Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/32619c-76a0-4a5d-b5d8-375c6b689e2f/1/TN57OL6vPGOHn_kwlz0WPx6I5-Y.mft
File: TN57OL6vPGOHn_kwlz0WPx6I5-Y.mft (raw, json)
Hash identifier: ZxRHLieqpAU6UBB1RiJkXTy18C+NFDO6P686rPXwD8I=
Subject key identifier: B3:F2:86:A4:F9:48:01:87:AD:A8:DB:20:15:AA:16:3D:3B:F2:DF:4C
Authority key identifier: 4C:DE:7B:38:BE:AF:3C:63:87:9F:F9:30:97:3D:16:3F:1E:88:E7:E6
Certificate issuer: /CN=4cde7b38beaf3c63879ff930973d163f1e88e7e6
Certificate serial: 019F8EA2A6BEDDF52EF61DF958F38731E804
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TN57OL6vPGOHn_kwlz0WPx6I5-Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/32619c-76a0-4a5d-b5d8-375c6b689e2f/1/TN57OL6vPGOHn_kwlz0WPx6I5-Y.mft
Manifest number: 03C9
Signing time: Thu 23 Jul 2026 11:00:51 +0000
Manifest this update: Thu 23 Jul 2026 11:00:51 +0000
Manifest next update: Fri 24 Jul 2026 11:00:51 +0000
Files and hashes: 1: LnjNGcMyH3MeERFj_pC3gRzTFnU.asa (hash: qASxAPP9ucQL4oyglFA6dDLN1CVjgDXdRMKgSKCNRhg=)
2: TN57OL6vPGOHn_kwlz0WPx6I5-Y.crl (hash: 6B1Lnj3XoUolgS/J2TFPTAumKjdp4bjeJ9cLoS2a09U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/32619c-76a0-4a5d-b5d8-375c6b689e2f/1/TN57OL6vPGOHn_kwlz0WPx6I5-Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/32619c-76a0-4a5d-b5d8-375c6b689e2f/1/TN57OL6vPGOHn_kwlz0WPx6I5-Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/TN57OL6vPGOHn_kwlz0WPx6I5-Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 11:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8e:a2:a6:be:dd:f5:2e:f6:1d:f9:58:f3:87:31:e8:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cde7b38beaf3c63879ff930973d163f1e88e7e6
Validity
Not Before: Jul 23 11:00:51 2026 GMT
Not After : Jul 24 11:00:51 2026 GMT
Subject: CN=b3f286a4f9480187ada8db2015aa163d3bf2df4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ee:b3:c7:fe:3e:fe:f2:94:4e:fb:03:b3:1c:
f0:c6:15:d5:f9:55:38:87:8c:09:df:fb:f8:e0:b2:
ac:17:6c:91:cc:15:e7:84:bc:d5:37:4b:1e:95:e7:
56:f5:4d:51:07:9a:a9:24:04:4e:06:17:08:9d:7e:
55:f7:b2:cf:30:71:5f:7a:59:6b:c5:41:dd:90:f0:
17:87:c0:22:9f:a0:a0:81:02:65:51:c2:a4:96:39:
31:02:3e:6c:48:ad:aa:c1:28:80:a9:1d:85:5b:58:
28:08:3c:45:e6:52:2e:26:c0:c5:fa:1c:b0:14:58:
df:7b:87:89:4c:3b:c9:57:b7:58:80:17:32:86:1b:
40:85:7f:80:56:23:eb:09:92:dc:b0:46:19:9b:72:
87:1c:7f:6e:96:33:4d:1b:1c:55:f2:3b:f0:50:e3:
f8:95:45:59:09:0f:3b:d3:dc:a0:83:93:22:a3:b6:
cd:e6:0d:57:f9:db:9e:16:25:9a:a4:28:fe:19:b5:
9f:50:db:88:9a:4c:15:2b:53:76:13:b1:79:c2:27:
c0:56:86:05:56:92:15:be:ce:5d:df:b2:0d:e5:3e:
bd:99:67:cd:74:e3:25:19:be:3f:a6:2a:a1:05:78:
62:a5:5b:b0:5d:88:d4:95:20:0e:9d:f3:d2:29:b5:
46:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:F2:86:A4:F9:48:01:87:AD:A8:DB:20:15:AA:16:3D:3B:F2:DF:4C
X509v3 Authority Key Identifier:
keyid:4C:DE:7B:38:BE:AF:3C:63:87:9F:F9:30:97:3D:16:3F:1E:88:E7:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TN57OL6vPGOHn_kwlz0WPx6I5-Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/32619c-76a0-4a5d-b5d8-375c6b689e2f/1/TN57OL6vPGOHn_kwlz0WPx6I5-Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/32619c-76a0-4a5d-b5d8-375c6b689e2f/1/TN57OL6vPGOHn_kwlz0WPx6I5-Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:ed:59:36:4a:c7:c4:0a:11:bd:4e:21:5e:c8:72:1e:3d:5f:
39:42:19:14:b8:4e:9c:83:84:bc:06:25:9d:09:0f:88:7b:4c:
cb:d2:4e:ca:68:91:25:3e:9c:b5:4c:3f:45:3b:85:c3:c7:c6:
b1:01:44:2b:b9:e1:cd:7d:7d:f1:2b:02:65:cc:5c:4d:7a:ae:
e2:a1:4c:9d:55:a4:c0:21:bb:33:83:72:3e:85:81:5f:af:ff:
a4:f6:a9:a5:f0:c7:a7:8c:36:89:69:0f:f5:ce:38:d9:fb:39:
2d:a0:1c:83:45:a3:85:dd:2c:94:4b:bd:6c:0d:dc:9b:88:b5:
45:b3:19:ec:c0:47:4f:00:a3:35:e6:40:69:bf:26:21:53:8d:
04:65:6a:e2:03:39:50:6f:b8:47:26:d6:c9:ee:ae:c4:8b:b1:
41:c6:79:f2:9e:68:e6:38:06:60:c9:63:95:3f:b6:5c:19:d7:
dc:ab:d9:6a:0b:51:57:77:59:cf:91:c5:6c:76:26:17:b7:b3:
88:fc:cd:65:a1:b0:37:55:03:0f:e2:1a:82:37:c5:75:76:5d:
07:4c:1e:57:aa:8e:32:34:26:a6:83:1d:39:fc:8a:a1:61:fe:
1d:0f:57:7e:e6:bb:b1:68:92:52:5d:a0:31:82:c0:3d:5c:17:
ad:35:d6:f2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+Ooqa+3fUu9h35WPOHMegEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjZGU3YjM4YmVhZjNjNjM4NzlmZjkzMDk3M2QxNjNmMWU4
OGU3ZTYwHhcNMjYwNzIzMTEwMDUxWhcNMjYwNzI0MTEwMDUxWjAzMTEwLwYDVQQD
EyhiM2YyODZhNGY5NDgwMTg3YWRhOGRiMjAxNWFhMTYzZDNiZjJkZjRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsO6zx/4+/vKUTvsDsxzwxhXV+VU4
h4wJ3/v44LKsF2yRzBXnhLzVN0seledW9U1RB5qpJAROBhcInX5V97LPMHFfellr
xUHdkPAXh8Ain6CggQJlUcKkljkxAj5sSK2qwSiAqR2FW1goCDxF5lIuJsDF+hyw
FFjfe4eJTDvJV7dYgBcyhhtAhX+AViPrCZLcsEYZm3KHHH9uljNNGxxV8jvwUOP4
lUVZCQ8709ygg5Mio7bN5g1X+dueFiWapCj+GbWfUNuImkwVK1N2E7F5wifAVoYF
VpIVvs5d37IN5T69mWfNdOMlGb4/piqhBXhipVuwXYjUlSAOnfPSKbVGDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLPyhqT5SAGHrajbIBWqFj078t9MMB8GA1UdIwQY
MBaAFEzeezi+rzxjh5/5MJc9Fj8eiOfmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVE41N09MNnZQR09Ibl9rd2x6MFdQeDZJNS1ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy8zMjYxOWMtNzZhMC00YTVkLWI1ZDgt
Mzc1YzZiNjg5ZTJmLzEvVE41N09MNnZQR09Ibl9rd2x6MFdQeDZJNS1ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy8zMjYxOWMtNzZhMC00YTVkLWI1ZDgtMzc1YzZiNjg5ZTJm
LzEvVE41N09MNnZQR09Ibl9rd2x6MFdQeDZJNS1ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPu1ZNkrH
xAoRvU4hXshyHj1fOUIZFLhOnIOEvAYlnQkPiHtMy9JOymiRJT6ctUw/RTuFw8fG
sQFEK7nhzX198SsCZcxcTXqu4qFMnVWkwCG7M4NyPoWBX6//pPappfDHp4w2iWkP
9c442fs5LaAcg0Wjhd0slEu9bA3cm4i1RbMZ7MBHTwCjNeZAab8mIVONBGVq4gM5
UG+4RybWye6uxIuxQcZ58p5o5jgGYMljlT+2XBnX3KvZagtRV3dZz5HFbHYmF7ez
iPzNZaGwN1UDD+IagjfFdXZdB0weV6qOMjQmpoMdOfyKoWH+HQ9Xfua7sWiSUl2g
MYLAPVwXrTXW8g==
-----END CERTIFICATE-----
Generated at Thu Jul 23 19:11:37 2026 by rpki-client