Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/7e4ba7-f592-4eec-bcae-095d0bd2555f/1/tK_MhnJK4o7jZE0b6ehSCj7zia0.mft
File: tK_MhnJK4o7jZE0b6ehSCj7zia0.mft (raw, json)
Hash identifier: m4ZoS/eNsMlcBMaRcxWvBRi0IaQHCDgWsgbMD8NNZQQ=
Subject key identifier: 09:3F:61:26:D6:92:C4:B2:B9:24:4E:E1:3E:8C:70:E5:C8:2E:84:5B
Authority key identifier: B4:AF:CC:86:72:4A:E2:8E:E3:64:4D:1B:E9:E8:52:0A:3E:F3:89:AD
Certificate issuer: /CN=b4afcc86724ae28ee3644d1be9e8520a3ef389ad
Certificate serial: 019F935B19DAE0C8B2B71AEB9C01F796168C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tK_MhnJK4o7jZE0b6ehSCj7zia0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/7e4ba7-f592-4eec-bcae-095d0bd2555f/1/tK_MhnJK4o7jZE0b6ehSCj7zia0.mft
Manifest number: 41
Signing time: Fri 24 Jul 2026 09:00:48 +0000
Manifest this update: Fri 24 Jul 2026 09:00:48 +0000
Manifest next update: Sat 25 Jul 2026 09:00:48 +0000
Files and hashes: 1: tK_MhnJK4o7jZE0b6ehSCj7zia0.crl (hash: dUbuFxxUCvRSqRaVgVk/k+g9xkxifmiwkOLc5r/OHX4=)
2: xknKtTv3aOJfGX6wPs3f3yNuujM.roa (hash: UAJG/h4ZBqmm+2hMDaAp1u3zKvAAvYZrIBtFkvMHGHA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/7e4ba7-f592-4eec-bcae-095d0bd2555f/1/tK_MhnJK4o7jZE0b6ehSCj7zia0.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/7e4ba7-f592-4eec-bcae-095d0bd2555f/1/tK_MhnJK4o7jZE0b6ehSCj7zia0.mft
rsync://rpki.ripe.net/repository/DEFAULT/tK_MhnJK4o7jZE0b6ehSCj7zia0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:5b:19:da:e0:c8:b2:b7:1a:eb:9c:01:f7:96:16:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4afcc86724ae28ee3644d1be9e8520a3ef389ad
Validity
Not Before: Jul 24 09:00:48 2026 GMT
Not After : Jul 25 09:00:48 2026 GMT
Subject: CN=093f6126d692c4b2b9244ee13e8c70e5c82e845b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:0c:4d:32:c3:58:c6:45:9e:62:de:7c:60:8d:
cf:4c:ce:89:78:5e:b7:02:59:fe:9e:31:f9:2d:fc:
68:df:07:5d:e8:b5:9d:8a:ff:63:a0:aa:cb:6a:92:
2a:ec:5f:2c:86:13:44:65:c7:fb:5c:59:5d:89:45:
fe:89:f3:2c:4c:b4:a7:29:28:bd:92:43:1d:fa:99:
cc:c7:89:6c:6b:d8:4c:0b:e6:6b:a6:42:11:72:5e:
32:1e:37:5c:28:cd:89:f5:8c:5d:08:8b:e9:e3:17:
29:32:a5:bf:60:2f:11:e0:d4:bc:10:06:ae:ab:32:
ec:b6:37:4d:33:d0:23:69:4c:e4:4a:7c:8d:73:cb:
fc:ea:58:fe:06:ba:45:96:be:f9:18:24:8e:76:53:
46:d1:56:09:46:a6:a5:4c:56:ce:d2:5f:6f:f4:a1:
30:03:8f:e5:c7:3d:bd:92:23:05:a9:0d:05:d4:0d:
31:81:f2:25:1c:8e:45:00:ec:79:ac:05:63:48:4f:
e7:2e:01:26:96:72:40:22:66:66:2a:cb:5e:35:38:
96:40:e8:9d:da:22:e8:f3:78:53:ef:27:32:27:fe:
b7:bb:5e:b9:11:be:28:9b:ea:b6:20:da:cf:d4:29:
0d:7e:28:7a:22:c4:8f:22:2f:b9:82:5e:08:68:64:
82:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:3F:61:26:D6:92:C4:B2:B9:24:4E:E1:3E:8C:70:E5:C8:2E:84:5B
X509v3 Authority Key Identifier:
keyid:B4:AF:CC:86:72:4A:E2:8E:E3:64:4D:1B:E9:E8:52:0A:3E:F3:89:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tK_MhnJK4o7jZE0b6ehSCj7zia0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/7e4ba7-f592-4eec-bcae-095d0bd2555f/1/tK_MhnJK4o7jZE0b6ehSCj7zia0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/7e4ba7-f592-4eec-bcae-095d0bd2555f/1/tK_MhnJK4o7jZE0b6ehSCj7zia0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:16:da:37:ab:74:f5:2f:22:ef:6a:d3:1e:a0:65:f1:c0:7e:
43:09:4f:6e:e1:16:09:ed:6f:99:e0:8f:e1:02:72:62:bf:18:
10:6e:0c:95:0a:cb:2c:a8:19:00:6e:ab:28:d6:da:10:e8:5a:
dd:6b:33:1a:e5:78:6f:25:df:d6:04:83:01:f9:f6:76:7f:62:
5f:e6:06:c0:ca:5c:6c:df:d9:15:5a:03:95:d5:be:1b:33:ed:
5e:94:9d:a4:ee:07:60:fd:0b:3b:5f:26:3c:ff:d2:cc:ba:c6:
ac:b9:5e:c6:8b:c8:a6:5c:82:2a:a7:20:26:40:3f:d1:18:10:
11:da:c3:86:34:4f:27:a1:ee:65:1a:53:f1:05:87:01:ff:e6:
86:03:29:18:44:22:f2:fa:5f:eb:fd:4b:e0:88:21:d7:9f:6a:
7d:62:f5:ba:e0:72:35:35:d8:41:02:c6:07:23:52:ed:e1:84:
09:25:31:78:19:7b:e7:8b:ba:28:51:83:a9:60:78:27:95:e9:
5f:df:c8:56:99:94:52:7c:90:7e:c8:7b:73:9f:b9:ef:b2:76:
60:9a:34:0b:c1:44:9b:cf:18:16:85:79:1c:0d:bc:dc:19:25:
26:02:e0:88:e6:6f:79:94:dc:ba:e9:07:d0:83:13:40:36:cf:
79:5f:27:be
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+TWxna4MiytxrrnAH3lhaMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0YWZjYzg2NzI0YWUyOGVlMzY0NGQxYmU5ZTg1MjBhM2Vm
Mzg5YWQwHhcNMjYwNzI0MDkwMDQ4WhcNMjYwNzI1MDkwMDQ4WjAzMTEwLwYDVQQD
EygwOTNmNjEyNmQ2OTJjNGIyYjkyNDRlZTEzZThjNzBlNWM4MmU4NDViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApgxNMsNYxkWeYt58YI3PTM6JeF63
Aln+njH5Lfxo3wdd6LWdiv9joKrLapIq7F8shhNEZcf7XFldiUX+ifMsTLSnKSi9
kkMd+pnMx4lsa9hMC+ZrpkIRcl4yHjdcKM2J9YxdCIvp4xcpMqW/YC8R4NS8EAau
qzLstjdNM9AjaUzkSnyNc8v86lj+BrpFlr75GCSOdlNG0VYJRqalTFbO0l9v9KEw
A4/lxz29kiMFqQ0F1A0xgfIlHI5FAOx5rAVjSE/nLgEmlnJAImZmKsteNTiWQOid
2iLo83hT7ycyJ/63u165Eb4om+q2INrP1CkNfih6IsSPIi+5gl4IaGSCVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAk/YSbWksSyuSRO4T6McOXILoRbMB8GA1UdIwQY
MBaAFLSvzIZySuKO42RNG+noUgo+84mtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdEtfTWhuSks0bzdqWkUwYjZlaFNDajd6aWEwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS83ZTRiYTctZjU5Mi00ZWVjLWJjYWUt
MDk1ZDBiZDI1NTVmLzEvdEtfTWhuSks0bzdqWkUwYjZlaFNDajd6aWEwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS83ZTRiYTctZjU5Mi00ZWVjLWJjYWUtMDk1ZDBiZDI1NTVm
LzEvdEtfTWhuSks0bzdqWkUwYjZlaFNDajd6aWEwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgBbaN6t0
9S8i72rTHqBl8cB+QwlPbuEWCe1vmeCP4QJyYr8YEG4MlQrLLKgZAG6rKNbaEOha
3WszGuV4byXf1gSDAfn2dn9iX+YGwMpcbN/ZFVoDldW+GzPtXpSdpO4HYP0LO18m
PP/SzLrGrLlexovIplyCKqcgJkA/0RgQEdrDhjRPJ6HuZRpT8QWHAf/mhgMpGEQi
8vpf6/1L4Igh159qfWL1uuByNTXYQQLGByNS7eGECSUxeBl754u6KFGDqWB4J5Xp
X9/IVpmUUnyQfsh7c5+577J2YJo0C8FEm88YFoV5HA283BklJgLgiOZveZTcuukH
0IMTQDbPeV8nvg==
-----END CERTIFICATE-----
Generated at Fri Jul 24 19:39:09 2026 by rpki-client