Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/02c5ec-7c6f-4ae2-9897-3059c89b72ea/1/TFTszmy8nFSSnqpLIrM3sP2bNr8.mft
File: TFTszmy8nFSSnqpLIrM3sP2bNr8.mft (raw, json)
Hash identifier: 6qDbkNZkERa5sjyEGHek471m/7yvKql12PuhpIfidYY=
Subject key identifier: A2:D9:F6:F9:12:FA:04:BE:E1:CE:BE:2F:64:DD:B1:DA:82:B8:F2:C9
Authority key identifier: 4C:54:EC:CE:6C:BC:9C:54:92:9E:AA:4B:22:B3:37:B0:FD:9B:36:BF
Certificate issuer: /CN=4c54ecce6cbc9c54929eaa4b22b337b0fd9b36bf
Certificate serial: 019F8FB5868CF0A340076EA33A9DD2FA9C21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TFTszmy8nFSSnqpLIrM3sP2bNr8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/02c5ec-7c6f-4ae2-9897-3059c89b72ea/1/TFTszmy8nFSSnqpLIrM3sP2bNr8.mft
Manifest number: 19C7
Signing time: Thu 23 Jul 2026 16:01:06 +0000
Manifest this update: Thu 23 Jul 2026 16:01:06 +0000
Manifest next update: Fri 24 Jul 2026 16:01:06 +0000
Files and hashes: 1: G6FeIPbrFYt0Xs4RMbl3hxFSgPI.roa (hash: pCJOng4j62RgLgH4PaC9a8+B4/vINuGKFVNtITN4RoM=)
2: M_rnheFHEJEhvuv8N_w2Hds5XxU.roa (hash: 9c9DQN1bBCgnWk4FhLy9o/RslqwQ5t8KVo6nKa0ccUI=)
3: TFTszmy8nFSSnqpLIrM3sP2bNr8.crl (hash: sDkVxqP7qulhLy55L49i5wpaqEEykD+PSfJNEE2tVNI=)
4: nEGo15KsyAjBD-x5zbk8ARJINQU.roa (hash: 0lT9gQ6lEsFlDbleFuI9ud8vDG/jc8OcFzQhfPnweOI=)
5: vCLyUWR776gkWz1fg6zz0ef3IxM.roa (hash: SjoathDw0sUup7FL2NVGvfEYMvEvs24sBQi8PhmuU7M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/02c5ec-7c6f-4ae2-9897-3059c89b72ea/1/TFTszmy8nFSSnqpLIrM3sP2bNr8.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/02c5ec-7c6f-4ae2-9897-3059c89b72ea/1/TFTszmy8nFSSnqpLIrM3sP2bNr8.mft
rsync://rpki.ripe.net/repository/DEFAULT/TFTszmy8nFSSnqpLIrM3sP2bNr8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:b5:86:8c:f0:a3:40:07:6e:a3:3a:9d:d2:fa:9c:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c54ecce6cbc9c54929eaa4b22b337b0fd9b36bf
Validity
Not Before: Jul 23 16:01:06 2026 GMT
Not After : Jul 24 16:01:06 2026 GMT
Subject: CN=a2d9f6f912fa04bee1cebe2f64ddb1da82b8f2c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:86:44:bc:70:2a:d6:44:b8:81:72:fb:78:86:
5a:75:73:6d:77:bb:c4:c0:44:25:1d:22:20:22:e9:
42:3c:d6:c9:47:3d:f8:df:e8:e0:01:6c:4c:cd:cb:
61:cf:3d:a2:d6:34:e0:52:06:96:e3:d9:99:63:24:
70:bf:88:4d:f9:ca:93:cc:11:5b:e8:0e:35:40:17:
b0:99:d2:30:39:b8:ee:af:93:1a:64:bf:bd:9f:3d:
f6:c8:21:30:73:57:ed:d0:f5:bf:2c:3d:28:d4:0e:
12:90:5c:46:56:16:d5:52:70:01:82:af:e8:ab:52:
ca:0c:42:32:4c:44:1a:22:5b:9f:ba:f1:b5:44:c6:
7f:f8:28:fc:bc:3f:50:1e:2e:34:f8:b0:15:af:c0:
22:45:33:89:66:25:a5:91:c5:8b:da:52:ad:89:b6:
2c:11:65:5c:99:fd:05:02:d2:95:00:d1:5c:c5:18:
b9:8f:ad:be:ac:bb:88:f7:ab:ae:95:f7:1e:9d:1c:
6e:de:74:c1:84:b0:6e:ea:16:22:55:dc:52:87:fb:
c3:cf:5c:50:9f:c5:39:25:67:97:69:99:69:10:3f:
a7:aa:29:6a:5d:0e:e6:16:f6:4b:ac:4c:27:e6:0b:
79:ca:be:d4:8e:27:17:96:3d:5e:72:82:93:22:e4:
2e:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:D9:F6:F9:12:FA:04:BE:E1:CE:BE:2F:64:DD:B1:DA:82:B8:F2:C9
X509v3 Authority Key Identifier:
keyid:4C:54:EC:CE:6C:BC:9C:54:92:9E:AA:4B:22:B3:37:B0:FD:9B:36:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TFTszmy8nFSSnqpLIrM3sP2bNr8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/02c5ec-7c6f-4ae2-9897-3059c89b72ea/1/TFTszmy8nFSSnqpLIrM3sP2bNr8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/02c5ec-7c6f-4ae2-9897-3059c89b72ea/1/TFTszmy8nFSSnqpLIrM3sP2bNr8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:5f:66:b9:52:cd:20:18:52:65:1e:f9:c1:e1:95:73:78:bc:
38:f2:2a:63:75:2c:26:ef:2a:1d:81:a1:1d:91:54:ae:41:b5:
5b:e0:25:25:e9:b8:3e:1a:b7:d8:9d:b3:ff:61:98:77:6b:10:
8b:ec:f9:19:e5:fd:fc:90:8a:4e:d2:d6:30:8f:36:74:19:93:
77:7a:aa:0e:0b:b8:10:7a:a9:ab:a4:68:3c:14:14:15:ee:b7:
29:b7:c9:4b:86:24:1a:16:ff:dc:71:a0:c2:04:8e:40:4d:63:
e9:ad:c6:18:ff:d0:48:aa:58:f2:62:56:7b:d7:b4:4d:7c:03:
89:06:eb:b3:67:ab:8b:a4:91:80:15:00:fc:23:b6:d0:eb:dc:
7c:63:59:8d:e9:08:10:30:93:b8:2b:ac:88:38:85:05:e2:1a:
76:e8:c5:cb:e8:8e:66:fb:75:fe:e5:b1:49:34:a3:8e:1c:cb:
af:8c:95:26:a6:88:e7:ef:57:2b:b5:00:af:de:17:be:f2:d9:
dd:64:d8:6b:59:42:f1:bc:c9:04:01:b4:0a:66:ac:b0:18:85:
86:6f:c7:2a:64:e7:9c:a9:1f:cd:b9:2f:34:53:f7:ba:87:8f:
f1:19:8c:af:86:54:7e:fa:ec:50:e5:f1:94:95:52:e4:9e:e0:
39:a3:28:2d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+PtYaM8KNAB26jOp3S+pwhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjNTRlY2NlNmNiYzljNTQ5MjllYWE0YjIyYjMzN2IwZmQ5
YjM2YmYwHhcNMjYwNzIzMTYwMTA2WhcNMjYwNzI0MTYwMTA2WjAzMTEwLwYDVQQD
EyhhMmQ5ZjZmOTEyZmEwNGJlZTFjZWJlMmY2NGRkYjFkYTgyYjhmMmM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnYZEvHAq1kS4gXL7eIZadXNtd7vE
wEQlHSIgIulCPNbJRz343+jgAWxMzcthzz2i1jTgUgaW49mZYyRwv4hN+cqTzBFb
6A41QBewmdIwObjur5MaZL+9nz32yCEwc1ft0PW/LD0o1A4SkFxGVhbVUnABgq/o
q1LKDEIyTEQaIlufuvG1RMZ/+Cj8vD9QHi40+LAVr8AiRTOJZiWlkcWL2lKtibYs
EWVcmf0FAtKVANFcxRi5j62+rLuI96uulfcenRxu3nTBhLBu6hYiVdxSh/vDz1xQ
n8U5JWeXaZlpED+nqilqXQ7mFvZLrEwn5gt5yr7UjicXlj1ecoKTIuQubwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKLZ9vkS+gS+4c6+L2TdsdqCuPLJMB8GA1UdIwQY
MBaAFExU7M5svJxUkp6qSyKzN7D9mza/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVEZUc3pteThuRlNTbnFwTElyTTNzUDJiTnI4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS8wMmM1ZWMtN2M2Zi00YWUyLTk4OTct
MzA1OWM4OWI3MmVhLzEvVEZUc3pteThuRlNTbnFwTElyTTNzUDJiTnI4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS8wMmM1ZWMtN2M2Zi00YWUyLTk4OTctMzA1OWM4OWI3MmVh
LzEvVEZUc3pteThuRlNTbnFwTElyTTNzUDJiTnI4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeF9muVLN
IBhSZR75weGVc3i8OPIqY3UsJu8qHYGhHZFUrkG1W+AlJem4Phq32J2z/2GYd2sQ
i+z5GeX9/JCKTtLWMI82dBmTd3qqDgu4EHqpq6RoPBQUFe63KbfJS4YkGhb/3HGg
wgSOQE1j6a3GGP/QSKpY8mJWe9e0TXwDiQbrs2eri6SRgBUA/CO20OvcfGNZjekI
EDCTuCusiDiFBeIadujFy+iOZvt1/uWxSTSjjhzLr4yVJqaI5+9XK7UAr94XvvLZ
3WTYa1lC8bzJBAG0CmassBiFhm/HKmTnnKkfzbkvNFP3uoeP8RmMr4ZUfvrsUOXx
lJVS5J7gOaMoLQ==
-----END CERTIFICATE-----
Generated at Thu Jul 23 22:51:44 2026 by rpki-client