Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/7358bd-c72f-4d9b-bb0d-0b4f717aa363/1/TVg7b1bPCSco3lk62VKuoZzjGIY.mft
File: TVg7b1bPCSco3lk62VKuoZzjGIY.mft (raw, json)
Hash identifier: EW36czRxzWakTjcIgHiGlYKU3ue2un7EPgS5RbUzURE=
Subject key identifier: D2:57:F7:4A:D6:A2:7B:9C:76:9B:23:44:B0:7D:B2:FD:5F:B1:7B:8D
Authority key identifier: 4D:58:3B:6F:56:CF:09:27:28:DE:59:3A:D9:52:AE:A1:9C:E3:18:86
Certificate issuer: /CN=4d583b6f56cf092728de593ad952aea19ce31886
Certificate serial: 019F92119D6CC73C4848F991D824F773A264
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TVg7b1bPCSco3lk62VKuoZzjGIY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/7358bd-c72f-4d9b-bb0d-0b4f717aa363/1/TVg7b1bPCSco3lk62VKuoZzjGIY.mft
Manifest number: 191D
Signing time: Fri 24 Jul 2026 03:00:55 +0000
Manifest this update: Fri 24 Jul 2026 03:00:55 +0000
Manifest next update: Sat 25 Jul 2026 03:00:55 +0000
Files and hashes: 1: Js7glNIVHR31KzAH-Y9le6lg8Gc.roa (hash: 7RXrZN2yFu7MFj+qcU08ae6A+XIej9sHLn+Y/9HM9Vs=)
2: NXEJCiLPkkdBY9NTGhgdROtpXxc.roa (hash: UlDG/6GGWJgKzbG+s5oTy9rF68mX0nNsKBfB2sUaPZc=)
3: TVg7b1bPCSco3lk62VKuoZzjGIY.crl (hash: ZLS3bIqVxXKrfeH7PvS8ylJaxPa9xM1szmfmpsrbuRM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/7358bd-c72f-4d9b-bb0d-0b4f717aa363/1/TVg7b1bPCSco3lk62VKuoZzjGIY.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/7358bd-c72f-4d9b-bb0d-0b4f717aa363/1/TVg7b1bPCSco3lk62VKuoZzjGIY.mft
rsync://rpki.ripe.net/repository/DEFAULT/TVg7b1bPCSco3lk62VKuoZzjGIY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 03:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:11:9d:6c:c7:3c:48:48:f9:91:d8:24:f7:73:a2:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d583b6f56cf092728de593ad952aea19ce31886
Validity
Not Before: Jul 24 03:00:55 2026 GMT
Not After : Jul 25 03:00:55 2026 GMT
Subject: CN=d257f74ad6a27b9c769b2344b07db2fd5fb17b8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:3f:72:1a:c0:7c:a4:dc:d7:ae:18:97:57:49:
6b:f6:a8:83:1a:33:06:49:af:7e:94:4b:73:f3:af:
13:4d:4e:a6:ce:3d:6d:08:4b:a0:eb:3a:7d:b2:f8:
cc:cb:8a:aa:f5:77:4c:9f:21:b9:e1:bb:5f:c3:a3:
60:e0:78:2b:7e:4d:c7:4c:86:a7:61:e2:d3:7b:a3:
1a:a5:bf:e9:e3:41:bf:f9:0b:38:c8:0c:52:d1:02:
ac:05:fe:5d:81:c4:30:5a:10:9c:fd:3b:5f:16:3e:
4e:f0:63:05:7e:4c:90:a9:b9:e5:09:9b:97:8c:41:
be:e6:8c:b0:4c:3d:17:bf:38:c3:59:26:45:e5:c3:
ab:7c:93:49:b4:83:74:39:f9:ff:d1:40:08:4e:72:
3b:0b:a7:67:8c:1b:dc:ed:de:e5:45:fd:d9:f4:15:
7c:b7:2a:19:48:40:ee:93:a0:c4:f9:95:a0:cb:ac:
cd:62:b2:c9:71:df:6e:b5:34:91:c0:b8:e9:2d:15:
4d:10:d1:69:ac:21:a7:b0:97:9e:e6:ba:09:2e:4f:
b1:c7:f8:ad:65:e1:c2:f7:0f:00:08:d7:d5:5f:f0:
56:ab:44:0f:81:ee:da:cf:cb:a4:cf:f5:9a:bf:c9:
03:d6:46:ee:37:3e:2e:e4:48:a1:b9:db:c2:94:5c:
27:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:57:F7:4A:D6:A2:7B:9C:76:9B:23:44:B0:7D:B2:FD:5F:B1:7B:8D
X509v3 Authority Key Identifier:
keyid:4D:58:3B:6F:56:CF:09:27:28:DE:59:3A:D9:52:AE:A1:9C:E3:18:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TVg7b1bPCSco3lk62VKuoZzjGIY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/7358bd-c72f-4d9b-bb0d-0b4f717aa363/1/TVg7b1bPCSco3lk62VKuoZzjGIY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/7358bd-c72f-4d9b-bb0d-0b4f717aa363/1/TVg7b1bPCSco3lk62VKuoZzjGIY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:6b:cc:59:b7:de:5f:6e:77:a1:36:bc:42:8c:4a:28:9b:7e:
1b:b5:2c:09:fb:2c:ee:81:87:01:31:b7:af:ef:fd:bc:f1:6c:
dd:20:91:6e:36:46:df:55:3d:d8:b4:35:5f:4a:ea:d9:4d:3d:
1e:14:6f:82:9b:de:35:55:74:c3:17:32:8c:4f:b5:60:de:32:
90:88:40:43:8a:4b:81:5a:a1:b5:24:f6:91:8e:d9:36:ea:ef:
ec:3f:5d:07:4e:97:53:1e:f0:99:7f:d6:f4:8e:36:4b:f1:41:
45:8b:cc:6c:49:5a:5b:e9:db:c1:b3:8e:c9:ad:7b:45:ae:b7:
a6:11:99:c6:2b:7e:a4:f7:b6:14:53:26:56:3c:dc:fa:10:e5:
27:c6:bb:cb:ec:ae:42:0f:78:a9:07:99:bd:06:e0:e8:5f:9b:
ea:b1:c2:b2:4a:eb:44:ce:30:03:c0:87:a6:43:71:fc:08:5c:
65:69:46:4a:d2:48:13:f1:d5:ed:10:8e:22:33:16:2e:60:ab:
fc:71:bb:78:3a:3c:c6:52:b1:7d:d2:c0:71:93:a7:cc:f5:dd:
5a:65:f0:93:5c:22:be:3c:14:1d:71:66:ce:2a:95:2d:2b:31:
c6:13:f3:b5:d8:45:e9:4c:e2:bf:ba:7a:d4:fc:a2:83:12:01:
24:52:f6:fc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+SEZ1sxzxISPmR2CT3c6JkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRkNTgzYjZmNTZjZjA5MjcyOGRlNTkzYWQ5NTJhZWExOWNl
MzE4ODYwHhcNMjYwNzI0MDMwMDU1WhcNMjYwNzI1MDMwMDU1WjAzMTEwLwYDVQQD
EyhkMjU3Zjc0YWQ2YTI3YjljNzY5YjIzNDRiMDdkYjJmZDVmYjE3YjhkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtT9yGsB8pNzXrhiXV0lr9qiDGjMG
Sa9+lEtz868TTU6mzj1tCEug6zp9svjMy4qq9XdMnyG54btfw6Ng4Hgrfk3HTIan
YeLTe6Mapb/p40G/+Qs4yAxS0QKsBf5dgcQwWhCc/TtfFj5O8GMFfkyQqbnlCZuX
jEG+5oywTD0XvzjDWSZF5cOrfJNJtIN0Ofn/0UAITnI7C6dnjBvc7d7lRf3Z9BV8
tyoZSEDuk6DE+ZWgy6zNYrLJcd9utTSRwLjpLRVNENFprCGnsJee5roJLk+xx/it
ZeHC9w8ACNfVX/BWq0QPge7az8ukz/Wav8kD1kbuNz4u5EihudvClFwn3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNJX90rWonucdpsjRLB9sv1fsXuNMB8GA1UdIwQY
MBaAFE1YO29WzwknKN5ZOtlSrqGc4xiGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVFZnN2IxYlBDU2NvM2xrNjJWS3VvWnpqR0lZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy83MzU4YmQtYzcyZi00ZDliLWJiMGQt
MGI0ZjcxN2FhMzYzLzEvVFZnN2IxYlBDU2NvM2xrNjJWS3VvWnpqR0lZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy83MzU4YmQtYzcyZi00ZDliLWJiMGQtMGI0ZjcxN2FhMzYz
LzEvVFZnN2IxYlBDU2NvM2xrNjJWS3VvWnpqR0lZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFWvMWbfe
X253oTa8QoxKKJt+G7UsCfss7oGHATG3r+/9vPFs3SCRbjZG31U92LQ1X0rq2U09
HhRvgpveNVV0wxcyjE+1YN4ykIhAQ4pLgVqhtST2kY7ZNurv7D9dB06XUx7wmX/W
9I42S/FBRYvMbElaW+nbwbOOya17Ra63phGZxit+pPe2FFMmVjzc+hDlJ8a7y+yu
Qg94qQeZvQbg6F+b6rHCskrrRM4wA8CHpkNx/AhcZWlGStJIE/HV7RCOIjMWLmCr
/HG7eDo8xlKxfdLAcZOnzPXdWmXwk1wivjwUHXFmziqVLSsxxhPztdhF6Uziv7p6
1PyigxIBJFL2/A==
-----END CERTIFICATE-----
Generated at Fri Jul 24 11:44:59 2026 by rpki-client