Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/d9d3c9-f194-4b26-8f10-ff6a9cde6335/1/tcR4e4CrSAGrYrG9v7KOBtMM32o.mft
File: tcR4e4CrSAGrYrG9v7KOBtMM32o.mft (raw, json)
Hash identifier: 00HHCWMn3k9L9fxwnVHPbr9KXGeqw4q4vX5+CsqLOjc=
Subject key identifier: C6:7C:C3:12:8C:B9:1E:87:9F:B3:BD:8D:DF:9E:93:01:7B:03:67:BC
Authority key identifier: B5:C4:78:7B:80:AB:48:01:AB:62:B1:BD:BF:B2:8E:06:D3:0C:DF:6A
Certificate issuer: /CN=b5c4787b80ab4801ab62b1bdbfb28e06d30cdf6a
Certificate serial: 019F95122B95C41F3D8BB7A92891AC77D558
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tcR4e4CrSAGrYrG9v7KOBtMM32o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/d9d3c9-f194-4b26-8f10-ff6a9cde6335/1/tcR4e4CrSAGrYrG9v7KOBtMM32o.mft
Manifest number: 0824
Signing time: Fri 24 Jul 2026 17:00:23 +0000
Manifest this update: Fri 24 Jul 2026 17:00:23 +0000
Manifest next update: Sat 25 Jul 2026 17:00:23 +0000
Files and hashes: 1: q-r2zDjO2sGmoc9QswQFQyhASW8.roa (hash: RdehwxnZtuAfNN5Ll+yv9MNFac3Y26/8VjA+iUeTNWw=)
2: tcR4e4CrSAGrYrG9v7KOBtMM32o.crl (hash: FfNiwGQzoN2rIaj0xOU448bHfX+Z5zBCENQALJuZv6s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/d9d3c9-f194-4b26-8f10-ff6a9cde6335/1/tcR4e4CrSAGrYrG9v7KOBtMM32o.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/d9d3c9-f194-4b26-8f10-ff6a9cde6335/1/tcR4e4CrSAGrYrG9v7KOBtMM32o.mft
rsync://rpki.ripe.net/repository/DEFAULT/tcR4e4CrSAGrYrG9v7KOBtMM32o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:12:2b:95:c4:1f:3d:8b:b7:a9:28:91:ac:77:d5:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5c4787b80ab4801ab62b1bdbfb28e06d30cdf6a
Validity
Not Before: Jul 24 17:00:23 2026 GMT
Not After : Jul 25 17:00:23 2026 GMT
Subject: CN=c67cc3128cb91e879fb3bd8ddf9e93017b0367bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d1:d7:5c:94:a9:68:e1:d7:48:ab:cb:d8:45:
86:96:b5:08:66:79:8e:5c:2e:70:54:dc:df:9f:f0:
c3:a1:e8:5a:08:56:b7:07:a1:2a:8d:29:23:d9:16:
84:7d:f2:a5:b2:25:9c:ea:b3:28:ea:56:19:4e:05:
d3:49:85:d2:c3:19:92:16:fc:3b:3e:cd:e9:21:3c:
c5:ea:08:07:d9:a7:4d:b6:34:8d:bc:6b:60:39:5a:
5c:1b:41:4a:c3:27:ff:61:38:6b:93:dd:ea:a4:e1:
3b:d1:8e:10:ff:e5:ca:31:83:b3:4e:9f:9e:4b:3c:
1c:45:a8:b6:55:f8:07:d1:a6:89:4e:69:4a:1e:99:
8d:bc:70:c6:86:ee:eb:11:36:29:60:51:53:4e:97:
50:de:a8:a5:58:40:28:39:75:e5:18:f4:ab:2e:f6:
74:88:d8:f8:4b:88:d5:c6:c5:32:b8:e2:f1:b8:dc:
5a:69:9e:db:05:f5:31:38:4e:c2:ad:30:4c:2d:e7:
b6:dc:98:c5:92:87:a9:bb:77:c5:c0:e5:c4:60:53:
bd:28:9f:29:73:0d:87:7c:24:5e:88:37:b5:52:b0:
25:9c:af:2b:66:cd:a9:0c:3b:4b:01:a5:09:e3:ba:
23:9e:10:7c:75:23:29:2f:7b:4c:bf:29:e1:57:ed:
e8:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:7C:C3:12:8C:B9:1E:87:9F:B3:BD:8D:DF:9E:93:01:7B:03:67:BC
X509v3 Authority Key Identifier:
keyid:B5:C4:78:7B:80:AB:48:01:AB:62:B1:BD:BF:B2:8E:06:D3:0C:DF:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tcR4e4CrSAGrYrG9v7KOBtMM32o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/d9d3c9-f194-4b26-8f10-ff6a9cde6335/1/tcR4e4CrSAGrYrG9v7KOBtMM32o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/d9d3c9-f194-4b26-8f10-ff6a9cde6335/1/tcR4e4CrSAGrYrG9v7KOBtMM32o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:05:d0:da:a0:6e:84:73:60:4b:a1:cd:bc:66:6d:73:ac:8b:
91:59:ca:48:f4:42:fd:56:99:30:37:ad:44:0a:20:38:be:3b:
e6:14:ea:bf:7b:3b:82:04:70:55:dc:16:d2:d6:ff:e8:86:f1:
08:21:5f:95:d6:25:f9:be:ef:2f:83:0c:52:b8:bf:61:69:58:
e3:22:59:3f:61:66:f9:38:77:37:61:cc:78:e2:f6:b9:db:c6:
d3:9f:0d:8e:ad:7e:70:d2:8b:a3:8c:84:3c:a9:1d:15:59:b1:
f0:07:cc:e6:83:06:c1:0b:25:26:37:47:18:66:18:22:bd:3a:
cd:27:89:fb:18:14:ec:40:67:73:bc:21:0e:86:bf:51:1a:f1:
f0:dd:3e:fb:35:eb:bc:50:96:f2:12:f9:00:e8:9c:64:23:d5:
e5:d6:bd:c6:7c:dc:18:d8:b4:aa:18:03:7f:6d:67:59:18:08:
23:75:76:59:67:f7:6f:d0:b2:cd:ee:c7:03:dd:d5:36:fd:87:
35:e5:b9:49:d2:f1:fe:1f:43:f7:9b:17:f6:64:1e:bf:dd:0b:
0f:c3:ad:60:78:00:92:bd:26:64:5a:1b:ae:b0:1f:c5:d9:05:
58:68:35:ac:a4:ff:61:1d:ab:94:c0:9b:65:af:e6:98:af:7a:
bd:ba:c6:49
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+VEiuVxB89i7epKJGsd9VYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1YzQ3ODdiODBhYjQ4MDFhYjYyYjFiZGJmYjI4ZTA2ZDMw
Y2RmNmEwHhcNMjYwNzI0MTcwMDIzWhcNMjYwNzI1MTcwMDIzWjAzMTEwLwYDVQQD
EyhjNjdjYzMxMjhjYjkxZTg3OWZiM2JkOGRkZjllOTMwMTdiMDM2N2JjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArNHXXJSpaOHXSKvL2EWGlrUIZnmO
XC5wVNzfn/DDoehaCFa3B6EqjSkj2RaEffKlsiWc6rMo6lYZTgXTSYXSwxmSFvw7
Ps3pITzF6ggH2adNtjSNvGtgOVpcG0FKwyf/YThrk93qpOE70Y4Q/+XKMYOzTp+e
SzwcRai2VfgH0aaJTmlKHpmNvHDGhu7rETYpYFFTTpdQ3qilWEAoOXXlGPSrLvZ0
iNj4S4jVxsUyuOLxuNxaaZ7bBfUxOE7CrTBMLee23JjFkoepu3fFwOXEYFO9KJ8p
cw2HfCReiDe1UrAlnK8rZs2pDDtLAaUJ47ojnhB8dSMpL3tMvynhV+3oQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMZ8wxKMuR6Hn7O9jd+ekwF7A2e8MB8GA1UdIwQY
MBaAFLXEeHuAq0gBq2Kxvb+yjgbTDN9qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdGNSNGU0Q3JTQUdyWXJHOXY3S09CdE1NMzJvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy9kOWQzYzktZjE5NC00YjI2LThmMTAt
ZmY2YTljZGU2MzM1LzEvdGNSNGU0Q3JTQUdyWXJHOXY3S09CdE1NMzJvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNy9kOWQzYzktZjE5NC00YjI2LThmMTAtZmY2YTljZGU2MzM1
LzEvdGNSNGU0Q3JTQUdyWXJHOXY3S09CdE1NMzJvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqwXQ2qBu
hHNgS6HNvGZtc6yLkVnKSPRC/VaZMDetRAogOL475hTqv3s7ggRwVdwW0tb/6Ibx
CCFfldYl+b7vL4MMUri/YWlY4yJZP2Fm+Th3N2HMeOL2udvG058Njq1+cNKLo4yE
PKkdFVmx8AfM5oMGwQslJjdHGGYYIr06zSeJ+xgU7EBnc7whDoa/URrx8N0++zXr
vFCW8hL5AOicZCPV5da9xnzcGNi0qhgDf21nWRgII3V2WWf3b9Cyze7HA93VNv2H
NeW5SdLx/h9D95sX9mQev90LD8OtYHgAkr0mZFobrrAfxdkFWGg1rKT/YR2rlMCb
Za/mmK96vbrGSQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 22:47:54 2026 by rpki-client