Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/795ed9-8fad-4c44-8583-06ca709a3c59/1/tcsrXq88wV3Us7I62LlHKlJAwDs.mft
File: tcsrXq88wV3Us7I62LlHKlJAwDs.mft (raw, json)
Hash identifier: q8mnxVOb0LF744rtIe/WbvgqChfy9UY8y3JVbRWB9i8=
Subject key identifier: B1:9C:B2:89:EC:17:62:AF:11:BF:97:FA:7F:EC:E0:66:F9:B3:D8:FC
Authority key identifier: B5:CB:2B:5E:AF:3C:C1:5D:D4:B3:B2:3A:D8:B9:47:2A:52:40:C0:3B
Certificate issuer: /CN=b5cb2b5eaf3cc15dd4b3b23ad8b9472a5240c03b
Certificate serial: 019FAC3F65B2BFA9D73D434431CE650358D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tcsrXq88wV3Us7I62LlHKlJAwDs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/795ed9-8fad-4c44-8583-06ca709a3c59/1/tcsrXq88wV3Us7I62LlHKlJAwDs.mft
Manifest number: 03B7
Signing time: Wed 29 Jul 2026 05:01:03 +0000
Manifest this update: Wed 29 Jul 2026 05:01:03 +0000
Manifest next update: Thu 30 Jul 2026 05:01:03 +0000
Files and hashes: 1: GJGcFx0xGAuamOa3lmo_7TyCIas.roa (hash: qw0UBzd9Mkc6V2U3rQ/Tp5ymNOy4O3f5at2SdO5Hyh4=)
2: JD-_RMbQpF-pKZOnXs4mYFjjidQ.roa (hash: kFiezG9HvRIWsHO1y6hBEeY1FqGlLKVulu5N0PlRmH8=)
3: mOOpQixSR_G0BkBLz_pfNJqCpPc.roa (hash: J7597tV7KTTIerXR1FKozSh7ddWeTNBPbVoOCxMRSXM=)
4: tcsrXq88wV3Us7I62LlHKlJAwDs.crl (hash: 8fzQIM9nRpqkm1x31HZ+rFdE06RYcNVFbEsU886iZUU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/795ed9-8fad-4c44-8583-06ca709a3c59/1/tcsrXq88wV3Us7I62LlHKlJAwDs.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/795ed9-8fad-4c44-8583-06ca709a3c59/1/tcsrXq88wV3Us7I62LlHKlJAwDs.mft
rsync://rpki.ripe.net/repository/DEFAULT/tcsrXq88wV3Us7I62LlHKlJAwDs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 05:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:3f:65:b2:bf:a9:d7:3d:43:44:31:ce:65:03:58:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5cb2b5eaf3cc15dd4b3b23ad8b9472a5240c03b
Validity
Not Before: Jul 29 05:01:03 2026 GMT
Not After : Jul 30 05:01:03 2026 GMT
Subject: CN=b19cb289ec1762af11bf97fa7fece066f9b3d8fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:31:cf:1f:3e:21:66:76:b6:53:af:c2:0f:0b:
20:e6:8e:ab:28:a3:dc:96:f0:88:50:01:07:56:a8:
55:86:0b:93:25:2d:6e:dc:b0:45:56:37:fd:e7:b9:
98:cc:7b:35:03:f0:a9:5a:26:0b:40:30:e2:bf:8d:
3d:c4:c8:af:f7:63:4c:72:4d:62:da:53:90:6c:c6:
bf:77:f1:92:cb:a7:b5:90:91:9a:c4:3e:d1:bf:dd:
b0:87:10:60:22:db:33:29:7b:77:ab:2c:f9:c0:e9:
22:78:d5:7b:e5:31:ab:1c:ca:a6:5b:de:96:2d:03:
1b:0d:26:95:7a:2e:cf:68:47:4e:c0:40:a6:25:07:
f9:af:7a:d8:9f:21:db:f3:0c:1c:59:4e:c7:a8:1e:
f5:50:07:d8:69:37:c1:3d:12:27:16:e1:0e:1f:43:
62:50:06:92:65:1b:fc:8e:d8:5f:fe:d1:fa:03:0e:
06:0a:96:33:3a:be:84:c1:d1:3b:19:9b:6e:79:eb:
2c:55:fb:27:f0:b2:6b:11:7f:3c:b0:62:c1:dd:86:
0c:8d:d5:a5:49:f7:5d:6a:84:c9:63:0f:7c:7e:74:
73:01:fb:15:29:3d:a9:9f:60:b1:8a:24:d1:e2:a3:
f2:29:96:0c:cc:09:0f:5c:35:4f:29:fc:e9:0d:49:
8d:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:9C:B2:89:EC:17:62:AF:11:BF:97:FA:7F:EC:E0:66:F9:B3:D8:FC
X509v3 Authority Key Identifier:
keyid:B5:CB:2B:5E:AF:3C:C1:5D:D4:B3:B2:3A:D8:B9:47:2A:52:40:C0:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tcsrXq88wV3Us7I62LlHKlJAwDs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/795ed9-8fad-4c44-8583-06ca709a3c59/1/tcsrXq88wV3Us7I62LlHKlJAwDs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/795ed9-8fad-4c44-8583-06ca709a3c59/1/tcsrXq88wV3Us7I62LlHKlJAwDs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:30:44:08:ff:ea:cf:e6:a7:51:96:d6:96:7a:50:90:df:88:
66:eb:b0:95:5f:5d:eb:83:93:2c:19:cf:c9:cd:67:28:05:3b:
86:ab:15:f1:47:fa:f6:3e:d3:ac:d1:7f:95:38:b4:0b:7a:e3:
8d:95:60:b4:e5:b0:dc:88:ac:53:2f:f5:1d:42:8e:85:4d:1d:
7f:99:fe:06:0f:ba:63:18:95:b3:22:91:6a:4e:63:68:03:35:
54:e7:72:ea:9b:3e:bf:6d:20:50:82:e4:29:57:d8:1e:a3:1d:
f9:0e:a2:29:95:93:47:3d:f0:bc:db:9b:4e:fb:a0:51:f4:6a:
0f:24:20:a6:5f:13:fe:f1:9e:72:8f:b2:8b:5a:64:53:43:34:
f8:b9:9d:4e:b4:a1:5b:a1:f4:bc:6a:eb:d5:c8:56:55:1b:b6:
07:23:ef:71:07:b1:66:01:59:e8:57:55:5b:5b:d2:8c:bb:c4:
c2:b9:e7:65:00:8e:1b:93:13:3d:44:06:3c:88:51:21:a7:2a:
8e:ef:d6:52:e8:f6:de:a7:dc:36:0d:2c:ef:4a:96:8c:32:e4:
02:6e:cc:ee:1c:84:40:d5:29:1e:e5:3c:56:c2:d3:39:76:99:
2a:77:11:94:aa:6e:e4:2c:a2:3d:f9:8a:96:87:bd:e9:d1:20:
31:b3:60:21
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+sP2Wyv6nXPUNEMc5lA1jVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1Y2IyYjVlYWYzY2MxNWRkNGIzYjIzYWQ4Yjk0NzJhNTI0
MGMwM2IwHhcNMjYwNzI5MDUwMTAzWhcNMjYwNzMwMDUwMTAzWjAzMTEwLwYDVQQD
EyhiMTljYjI4OWVjMTc2MmFmMTFiZjk3ZmE3ZmVjZTA2NmY5YjNkOGZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvjHPHz4hZna2U6/CDwsg5o6rKKPc
lvCIUAEHVqhVhguTJS1u3LBFVjf957mYzHs1A/CpWiYLQDDiv409xMiv92NMck1i
2lOQbMa/d/GSy6e1kJGaxD7Rv92whxBgItszKXt3qyz5wOkieNV75TGrHMqmW96W
LQMbDSaVei7PaEdOwECmJQf5r3rYnyHb8wwcWU7HqB71UAfYaTfBPRInFuEOH0Ni
UAaSZRv8jthf/tH6Aw4GCpYzOr6EwdE7GZtueessVfsn8LJrEX88sGLB3YYMjdWl
SfddaoTJYw98fnRzAfsVKT2pn2CxiiTR4qPyKZYMzAkPXDVPKfzpDUmNQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLGcsonsF2KvEb+X+n/s4Gb5s9j8MB8GA1UdIwQY
MBaAFLXLK16vPMFd1LOyOti5RypSQMA7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdGNzclhxODh3VjNVczdJNjJMbEhLbEpBd0RzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS83OTVlZDktOGZhZC00YzQ0LTg1ODMt
MDZjYTcwOWEzYzU5LzEvdGNzclhxODh3VjNVczdJNjJMbEhLbEpBd0RzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS83OTVlZDktOGZhZC00YzQ0LTg1ODMtMDZjYTcwOWEzYzU5
LzEvdGNzclhxODh3VjNVczdJNjJMbEhLbEpBd0RzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhjBECP/q
z+anUZbWlnpQkN+IZuuwlV9d64OTLBnPyc1nKAU7hqsV8Uf69j7TrNF/lTi0C3rj
jZVgtOWw3IisUy/1HUKOhU0df5n+Bg+6YxiVsyKRak5jaAM1VOdy6ps+v20gUILk
KVfYHqMd+Q6iKZWTRz3wvNubTvugUfRqDyQgpl8T/vGeco+yi1pkU0M0+LmdTrSh
W6H0vGrr1chWVRu2ByPvcQexZgFZ6FdVW1vSjLvEwrnnZQCOG5MTPUQGPIhRIacq
ju/WUuj23qfcNg0s70qWjDLkAm7M7hyEQNUpHuU8VsLTOXaZKncRlKpu5CyiPfmK
loe96dEgMbNgIQ==
-----END CERTIFICATE-----
Generated at Wed Jul 29 12:23:28 2026 by rpki-client