Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/99dcca-963a-4003-bfaf-a1169a289c54/1/TODEiXTgrnBa9Q7Q1lJH0afmL9s.mft
File: TODEiXTgrnBa9Q7Q1lJH0afmL9s.mft (raw, json)
Hash identifier: +IJ1o7bVB1TNtH1YUGsGKRiKeP6VkdQbIt/sBmGP7Y4=
Subject key identifier: F3:57:77:D4:A7:9E:83:1E:88:91:3D:F7:B5:4B:D5:25:0B:A5:E3:36
Authority key identifier: 4C:E0:C4:89:74:E0:AE:70:5A:F5:0E:D0:D6:52:47:D1:A7:E6:2F:DB
Certificate issuer: /CN=4ce0c48974e0ae705af50ed0d65247d1a7e62fdb
Certificate serial: 019F9548FF901F4FDD004C024BB278B56BD0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TODEiXTgrnBa9Q7Q1lJH0afmL9s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/99dcca-963a-4003-bfaf-a1169a289c54/1/TODEiXTgrnBa9Q7Q1lJH0afmL9s.mft
Manifest number: 42
Signing time: Fri 24 Jul 2026 18:00:16 +0000
Manifest this update: Fri 24 Jul 2026 18:00:16 +0000
Manifest next update: Sat 25 Jul 2026 18:00:16 +0000
Files and hashes: 1: TODEiXTgrnBa9Q7Q1lJH0afmL9s.crl (hash: x/ckb1PWJduF9IxCtUTFH99JQZMgusTr3/IXmw9kBzA=)
2: ebblHkxH_4mxEtlIvQdRAh9glJA.roa (hash: 3iH299M2+mtu/XgvXbZ9sMSTDosmnZ7V4KjCGJX9hzQ=)
3: i5z3KQc2e0-K2v0h5qLdZBQJJXU.roa (hash: KrOQvD/t0VuGa9aPl/HCdbKeqmz1JIB0jRemVYeffNA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/99dcca-963a-4003-bfaf-a1169a289c54/1/TODEiXTgrnBa9Q7Q1lJH0afmL9s.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/99dcca-963a-4003-bfaf-a1169a289c54/1/TODEiXTgrnBa9Q7Q1lJH0afmL9s.mft
rsync://rpki.ripe.net/repository/DEFAULT/TODEiXTgrnBa9Q7Q1lJH0afmL9s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 16:41:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:48:ff:90:1f:4f:dd:00:4c:02:4b:b2:78:b5:6b:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ce0c48974e0ae705af50ed0d65247d1a7e62fdb
Validity
Not Before: Jul 24 18:00:16 2026 GMT
Not After : Jul 25 18:00:16 2026 GMT
Subject: CN=f35777d4a79e831e88913df7b54bd5250ba5e336
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:08:12:3d:79:52:1a:9e:78:78:62:95:33:e3:
b3:90:a6:00:03:e3:5c:f2:d6:ed:82:b1:72:a9:39:
0f:13:12:67:e4:cb:c3:ee:be:ac:2a:a9:56:19:00:
09:fd:42:9b:b1:ad:42:ab:00:7f:3a:31:e5:37:0e:
98:33:65:c0:8b:cd:6f:b8:77:56:1a:2c:8d:34:bd:
be:20:56:4a:97:2b:06:41:5b:9a:a3:58:3e:97:24:
c6:0e:7c:0b:dc:aa:4c:42:20:d9:12:bd:52:17:73:
32:e4:68:8b:df:ed:ef:a7:c4:20:fd:59:d4:1b:d3:
bb:a3:5a:cd:97:9e:d6:a7:35:a1:be:c3:de:26:02:
4c:ed:0b:44:25:b1:95:11:27:38:8a:a6:cd:7d:c8:
c1:39:4f:8f:38:e9:66:5e:3f:dc:d2:b6:f4:72:d2:
d0:23:db:2a:75:64:72:df:ad:67:d2:1c:8d:3a:13:
86:51:21:dc:5c:e0:f6:75:a4:64:a2:40:44:e1:41:
cc:91:74:d5:09:4e:4b:bb:e9:63:d6:04:e8:99:7d:
8f:74:d0:a3:4e:d5:9e:8b:da:08:f0:4a:5f:36:63:
01:54:7b:43:f8:61:e4:53:b9:fb:2b:5a:67:c7:56:
6d:9c:97:4f:c0:c3:b1:86:00:a0:5d:01:43:e7:36:
4a:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:57:77:D4:A7:9E:83:1E:88:91:3D:F7:B5:4B:D5:25:0B:A5:E3:36
X509v3 Authority Key Identifier:
keyid:4C:E0:C4:89:74:E0:AE:70:5A:F5:0E:D0:D6:52:47:D1:A7:E6:2F:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TODEiXTgrnBa9Q7Q1lJH0afmL9s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/99dcca-963a-4003-bfaf-a1169a289c54/1/TODEiXTgrnBa9Q7Q1lJH0afmL9s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/99dcca-963a-4003-bfaf-a1169a289c54/1/TODEiXTgrnBa9Q7Q1lJH0afmL9s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:c4:23:7b:c2:99:1d:15:f0:c8:70:88:a8:8c:6e:f8:87:ba:
a0:c3:61:74:81:13:42:a7:c1:39:0e:89:39:6b:f7:21:4a:18:
8c:72:65:49:e4:02:fb:d0:7a:d6:74:39:63:8e:60:d0:b2:47:
49:2a:7e:f3:82:43:40:a3:99:f0:6d:35:31:68:0d:2e:5e:55:
66:76:d2:35:cf:93:66:81:37:8b:2f:ea:13:a5:18:1e:45:e6:
9b:d0:53:0c:12:f5:32:24:91:19:f5:43:1f:74:2f:2a:5f:6a:
05:9c:61:6d:9c:4b:1f:10:fd:9b:1d:e3:91:85:b3:bb:d0:fe:
3e:a6:75:4e:ec:03:cb:40:29:54:78:91:6d:65:89:66:68:8e:
61:fb:97:62:21:f2:47:67:5e:1d:51:86:68:a0:91:28:c7:ef:
5f:b7:a5:73:98:1b:27:1a:35:cf:f0:f8:b5:33:8a:b6:79:82:
e8:fc:53:0f:47:e8:9e:dd:0e:05:4e:2e:e4:71:e9:2d:00:36:
02:36:ab:1d:76:8e:51:d4:c5:98:97:6c:27:09:ab:62:21:cf:
6e:bd:4d:98:bc:dc:3c:4c:9a:bd:2e:0b:05:0e:d2:16:4f:25:
4f:f6:6a:78:39:9c:5a:73:25:8a:71:db:59:7e:28:1c:c3:70:
22:22:6e:21
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+VSP+QH0/dAEwCS7J4tWvQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjZTBjNDg5NzRlMGFlNzA1YWY1MGVkMGQ2NTI0N2QxYTdl
NjJmZGIwHhcNMjYwNzI0MTgwMDE2WhcNMjYwNzI1MTgwMDE2WjAzMTEwLwYDVQQD
EyhmMzU3NzdkNGE3OWU4MzFlODg5MTNkZjdiNTRiZDUyNTBiYTVlMzM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzAgSPXlSGp54eGKVM+OzkKYAA+Nc
8tbtgrFyqTkPExJn5MvD7r6sKqlWGQAJ/UKbsa1CqwB/OjHlNw6YM2XAi81vuHdW
GiyNNL2+IFZKlysGQVuao1g+lyTGDnwL3KpMQiDZEr1SF3My5GiL3+3vp8Qg/VnU
G9O7o1rNl57WpzWhvsPeJgJM7QtEJbGVESc4iqbNfcjBOU+POOlmXj/c0rb0ctLQ
I9sqdWRy361n0hyNOhOGUSHcXOD2daRkokBE4UHMkXTVCU5Lu+lj1gTomX2PdNCj
TtWei9oI8EpfNmMBVHtD+GHkU7n7K1pnx1ZtnJdPwMOxhgCgXQFD5zZKEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPNXd9SnnoMeiJE997VL1SULpeM2MB8GA1UdIwQY
MBaAFEzgxIl04K5wWvUO0NZSR9Gn5i/bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVE9ERWlYVGdybkJhOVE3UTFsSkgwYWZtTDlzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny85OWRjY2EtOTYzYS00MDAzLWJmYWYt
YTExNjlhMjg5YzU0LzEvVE9ERWlYVGdybkJhOVE3UTFsSkgwYWZtTDlzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ny85OWRjY2EtOTYzYS00MDAzLWJmYWYtYTExNjlhMjg5YzU0
LzEvVE9ERWlYVGdybkJhOVE3UTFsSkgwYWZtTDlzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVcQje8KZ
HRXwyHCIqIxu+Ie6oMNhdIETQqfBOQ6JOWv3IUoYjHJlSeQC+9B61nQ5Y45g0LJH
SSp+84JDQKOZ8G01MWgNLl5VZnbSNc+TZoE3iy/qE6UYHkXmm9BTDBL1MiSRGfVD
H3QvKl9qBZxhbZxLHxD9mx3jkYWzu9D+PqZ1TuwDy0ApVHiRbWWJZmiOYfuXYiHy
R2deHVGGaKCRKMfvX7elc5gbJxo1z/D4tTOKtnmC6PxTD0font0OBU4u5HHpLQA2
AjarHXaOUdTFmJdsJwmrYiHPbr1NmLzcPEyavS4LBQ7SFk8lT/ZqeDmcWnMlinHb
WX4oHMNwIiJuIQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 20:44:32 2026 by rpki-client