Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/2a420d-9d0e-4ea8-95bc-f53d9e36e95a/1/txRZXFDDUZIbDemldUChXlwcYYo.mft
File: txRZXFDDUZIbDemldUChXlwcYYo.mft (raw, json)
Hash identifier: IPk/YHY1N1uqHGMqSRVjzIU+EV74ogHSJPAmo/ttLRw=
Subject key identifier: F4:94:BE:81:2B:DF:21:D0:37:95:1E:92:E4:09:AE:D2:5A:71:CB:1F
Authority key identifier: B7:14:59:5C:50:C3:51:92:1B:0D:E9:A5:75:40:A1:5E:5C:1C:61:8A
Certificate issuer: /CN=b714595c50c351921b0de9a57540a15e5c1c618a
Certificate serial: 019E1DC761F88274ECDB76EBE4A7C104DF1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/txRZXFDDUZIbDemldUChXlwcYYo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/2a420d-9d0e-4ea8-95bc-f53d9e36e95a/1/txRZXFDDUZIbDemldUChXlwcYYo.mft
Manifest number: 1368
Signing time: Tue 12 May 2026 20:01:06 +0000
Manifest this update: Tue 12 May 2026 20:01:06 +0000
Manifest next update: Wed 13 May 2026 20:01:06 +0000
Files and hashes: 1: GuWBmwhJapEp_BmmuNbZSMGsF-Y.roa (hash: XKoJ/kEd+7q2jht4EhlLR7+g4VG6e/EP//UCSF6Kcuw=)
2: txRZXFDDUZIbDemldUChXlwcYYo.crl (hash: M3f32RT0QLTCt7OT0EpQ3JXIKMiHEOf8ySX5ilwCQwg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/2a420d-9d0e-4ea8-95bc-f53d9e36e95a/1/txRZXFDDUZIbDemldUChXlwcYYo.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/2a420d-9d0e-4ea8-95bc-f53d9e36e95a/1/txRZXFDDUZIbDemldUChXlwcYYo.mft
rsync://rpki.ripe.net/repository/DEFAULT/txRZXFDDUZIbDemldUChXlwcYYo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:c7:61:f8:82:74:ec:db:76:eb:e4:a7:c1:04:df:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b714595c50c351921b0de9a57540a15e5c1c618a
Validity
Not Before: May 12 20:01:06 2026 GMT
Not After : May 13 20:01:06 2026 GMT
Subject: CN=f494be812bdf21d037951e92e409aed25a71cb1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:2e:aa:2f:3c:a1:c7:5a:9e:a1:62:bc:3c:f5:
31:11:2d:ca:d7:04:06:21:28:c2:f1:6f:a9:34:ce:
01:9a:25:ed:2e:dd:a7:1f:11:65:7b:1c:97:39:f6:
13:5b:6e:1a:19:fe:f6:7e:65:f2:39:94:b3:ad:d9:
78:14:50:d3:f9:2c:0b:b6:89:8b:41:ed:87:c4:e5:
85:f4:31:f5:9f:0f:e3:91:74:f6:08:78:1c:73:d1:
aa:9e:ff:04:76:2d:03:56:2b:6f:40:57:f9:80:8b:
9b:d8:de:be:e9:a4:ec:9c:e3:75:bb:b2:2e:5e:4e:
dc:20:1d:17:77:ec:62:86:b2:f6:db:58:3e:b6:b4:
a3:23:06:1b:fa:1d:81:b5:de:a1:a9:4a:92:25:6b:
95:ee:02:2b:53:75:ab:47:bf:78:fd:3c:38:e4:85:
77:29:11:0b:48:97:15:54:33:4e:c3:34:a4:2c:06:
a3:34:e2:2e:be:44:14:9f:da:0d:71:e1:66:9b:f9:
4c:19:51:b2:98:c7:5e:79:d0:28:d7:b7:48:54:60:
55:e7:7a:f2:35:6f:76:b3:ea:a6:49:d5:75:55:a6:
49:a5:2e:51:96:e7:79:01:a4:a7:9c:b5:82:62:84:
53:73:3e:62:90:da:d3:ae:3c:fc:01:7e:b9:da:a7:
02:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:94:BE:81:2B:DF:21:D0:37:95:1E:92:E4:09:AE:D2:5A:71:CB:1F
X509v3 Authority Key Identifier:
keyid:B7:14:59:5C:50:C3:51:92:1B:0D:E9:A5:75:40:A1:5E:5C:1C:61:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/txRZXFDDUZIbDemldUChXlwcYYo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/2a420d-9d0e-4ea8-95bc-f53d9e36e95a/1/txRZXFDDUZIbDemldUChXlwcYYo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/2a420d-9d0e-4ea8-95bc-f53d9e36e95a/1/txRZXFDDUZIbDemldUChXlwcYYo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:7d:a6:98:4d:ed:e7:3d:03:a2:59:ea:c5:32:45:15:e1:4b:
53:f8:f9:c8:ef:7e:8d:a5:72:02:6d:75:6f:1e:dc:e6:e6:12:
81:ef:0d:a1:ef:9b:cc:61:9e:e3:c7:65:d5:b7:58:79:9c:4d:
57:de:5f:f6:a7:15:e5:30:98:bf:46:08:63:f5:a3:64:85:21:
34:5b:d0:aa:e9:09:da:96:5c:0c:d8:17:b8:9d:40:2a:7c:12:
64:c5:e9:fa:7e:ad:de:d7:1c:a4:3e:57:cd:52:2e:f3:cc:16:
fa:79:60:fd:2e:1d:14:a4:e5:50:f8:f5:a7:78:30:48:37:06:
23:39:3f:ce:29:9b:de:a9:32:1a:0d:a6:2e:bf:9c:d0:7b:03:
22:4e:4a:79:19:72:b8:87:1b:8b:34:4b:09:bf:60:c4:92:06:
be:eb:3f:b8:f7:7e:12:bf:d1:48:0d:8f:f4:80:bf:30:af:13:
86:5f:99:fe:a1:d4:d8:7b:3b:82:86:72:6c:7a:4a:ed:46:a0:
3b:4f:3e:6e:53:69:d2:59:57:3e:92:cb:64:7b:69:b6:62:bc:
8a:8f:62:d9:32:3c:06:79:2b:fd:dd:76:ac:c4:97:32:78:6f:
ec:bb:ad:27:72:a4:c3:95:c8:6f:58:b0:e3:e5:86:81:bf:00:
83:47:b5:f4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4dx2H4gnTs23br5KfBBN8cMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3MTQ1OTVjNTBjMzUxOTIxYjBkZTlhNTc1NDBhMTVlNWMx
YzYxOGEwHhcNMjYwNTEyMjAwMTA2WhcNMjYwNTEzMjAwMTA2WjAzMTEwLwYDVQQD
EyhmNDk0YmU4MTJiZGYyMWQwMzc5NTFlOTJlNDA5YWVkMjVhNzFjYjFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuC6qLzyhx1qeoWK8PPUxES3K1wQG
ISjC8W+pNM4BmiXtLt2nHxFlexyXOfYTW24aGf72fmXyOZSzrdl4FFDT+SwLtomL
Qe2HxOWF9DH1nw/jkXT2CHgcc9Gqnv8Edi0DVitvQFf5gIub2N6+6aTsnON1u7Iu
Xk7cIB0Xd+xihrL221g+trSjIwYb+h2Btd6hqUqSJWuV7gIrU3WrR794/Tw45IV3
KRELSJcVVDNOwzSkLAajNOIuvkQUn9oNceFmm/lMGVGymMdeedAo17dIVGBV53ry
NW92s+qmSdV1VaZJpS5Rlud5AaSnnLWCYoRTcz5ikNrTrjz8AX652qcC0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPSUvoEr3yHQN5UekuQJrtJaccsfMB8GA1UdIwQY
MBaAFLcUWVxQw1GSGw3ppXVAoV5cHGGKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdHhSWlhGRERVWkliRGVtbGRVQ2hYbHdjWVlvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi8yYTQyMGQtOWQwZS00ZWE4LTk1YmMt
ZjUzZDllMzZlOTVhLzEvdHhSWlhGRERVWkliRGVtbGRVQ2hYbHdjWVlvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi8yYTQyMGQtOWQwZS00ZWE4LTk1YmMtZjUzZDllMzZlOTVh
LzEvdHhSWlhGRERVWkliRGVtbGRVQ2hYbHdjWVlvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiH2mmE3t
5z0DolnqxTJFFeFLU/j5yO9+jaVyAm11bx7c5uYSge8Noe+bzGGe48dl1bdYeZxN
V95f9qcV5TCYv0YIY/WjZIUhNFvQqukJ2pZcDNgXuJ1AKnwSZMXp+n6t3tccpD5X
zVIu88wW+nlg/S4dFKTlUPj1p3gwSDcGIzk/zimb3qkyGg2mLr+c0HsDIk5KeRly
uIcbizRLCb9gxJIGvus/uPd+Er/RSA2P9IC/MK8Thl+Z/qHU2Hs7goZybHpK7Uag
O08+blNp0llXPpLLZHtptmK8io9i2TI8Bnkr/d12rMSXMnhv7LutJ3Kkw5XIb1iw
4+WGgb8Ag0e19A==
-----END CERTIFICATE-----
Generated at Wed May 13 07:19:55 2026 by rpki-client