Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/5f5bc8-e5f3-421d-9fa0-fefe8e34006c/1/tOiC9xca9tzczJzXn5jexnV_4Yk.mft
File: tOiC9xca9tzczJzXn5jexnV_4Yk.mft (raw, json)
Hash identifier: ifC9+2ZEKSXWAdAGp1SfyVEYSMFK999reUYsCMhVeQ4=
Subject key identifier: 35:53:EC:33:F7:0E:86:56:ED:FA:3E:6A:6F:26:92:6A:AA:F1:95:02
Authority key identifier: B4:E8:82:F7:17:1A:F6:DC:DC:CC:9C:D7:9F:98:DE:C6:75:7F:E1:89
Certificate issuer: /CN=b4e882f7171af6dcdccc9cd79f98dec6757fe189
Certificate serial: 019F916D013F7A1C570C501E8363883D4F7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tOiC9xca9tzczJzXn5jexnV_4Yk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/5f5bc8-e5f3-421d-9fa0-fefe8e34006c/1/tOiC9xca9tzczJzXn5jexnV_4Yk.mft
Manifest number: 19C4
Signing time: Fri 24 Jul 2026 00:01:07 +0000
Manifest this update: Fri 24 Jul 2026 00:01:07 +0000
Manifest next update: Sat 25 Jul 2026 00:01:07 +0000
Files and hashes: 1: mRAbVrC4vL4GmozrjHi2i0Iaytw.roa (hash: vC24nQiiHK47q4YRBJHF/HkE+eYaEpAw6ZvG99eAnwU=)
2: tOiC9xca9tzczJzXn5jexnV_4Yk.crl (hash: pxIKrfYqkkJhbSzme/PGsplHq9FCwGeXR8KmE0OOnw8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/5f5bc8-e5f3-421d-9fa0-fefe8e34006c/1/tOiC9xca9tzczJzXn5jexnV_4Yk.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/5f5bc8-e5f3-421d-9fa0-fefe8e34006c/1/tOiC9xca9tzczJzXn5jexnV_4Yk.mft
rsync://rpki.ripe.net/repository/DEFAULT/tOiC9xca9tzczJzXn5jexnV_4Yk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:6d:01:3f:7a:1c:57:0c:50:1e:83:63:88:3d:4f:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4e882f7171af6dcdccc9cd79f98dec6757fe189
Validity
Not Before: Jul 24 00:01:07 2026 GMT
Not After : Jul 25 00:01:07 2026 GMT
Subject: CN=3553ec33f70e8656edfa3e6a6f26926aaaf19502
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:9f:99:a7:db:dc:f5:08:ee:9d:ca:2f:19:89:
95:a7:b0:c1:13:c2:78:38:75:97:40:2b:ef:7f:38:
f5:80:67:47:04:44:03:55:1d:c9:1a:aa:d8:c9:61:
49:9e:c8:e0:87:c5:8d:df:df:92:d6:ab:82:b4:aa:
f4:89:89:91:17:10:99:40:05:01:f3:10:3a:7a:65:
e2:a6:f4:47:b3:69:1b:6e:7a:f5:88:18:5e:8a:d8:
27:b3:f8:40:22:82:a0:18:e6:f4:15:f8:4f:bd:02:
62:c3:d2:74:3d:96:4b:2b:fd:f6:6c:bf:7a:89:36:
f7:d4:d8:13:05:1e:b9:23:79:68:da:c0:6f:a4:8a:
62:ef:6e:2c:d1:27:cd:e4:69:b3:c4:72:11:6b:55:
25:99:8b:8b:87:fa:f3:ca:ba:d2:ce:5b:e4:2a:32:
65:7b:eb:1d:e1:7f:5a:51:88:6e:f4:f6:04:63:d8:
00:20:57:51:23:fa:37:ff:7e:6e:be:f8:c7:ce:1c:
ed:76:b0:77:a4:85:d0:b0:16:85:ff:c1:44:a3:42:
5c:b4:12:ef:e3:b6:90:6d:78:ea:17:d5:2c:3b:ac:
7b:d5:56:91:67:e1:cd:04:53:9f:4a:09:5b:8b:b6:
c9:67:6a:8a:d6:5d:b5:d1:8e:83:11:cc:a7:a5:5d:
ff:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:53:EC:33:F7:0E:86:56:ED:FA:3E:6A:6F:26:92:6A:AA:F1:95:02
X509v3 Authority Key Identifier:
keyid:B4:E8:82:F7:17:1A:F6:DC:DC:CC:9C:D7:9F:98:DE:C6:75:7F:E1:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tOiC9xca9tzczJzXn5jexnV_4Yk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/5f5bc8-e5f3-421d-9fa0-fefe8e34006c/1/tOiC9xca9tzczJzXn5jexnV_4Yk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/5f5bc8-e5f3-421d-9fa0-fefe8e34006c/1/tOiC9xca9tzczJzXn5jexnV_4Yk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:f5:28:92:71:ac:d3:36:a7:82:a1:7b:71:d9:66:75:73:1f:
cd:11:f0:f5:e6:d5:f6:dc:82:f7:7d:bd:89:c0:59:15:73:12:
83:33:5e:1f:1a:09:80:20:a8:46:21:75:45:87:35:ff:e7:92:
ee:0f:cc:43:83:b2:96:35:8c:62:0b:9a:98:3a:2c:de:8b:af:
d7:99:5a:01:e5:76:23:ad:f7:61:0d:76:8c:3a:59:26:84:72:
47:5c:20:2a:af:ce:61:4e:45:c4:84:c6:ed:be:2f:cc:a2:5e:
70:d7:bb:18:7d:d3:aa:8c:b7:0a:fd:50:65:46:3f:58:7d:2b:
ff:1a:cc:c0:9f:20:e0:9d:a3:f8:2e:81:38:4a:f0:d1:0b:14:
12:97:57:9d:e2:08:78:00:7e:18:0b:e2:63:65:67:54:94:bc:
56:65:06:8b:c4:bb:10:e1:18:08:63:5b:40:a5:01:68:36:80:
62:39:71:27:b4:05:f7:a1:f3:70:c2:2f:89:1a:d3:7a:1f:a4:
d9:91:ae:5e:5a:0e:cd:42:9d:65:38:46:b9:b0:ea:00:85:d8:
fb:a1:80:d0:21:3d:8b:e5:40:c5:aa:6b:1a:ec:d6:8f:8b:c6:
cf:5e:fc:e3:58:1f:ff:cc:9c:52:ab:73:a0:ef:62:34:e9:95:
e6:29:0e:e4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+RbQE/ehxXDFAeg2OIPU9+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0ZTg4MmY3MTcxYWY2ZGNkY2NjOWNkNzlmOThkZWM2NzU3
ZmUxODkwHhcNMjYwNzI0MDAwMTA3WhcNMjYwNzI1MDAwMTA3WjAzMTEwLwYDVQQD
EygzNTUzZWMzM2Y3MGU4NjU2ZWRmYTNlNmE2ZjI2OTI2YWFhZjE5NTAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArJ+Zp9vc9QjuncovGYmVp7DBE8J4
OHWXQCvvfzj1gGdHBEQDVR3JGqrYyWFJnsjgh8WN39+S1quCtKr0iYmRFxCZQAUB
8xA6emXipvRHs2kbbnr1iBheitgns/hAIoKgGOb0FfhPvQJiw9J0PZZLK/32bL96
iTb31NgTBR65I3lo2sBvpIpi724s0SfN5GmzxHIRa1UlmYuLh/rzyrrSzlvkKjJl
e+sd4X9aUYhu9PYEY9gAIFdRI/o3/35uvvjHzhztdrB3pIXQsBaF/8FEo0JctBLv
47aQbXjqF9UsO6x71VaRZ+HNBFOfSglbi7bJZ2qK1l210Y6DEcynpV3/FwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDVT7DP3DoZW7fo+am8mkmqq8ZUCMB8GA1UdIwQY
MBaAFLTogvcXGvbc3Myc15+Y3sZ1f+GJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdE9pQzl4Y2E5dHpjekp6WG41amV4blZfNFlrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My81ZjViYzgtZTVmMy00MjFkLTlmYTAt
ZmVmZThlMzQwMDZjLzEvdE9pQzl4Y2E5dHpjekp6WG41amV4blZfNFlrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81My81ZjViYzgtZTVmMy00MjFkLTlmYTAtZmVmZThlMzQwMDZj
LzEvdE9pQzl4Y2E5dHpjekp6WG41amV4blZfNFlrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKPUoknGs
0zangqF7cdlmdXMfzRHw9ebV9tyC9329icBZFXMSgzNeHxoJgCCoRiF1RYc1/+eS
7g/MQ4OyljWMYguamDos3ouv15laAeV2I633YQ12jDpZJoRyR1wgKq/OYU5FxITG
7b4vzKJecNe7GH3Tqoy3Cv1QZUY/WH0r/xrMwJ8g4J2j+C6BOErw0QsUEpdXneII
eAB+GAviY2VnVJS8VmUGi8S7EOEYCGNbQKUBaDaAYjlxJ7QF96HzcMIviRrTeh+k
2ZGuXloOzUKdZThGubDqAIXY+6GA0CE9i+VAxaprGuzWj4vGz17841gf/8ycUqtz
oO9iNOmV5ikO5A==
-----END CERTIFICATE-----
Generated at Fri Jul 24 07:14:28 2026 by rpki-client