Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/12ff71-9e6c-40d9-9df7-773cfc4333e1/1/tiuWfFIUXmeksyBrHKSShTyg34Q.mft
File: tiuWfFIUXmeksyBrHKSShTyg34Q.mft (raw, json)
Hash identifier: fvVOYrdX5EEOv0D0C1W54mYEaY0JtXJIQOh7l88Vf1Y=
Subject key identifier: 37:47:44:7A:C3:BB:32:52:CB:3B:D8:FD:41:C2:14:83:EB:71:47:47
Authority key identifier: B6:2B:96:7C:52:14:5E:67:A4:B3:20:6B:1C:A4:92:85:3C:A0:DF:84
Certificate issuer: /CN=b62b967c52145e67a4b3206b1ca492853ca0df84
Certificate serial: 019F8EA2EE9B97E033F3CEEF3CFBFA345505
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tiuWfFIUXmeksyBrHKSShTyg34Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/12ff71-9e6c-40d9-9df7-773cfc4333e1/1/tiuWfFIUXmeksyBrHKSShTyg34Q.mft
Manifest number: 19C5
Signing time: Thu 23 Jul 2026 11:01:10 +0000
Manifest this update: Thu 23 Jul 2026 11:01:10 +0000
Manifest next update: Fri 24 Jul 2026 11:01:10 +0000
Files and hashes: 1: A6OsoYIYGh2Z_D1_x4aYKOVS478.roa (hash: R4DsSDCiEh+974EKIZS8RQ1BClrbE9cHjb1aIFSzJGw=)
2: E36OwHqQ6w57Cin5wvtmgpKJp1M.asa (hash: VOikmM+ev8Ka01X1o17ZmNFWB0YN01vxXHPntHlQFIM=)
3: tiuWfFIUXmeksyBrHKSShTyg34Q.crl (hash: /BWe9DDfz160i+8pv5RdKHiyIxEhyWPhnEVe8NeZfM4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/12ff71-9e6c-40d9-9df7-773cfc4333e1/1/tiuWfFIUXmeksyBrHKSShTyg34Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/12ff71-9e6c-40d9-9df7-773cfc4333e1/1/tiuWfFIUXmeksyBrHKSShTyg34Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/tiuWfFIUXmeksyBrHKSShTyg34Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 11:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8e:a2:ee:9b:97:e0:33:f3:ce:ef:3c:fb:fa:34:55:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b62b967c52145e67a4b3206b1ca492853ca0df84
Validity
Not Before: Jul 23 11:01:10 2026 GMT
Not After : Jul 24 11:01:10 2026 GMT
Subject: CN=3747447ac3bb3252cb3bd8fd41c21483eb714747
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:3f:1d:be:0e:e1:de:ef:ab:82:77:33:a0:84:
7d:b4:71:bd:87:11:1f:50:45:46:5b:fc:63:74:61:
e0:5e:7d:ac:18:0b:4a:01:43:07:cb:f9:1a:76:30:
a4:24:ae:92:b8:13:e1:10:38:09:56:d7:d5:b2:20:
e2:27:a8:cf:ca:c4:a1:99:aa:f9:8e:91:14:ab:ca:
1e:ed:4c:45:3a:7e:ad:75:01:13:21:e9:79:33:82:
fd:25:00:f8:b0:8f:2d:5e:38:06:b9:b5:df:ee:29:
77:ec:db:0e:75:10:c1:76:da:32:3c:0a:94:50:44:
0c:c5:a4:50:39:35:5b:04:7d:cd:cf:05:2f:cf:87:
05:e5:a6:9d:f2:5b:d9:23:22:35:27:3a:ce:c0:fb:
1c:85:63:6d:12:fb:d9:df:59:d5:9c:af:fa:86:36:
3e:da:a5:09:55:eb:55:32:2a:6b:f2:f7:84:68:09:
55:fb:26:6b:a6:48:8c:e7:4f:81:5a:ea:79:9c:85:
8d:15:ad:1f:42:50:47:e4:18:9f:3d:10:e4:60:88:
7d:67:be:d6:a8:98:42:db:4b:24:20:56:4f:26:b7:
12:e5:25:35:e3:a8:c1:b4:9e:cf:1a:29:48:55:f0:
32:dd:b7:c8:f2:f3:1a:56:6d:e1:c5:1c:06:14:37:
bb:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:47:44:7A:C3:BB:32:52:CB:3B:D8:FD:41:C2:14:83:EB:71:47:47
X509v3 Authority Key Identifier:
keyid:B6:2B:96:7C:52:14:5E:67:A4:B3:20:6B:1C:A4:92:85:3C:A0:DF:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tiuWfFIUXmeksyBrHKSShTyg34Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/12ff71-9e6c-40d9-9df7-773cfc4333e1/1/tiuWfFIUXmeksyBrHKSShTyg34Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/12ff71-9e6c-40d9-9df7-773cfc4333e1/1/tiuWfFIUXmeksyBrHKSShTyg34Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:89:b4:75:77:c3:e6:a1:ca:13:88:19:ec:20:a7:c0:62:25:
b1:0c:f1:ef:ae:3f:f6:37:f8:62:9f:e1:af:4e:5c:a0:24:c6:
8d:5d:73:cd:c5:af:87:3d:55:14:6a:0b:3c:dd:88:66:02:40:
8f:39:c2:32:c7:9e:db:6d:27:dd:0b:60:3e:80:f0:fb:7c:6a:
52:63:4f:f6:68:a8:75:8b:12:7e:c3:00:19:2d:df:ba:b1:ef:
cf:8f:15:3c:44:d6:2f:0f:47:78:b0:eb:8e:77:a6:16:a3:12:
52:24:46:5f:f2:09:29:0c:11:a6:b0:5b:e4:b5:f8:bf:8d:c2:
1b:d7:22:79:d6:73:6b:1f:60:04:12:6c:1a:fb:57:7b:83:c5:
1c:f3:25:bf:7f:35:95:e8:79:e6:f0:f7:67:7c:43:7b:37:dc:
b8:32:fc:a2:56:0b:dc:6f:92:12:6d:c5:df:b7:9d:34:ba:53:
dc:67:09:bf:9f:f9:c7:b2:a7:8f:0c:19:88:27:9d:e5:cb:55:
a0:ac:a4:41:20:9d:e1:22:4b:76:1c:ae:eb:f6:9b:c4:be:44:
d0:08:22:fb:a5:d0:15:7b:ec:57:16:e6:34:11:3f:60:4d:03:
d6:cf:f0:95:7b:e9:49:5a:32:4b:92:25:ed:df:bc:09:8f:ff:
cb:26:92:35
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+Oou6bl+Az887vPPv6NFUFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI2MmI5NjdjNTIxNDVlNjdhNGIzMjA2YjFjYTQ5Mjg1M2Nh
MGRmODQwHhcNMjYwNzIzMTEwMTEwWhcNMjYwNzI0MTEwMTEwWjAzMTEwLwYDVQQD
EygzNzQ3NDQ3YWMzYmIzMjUyY2IzYmQ4ZmQ0MWMyMTQ4M2ViNzE0NzQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvT8dvg7h3u+rgnczoIR9tHG9hxEf
UEVGW/xjdGHgXn2sGAtKAUMHy/kadjCkJK6SuBPhEDgJVtfVsiDiJ6jPysShmar5
jpEUq8oe7UxFOn6tdQETIel5M4L9JQD4sI8tXjgGubXf7il37NsOdRDBdtoyPAqU
UEQMxaRQOTVbBH3NzwUvz4cF5aad8lvZIyI1JzrOwPschWNtEvvZ31nVnK/6hjY+
2qUJVetVMipr8veEaAlV+yZrpkiM50+BWup5nIWNFa0fQlBH5BifPRDkYIh9Z77W
qJhC20skIFZPJrcS5SU146jBtJ7PGilIVfAy3bfI8vMaVm3hxRwGFDe72wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDdHRHrDuzJSyzvY/UHCFIPrcUdHMB8GA1UdIwQY
MBaAFLYrlnxSFF5npLMgaxykkoU8oN+EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdGl1V2ZGSVVYbWVrc3lCckhLU1NoVHlnMzRRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8xMmZmNzEtOWU2Yy00MGQ5LTlkZjct
NzczY2ZjNDMzM2UxLzEvdGl1V2ZGSVVYbWVrc3lCckhLU1NoVHlnMzRRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny8xMmZmNzEtOWU2Yy00MGQ5LTlkZjctNzczY2ZjNDMzM2Ux
LzEvdGl1V2ZGSVVYbWVrc3lCckhLU1NoVHlnMzRRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMYm0dXfD
5qHKE4gZ7CCnwGIlsQzx764/9jf4Yp/hr05coCTGjV1zzcWvhz1VFGoLPN2IZgJA
jznCMsee220n3QtgPoDw+3xqUmNP9miodYsSfsMAGS3furHvz48VPETWLw9HeLDr
jnemFqMSUiRGX/IJKQwRprBb5LX4v43CG9ciedZzax9gBBJsGvtXe4PFHPMlv381
leh55vD3Z3xDezfcuDL8olYL3G+SEm3F37edNLpT3GcJv5/5x7KnjwwZiCed5ctV
oKykQSCd4SJLdhyu6/abxL5E0Agi+6XQFXvsVxbmNBE/YE0D1s/wlXvpSVoyS5Il
7d+8CY//yyaSNQ==
-----END CERTIFICATE-----
Generated at Thu Jul 23 19:04:34 2026 by rpki-client