Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/7ed7b1-b8f3-43f3-96e3-1dc54d1c03a3/1/TDeJ7PZ-BCmMXuRMZ9j7f11tlaE.mft
File: TDeJ7PZ-BCmMXuRMZ9j7f11tlaE.mft (raw, json)
Hash identifier: eMvQFh/7zCccCR6vWvJCEo1SQ5Oqwshhm2ZO7021ABE=
Subject key identifier: CF:B3:D0:01:9A:2E:EF:1B:8C:AB:8F:0D:1A:48:78:69:01:68:C0:03
Authority key identifier: 4C:37:89:EC:F6:7E:04:29:8C:5E:E4:4C:67:D8:FB:7F:5D:6D:95:A1
Certificate issuer: /CN=4c3789ecf67e04298c5ee44c67d8fb7f5d6d95a1
Certificate serial: 019FAD5210A44AEEE9310D9BD1063BC3541A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TDeJ7PZ-BCmMXuRMZ9j7f11tlaE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/7ed7b1-b8f3-43f3-96e3-1dc54d1c03a3/1/TDeJ7PZ-BCmMXuRMZ9j7f11tlaE.mft
Manifest number: 0A95
Signing time: Wed 29 Jul 2026 10:01:04 +0000
Manifest this update: Wed 29 Jul 2026 10:01:04 +0000
Manifest next update: Thu 30 Jul 2026 10:01:04 +0000
Files and hashes: 1: 5cyx45wBsDWUW4HLBveZ_qT2fcI.roa (hash: 8zrBvmy9ZVUIH/JDFlTLI0bEMjkf56i51k/bt1Lb1pQ=)
2: BGnZrxh766n-RwiVyZM8GwNTqh0.roa (hash: /zWDyCDhQQVXOZUHRipaDLFDgbYWX/UYPO8XJtBp0uE=)
3: JI6F6sKwmFDB-S9XODKhAA660AM.roa (hash: /b/qNAizl4V5sFYHPlaPbBReehGSPPstai3HlyE9iGo=)
4: OB0voxOvgqvD6w4CwDmCo19dJlY.roa (hash: 9mhFY39YjN1Cc/funyTGbxD0WJvEdMakoR8u2Fsujz0=)
5: TDeJ7PZ-BCmMXuRMZ9j7f11tlaE.crl (hash: tpc7BOw2SBLfG1re8p5tdR+Vo7ODXHEJw8/XCnRPW/4=)
6: X14l7kvlYYBF3EHNWSg-svsFuOQ.roa (hash: Y9BNprLjsgal1cKXYYlZbO0fiea/j/rMdHY3dC/wqFY=)
7: sGobVjVtmpTG3eIQoRngSBlxcMU.roa (hash: UMoTBGpuj0hrOh47PvNUlOhwfEbv/t4MSoG5XZ2RuSo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/7ed7b1-b8f3-43f3-96e3-1dc54d1c03a3/1/TDeJ7PZ-BCmMXuRMZ9j7f11tlaE.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/7ed7b1-b8f3-43f3-96e3-1dc54d1c03a3/1/TDeJ7PZ-BCmMXuRMZ9j7f11tlaE.mft
rsync://rpki.ripe.net/repository/DEFAULT/TDeJ7PZ-BCmMXuRMZ9j7f11tlaE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ad:52:10:a4:4a:ee:e9:31:0d:9b:d1:06:3b:c3:54:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c3789ecf67e04298c5ee44c67d8fb7f5d6d95a1
Validity
Not Before: Jul 29 10:01:04 2026 GMT
Not After : Jul 30 10:01:04 2026 GMT
Subject: CN=cfb3d0019a2eef1b8cab8f0d1a4878690168c003
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:cf:ad:ca:b2:de:12:74:b8:78:1a:54:9e:37:
7b:91:ee:3b:c3:16:77:7a:65:0a:b5:51:b0:e9:56:
69:d1:e3:71:fd:a0:00:78:41:2a:52:94:ba:8b:04:
9e:9c:5f:6b:bd:be:44:ba:99:5d:e0:71:9e:0a:a1:
e6:cc:0d:1f:8e:41:4f:08:b5:16:0c:bf:9f:56:9a:
f7:f0:45:90:37:30:47:54:5a:d3:f4:04:34:07:a7:
89:b5:67:15:c2:33:92:19:c9:7f:6f:eb:13:b5:c8:
d9:dc:30:23:64:2f:03:13:3f:67:4a:03:7f:6d:12:
9c:b7:f7:9b:f7:da:cb:8a:15:b9:e9:3e:ac:cd:c6:
f3:a0:39:72:ad:17:84:11:9c:16:2a:9f:c4:b0:70:
84:f7:b0:63:cf:e5:8c:1d:cb:4d:61:49:0d:b2:e5:
c0:ea:f7:07:ff:61:36:9a:9c:e5:29:a3:12:de:07:
d9:32:dd:6f:b4:ad:67:75:4f:ea:7c:8f:58:8a:28:
09:d8:8d:8b:77:09:4e:7a:a2:c4:8d:7c:51:72:6c:
54:9d:0b:f8:1a:bc:d2:d0:38:00:1e:70:5c:41:3f:
e0:bc:1e:71:48:a5:14:33:84:e8:99:6e:de:74:cf:
41:bf:19:fb:41:e3:ea:24:a6:63:d2:74:bd:29:4d:
88:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:B3:D0:01:9A:2E:EF:1B:8C:AB:8F:0D:1A:48:78:69:01:68:C0:03
X509v3 Authority Key Identifier:
keyid:4C:37:89:EC:F6:7E:04:29:8C:5E:E4:4C:67:D8:FB:7F:5D:6D:95:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TDeJ7PZ-BCmMXuRMZ9j7f11tlaE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/7ed7b1-b8f3-43f3-96e3-1dc54d1c03a3/1/TDeJ7PZ-BCmMXuRMZ9j7f11tlaE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/7ed7b1-b8f3-43f3-96e3-1dc54d1c03a3/1/TDeJ7PZ-BCmMXuRMZ9j7f11tlaE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:67:81:7c:0a:33:64:5a:a7:df:17:78:fb:00:b7:1f:ad:cb:
c2:fd:66:e0:ce:93:de:b4:00:57:cd:9e:6f:d3:14:b6:78:f3:
6b:56:97:94:c9:ee:92:05:be:6b:e8:aa:75:22:e8:a8:42:0b:
01:a7:71:6d:d0:4e:b5:10:e5:62:18:e3:11:96:8e:7b:55:9a:
7d:e4:3e:59:c0:77:fa:80:d3:7b:e7:63:bf:f4:49:73:d6:81:
ac:cb:b4:41:e9:8d:10:c3:0d:ea:b5:a4:17:02:af:51:0e:44:
52:d2:ac:ba:4e:0b:f1:53:45:af:c9:a3:eb:f2:ad:ee:17:5a:
ba:88:69:3d:4e:35:c9:04:fc:9f:0b:8f:48:f3:e9:db:c2:03:
da:be:da:6d:f9:f5:83:2f:e5:85:5b:d5:ed:e4:90:4b:32:4f:
00:06:0b:f0:9d:28:01:a9:80:a1:c4:78:c3:e4:5e:00:62:0e:
55:13:2a:c3:ad:74:47:1d:d1:72:aa:15:88:00:3a:f8:b0:3b:
66:23:20:ba:d8:c3:6c:dd:a6:51:4c:d2:03:45:06:27:d4:9d:
81:02:9d:25:f8:81:7e:81:13:43:dc:1e:2d:8d:59:d0:74:39:
32:d0:44:47:38:2f:29:b2:c3:2b:8f:29:31:20:43:c3:03:68:
eb:28:a2:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 15:13:44 2026 by rpki-client