Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e6a3c7-38d5-4540-b925-92bad5641598/1/Tdgz3893GGXftIVZ4fHG-TWOXrs.mft
File: Tdgz3893GGXftIVZ4fHG-TWOXrs.mft (raw, json)
Hash identifier: 7naDL0/hRKDo20hyqs5IEQReIPQdtrmbAf3s3quhBEs=
Subject key identifier: 95:9C:30:E3:1E:B4:68:CE:E0:6B:8F:D9:FE:4B:29:81:70:AE:C9:FE
Authority key identifier: 4D:D8:33:DF:CF:77:18:65:DF:B4:85:59:E1:F1:C6:F9:35:8E:5E:BB
Certificate issuer: /CN=4dd833dfcf771865dfb48559e1f1c6f9358e5ebb
Certificate serial: 019F90911F5B80D64B13FC33760FD4BAE8FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tdgz3893GGXftIVZ4fHG-TWOXrs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e6a3c7-38d5-4540-b925-92bad5641598/1/Tdgz3893GGXftIVZ4fHG-TWOXrs.mft
Manifest number: F2
Signing time: Thu 23 Jul 2026 20:00:57 +0000
Manifest this update: Thu 23 Jul 2026 20:00:57 +0000
Manifest next update: Fri 24 Jul 2026 20:00:57 +0000
Files and hashes: 1: Tdgz3893GGXftIVZ4fHG-TWOXrs.crl (hash: M/3oWGkAZ8ea/bmV7jtTyiROwkaIiuFr22RlNKdOGjw=)
2: vY2tTuvU2bXmD8ZEra6Cc_X15hw.asa (hash: fzDYYNkCwUZhlvkjfrFr/hgbEcIoXdhFh+55Z0wgexM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/e6a3c7-38d5-4540-b925-92bad5641598/1/Tdgz3893GGXftIVZ4fHG-TWOXrs.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/e6a3c7-38d5-4540-b925-92bad5641598/1/Tdgz3893GGXftIVZ4fHG-TWOXrs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tdgz3893GGXftIVZ4fHG-TWOXrs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:91:1f:5b:80:d6:4b:13:fc:33:76:0f:d4:ba:e8:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4dd833dfcf771865dfb48559e1f1c6f9358e5ebb
Validity
Not Before: Jul 23 20:00:57 2026 GMT
Not After : Jul 24 20:00:57 2026 GMT
Subject: CN=959c30e31eb468cee06b8fd9fe4b298170aec9fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:a9:f5:bc:bf:19:da:bf:f2:4c:5a:86:4e:75:
cb:9a:e1:74:9a:28:96:e5:26:45:35:c9:40:24:18:
bd:40:44:a9:87:9a:4d:dc:c9:71:83:d2:b7:d3:90:
82:4d:ad:0a:eb:5f:48:9d:80:cf:b8:d0:7f:54:dd:
6e:75:96:12:41:6b:72:a1:80:08:b1:7d:2e:fa:a7:
19:72:70:04:13:c2:80:96:d2:9a:7d:7a:e4:c7:57:
02:4e:97:11:2b:c1:7a:9e:74:1c:b5:2e:88:85:f9:
ba:77:be:02:16:58:eb:9a:1c:bd:80:ab:ef:4f:3a:
45:4b:28:80:3d:60:0e:5c:e6:b3:64:d3:ce:0c:a9:
a5:01:79:0f:9a:13:c9:d6:ec:af:46:cf:b9:fc:27:
20:25:56:90:15:e7:b5:52:cb:72:c3:09:60:a9:cd:
a1:41:7f:38:77:41:1e:fb:0c:47:3f:d9:0f:a2:9b:
6e:5b:27:42:ea:08:95:a7:21:c5:41:19:e3:8a:0f:
34:0f:dc:c6:19:4c:2b:5f:4f:ad:99:db:bf:05:a2:
8b:89:85:86:0e:e3:12:dc:a2:8b:eb:1f:de:4a:90:
84:68:50:79:32:30:b6:6a:58:08:a7:11:9b:13:78:
f1:41:af:6c:0a:f1:6e:3f:5d:50:3b:b2:37:80:17:
5a:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:9C:30:E3:1E:B4:68:CE:E0:6B:8F:D9:FE:4B:29:81:70:AE:C9:FE
X509v3 Authority Key Identifier:
keyid:4D:D8:33:DF:CF:77:18:65:DF:B4:85:59:E1:F1:C6:F9:35:8E:5E:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tdgz3893GGXftIVZ4fHG-TWOXrs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e6a3c7-38d5-4540-b925-92bad5641598/1/Tdgz3893GGXftIVZ4fHG-TWOXrs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e6a3c7-38d5-4540-b925-92bad5641598/1/Tdgz3893GGXftIVZ4fHG-TWOXrs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:75:1d:55:9e:b0:59:30:0d:a4:ef:ee:ca:6e:a5:30:b1:58:
89:bc:21:9d:e7:30:00:d9:8e:fa:01:34:c0:3d:fd:56:6f:f6:
08:f0:64:8a:42:ca:b8:f4:fb:4e:f6:a7:1b:8a:ac:dc:37:87:
5f:96:75:7e:b9:30:e3:2f:c4:71:da:41:33:47:74:9f:1a:77:
0f:d1:4a:32:13:62:03:36:f2:42:31:ce:ad:07:1d:17:7d:9e:
45:d0:0d:32:3f:15:f2:66:90:4d:0e:b1:ea:4c:1e:9e:df:01:
51:5f:f1:89:4a:43:39:f6:de:53:0c:ab:0b:78:98:cf:8b:18:
57:40:43:f8:4a:32:94:f2:83:dc:33:ed:a6:32:60:ce:c1:aa:
c6:f9:e2:37:e5:5c:a3:9d:3f:62:5f:7b:a7:aa:56:64:ae:ca:
dc:c7:fd:12:d9:44:e9:c0:f7:ef:49:e8:55:d0:27:8d:59:0d:
54:84:ad:1b:ff:4d:39:5c:80:32:6c:06:50:61:45:f5:07:df:
94:54:cc:fe:70:b6:76:d1:7a:d0:3b:a4:34:18:88:5f:18:b0:
f9:73:b1:23:48:50:04:98:1f:16:10:38:4b:9f:e0:d7:f6:bc:
15:ac:3b:b5:c9:12:e7:9f:9b:a6:b8:7a:a4:3e:db:ef:04:b1:
87:eb:4b:a3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+QkR9bgNZLE/wzdg/Uuuj/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRkZDgzM2RmY2Y3NzE4NjVkZmI0ODU1OWUxZjFjNmY5MzU4
ZTVlYmIwHhcNMjYwNzIzMjAwMDU3WhcNMjYwNzI0MjAwMDU3WjAzMTEwLwYDVQQD
Eyg5NTljMzBlMzFlYjQ2OGNlZTA2YjhmZDlmZTRiMjk4MTcwYWVjOWZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx6n1vL8Z2r/yTFqGTnXLmuF0miiW
5SZFNclAJBi9QESph5pN3Mlxg9K305CCTa0K619InYDPuNB/VN1udZYSQWtyoYAI
sX0u+qcZcnAEE8KAltKafXrkx1cCTpcRK8F6nnQctS6Ihfm6d74CFljrmhy9gKvv
TzpFSyiAPWAOXOazZNPODKmlAXkPmhPJ1uyvRs+5/CcgJVaQFee1Ustywwlgqc2h
QX84d0Ee+wxHP9kPoptuWydC6giVpyHFQRnjig80D9zGGUwrX0+tmdu/BaKLiYWG
DuMS3KKL6x/eSpCEaFB5MjC2algIpxGbE3jxQa9sCvFuP11QO7I3gBdauwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJWcMOMetGjO4GuP2f5LKYFwrsn+MB8GA1UdIwQY
MBaAFE3YM9/Pdxhl37SFWeHxxvk1jl67MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVGRnejM4OTNHR1hmdElWWjRmSEctVFdPWHJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy9lNmEzYzctMzhkNS00NTQwLWI5MjUt
OTJiYWQ1NjQxNTk4LzEvVGRnejM4OTNHR1hmdElWWjRmSEctVFdPWHJzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNy9lNmEzYzctMzhkNS00NTQwLWI5MjUtOTJiYWQ1NjQxNTk4
LzEvVGRnejM4OTNHR1hmdElWWjRmSEctVFdPWHJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAt3UdVZ6w
WTANpO/uym6lMLFYibwhnecwANmO+gE0wD39Vm/2CPBkikLKuPT7TvanG4qs3DeH
X5Z1frkw4y/EcdpBM0d0nxp3D9FKMhNiAzbyQjHOrQcdF32eRdANMj8V8maQTQ6x
6kwent8BUV/xiUpDOfbeUwyrC3iYz4sYV0BD+EoylPKD3DPtpjJgzsGqxvniN+Vc
o50/Yl97p6pWZK7K3Mf9EtlE6cD370noVdAnjVkNVIStG/9NOVyAMmwGUGFF9Qff
lFTM/nC2dtF60DukNBiIXxiw+XOxI0hQBJgfFhA4S5/g1/a8Faw7tckS55+bprh6
pD7b7wSxh+tLow==
-----END CERTIFICATE-----
Generated at Fri Jul 24 00:17:40 2026 by rpki-client