Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/ed3b2e-f0fe-4460-850d-5847b1469326/1/TWh9higIIltFn6OZ5l-KBpRpq6M.mft
File: TWh9higIIltFn6OZ5l-KBpRpq6M.mft (raw, json)
Hash identifier: PCjxgEmJOHFzHS3JDBEitHS684J7X27F747Tln4qIHE=
Subject key identifier: C7:74:CB:AF:05:11:A1:9C:5B:DC:06:7A:44:E2:68:E8:B7:67:DC:83
Authority key identifier: 4D:68:7D:86:28:08:22:5B:45:9F:A3:99:E6:5F:8A:06:94:69:AB:A3
Certificate issuer: /CN=4d687d862808225b459fa399e65f8a069469aba3
Certificate serial: 019F935BF4C69C26903B101A328D8D3A15B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TWh9higIIltFn6OZ5l-KBpRpq6M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/ed3b2e-f0fe-4460-850d-5847b1469326/1/TWh9higIIltFn6OZ5l-KBpRpq6M.mft
Manifest number: 1958
Signing time: Fri 24 Jul 2026 09:01:44 +0000
Manifest this update: Fri 24 Jul 2026 09:01:44 +0000
Manifest next update: Sat 25 Jul 2026 09:01:44 +0000
Files and hashes: 1: TWh9higIIltFn6OZ5l-KBpRpq6M.crl (hash: +/PJuuekvHsfmwYchzc6YPrJ6gq30ZKaEOErQ7+xFfQ=)
2: wk26zi3ldsjZ_XJitrGy59Nt3RU.roa (hash: Y/LqsA9Orheu884pJMTCuEfdY61dLN5gUejTk6JnsDE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/ed3b2e-f0fe-4460-850d-5847b1469326/1/TWh9higIIltFn6OZ5l-KBpRpq6M.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/ed3b2e-f0fe-4460-850d-5847b1469326/1/TWh9higIIltFn6OZ5l-KBpRpq6M.mft
rsync://rpki.ripe.net/repository/DEFAULT/TWh9higIIltFn6OZ5l-KBpRpq6M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:5b:f4:c6:9c:26:90:3b:10:1a:32:8d:8d:3a:15:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d687d862808225b459fa399e65f8a069469aba3
Validity
Not Before: Jul 24 09:01:44 2026 GMT
Not After : Jul 25 09:01:44 2026 GMT
Subject: CN=c774cbaf0511a19c5bdc067a44e268e8b767dc83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:e0:a7:79:9b:41:30:1c:2c:91:40:72:4b:4d:
04:31:5d:49:be:72:98:e5:13:94:c1:8e:cd:4d:92:
bb:6b:bb:66:12:5d:1c:a8:db:d3:21:8d:09:f2:93:
c2:03:a2:7f:d0:18:2a:88:ea:b4:bc:ea:c4:1e:65:
c6:bb:17:82:3c:aa:74:5d:02:96:8a:5c:46:86:e8:
05:25:83:ae:a9:5f:d9:04:eb:cf:9c:8c:c8:b2:21:
d6:83:9c:50:d6:15:ea:74:4a:39:d6:cc:6f:c6:a3:
de:d3:31:29:ad:a5:ee:47:e5:47:82:fa:2d:09:6a:
71:0c:bb:0f:65:5a:59:82:08:04:4f:69:ad:61:ee:
a4:8e:0a:16:4c:d9:d6:32:5e:53:31:9b:9c:eb:28:
ff:32:b0:0b:62:42:12:2a:0b:c3:7b:2c:26:f7:c7:
6c:18:df:22:ed:a5:ac:d2:76:1a:ba:7e:5c:ef:4e:
26:4e:cd:69:a0:7a:d0:37:d1:e9:85:da:1e:82:67:
97:95:e4:85:ac:af:f0:0f:ed:80:df:22:e8:50:1d:
85:0c:f0:e5:24:b2:6d:bf:c2:f6:c8:28:83:fd:7e:
d9:31:1a:ec:c0:d6:8a:6a:52:b1:58:a2:ef:4a:9a:
d3:b0:a6:29:ed:58:42:98:88:c6:b1:03:52:c9:4e:
7f:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:74:CB:AF:05:11:A1:9C:5B:DC:06:7A:44:E2:68:E8:B7:67:DC:83
X509v3 Authority Key Identifier:
keyid:4D:68:7D:86:28:08:22:5B:45:9F:A3:99:E6:5F:8A:06:94:69:AB:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TWh9higIIltFn6OZ5l-KBpRpq6M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/ed3b2e-f0fe-4460-850d-5847b1469326/1/TWh9higIIltFn6OZ5l-KBpRpq6M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/ed3b2e-f0fe-4460-850d-5847b1469326/1/TWh9higIIltFn6OZ5l-KBpRpq6M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:df:f3:3f:61:d1:2e:00:a1:ed:b2:39:0e:80:26:12:6f:25:
c3:ef:bb:e8:f1:70:3b:33:50:57:f5:31:a3:fd:84:e1:26:8f:
e4:db:5d:85:f1:d7:5e:82:97:09:7e:48:7a:5c:8c:7a:30:b6:
d6:2d:db:9d:77:fa:64:4a:84:1b:79:2b:09:dc:61:50:38:ad:
97:99:b7:0e:ec:2d:b3:9e:09:85:84:37:5d:6d:67:9d:44:fa:
bc:91:c1:e0:eb:d2:39:a1:5f:7f:86:cf:fb:19:40:df:85:cf:
e9:49:02:d9:c2:fe:02:6d:73:6f:b7:c7:5b:38:01:f3:86:c8:
47:d9:d6:8a:7a:fa:24:2f:2b:90:e2:f3:4c:71:7d:4f:8d:05:
24:bf:7a:ec:e4:b2:78:cf:4c:c2:02:d0:41:bc:ee:58:a0:d4:
88:89:e5:d9:c7:f0:c4:fd:63:3d:08:2e:1b:19:b8:ee:ce:37:
fa:a9:61:1d:b1:38:97:6a:81:bc:d2:44:77:61:8d:90:5a:e9:
86:27:10:af:55:d0:78:fb:f4:7b:de:87:f3:82:97:cf:cd:44:
90:29:03:19:ed:d9:f3:f9:bf:44:fb:ff:03:ad:b1:63:9a:dc:
47:b0:2a:c5:61:b5:5c:46:cf:84:24:a7:1a:e3:a0:88:94:f8:
8a:cf:e1:7e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+TW/TGnCaQOxAaMo2NOhWwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRkNjg3ZDg2MjgwODIyNWI0NTlmYTM5OWU2NWY4YTA2OTQ2
OWFiYTMwHhcNMjYwNzI0MDkwMTQ0WhcNMjYwNzI1MDkwMTQ0WjAzMTEwLwYDVQQD
EyhjNzc0Y2JhZjA1MTFhMTljNWJkYzA2N2E0NGUyNjhlOGI3NjdkYzgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0OCneZtBMBwskUByS00EMV1JvnKY
5ROUwY7NTZK7a7tmEl0cqNvTIY0J8pPCA6J/0BgqiOq0vOrEHmXGuxeCPKp0XQKW
ilxGhugFJYOuqV/ZBOvPnIzIsiHWg5xQ1hXqdEo51sxvxqPe0zEpraXuR+VHgvot
CWpxDLsPZVpZgggET2mtYe6kjgoWTNnWMl5TMZuc6yj/MrALYkISKgvDeywm98ds
GN8i7aWs0nYaun5c704mTs1poHrQN9HphdoegmeXleSFrK/wD+2A3yLoUB2FDPDl
JLJtv8L2yCiD/X7ZMRrswNaKalKxWKLvSprTsKYp7VhCmIjGsQNSyU5/mwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMd0y68FEaGcW9wGekTiaOi3Z9yDMB8GA1UdIwQY
MBaAFE1ofYYoCCJbRZ+jmeZfigaUaaujMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVFdoOWhpZ0lJbHRGbjZPWjVsLUtCcFJwcTZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi9lZDNiMmUtZjBmZS00NDYwLTg1MGQt
NTg0N2IxNDY5MzI2LzEvVFdoOWhpZ0lJbHRGbjZPWjVsLUtCcFJwcTZNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Zi9lZDNiMmUtZjBmZS00NDYwLTg1MGQtNTg0N2IxNDY5MzI2
LzEvVFdoOWhpZ0lJbHRGbjZPWjVsLUtCcFJwcTZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnt/zP2HR
LgCh7bI5DoAmEm8lw++76PFwOzNQV/Uxo/2E4SaP5NtdhfHXXoKXCX5IelyMejC2
1i3bnXf6ZEqEG3krCdxhUDitl5m3Duwts54JhYQ3XW1nnUT6vJHB4OvSOaFff4bP
+xlA34XP6UkC2cL+Am1zb7fHWzgB84bIR9nWinr6JC8rkOLzTHF9T40FJL967OSy
eM9MwgLQQbzuWKDUiInl2cfwxP1jPQguGxm47s43+qlhHbE4l2qBvNJEd2GNkFrp
hicQr1XQePv0e96H84KXz81EkCkDGe3Z8/m/RPv/A62xY5rcR7AqxWG1XEbPhCSn
GuOgiJT4is/hfg==
-----END CERTIFICATE-----
Generated at Fri Jul 24 18:16:52 2026 by rpki-client