Subject: CN=83672dd10fd8a40709a5f61efe9d88d230d56ac1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:4b:19:9b:b7:32:90:97:84:92:1a:5a:11:c3:
4c:8c:e1:17:a7:08:5d:23:63:08:40:6b:19:95:d4:
f2:e2:f9:a8:c0:30:24:02:d1:71:a0:5a:59:17:89:
59:c8:48:3d:8e:83:7c:fa:f2:7d:75:99:0c:2f:ea:
39:57:3d:50:08:24:15:cd:a0:18:76:6c:02:94:2d:
2e:14:80:74:5b:df:fb:99:f9:86:3b:44:ad:87:31:
46:5f:56:ad:4c:e6:69:4d:e9:65:63:28:3e:54:85:
de:50:72:e2:6b:60:94:d6:79:06:5c:00:79:1b:fc:
d3:ac:d8:91:d6:8e:cf:9a:97:c0:74:4c:37:e4:e9:
81:91:1c:d9:46:b4:2d:df:12:f6:a4:67:ff:50:1a:
27:ed:08:8d:76:99:fe:dd:46:91:f6:d4:64:74:6e:
46:f5:e1:b6:86:b2:ff:84:a6:17:66:f6:fb:21:bc:
2a:b1:5c:24:7f:3d:c4:b7:fc:b3:b8:37:86:d8:37:
8e:96:e7:a7:c9:f6:c1:49:a9:4b:a5:75:13:3d:ca:
c8:9a:f6:dd:1d:f8:4f:36:e8:85:e6:c7:b2:70:79:
81:bc:17:7d:bd:e4:22:c7:47:2f:a8:14:db:72:9e:
f5:cb:a7:fe:45:4b:35:a3:3e:b4:5c:bc:2a:d0:d4:
6f:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:67:2D:D1:0F:D8:A4:07:09:A5:F6:1E:FE:9D:88:D2:30:D5:6A:C1
X509v3 Authority Key Identifier:
keyid:B5:9B:65:4B:42:83:3D:36:68:8E:37:9A:92:1B:EB:AE:CC:30:77:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tZtlS0KDPTZojjeakhvrrswwd2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/f1d976-726b-4cb7-9fa2-02b33582c747/1/tZtlS0KDPTZojjeakhvrrswwd2I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/f1d976-726b-4cb7-9fa2-02b33582c747/1/tZtlS0KDPTZojjeakhvrrswwd2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:69:a3:87:32:68:9c:17:f1:67:24:5e:1c:eb:2a:37:35:f1:
cb:62:b4:e9:c5:ae:a6:b6:e1:83:db:47:e9:ab:c9:54:2c:83:
7c:ab:e3:1d:dd:51:aa:5c:e5:f7:97:0a:1d:8e:33:e4:97:68:
0c:0e:0f:63:27:7d:2e:8a:ab:b1:49:28:87:10:7e:d3:60:11:
24:77:69:cf:93:31:a9:62:6a:e2:71:f8:20:e1:3d:00:59:b1:
1d:68:4c:ec:93:6a:d4:06:27:6b:79:ab:50:c7:ff:03:f8:f2:
05:4d:07:d2:fe:ab:fe:bd:b6:64:61:0a:6f:85:78:fd:82:c7:
f0:c0:9e:7e:c2:0c:91:84:8a:68:ec:83:ff:cd:47:67:8f:db:
db:aa:5c:8b:84:24:dc:ed:95:84:aa:ac:4c:95:ef:ed:be:53:
ef:a7:99:9e:18:46:4d:4e:84:34:71:95:04:12:d2:b4:37:f4:
47:c7:14:d2:49:dc:b6:50:56:df:62:b3:12:8b:b8:87:73:05:
23:8a:cc:93:2b:2b:2a:6e:0c:fa:5e:e5:0f:08:43:aa:2c:24:
fa:af:94:37:f6:4d:27:b9:a9:36:84:d2:ed:3b:3c:30:76:b4:
4e:10:27:7d:a4:f6:1c:21:d4:ba:b5:e0:2f:ff:a9:72:93:cd:
8a:4d:b7:9b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+sdpWGAaTkS/pl9Q5W8pHNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1OWI2NTRiNDI4MzNkMzY2ODhlMzc5YTkyMWJlYmFlY2Mz
MDc3NjIwHhcNMjYwNzI5MDYwMTIwWhcNMjYwNzMwMDYwMTIwWjAzMTEwLwYDVQQD
Eyg4MzY3MmRkMTBmZDhhNDA3MDlhNWY2MWVmZTlkODhkMjMwZDU2YWMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoEsZm7cykJeEkhpaEcNMjOEXpwhd
I2MIQGsZldTy4vmowDAkAtFxoFpZF4lZyEg9joN8+vJ9dZkML+o5Vz1QCCQVzaAY
dmwClC0uFIB0W9/7mfmGO0SthzFGX1atTOZpTellYyg+VIXeUHLia2CU1nkGXAB5
G/zTrNiR1o7PmpfAdEw35OmBkRzZRrQt3xL2pGf/UBon7QiNdpn+3UaR9tRkdG5G
9eG2hrL/hKYXZvb7IbwqsVwkfz3Et/yzuDeG2DeOluenyfbBSalLpXUTPcrImvbd
HfhPNuiF5seycHmBvBd9veQix0cvqBTbcp71y6f+RUs1oz60XLwq0NRvrwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFINnLdEP2KQHCaX2Hv6diNIw1WrBMB8GA1UdIwQY
MBaAFLWbZUtCgz02aI43mpIb667MMHdiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFp0bFMwS0RQVFpvamplYWtodnJyc3d3ZDJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC9mMWQ5NzYtNzI2Yi00Y2I3LTlmYTIt
MDJiMzM1ODJjNzQ3LzEvdFp0bFMwS0RQVFpvamplYWtodnJyc3d3ZDJJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC9mMWQ5NzYtNzI2Yi00Y2I3LTlmYTItMDJiMzM1ODJjNzQ3
LzEvdFp0bFMwS0RQVFpvamplYWtodnJyc3d3ZDJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATWmjhzJo
nBfxZyReHOsqNzXxy2K06cWuprbhg9tH6avJVCyDfKvjHd1Rqlzl95cKHY4z5Jdo
DA4PYyd9LoqrsUkohxB+02ARJHdpz5MxqWJq4nH4IOE9AFmxHWhM7JNq1AYna3mr
UMf/A/jyBU0H0v6r/r22ZGEKb4V4/YLH8MCefsIMkYSKaOyD/81HZ4/b26pci4Qk
3O2VhKqsTJXv7b5T76eZnhhGTU6ENHGVBBLStDf0R8cU0knctlBW32KzEou4h3MF
I4rMkysrKm4M+l7lDwhDqiwk+q+UN/ZNJ7mpNoTS7Ts8MHa0ThAnfaT2HCHUurXg
L/+pcpPNik23mw==
-----END CERTIFICATE-----
Generated at Wed Jul 29 10:23:53 2026 by rpki-client