Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/b9c906-1e85-4573-8f62-8257d51928a9/1/fTXAsgkTXCLMgAWnwuIixjwTbLA.mft
File: fTXAsgkTXCLMgAWnwuIixjwTbLA.mft (raw, json)
Hash identifier: Ce9jVp8kxECZC3bZK2gDmw9Wu59xRre+BV3nQsDnlIk=
Subject key identifier: 52:F7:DF:81:EB:65:0B:03:DC:CD:9D:BC:B6:9F:8D:69:85:7E:27:CD
Authority key identifier: 7D:35:C0:B2:09:13:5C:22:CC:80:05:A7:C2:E2:22:C6:3C:13:6C:B0
Certificate issuer: /CN=7d35c0b209135c22cc8005a7c2e222c63c136cb0
Certificate serial: 019F94A45176DBECBA289B2C3E668C9F716E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fTXAsgkTXCLMgAWnwuIixjwTbLA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/b9c906-1e85-4573-8f62-8257d51928a9/1/fTXAsgkTXCLMgAWnwuIixjwTbLA.mft
Manifest number: 19C8
Signing time: Fri 24 Jul 2026 15:00:24 +0000
Manifest this update: Fri 24 Jul 2026 15:00:24 +0000
Manifest next update: Sat 25 Jul 2026 15:00:24 +0000
Files and hashes: 1: fTXAsgkTXCLMgAWnwuIixjwTbLA.crl (hash: 8oU26jLyA+uZjdq/KiqYJH546HjNvOF49OpSgy+Owxw=)
2: grQlShm9Yf4p9v0UY4WRgIC18Rg.roa (hash: 0KLMtmRL0pnGPXXoN5qSCFJywF+voZI8ebkJsYdl6wg=)
3: l1AVp_w4-LVuNkKZXyFJBaRiTqU.roa (hash: pv6l02vTFMwEiJ4PcQNABkmbJULiDmx5aoXWeKtSRA0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/b9c906-1e85-4573-8f62-8257d51928a9/1/fTXAsgkTXCLMgAWnwuIixjwTbLA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/b9c906-1e85-4573-8f62-8257d51928a9/1/fTXAsgkTXCLMgAWnwuIixjwTbLA.mft
rsync://rpki.ripe.net/repository/DEFAULT/fTXAsgkTXCLMgAWnwuIixjwTbLA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 15:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:a4:51:76:db:ec:ba:28:9b:2c:3e:66:8c:9f:71:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d35c0b209135c22cc8005a7c2e222c63c136cb0
Validity
Not Before: Jul 24 15:00:24 2026 GMT
Not After : Jul 25 15:00:24 2026 GMT
Subject: CN=52f7df81eb650b03dccd9dbcb69f8d69857e27cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:ac:8e:cd:5b:3f:95:b5:71:1f:fc:08:73:61:
db:58:6c:7b:7c:0e:0f:c4:fe:89:8c:be:8d:74:47:
68:66:65:51:2f:d9:0e:be:fa:89:fa:46:b7:6f:e9:
00:b0:f6:b0:f9:35:73:1e:3b:e3:c8:77:67:9c:5a:
cf:fb:5a:da:ea:86:22:20:66:70:75:39:40:b5:01:
e9:85:75:1d:9d:fa:27:ef:90:59:4c:97:80:c9:de:
ec:76:e5:a2:fe:cb:5d:ef:cd:16:d1:99:97:4d:12:
1a:98:71:10:0e:32:8f:56:e2:9d:36:c0:ab:06:98:
18:62:00:04:94:7c:a4:be:00:3c:02:b2:ec:3a:16:
71:85:24:13:c2:3a:6f:88:bf:20:dd:b5:e7:e2:16:
f4:e3:38:de:d2:7f:51:1b:90:c1:2c:94:e9:a7:c2:
f1:9e:0e:78:3e:2c:6b:3d:65:33:2e:b2:61:ba:96:
1c:94:85:79:58:b5:b6:c1:bd:80:96:36:6c:9f:02:
84:a7:f1:6c:0e:f5:52:c5:fa:f2:4f:28:ed:1e:8a:
b9:4b:12:8e:e0:9b:b2:e0:78:e6:da:24:33:5e:49:
c0:db:2a:b2:0f:ed:73:20:f1:34:ad:de:2f:0e:b1:
19:eb:2d:a1:cc:56:1c:4c:0a:e0:04:b4:2a:02:95:
59:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:F7:DF:81:EB:65:0B:03:DC:CD:9D:BC:B6:9F:8D:69:85:7E:27:CD
X509v3 Authority Key Identifier:
keyid:7D:35:C0:B2:09:13:5C:22:CC:80:05:A7:C2:E2:22:C6:3C:13:6C:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fTXAsgkTXCLMgAWnwuIixjwTbLA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/b9c906-1e85-4573-8f62-8257d51928a9/1/fTXAsgkTXCLMgAWnwuIixjwTbLA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/b9c906-1e85-4573-8f62-8257d51928a9/1/fTXAsgkTXCLMgAWnwuIixjwTbLA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:0d:bd:6e:92:a6:0d:87:8b:44:0b:d8:ce:f9:97:f0:82:ee:
1e:c4:8c:54:a5:7f:12:af:bc:f0:f3:f9:91:31:36:7b:ee:25:
f0:54:28:2b:95:53:a2:7b:39:eb:8c:87:aa:c3:63:3c:b8:eb:
7b:65:77:e2:36:5d:60:f2:cb:61:4f:04:6c:9f:76:43:5a:a6:
2b:5c:98:b1:43:cc:bc:78:94:1c:53:56:fe:94:91:39:65:d6:
f4:f0:89:4e:a9:e2:82:18:07:a3:6b:72:6f:d7:1b:66:ed:69:
76:44:64:11:d3:28:96:f8:1c:67:8b:45:2c:24:69:5e:57:39:
e8:bc:bd:01:16:7f:a1:13:d1:41:a3:db:15:38:81:b6:39:7e:
d1:72:54:09:7b:2d:e0:df:b5:21:e6:29:a4:fa:6b:c8:4b:98:
9d:ec:3f:90:d6:e5:f8:0e:13:cc:e9:da:84:24:f7:e2:50:4e:
17:64:e7:7b:d4:aa:87:d8:9a:12:2a:fb:8f:46:d5:b6:39:26:
69:c2:f5:dc:d6:92:5c:f8:1e:a4:2f:e0:a1:f2:b7:0b:c9:9e:
f6:94:6d:36:31:80:8f:d6:51:dd:06:b5:d2:e3:4a:50:5f:19:
c6:e5:d1:ac:29:92:10:3f:f7:2f:94:cc:29:27:5b:94:c3:6a:
88:3d:e3:9a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+UpFF22+y6KJssPmaMn3FuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkMzVjMGIyMDkxMzVjMjJjYzgwMDVhN2MyZTIyMmM2M2Mx
MzZjYjAwHhcNMjYwNzI0MTUwMDI0WhcNMjYwNzI1MTUwMDI0WjAzMTEwLwYDVQQD
Eyg1MmY3ZGY4MWViNjUwYjAzZGNjZDlkYmNiNjlmOGQ2OTg1N2UyN2NkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkqyOzVs/lbVxH/wIc2HbWGx7fA4P
xP6JjL6NdEdoZmVRL9kOvvqJ+ka3b+kAsPaw+TVzHjvjyHdnnFrP+1ra6oYiIGZw
dTlAtQHphXUdnfon75BZTJeAyd7sduWi/std780W0ZmXTRIamHEQDjKPVuKdNsCr
BpgYYgAElHykvgA8ArLsOhZxhSQTwjpviL8g3bXn4hb04zje0n9RG5DBLJTpp8Lx
ng54PixrPWUzLrJhupYclIV5WLW2wb2AljZsnwKEp/FsDvVSxfryTyjtHoq5SxKO
4Juy4Hjm2iQzXknA2yqyD+1zIPE0rd4vDrEZ6y2hzFYcTArgBLQqApVZvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFL334HrZQsD3M2dvLafjWmFfifNMB8GA1UdIwQY
MBaAFH01wLIJE1wizIAFp8LiIsY8E2ywMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlRYQXNna1RYQ0xNZ0FXbnd1SWl4andUYkxBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9iOWM5MDYtMWU4NS00NTczLThmNjIt
ODI1N2Q1MTkyOGE5LzEvZlRYQXNna1RYQ0xNZ0FXbnd1SWl4andUYkxBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy9iOWM5MDYtMWU4NS00NTczLThmNjItODI1N2Q1MTkyOGE5
LzEvZlRYQXNna1RYQ0xNZ0FXbnd1SWl4andUYkxBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIw29bpKm
DYeLRAvYzvmX8ILuHsSMVKV/Eq+88PP5kTE2e+4l8FQoK5VTons564yHqsNjPLjr
e2V34jZdYPLLYU8EbJ92Q1qmK1yYsUPMvHiUHFNW/pSROWXW9PCJTqnighgHo2ty
b9cbZu1pdkRkEdMolvgcZ4tFLCRpXlc56Ly9ARZ/oRPRQaPbFTiBtjl+0XJUCXst
4N+1IeYppPpryEuYnew/kNbl+A4TzOnahCT34lBOF2Tne9Sqh9iaEir7j0bVtjkm
acL13NaSXPgepC/gofK3C8me9pRtNjGAj9ZR3Qa10uNKUF8ZxuXRrCmSED/3L5TM
KSdblMNqiD3jmg==
-----END CERTIFICATE-----
Generated at Fri Jul 24 22:26:33 2026 by rpki-client