Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/851902-5050-46b2-b452-0599f0b2b09a/1/tMflb0aH6hstd2PQiI0QUCNbV0s.mft
File: tMflb0aH6hstd2PQiI0QUCNbV0s.mft (raw, json)
Hash identifier: EDGbsg3A3a4muFqHWlGsz7sM71/zxj6Qa+rvi8h+9zE=
Subject key identifier: E1:82:B8:D3:A6:49:A3:03:9A:0A:EF:2C:62:BE:F5:A2:41:F6:74:18
Authority key identifier: B4:C7:E5:6F:46:87:EA:1B:2D:77:63:D0:88:8D:10:50:23:5B:57:4B
Certificate issuer: /CN=b4c7e56f4687ea1b2d7763d0888d1050235b574b
Certificate serial: 019F92EDA9408CC56C7B73596C99AFC1AC94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tMflb0aH6hstd2PQiI0QUCNbV0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/851902-5050-46b2-b452-0599f0b2b09a/1/tMflb0aH6hstd2PQiI0QUCNbV0s.mft
Manifest number: 1959
Signing time: Fri 24 Jul 2026 07:01:16 +0000
Manifest this update: Fri 24 Jul 2026 07:01:16 +0000
Manifest next update: Sat 25 Jul 2026 07:01:16 +0000
Files and hashes: 1: tMflb0aH6hstd2PQiI0QUCNbV0s.crl (hash: qgyFZ7Nn2pNonu7y+H1/NdowokGCz5JDNtOukqZeqOM=)
2: wFX4ltKD_gZlOj3Qf_Lnn0NhN4U.roa (hash: pjVKRqlOO9z+7mcPGp3goRgbyLNPwv20Ps3g73hf4MM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/851902-5050-46b2-b452-0599f0b2b09a/1/tMflb0aH6hstd2PQiI0QUCNbV0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/851902-5050-46b2-b452-0599f0b2b09a/1/tMflb0aH6hstd2PQiI0QUCNbV0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/tMflb0aH6hstd2PQiI0QUCNbV0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 07:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:ed:a9:40:8c:c5:6c:7b:73:59:6c:99:af:c1:ac:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4c7e56f4687ea1b2d7763d0888d1050235b574b
Validity
Not Before: Jul 24 07:01:16 2026 GMT
Not After : Jul 25 07:01:16 2026 GMT
Subject: CN=e182b8d3a649a3039a0aef2c62bef5a241f67418
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:35:c1:a3:39:3d:f8:e6:9a:2e:fe:02:04:ac:
bc:81:da:95:65:15:28:b2:e3:40:3c:6e:ab:e0:e7:
db:df:f7:a5:0d:83:9c:7d:13:a6:9a:6b:08:72:12:
2d:67:ad:62:0b:cd:31:e8:ba:17:a4:6c:37:59:8d:
19:ba:63:36:5d:5b:a7:58:74:e8:08:3b:c7:b9:bc:
bf:67:6d:38:e9:46:87:de:a5:0a:2b:10:98:74:84:
37:bc:5c:65:f2:86:f8:e8:4f:20:34:bb:2c:ce:e6:
4c:75:2c:50:c2:09:6c:a2:ac:55:2a:65:d9:ba:67:
ea:27:2e:f4:24:1a:ab:fa:52:72:13:b8:f5:f9:13:
af:4d:ae:f6:f4:be:cd:1e:35:1a:f2:fc:86:e9:1c:
d4:3b:6a:15:d3:d6:fb:33:fb:19:a7:08:ec:e6:fb:
ea:24:36:c6:85:74:62:57:b1:45:8d:56:5d:65:d3:
b4:fd:87:4b:e1:af:d8:6a:51:7e:f5:20:37:c2:9e:
72:92:a3:10:09:81:8d:87:54:ff:ac:5f:68:56:ae:
f1:3c:18:0b:6f:1a:9c:cc:7d:82:c6:01:03:89:e0:
27:5f:9a:b6:64:12:08:63:17:0e:14:83:d5:00:f5:
1f:88:ab:25:36:28:67:f8:4c:dc:39:01:14:fe:f8:
7c:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:82:B8:D3:A6:49:A3:03:9A:0A:EF:2C:62:BE:F5:A2:41:F6:74:18
X509v3 Authority Key Identifier:
keyid:B4:C7:E5:6F:46:87:EA:1B:2D:77:63:D0:88:8D:10:50:23:5B:57:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tMflb0aH6hstd2PQiI0QUCNbV0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/851902-5050-46b2-b452-0599f0b2b09a/1/tMflb0aH6hstd2PQiI0QUCNbV0s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/851902-5050-46b2-b452-0599f0b2b09a/1/tMflb0aH6hstd2PQiI0QUCNbV0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:91:0e:53:f5:eb:cd:f6:9c:bc:94:5c:a1:77:59:77:d7:11:
40:68:63:2b:11:39:8b:80:16:d5:53:1b:27:da:9e:43:17:65:
3a:87:15:19:47:7f:11:bd:7d:6c:03:c8:8e:78:6b:0c:16:f6:
a2:11:32:0a:09:d5:5a:d6:65:f1:83:03:ae:7b:34:26:22:72:
6c:22:1f:31:bc:07:f0:24:9b:cc:80:f5:3d:75:e2:34:5d:d3:
03:5f:68:c7:b9:ba:2e:40:fa:b2:82:cc:bb:7f:47:e5:89:dd:
8d:d7:a1:50:ec:d2:4b:d5:f3:1e:b7:e4:5c:db:44:03:b6:3d:
ab:15:86:7a:6d:e3:a3:58:90:5b:ea:0d:82:05:66:2a:da:a5:
eb:69:6d:3f:00:25:24:a9:48:9b:e1:c9:31:8e:d7:a8:c9:8d:
2c:b7:43:0e:70:97:57:f5:25:f0:9c:e0:63:ce:53:b1:80:78:
2f:29:76:a4:3d:79:31:b4:d6:8b:60:a3:06:28:ad:87:71:4a:
4b:3c:e1:dc:f4:f4:75:ad:3e:08:46:ec:8c:2d:6c:4b:28:8f:
a3:26:42:c2:12:ee:75:aa:bf:26:ad:df:d9:5e:99:2f:09:fe:
55:76:40:64:a8:00:f0:77:ca:fd:20:0f:cd:ab:6a:0f:39:29:
97:61:72:b3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+S7alAjMVse3NZbJmvwayUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0YzdlNTZmNDY4N2VhMWIyZDc3NjNkMDg4OGQxMDUwMjM1
YjU3NGIwHhcNMjYwNzI0MDcwMTE2WhcNMjYwNzI1MDcwMTE2WjAzMTEwLwYDVQQD
EyhlMTgyYjhkM2E2NDlhMzAzOWEwYWVmMmM2MmJlZjVhMjQxZjY3NDE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArjXBozk9+OaaLv4CBKy8gdqVZRUo
suNAPG6r4Ofb3/elDYOcfROmmmsIchItZ61iC80x6LoXpGw3WY0ZumM2XVunWHTo
CDvHuby/Z2046UaH3qUKKxCYdIQ3vFxl8ob46E8gNLsszuZMdSxQwglsoqxVKmXZ
umfqJy70JBqr+lJyE7j1+ROvTa729L7NHjUa8vyG6RzUO2oV09b7M/sZpwjs5vvq
JDbGhXRiV7FFjVZdZdO0/YdL4a/YalF+9SA3wp5ykqMQCYGNh1T/rF9oVq7xPBgL
bxqczH2CxgEDieAnX5q2ZBIIYxcOFIPVAPUfiKslNihn+EzcOQEU/vh8FwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOGCuNOmSaMDmgrvLGK+9aJB9nQYMB8GA1UdIwQY
MBaAFLTH5W9Gh+obLXdj0IiNEFAjW1dLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdE1mbGIwYUg2aHN0ZDJQUWlJMFFVQ05iVjBzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC84NTE5MDItNTA1MC00NmIyLWI0NTIt
MDU5OWYwYjJiMDlhLzEvdE1mbGIwYUg2aHN0ZDJQUWlJMFFVQ05iVjBzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NC84NTE5MDItNTA1MC00NmIyLWI0NTItMDU5OWYwYjJiMDlh
LzEvdE1mbGIwYUg2aHN0ZDJQUWlJMFFVQ05iVjBzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZZEOU/Xr
zfacvJRcoXdZd9cRQGhjKxE5i4AW1VMbJ9qeQxdlOocVGUd/Eb19bAPIjnhrDBb2
ohEyCgnVWtZl8YMDrns0JiJybCIfMbwH8CSbzID1PXXiNF3TA19ox7m6LkD6soLM
u39H5YndjdehUOzSS9XzHrfkXNtEA7Y9qxWGem3jo1iQW+oNggVmKtql62ltPwAl
JKlIm+HJMY7XqMmNLLdDDnCXV/Ul8JzgY85TsYB4Lyl2pD15MbTWi2CjBiith3FK
Szzh3PT0da0+CEbsjC1sSyiPoyZCwhLudaq/Jq3f2V6ZLwn+VXZAZKgA8HfK/SAP
zatqDzkpl2Fysw==
-----END CERTIFICATE-----
Generated at Fri Jul 24 12:09:50 2026 by rpki-client