Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/100919-d951-4a6e-9f0c-7cca3a2e7490/1/tx9IaL1AkpK1aVnzWkwU_MJUcuw.mft
File: tx9IaL1AkpK1aVnzWkwU_MJUcuw.mft (raw, json)
Hash identifier: tdddIHHvI8ROeu1Yx7q2p6Tq+BNb4dwOsn4YoPNv2CM=
Subject key identifier: F2:9D:77:5A:7E:EA:EA:1A:1D:F8:70:9A:EF:C8:8F:D6:22:F6:44:12
Authority key identifier: B7:1F:48:68:BD:40:92:92:B5:69:59:F3:5A:4C:14:FC:C2:54:72:EC
Certificate issuer: /CN=b71f4868bd409292b56959f35a4c14fcc25472ec
Certificate serial: 019F8F7F3DF5506688A6809F6EC45B8B4449
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tx9IaL1AkpK1aVnzWkwU_MJUcuw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/100919-d951-4a6e-9f0c-7cca3a2e7490/1/tx9IaL1AkpK1aVnzWkwU_MJUcuw.mft
Manifest number: 06B2
Signing time: Thu 23 Jul 2026 15:01:48 +0000
Manifest this update: Thu 23 Jul 2026 15:01:48 +0000
Manifest next update: Fri 24 Jul 2026 15:01:48 +0000
Files and hashes: 1: EgBYTsP4WnLdOgI7v9fWewoBmRQ.roa (hash: SdXuNAo4cL+y4o9C6xVzKmsv8YTzVdsZLx73iiyVrKA=)
2: Ga7-1Qov9vY-UFa-abxTXMlth0Q.asa (hash: 7EOJyJMNQt+17435Z8by5UBYeIkbSkCBu+yaDqILeZM=)
3: tx9IaL1AkpK1aVnzWkwU_MJUcuw.crl (hash: 8sLl/FBwNWqfWStyJZ8+tRSzr460Ik4AdOHe5q/cXr4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/100919-d951-4a6e-9f0c-7cca3a2e7490/1/tx9IaL1AkpK1aVnzWkwU_MJUcuw.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/100919-d951-4a6e-9f0c-7cca3a2e7490/1/tx9IaL1AkpK1aVnzWkwU_MJUcuw.mft
rsync://rpki.ripe.net/repository/DEFAULT/tx9IaL1AkpK1aVnzWkwU_MJUcuw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:7f:3d:f5:50:66:88:a6:80:9f:6e:c4:5b:8b:44:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b71f4868bd409292b56959f35a4c14fcc25472ec
Validity
Not Before: Jul 23 15:01:48 2026 GMT
Not After : Jul 24 15:01:48 2026 GMT
Subject: CN=f29d775a7eeaea1a1df8709aefc88fd622f64412
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:9e:95:bc:5a:ed:62:30:2f:d7:da:68:eb:f1:
37:5c:97:22:09:ef:7d:5e:81:81:4a:72:1c:1f:fc:
11:b4:fc:e4:43:56:59:83:f7:5e:ce:3e:64:df:c9:
b5:5e:93:e7:94:66:8b:04:55:6d:2f:e8:3f:53:12:
5f:1f:e3:66:b9:dd:c7:e4:f4:aa:49:21:71:84:0f:
d6:38:d7:a4:7e:41:da:71:ea:e4:ed:49:88:3f:26:
da:5d:fe:44:da:9a:ef:b3:1e:3b:02:98:76:63:ae:
d0:ac:72:c4:26:ed:60:53:a6:56:c5:75:4b:fb:c3:
b3:62:c2:69:4f:b8:35:ae:ef:ad:d4:9a:d5:32:62:
7d:8c:9b:33:76:72:a1:31:14:46:8b:a7:bc:86:ff:
45:10:38:94:18:12:de:59:99:c4:8c:fc:a1:dc:0e:
84:04:e9:d4:f4:09:c1:2e:87:c3:f4:77:4b:62:b7:
2c:61:e3:f2:77:d8:13:d5:d8:14:86:41:cb:35:2e:
92:42:fb:90:d6:41:be:fe:b3:b6:08:9e:d6:0c:89:
82:93:1c:51:62:3c:35:ca:d1:15:83:4a:d6:b4:c9:
59:7b:2b:78:59:96:ff:33:91:0d:32:a6:41:ce:14:
e4:a8:6b:6a:c0:a4:d7:ca:aa:fd:dc:81:e3:1b:d6:
44:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:9D:77:5A:7E:EA:EA:1A:1D:F8:70:9A:EF:C8:8F:D6:22:F6:44:12
X509v3 Authority Key Identifier:
keyid:B7:1F:48:68:BD:40:92:92:B5:69:59:F3:5A:4C:14:FC:C2:54:72:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tx9IaL1AkpK1aVnzWkwU_MJUcuw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/100919-d951-4a6e-9f0c-7cca3a2e7490/1/tx9IaL1AkpK1aVnzWkwU_MJUcuw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/100919-d951-4a6e-9f0c-7cca3a2e7490/1/tx9IaL1AkpK1aVnzWkwU_MJUcuw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:97:e2:9d:54:d1:74:b1:48:e0:b7:41:c6:d6:40:af:c6:df:
3c:34:71:d2:98:38:02:d5:81:93:5d:d7:21:75:f2:f6:40:2b:
53:b6:fd:03:0d:1d:7b:cd:b2:2d:27:da:c4:9f:68:4b:49:73:
c2:76:cc:96:c4:5e:d0:ec:3a:cb:eb:fa:4d:0c:f1:1a:6f:e6:
c7:2a:3e:36:a5:b9:52:c2:c9:fe:8a:54:d1:2f:04:51:ca:9a:
59:f0:43:29:ac:40:f9:89:09:2e:94:2e:5c:3e:8d:36:d9:a2:
f3:31:50:c0:28:28:35:10:88:cc:4e:49:9f:4d:b2:8f:e0:1f:
28:2e:08:f6:ce:10:a3:8c:2c:20:b5:7f:9c:e4:56:07:3f:ae:
bd:d5:68:63:3e:bc:36:2b:fe:ed:63:b7:e4:95:cc:35:9d:33:
d9:d5:14:f6:67:34:d8:0e:cb:dd:b7:4d:bf:cc:d7:a9:92:06:
92:18:5f:08:e8:90:0c:5f:35:4d:ed:8f:35:e4:08:e9:99:45:
80:48:f1:9f:4c:4d:1b:65:d8:78:93:fd:a0:4b:35:36:56:89:
95:3d:a5:a5:ed:1e:79:e6:2e:dd:eb:10:fd:ec:bd:38:05:ef:
c3:cb:b7:13:99:6a:a2:2c:b4:2a:6d:d6:05:39:d9:e1:8e:bb:
fb:f7:22:6b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+Pfz31UGaIpoCfbsRbi0RJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3MWY0ODY4YmQ0MDkyOTJiNTY5NTlmMzVhNGMxNGZjYzI1
NDcyZWMwHhcNMjYwNzIzMTUwMTQ4WhcNMjYwNzI0MTUwMTQ4WjAzMTEwLwYDVQQD
EyhmMjlkNzc1YTdlZWFlYTFhMWRmODcwOWFlZmM4OGZkNjIyZjY0NDEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxJ6VvFrtYjAv19po6/E3XJciCe99
XoGBSnIcH/wRtPzkQ1ZZg/dezj5k38m1XpPnlGaLBFVtL+g/UxJfH+Nmud3H5PSq
SSFxhA/WONekfkHacerk7UmIPybaXf5E2prvsx47Aph2Y67QrHLEJu1gU6ZWxXVL
+8OzYsJpT7g1ru+t1JrVMmJ9jJszdnKhMRRGi6e8hv9FEDiUGBLeWZnEjPyh3A6E
BOnU9AnBLofD9HdLYrcsYePyd9gT1dgUhkHLNS6SQvuQ1kG+/rO2CJ7WDImCkxxR
Yjw1ytEVg0rWtMlZeyt4WZb/M5ENMqZBzhTkqGtqwKTXyqr93IHjG9ZEtQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPKdd1p+6uoaHfhwmu/Ij9Yi9kQSMB8GA1UdIwQY
MBaAFLcfSGi9QJKStWlZ81pMFPzCVHLsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdHg5SWFMMUFrcEsxYVZueldrd1VfTUpVY3V3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC8xMDA5MTktZDk1MS00YTZlLTlmMGMt
N2NjYTNhMmU3NDkwLzEvdHg5SWFMMUFrcEsxYVZueldrd1VfTUpVY3V3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OC8xMDA5MTktZDk1MS00YTZlLTlmMGMtN2NjYTNhMmU3NDkw
LzEvdHg5SWFMMUFrcEsxYVZueldrd1VfTUpVY3V3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqJfinVTR
dLFI4LdBxtZAr8bfPDRx0pg4AtWBk13XIXXy9kArU7b9Aw0de82yLSfaxJ9oS0lz
wnbMlsRe0Ow6y+v6TQzxGm/mxyo+NqW5UsLJ/opU0S8EUcqaWfBDKaxA+YkJLpQu
XD6NNtmi8zFQwCgoNRCIzE5Jn02yj+AfKC4I9s4Qo4wsILV/nORWBz+uvdVoYz68
Niv+7WO35JXMNZ0z2dUU9mc02A7L3bdNv8zXqZIGkhhfCOiQDF81Te2PNeQI6ZlF
gEjxn0xNG2XYeJP9oEs1NlaJlT2lpe0eeeYu3esQ/ey9OAXvw8u3E5lqoiy0Km3W
BTnZ4Y67+/ciaw==
-----END CERTIFICATE-----
Generated at Thu Jul 23 19:04:11 2026 by rpki-client