Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/ec5584-6618-4b12-a11c-3055cb729bcf/1/TDuIzbE_PrEqm-VKsZuqkFWbOWo.mft
File: TDuIzbE_PrEqm-VKsZuqkFWbOWo.mft (raw, json)
Hash identifier: IuZpfMQ5SmrAZCsbMao7TWFW2ph55H/X/SXVdHpXt6k=
Subject key identifier: 49:22:DD:2E:C2:63:B4:A2:08:2C:94:86:8F:C5:64:80:58:4D:05:42
Authority key identifier: 4C:3B:88:CD:B1:3F:3E:B1:2A:9B:E5:4A:B1:9B:AA:90:55:9B:39:6A
Certificate issuer: /CN=4c3b88cdb13f3eb12a9be54ab19baa90559b396a
Certificate serial: 019FAA88213CAEEBF94E58965A816A1A2E6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TDuIzbE_PrEqm-VKsZuqkFWbOWo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/ec5584-6618-4b12-a11c-3055cb729bcf/1/TDuIzbE_PrEqm-VKsZuqkFWbOWo.mft
Manifest number: 0B6E
Signing time: Tue 28 Jul 2026 21:01:15 +0000
Manifest this update: Tue 28 Jul 2026 21:01:15 +0000
Manifest next update: Wed 29 Jul 2026 21:01:15 +0000
Files and hashes: 1: NSzxR15lxLwAdc7Ga165-6mKacc.roa (hash: 3N9qBcothKO0rosVFxeggNkLbRm7QTKDO+BXyY2NEkk=)
2: QXNEa0rLZxlRlsB-8HuZ_VSJWP0.asa (hash: 6rji+pOpggUWT3pycZRN/hU8sc0Lzb5vIQ3TtjqmA1k=)
3: TDuIzbE_PrEqm-VKsZuqkFWbOWo.crl (hash: 1gutLQqP463uGboHYxvjN+yhxjEsCzSk9Np66KSPXHg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/ec5584-6618-4b12-a11c-3055cb729bcf/1/TDuIzbE_PrEqm-VKsZuqkFWbOWo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/ec5584-6618-4b12-a11c-3055cb729bcf/1/TDuIzbE_PrEqm-VKsZuqkFWbOWo.mft
rsync://rpki.ripe.net/repository/DEFAULT/TDuIzbE_PrEqm-VKsZuqkFWbOWo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 21:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:88:21:3c:ae:eb:f9:4e:58:96:5a:81:6a:1a:2e:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c3b88cdb13f3eb12a9be54ab19baa90559b396a
Validity
Not Before: Jul 28 21:01:15 2026 GMT
Not After : Jul 29 21:01:15 2026 GMT
Subject: CN=4922dd2ec263b4a2082c94868fc56480584d0542
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:fe:8c:84:36:02:f4:00:62:7f:14:be:f0:42:
c8:78:e1:fa:ff:5e:a7:6f:47:0a:41:f5:48:46:b3:
0b:de:d0:0e:15:49:51:f6:c2:b7:dc:1e:0c:fd:db:
b9:65:70:97:fb:c5:34:8c:39:a5:d8:dd:f3:9e:45:
0d:41:c8:92:12:03:ae:a4:de:2c:8c:97:e4:2b:e6:
4c:c5:77:7f:62:bb:0d:a4:f2:fe:01:23:75:82:87:
bf:be:8b:e8:33:96:b5:05:64:11:57:73:59:67:f5:
32:10:26:0f:43:24:75:d3:81:05:a6:c8:4a:ae:22:
59:ee:ca:5c:e2:0e:24:94:84:94:73:77:e7:80:54:
45:12:7b:f0:ec:d8:63:d9:2d:ba:dc:80:52:95:26:
9b:57:4d:68:65:23:f3:69:5d:ee:d3:22:4b:d5:4e:
43:be:7f:f3:2d:fe:51:bd:b5:05:05:05:aa:3d:d0:
6c:f3:06:af:38:45:f8:1a:c8:d9:58:eb:7a:41:a5:
e4:2c:e8:ce:a5:72:4f:f7:30:e3:25:2d:65:29:6d:
ac:23:36:2d:11:9d:32:f3:63:a5:19:77:45:17:ce:
78:03:c5:90:6b:17:63:f8:9d:4d:53:de:5a:82:b0:
5e:9b:77:c5:ab:d7:9d:73:d1:97:5c:64:1b:14:b0:
ec:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:22:DD:2E:C2:63:B4:A2:08:2C:94:86:8F:C5:64:80:58:4D:05:42
X509v3 Authority Key Identifier:
keyid:4C:3B:88:CD:B1:3F:3E:B1:2A:9B:E5:4A:B1:9B:AA:90:55:9B:39:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TDuIzbE_PrEqm-VKsZuqkFWbOWo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/ec5584-6618-4b12-a11c-3055cb729bcf/1/TDuIzbE_PrEqm-VKsZuqkFWbOWo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/ec5584-6618-4b12-a11c-3055cb729bcf/1/TDuIzbE_PrEqm-VKsZuqkFWbOWo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:59:a9:98:4f:83:5d:5f:db:54:b7:ab:29:94:ee:8d:f2:d1:
39:1d:24:a3:2d:34:01:87:08:db:9c:ad:63:a5:b3:d7:d1:51:
1d:c7:0e:a9:b7:2c:f3:37:6d:15:fc:79:01:87:25:fd:d8:19:
49:24:14:58:56:92:7b:96:9c:bc:78:6c:78:8e:bb:61:b7:ef:
bf:ba:32:14:e4:ee:ca:dd:27:5f:b2:f8:d3:ea:ba:b3:bc:c4:
36:39:81:39:3b:38:90:fc:2e:cd:0c:50:fa:30:9e:9d:32:b6:
e9:08:80:12:51:61:39:3e:63:78:4c:79:e6:43:3a:62:40:f3:
fc:25:7d:c2:f0:c7:0c:7d:ac:52:e4:61:30:81:62:dc:e3:b7:
03:5f:ae:3a:c5:8b:52:60:13:93:ec:b9:71:79:50:4e:32:6b:
89:52:08:8b:e2:06:a6:d9:04:45:e8:6c:63:c0:63:e2:ae:b4:
6d:97:1a:13:7c:4e:a6:d1:2e:08:fa:2c:af:f2:18:3e:0c:ef:
16:5f:11:d9:0f:cf:be:74:22:b6:88:d9:62:81:c7:d4:79:12:
83:59:f5:37:08:20:64:89:6a:36:33:94:fe:42:f6:ad:5d:2f:
6d:bb:84:fe:d5:48:90:c1:06:b5:f1:79:54:98:18:c3:42:97:
ab:17:55:70
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+qiCE8ruv5TliWWoFqGi5vMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjM2I4OGNkYjEzZjNlYjEyYTliZTU0YWIxOWJhYTkwNTU5
YjM5NmEwHhcNMjYwNzI4MjEwMTE1WhcNMjYwNzI5MjEwMTE1WjAzMTEwLwYDVQQD
Eyg0OTIyZGQyZWMyNjNiNGEyMDgyYzk0ODY4ZmM1NjQ4MDU4NGQwNTQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkP6MhDYC9ABifxS+8ELIeOH6/16n
b0cKQfVIRrML3tAOFUlR9sK33B4M/du5ZXCX+8U0jDml2N3znkUNQciSEgOupN4s
jJfkK+ZMxXd/YrsNpPL+ASN1goe/vovoM5a1BWQRV3NZZ/UyECYPQyR104EFpshK
riJZ7spc4g4klISUc3fngFRFEnvw7Nhj2S263IBSlSabV01oZSPzaV3u0yJL1U5D
vn/zLf5RvbUFBQWqPdBs8wavOEX4GsjZWOt6QaXkLOjOpXJP9zDjJS1lKW2sIzYt
EZ0y82OlGXdFF854A8WQaxdj+J1NU95agrBem3fFq9edc9GXXGQbFLDsUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEki3S7CY7SiCCyUho/FZIBYTQVCMB8GA1UdIwQY
MBaAFEw7iM2xPz6xKpvlSrGbqpBVmzlqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVER1SXpiRV9QckVxbS1WS3NadXFrRldiT1dvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy9lYzU1ODQtNjYxOC00YjEyLWExMWMt
MzA1NWNiNzI5YmNmLzEvVER1SXpiRV9QckVxbS1WS3NadXFrRldiT1dvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy9lYzU1ODQtNjYxOC00YjEyLWExMWMtMzA1NWNiNzI5YmNm
LzEvVER1SXpiRV9QckVxbS1WS3NadXFrRldiT1dvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXFmpmE+D
XV/bVLerKZTujfLROR0koy00AYcI25ytY6Wz19FRHccOqbcs8zdtFfx5AYcl/dgZ
SSQUWFaSe5acvHhseI67Ybfvv7oyFOTuyt0nX7L40+q6s7zENjmBOTs4kPwuzQxQ
+jCenTK26QiAElFhOT5jeEx55kM6YkDz/CV9wvDHDH2sUuRhMIFi3OO3A1+uOsWL
UmATk+y5cXlQTjJriVIIi+IGptkERehsY8Bj4q60bZcaE3xOptEuCPosr/IYPgzv
Fl8R2Q/PvnQitojZYoHH1HkSg1n1NwggZIlqNjOU/kL2rV0vbbuE/tVIkMEGtfF5
VJgYw0KXqxdVcA==
-----END CERTIFICATE-----
Generated at Wed Jul 29 02:48:13 2026 by rpki-client