Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/8b5d2a-4bc4-406f-97d5-ba3947c9b22b/1/tYUi2sa83oxIEzNZkTKhYgDmpb4.mft
File: tYUi2sa83oxIEzNZkTKhYgDmpb4.mft (raw, json)
Hash identifier: T6OqV7BTbxhFp9bAPuhlqc3wcNCROWeYq+rSO5YjgDY=
Subject key identifier: DF:58:D3:38:18:4B:56:E7:90:43:28:D5:ED:08:A4:AE:EE:58:1A:D5
Authority key identifier: B5:85:22:DA:C6:BC:DE:8C:48:13:33:59:91:32:A1:62:00:E6:A5:BE
Certificate issuer: /CN=b58522dac6bcde8c481333599132a16200e6a5be
Certificate serial: 019F9391963E8DDB732DF4E559B5356D1798
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tYUi2sa83oxIEzNZkTKhYgDmpb4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/8b5d2a-4bc4-406f-97d5-ba3947c9b22b/1/tYUi2sa83oxIEzNZkTKhYgDmpb4.mft
Manifest number: 0D22
Signing time: Fri 24 Jul 2026 10:00:19 +0000
Manifest this update: Fri 24 Jul 2026 10:00:19 +0000
Manifest next update: Sat 25 Jul 2026 10:00:19 +0000
Files and hashes: 1: 18A7L44_0ILwZodGFUSDQ2eubuc.roa (hash: TWAVfWQBRDutGoFMNTBpWa6veuSEAlw+UuaoPc+ikg4=)
2: 2BnXbJN0-tuiSw2yPhv5M-hIP_g.roa (hash: 7StJAAew0duMZOz948e0I6qxBTgJCwCzq3+RHVzjmKc=)
3: tYUi2sa83oxIEzNZkTKhYgDmpb4.crl (hash: ah6v5+Ns1OJwX4m4TdFqfjhiaO8s2Dtz8L0TbDsG7rM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/8b5d2a-4bc4-406f-97d5-ba3947c9b22b/1/tYUi2sa83oxIEzNZkTKhYgDmpb4.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/8b5d2a-4bc4-406f-97d5-ba3947c9b22b/1/tYUi2sa83oxIEzNZkTKhYgDmpb4.mft
rsync://rpki.ripe.net/repository/DEFAULT/tYUi2sa83oxIEzNZkTKhYgDmpb4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:91:96:3e:8d:db:73:2d:f4:e5:59:b5:35:6d:17:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b58522dac6bcde8c481333599132a16200e6a5be
Validity
Not Before: Jul 24 10:00:19 2026 GMT
Not After : Jul 25 10:00:19 2026 GMT
Subject: CN=df58d338184b56e7904328d5ed08a4aeee581ad5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ec:e8:6b:0e:18:45:06:f3:e7:03:7a:a6:e5:
10:74:18:3f:dc:c6:a9:0f:e2:0b:43:2c:3f:dc:94:
4c:e5:ea:74:46:d0:5a:46:f0:3d:7f:2d:96:12:43:
c9:a5:af:05:16:9d:36:4d:85:09:2e:37:00:3c:82:
b4:3f:ec:0e:ff:fe:b3:02:7b:4f:f9:bf:b1:59:43:
58:4a:65:36:6c:75:91:52:c4:c5:f3:e3:f8:fc:42:
27:48:bd:c7:e6:e6:1a:18:0a:bf:8b:43:14:db:ce:
df:2a:0f:e0:8f:3c:91:29:41:44:17:dc:11:2c:d2:
d6:b8:75:3f:62:3d:ab:5e:71:6e:26:74:e5:71:d2:
aa:e6:a9:da:04:ae:1b:da:c3:67:74:be:55:8e:1e:
6c:c4:2e:e8:f6:f7:3d:11:7e:d6:76:a9:75:27:ab:
71:a3:8c:a3:fa:bd:a8:eb:d0:62:95:b1:bd:46:00:
48:37:0b:8f:fc:77:ad:c0:e7:c5:f8:48:b5:19:c6:
94:74:51:6f:36:63:6b:1e:71:22:08:c6:ab:a9:dd:
d7:8a:1c:c1:81:27:88:c6:93:1a:81:34:7b:31:fc:
d8:80:94:d2:4a:20:8a:44:58:f7:20:70:98:90:81:
42:d3:59:c9:53:cc:58:76:00:41:e7:bc:20:ca:93:
e5:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:58:D3:38:18:4B:56:E7:90:43:28:D5:ED:08:A4:AE:EE:58:1A:D5
X509v3 Authority Key Identifier:
keyid:B5:85:22:DA:C6:BC:DE:8C:48:13:33:59:91:32:A1:62:00:E6:A5:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tYUi2sa83oxIEzNZkTKhYgDmpb4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/8b5d2a-4bc4-406f-97d5-ba3947c9b22b/1/tYUi2sa83oxIEzNZkTKhYgDmpb4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/8b5d2a-4bc4-406f-97d5-ba3947c9b22b/1/tYUi2sa83oxIEzNZkTKhYgDmpb4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:0e:17:c5:17:ab:f8:a8:e4:45:13:3e:16:8b:f1:ef:ef:04:
3c:48:6d:a6:71:93:f7:e0:35:be:e4:73:33:cc:fc:6e:ea:fd:
f7:f0:a2:6f:bc:f7:41:b0:5e:ec:91:7e:2f:96:85:0e:ec:97:
b1:51:cf:e3:f5:24:8d:9e:66:e7:4d:24:30:40:68:03:3c:c0:
94:1c:b0:8c:84:70:02:29:d4:a8:21:f4:26:15:fc:b5:f0:cb:
30:9d:5b:7d:9e:2b:6f:db:f2:5e:f5:4b:9c:15:e5:67:83:62:
04:d4:52:57:ef:4d:57:17:91:97:e7:80:b3:3f:03:6e:bc:99:
a2:63:dd:2b:1e:01:c2:e2:0b:da:c2:5e:b3:c9:14:bc:0b:77:
ac:62:c6:05:12:d8:0d:e3:25:26:d1:ab:85:40:82:36:ab:bd:
2e:da:78:cf:ea:d1:11:39:19:78:df:00:0f:11:66:a0:da:b4:
39:1c:5b:7f:ae:60:b1:c2:f3:76:a4:29:38:88:b2:c3:30:69:
ff:17:f9:dd:d9:0d:9c:d9:88:62:40:48:c3:e0:67:41:79:89:
5a:fa:ba:d0:a3:07:2a:96:8c:92:59:5a:50:be:bf:21:bd:69:
71:26:35:31:50:16:f9:7a:b8:e7:4f:9c:59:71:aa:82:46:25:
26:60:e4:f8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+TkZY+jdtzLfTlWbU1bReYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1ODUyMmRhYzZiY2RlOGM0ODEzMzM1OTkxMzJhMTYyMDBl
NmE1YmUwHhcNMjYwNzI0MTAwMDE5WhcNMjYwNzI1MTAwMDE5WjAzMTEwLwYDVQQD
EyhkZjU4ZDMzODE4NGI1NmU3OTA0MzI4ZDVlZDA4YTRhZWVlNTgxYWQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwuzoaw4YRQbz5wN6puUQdBg/3Map
D+ILQyw/3JRM5ep0RtBaRvA9fy2WEkPJpa8FFp02TYUJLjcAPIK0P+wO//6zAntP
+b+xWUNYSmU2bHWRUsTF8+P4/EInSL3H5uYaGAq/i0MU287fKg/gjzyRKUFEF9wR
LNLWuHU/Yj2rXnFuJnTlcdKq5qnaBK4b2sNndL5Vjh5sxC7o9vc9EX7Wdql1J6tx
o4yj+r2o69BilbG9RgBINwuP/HetwOfF+Ei1GcaUdFFvNmNrHnEiCMarqd3XihzB
gSeIxpMagTR7MfzYgJTSSiCKRFj3IHCYkIFC01nJU8xYdgBB57wgypPlkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN9Y0zgYS1bnkEMo1e0IpK7uWBrVMB8GA1UdIwQY
MBaAFLWFItrGvN6MSBMzWZEyoWIA5qW+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFlVaTJzYTgzb3hJRXpOWmtUS2hZZ0RtcGI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC84YjVkMmEtNGJjNC00MDZmLTk3ZDUt
YmEzOTQ3YzliMjJiLzEvdFlVaTJzYTgzb3hJRXpOWmtUS2hZZ0RtcGI0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOC84YjVkMmEtNGJjNC00MDZmLTk3ZDUtYmEzOTQ3YzliMjJi
LzEvdFlVaTJzYTgzb3hJRXpOWmtUS2hZZ0RtcGI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxw4XxRer
+KjkRRM+Fovx7+8EPEhtpnGT9+A1vuRzM8z8bur99/Cib7z3QbBe7JF+L5aFDuyX
sVHP4/UkjZ5m500kMEBoAzzAlBywjIRwAinUqCH0JhX8tfDLMJ1bfZ4rb9vyXvVL
nBXlZ4NiBNRSV+9NVxeRl+eAsz8DbryZomPdKx4BwuIL2sJes8kUvAt3rGLGBRLY
DeMlJtGrhUCCNqu9Ltp4z+rRETkZeN8ADxFmoNq0ORxbf65gscLzdqQpOIiywzBp
/xf53dkNnNmIYkBIw+BnQXmJWvq60KMHKpaMkllaUL6/Ib1pcSY1MVAW+Xq450+c
WXGqgkYlJmDk+A==
-----END CERTIFICATE-----
Generated at Fri Jul 24 14:35:56 2026 by rpki-client