Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/6bfb8f-3c46-4cc2-acfd-4f9e895631fe/1/1OodcM1C51E6wjM51h241Ap--tg.mft
File: 1OodcM1C51E6wjM51h241Ap--tg.mft (raw, json)
Hash identifier: 07yFgF4hueDib4Fhj7K7YFfIbRpi0dCkZgWRX0K0bd0=
Subject key identifier: 8F:F5:72:F3:80:23:E0:62:32:24:00:BE:DE:DF:BE:02:C1:6D:83:40
Authority key identifier: D4:EA:1D:70:CD:42:E7:51:3A:C2:33:39:D6:1D:B8:D4:0A:7E:FA:D8
Certificate issuer: /CN=d4ea1d70cd42e7513ac23339d61db8d40a7efad8
Certificate serial: 019F8EA24A17DBB696B12581C2833E371C1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1OodcM1C51E6wjM51h241Ap--tg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/6bfb8f-3c46-4cc2-acfd-4f9e895631fe/1/1OodcM1C51E6wjM51h241Ap--tg.mft
Manifest number: 3E
Signing time: Thu 23 Jul 2026 11:00:28 +0000
Manifest this update: Thu 23 Jul 2026 11:00:28 +0000
Manifest next update: Fri 24 Jul 2026 11:00:28 +0000
Files and hashes: 1: 1OodcM1C51E6wjM51h241Ap--tg.crl (hash: BCvarxtWhC8mt70GiYluZq5aJ+fTomeCkqpfj/2U8Y0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/6bfb8f-3c46-4cc2-acfd-4f9e895631fe/1/1OodcM1C51E6wjM51h241Ap--tg.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/6bfb8f-3c46-4cc2-acfd-4f9e895631fe/1/1OodcM1C51E6wjM51h241Ap--tg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1OodcM1C51E6wjM51h241Ap--tg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 11:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8e:a2:4a:17:db:b6:96:b1:25:81:c2:83:3e:37:1c:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4ea1d70cd42e7513ac23339d61db8d40a7efad8
Validity
Not Before: Jul 23 11:00:28 2026 GMT
Not After : Jul 24 11:00:28 2026 GMT
Subject: CN=8ff572f38023e062322400bededfbe02c16d8340
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:9b:fd:6f:1e:d0:81:9a:a3:b4:ec:20:aa:fc:
04:76:79:bf:07:7c:56:e2:d9:1e:2f:c8:b5:26:7e:
0d:44:88:a5:e9:8d:40:4a:38:c6:7b:6b:b1:3a:ee:
56:a5:c4:f0:d2:79:5b:96:cf:e3:11:94:cd:1a:67:
a4:f7:17:12:80:26:cd:73:75:7b:b9:a3:9b:2f:22:
34:cd:5d:e8:48:12:72:1e:b9:1c:0a:47:c6:f5:72:
3a:36:f8:43:5f:18:18:84:9f:3b:ce:b5:b5:e1:e8:
ea:7e:ba:fc:26:bf:39:c0:09:79:bb:d4:1b:98:11:
fe:9c:06:00:70:21:2e:71:a0:b9:8a:76:d7:98:58:
2a:27:e7:c6:92:ac:70:9b:98:d4:5c:2f:e5:be:a2:
ec:7a:59:7e:02:8a:44:68:fb:fb:25:6d:e4:91:2b:
c7:13:ee:19:e0:8e:58:58:bf:02:1b:7b:6b:8d:1a:
7d:1d:67:46:2c:23:3e:47:c9:6a:61:a2:53:1a:2c:
80:a7:62:bb:05:c3:40:04:12:b5:41:57:94:ac:8c:
40:16:66:4a:65:18:3e:a2:ea:06:ef:bf:61:69:f2:
93:0f:c6:de:b4:c4:67:90:e9:aa:02:b0:73:52:1a:
6f:4f:92:f8:bd:8e:f5:97:28:78:1c:b3:15:3f:20:
c7:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:F5:72:F3:80:23:E0:62:32:24:00:BE:DE:DF:BE:02:C1:6D:83:40
X509v3 Authority Key Identifier:
keyid:D4:EA:1D:70:CD:42:E7:51:3A:C2:33:39:D6:1D:B8:D4:0A:7E:FA:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1OodcM1C51E6wjM51h241Ap--tg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/6bfb8f-3c46-4cc2-acfd-4f9e895631fe/1/1OodcM1C51E6wjM51h241Ap--tg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/6bfb8f-3c46-4cc2-acfd-4f9e895631fe/1/1OodcM1C51E6wjM51h241Ap--tg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:3b:fc:ba:68:86:23:74:5f:e8:ae:02:23:d7:d0:b3:96:d0:
fa:cb:83:24:8d:a3:56:fc:eb:db:80:f4:e9:b5:8a:f2:99:6d:
6d:31:dc:00:31:24:ad:91:44:61:0d:97:ad:ac:4f:49:ae:fc:
8e:de:14:81:a9:f7:1f:24:1d:20:ae:f2:be:8e:d6:10:a0:1a:
08:d4:65:21:2b:6c:71:a6:c2:5e:00:d4:67:77:c4:6b:ad:a0:
9b:68:71:8f:21:09:74:0b:39:90:2e:c5:eb:dd:ee:af:e7:8f:
f4:7e:1c:91:7f:11:ee:93:3f:f1:5f:1d:11:d9:70:b2:bc:49:
9f:46:fd:fc:98:24:f3:01:f2:27:c3:be:fb:7e:b3:ab:de:56:
78:86:e6:62:12:28:88:7c:a7:6a:6b:62:f1:8c:cc:a5:98:a2:
7a:46:16:27:9b:4b:75:8a:9d:93:f5:28:cf:3d:d0:6f:9c:7d:
bd:c1:3b:e3:87:30:b8:17:1f:ee:ba:cf:69:0a:3c:f3:6c:f0:
7c:8b:b8:47:13:75:09:4e:e8:b9:20:04:7b:58:09:55:72:02:
18:73:33:ba:17:0b:75:9b:63:ac:ae:d9:57:79:91:65:ce:ad:
f9:f7:38:03:ea:ed:1b:a7:4b:85:d3:28:54:e8:e4:22:db:ba:
e1:7f:d8:88
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+OokoX27aWsSWBwoM+NxwbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0ZWExZDcwY2Q0MmU3NTEzYWMyMzMzOWQ2MWRiOGQ0MGE3
ZWZhZDgwHhcNMjYwNzIzMTEwMDI4WhcNMjYwNzI0MTEwMDI4WjAzMTEwLwYDVQQD
Eyg4ZmY1NzJmMzgwMjNlMDYyMzIyNDAwYmVkZWRmYmUwMmMxNmQ4MzQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1pv9bx7QgZqjtOwgqvwEdnm/B3xW
4tkeL8i1Jn4NRIil6Y1ASjjGe2uxOu5WpcTw0nlbls/jEZTNGmek9xcSgCbNc3V7
uaObLyI0zV3oSBJyHrkcCkfG9XI6NvhDXxgYhJ87zrW14ejqfrr8Jr85wAl5u9Qb
mBH+nAYAcCEucaC5inbXmFgqJ+fGkqxwm5jUXC/lvqLsell+AopEaPv7JW3kkSvH
E+4Z4I5YWL8CG3trjRp9HWdGLCM+R8lqYaJTGiyAp2K7BcNABBK1QVeUrIxAFmZK
ZRg+ouoG779hafKTD8betMRnkOmqArBzUhpvT5L4vY71lyh4HLMVPyDHKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI/1cvOAI+BiMiQAvt7fvgLBbYNAMB8GA1UdIwQY
MBaAFNTqHXDNQudROsIzOdYduNQKfvrYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMU9vZGNNMUM1MUU2d2pNNTFoMjQxQXAtLXRnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy82YmZiOGYtM2M0Ni00Y2MyLWFjZmQt
NGY5ZTg5NTYzMWZlLzEvMU9vZGNNMUM1MUU2d2pNNTFoMjQxQXAtLXRnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMy82YmZiOGYtM2M0Ni00Y2MyLWFjZmQtNGY5ZTg5NTYzMWZl
LzEvMU9vZGNNMUM1MUU2d2pNNTFoMjQxQXAtLXRnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAETv8umiG
I3Rf6K4CI9fQs5bQ+suDJI2jVvzr24D06bWK8pltbTHcADEkrZFEYQ2XraxPSa78
jt4Ugan3HyQdIK7yvo7WEKAaCNRlIStscabCXgDUZ3fEa62gm2hxjyEJdAs5kC7F
693ur+eP9H4ckX8R7pM/8V8dEdlwsrxJn0b9/Jgk8wHyJ8O++36zq95WeIbmYhIo
iHynamti8YzMpZiiekYWJ5tLdYqdk/Uozz3Qb5x9vcE744cwuBcf7rrPaQo882zw
fIu4RxN1CU7ouSAEe1gJVXICGHMzuhcLdZtjrK7ZV3mRZc6t+fc4A+rtG6dLhdMo
VOjkItu64X/YiA==
-----END CERTIFICATE-----
Generated at Thu Jul 23 21:27:33 2026 by rpki-client