Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/264934-2a7f-428b-afe5-81d214edf298/1/tN1tZY4UVx6Dn3gT2jHyIXQigY4.mft
File: tN1tZY4UVx6Dn3gT2jHyIXQigY4.mft (raw, json)
Hash identifier: LajeIJ5dilPnrfxeuCGZ9HByxObl+p62e9kw+9cqI+0=
Subject key identifier: D7:47:00:19:4A:2C:0A:DD:4B:4C:7E:A9:1E:34:32:85:78:75:DC:C0
Authority key identifier: B4:DD:6D:65:8E:14:57:1E:83:9F:78:13:DA:31:F2:21:74:22:81:8E
Certificate issuer: /CN=b4dd6d658e14571e839f7813da31f2217422818e
Certificate serial: 019F93FFEB261CF97F16C8E6DACC2C567324
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tN1tZY4UVx6Dn3gT2jHyIXQigY4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/264934-2a7f-428b-afe5-81d214edf298/1/tN1tZY4UVx6Dn3gT2jHyIXQigY4.mft
Manifest number: 19C9
Signing time: Fri 24 Jul 2026 12:00:50 +0000
Manifest this update: Fri 24 Jul 2026 12:00:50 +0000
Manifest next update: Sat 25 Jul 2026 12:00:50 +0000
Files and hashes: 1: YwaTWFoU_sclTYJB9JwjIcKav1Y.roa (hash: Eu+5SivPrsHncNTTaLf6fSyoRwG5oxFjSNJBm3PvsI0=)
2: tN1tZY4UVx6Dn3gT2jHyIXQigY4.crl (hash: hSF31QPEKMqhkCBRslr2ZGXn1zJVEJe1UebsxCuQ+oc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/264934-2a7f-428b-afe5-81d214edf298/1/tN1tZY4UVx6Dn3gT2jHyIXQigY4.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/264934-2a7f-428b-afe5-81d214edf298/1/tN1tZY4UVx6Dn3gT2jHyIXQigY4.mft
rsync://rpki.ripe.net/repository/DEFAULT/tN1tZY4UVx6Dn3gT2jHyIXQigY4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 12:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:ff:eb:26:1c:f9:7f:16:c8:e6:da:cc:2c:56:73:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4dd6d658e14571e839f7813da31f2217422818e
Validity
Not Before: Jul 24 12:00:50 2026 GMT
Not After : Jul 25 12:00:50 2026 GMT
Subject: CN=d74700194a2c0add4b4c7ea91e3432857875dcc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:53:ab:e9:fd:3f:32:05:2b:15:3c:62:8e:d3:
16:86:ea:a9:f3:37:3a:fd:30:38:72:37:1f:e6:a7:
9d:79:7b:89:b3:1f:e0:63:ea:93:4d:51:68:b8:b0:
2e:a7:10:58:61:f4:78:6c:6d:b7:b6:1f:33:d0:2f:
e3:23:2d:28:1e:c8:e0:12:f0:94:4a:a7:08:82:7b:
83:e0:e5:44:a7:df:f5:49:20:0a:be:a6:a9:6f:4d:
92:39:12:1e:31:cb:d5:1a:36:90:43:34:75:fb:a8:
54:5a:03:52:c2:1b:58:c5:8c:78:aa:4e:37:93:28:
ed:9c:16:bc:42:a5:ac:3d:49:33:e8:3e:e8:56:d7:
b7:9d:e6:45:34:2c:1f:f0:03:34:09:4f:af:38:4a:
78:a8:a0:6b:45:95:9b:37:ad:c2:56:a3:d4:85:0c:
81:e5:45:f0:f7:af:58:82:16:4a:2b:60:73:43:8d:
71:a4:5c:77:ab:41:e5:aa:ea:79:52:19:29:d3:ed:
50:0c:a0:36:10:9b:c0:3f:01:1d:ef:aa:e2:5f:f7:
1d:bb:70:c4:6c:b2:26:c8:6c:8b:f0:b7:f0:2c:b7:
5e:4c:f0:59:eb:3d:3c:44:95:d1:27:f2:d9:0c:f6:
6d:48:7c:81:6d:3b:71:b4:48:95:97:3c:c7:a7:d3:
b6:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:47:00:19:4A:2C:0A:DD:4B:4C:7E:A9:1E:34:32:85:78:75:DC:C0
X509v3 Authority Key Identifier:
keyid:B4:DD:6D:65:8E:14:57:1E:83:9F:78:13:DA:31:F2:21:74:22:81:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tN1tZY4UVx6Dn3gT2jHyIXQigY4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/264934-2a7f-428b-afe5-81d214edf298/1/tN1tZY4UVx6Dn3gT2jHyIXQigY4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/264934-2a7f-428b-afe5-81d214edf298/1/tN1tZY4UVx6Dn3gT2jHyIXQigY4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:33:12:e6:b8:4b:b1:cb:18:b1:d8:ba:8d:a5:65:3d:78:4a:
6e:0e:e5:3e:18:d3:27:6e:20:da:2a:44:82:73:d9:17:cf:98:
19:b4:6a:4a:ce:5a:60:23:99:a0:e1:b0:a0:68:06:be:b0:e6:
2f:34:20:e4:f5:c2:30:3d:07:d5:ba:3d:8b:71:7d:7c:5b:72:
17:89:c7:cc:76:1c:6e:cf:e2:ec:70:a8:bb:a4:c7:ce:57:eb:
29:81:86:18:69:25:2e:6f:e9:a0:8e:4b:f7:b2:03:0e:bf:04:
bf:28:62:a0:55:8e:dd:ac:09:7b:a9:83:c5:e5:7f:db:2a:50:
66:7f:8d:2d:ca:03:42:78:21:b1:eb:af:95:02:4b:2b:fc:f1:
33:5f:b2:c2:a5:04:4a:c0:4e:1e:3e:64:83:ec:2e:c6:f9:6d:
0a:9c:11:9d:12:4a:66:21:16:8f:66:f6:62:fc:78:12:e1:45:
c5:53:ff:9d:1b:50:6e:16:13:58:a9:22:7c:cd:83:d1:53:43:
08:b9:1b:48:f1:2c:34:64:9c:f7:25:15:3e:aa:6e:c8:4f:c8:
61:6a:12:8e:e2:7c:b1:70:c6:0a:99:70:60:af:db:ce:16:23:
b4:f2:22:53:9c:a7:1f:d1:72:bf:f7:6d:53:e3:a9:d4:a4:a3:
44:83:d2:94
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+T/+smHPl/Fsjm2swsVnMkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0ZGQ2ZDY1OGUxNDU3MWU4MzlmNzgxM2RhMzFmMjIxNzQy
MjgxOGUwHhcNMjYwNzI0MTIwMDUwWhcNMjYwNzI1MTIwMDUwWjAzMTEwLwYDVQQD
EyhkNzQ3MDAxOTRhMmMwYWRkNGI0YzdlYTkxZTM0MzI4NTc4NzVkY2MwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0lOr6f0/MgUrFTxijtMWhuqp8zc6
/TA4cjcf5qedeXuJsx/gY+qTTVFouLAupxBYYfR4bG23th8z0C/jIy0oHsjgEvCU
SqcIgnuD4OVEp9/1SSAKvqapb02SORIeMcvVGjaQQzR1+6hUWgNSwhtYxYx4qk43
kyjtnBa8QqWsPUkz6D7oVte3neZFNCwf8AM0CU+vOEp4qKBrRZWbN63CVqPUhQyB
5UXw969YghZKK2BzQ41xpFx3q0Hlqup5Uhkp0+1QDKA2EJvAPwEd76riX/cdu3DE
bLImyGyL8LfwLLdeTPBZ6z08RJXRJ/LZDPZtSHyBbTtxtEiVlzzHp9O2qwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNdHABlKLArdS0x+qR40MoV4ddzAMB8GA1UdIwQY
MBaAFLTdbWWOFFceg594E9ox8iF0IoGOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdE4xdFpZNFVWeDZEbjNnVDJqSHlJWFFpZ1k0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy8yNjQ5MzQtMmE3Zi00MjhiLWFmZTUt
ODFkMjE0ZWRmMjk4LzEvdE4xdFpZNFVWeDZEbjNnVDJqSHlJWFFpZ1k0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy8yNjQ5MzQtMmE3Zi00MjhiLWFmZTUtODFkMjE0ZWRmMjk4
LzEvdE4xdFpZNFVWeDZEbjNnVDJqSHlJWFFpZ1k0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOzMS5rhL
scsYsdi6jaVlPXhKbg7lPhjTJ24g2ipEgnPZF8+YGbRqSs5aYCOZoOGwoGgGvrDm
LzQg5PXCMD0H1bo9i3F9fFtyF4nHzHYcbs/i7HCou6THzlfrKYGGGGklLm/poI5L
97IDDr8EvyhioFWO3awJe6mDxeV/2ypQZn+NLcoDQnghseuvlQJLK/zxM1+ywqUE
SsBOHj5kg+wuxvltCpwRnRJKZiEWj2b2Yvx4EuFFxVP/nRtQbhYTWKkifM2D0VND
CLkbSPEsNGSc9yUVPqpuyE/IYWoSjuJ8sXDGCplwYK/bzhYjtPIiU5ynH9Fyv/dt
U+Op1KSjRIPSlA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 21:08:08 2026 by rpki-client