Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/ccf3a5-030d-4b54-8079-8a5f169a5ae7/1/TzVzzX1WHNN-DzMfbKON6SAgQrI.mft
File: TzVzzX1WHNN-DzMfbKON6SAgQrI.mft (raw, json)
Hash identifier: qnc3VyltaI88JVc77pnYM46DjDbuH44RSgrAFkyT7Pw=
Subject key identifier: 2B:5C:8E:61:29:80:27:2B:16:0F:E8:B6:1A:7C:F9:15:A2:29:64:02
Authority key identifier: 4F:35:73:CD:7D:56:1C:D3:7E:0F:33:1F:6C:A3:8D:E9:20:20:42:B2
Certificate issuer: /CN=4f3573cd7d561cd37e0f331f6ca38de9202042b2
Certificate serial: 019F935ACBBE9F2276226B2EC3934BF99B21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TzVzzX1WHNN-DzMfbKON6SAgQrI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/ccf3a5-030d-4b54-8079-8a5f169a5ae7/1/TzVzzX1WHNN-DzMfbKON6SAgQrI.mft
Manifest number: 0EDE
Signing time: Fri 24 Jul 2026 09:00:28 +0000
Manifest this update: Fri 24 Jul 2026 09:00:28 +0000
Manifest next update: Sat 25 Jul 2026 09:00:28 +0000
Files and hashes: 1: 64yTSgcbmjpKAYlvmgIcfumrEFE.roa (hash: 55p0izKTNl/c/EZ7S9t+Y7oaqYI6l5T9RwPtRmB8IuY=)
2: TzVzzX1WHNN-DzMfbKON6SAgQrI.crl (hash: JKXcnOxPF6LiGqbYd6y+RjwdxV3JUoYkFa0WJs+/4cA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/ccf3a5-030d-4b54-8079-8a5f169a5ae7/1/TzVzzX1WHNN-DzMfbKON6SAgQrI.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/ccf3a5-030d-4b54-8079-8a5f169a5ae7/1/TzVzzX1WHNN-DzMfbKON6SAgQrI.mft
rsync://rpki.ripe.net/repository/DEFAULT/TzVzzX1WHNN-DzMfbKON6SAgQrI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:5a:cb:be:9f:22:76:22:6b:2e:c3:93:4b:f9:9b:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f3573cd7d561cd37e0f331f6ca38de9202042b2
Validity
Not Before: Jul 24 09:00:28 2026 GMT
Not After : Jul 25 09:00:28 2026 GMT
Subject: CN=2b5c8e612980272b160fe8b61a7cf915a2296402
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:2a:9c:5d:83:12:f1:c2:0f:db:a0:9f:71:41:
d8:27:c5:31:09:76:f5:16:b6:2f:7a:c0:d2:94:a4:
12:91:d8:95:66:cc:44:13:a3:8d:07:46:ff:ad:1e:
c8:16:27:28:cd:c6:9f:41:6d:92:b6:71:60:b0:e5:
fa:95:2d:50:38:57:9f:5a:59:e0:27:4b:ca:e6:c1:
c2:0a:95:bd:be:e7:bb:f5:eb:b7:5e:69:3c:69:fd:
1d:33:ba:af:ec:a8:d2:19:7e:f3:15:81:bc:c7:e9:
0c:cb:7a:96:02:4d:4e:47:a1:8e:51:cb:aa:1c:a8:
18:e8:91:35:66:06:97:13:38:ac:41:1c:04:23:1e:
ae:79:66:10:74:2e:cd:f7:c7:bc:20:8e:c3:62:be:
f2:f1:14:e3:1a:9b:8c:82:66:7a:3e:de:d2:92:69:
7f:cb:97:d7:29:11:a5:8f:03:3c:05:ed:16:bb:bb:
c6:b9:56:7b:ae:66:bd:a8:01:76:16:45:7a:70:6c:
54:66:8f:8e:dd:01:83:63:43:55:50:2f:d5:8f:fe:
c0:4a:17:d7:f4:e6:4a:ed:01:e5:84:df:0b:ec:e4:
56:33:aa:8c:59:61:ae:43:72:8b:7d:83:6c:13:77:
70:6f:f9:a4:20:0f:a7:af:a4:7f:e4:3b:72:23:88:
b5:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:5C:8E:61:29:80:27:2B:16:0F:E8:B6:1A:7C:F9:15:A2:29:64:02
X509v3 Authority Key Identifier:
keyid:4F:35:73:CD:7D:56:1C:D3:7E:0F:33:1F:6C:A3:8D:E9:20:20:42:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TzVzzX1WHNN-DzMfbKON6SAgQrI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/ccf3a5-030d-4b54-8079-8a5f169a5ae7/1/TzVzzX1WHNN-DzMfbKON6SAgQrI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/ccf3a5-030d-4b54-8079-8a5f169a5ae7/1/TzVzzX1WHNN-DzMfbKON6SAgQrI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:ed:db:10:ea:f7:06:93:92:1c:04:9a:f5:7a:44:b8:49:ca:
38:e2:54:1d:e6:b7:51:6e:d6:34:12:08:71:aa:10:c6:f3:72:
ba:f6:35:66:b3:e4:7a:0d:52:03:d8:6a:99:7a:43:a5:99:94:
30:72:9b:3d:60:03:f8:ad:fd:f3:d6:25:1b:5d:90:dc:1d:ea:
7f:51:4b:b0:ac:45:76:77:b3:9d:e5:8d:1b:49:cd:28:2a:b7:
a8:51:eb:03:3e:3f:c6:71:2e:e6:96:ee:cd:f6:27:c4:c4:b3:
ca:a9:80:71:dd:8a:f5:b4:4f:82:22:b9:c5:22:f4:78:bf:e1:
57:d1:79:bc:75:d7:0a:95:dc:ca:14:9d:7c:a2:6e:58:d2:43:
d6:ff:bb:a8:42:75:e5:95:ad:89:b5:83:be:b1:fd:0f:77:80:
d7:1f:c5:c4:92:72:c4:2a:ba:15:c3:15:1b:92:33:3c:71:01:
2a:10:74:03:bf:d5:0c:25:96:61:36:8f:51:2d:83:4e:6d:4c:
b0:72:9f:91:3c:db:52:10:fe:c1:e2:bc:6a:6e:57:27:32:5c:
48:c1:cf:44:b5:7d:d5:fc:0c:db:5f:ad:72:0c:3f:b2:62:0b:
11:a8:42:a6:ab:90:dd:b1:1e:1c:f1:e4:f7:35:7d:a8:ed:6a:
4f:82:a2:22
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+TWsu+nyJ2Imsuw5NL+ZshMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMzU3M2NkN2Q1NjFjZDM3ZTBmMzMxZjZjYTM4ZGU5MjAy
MDQyYjIwHhcNMjYwNzI0MDkwMDI4WhcNMjYwNzI1MDkwMDI4WjAzMTEwLwYDVQQD
EygyYjVjOGU2MTI5ODAyNzJiMTYwZmU4YjYxYTdjZjkxNWEyMjk2NDAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlyqcXYMS8cIP26CfcUHYJ8UxCXb1
FrYvesDSlKQSkdiVZsxEE6ONB0b/rR7IFicozcafQW2StnFgsOX6lS1QOFefWlng
J0vK5sHCCpW9vue79eu3Xmk8af0dM7qv7KjSGX7zFYG8x+kMy3qWAk1OR6GOUcuq
HKgY6JE1ZgaXEzisQRwEIx6ueWYQdC7N98e8II7DYr7y8RTjGpuMgmZ6Pt7Skml/
y5fXKRGljwM8Be0Wu7vGuVZ7rma9qAF2FkV6cGxUZo+O3QGDY0NVUC/Vj/7AShfX
9OZK7QHlhN8L7ORWM6qMWWGuQ3KLfYNsE3dwb/mkIA+nr6R/5DtyI4i1lQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCtcjmEpgCcrFg/othp8+RWiKWQCMB8GA1UdIwQY
MBaAFE81c819VhzTfg8zH2yjjekgIEKyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHpWenpYMVdITk4tRHpNZmJLT042U0FnUXJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi9jY2YzYTUtMDMwZC00YjU0LTgwNzkt
OGE1ZjE2OWE1YWU3LzEvVHpWenpYMVdITk4tRHpNZmJLT042U0FnUXJJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Zi9jY2YzYTUtMDMwZC00YjU0LTgwNzktOGE1ZjE2OWE1YWU3
LzEvVHpWenpYMVdITk4tRHpNZmJLT042U0FnUXJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXu3bEOr3
BpOSHASa9XpEuEnKOOJUHea3UW7WNBIIcaoQxvNyuvY1ZrPkeg1SA9hqmXpDpZmU
MHKbPWAD+K3989YlG12Q3B3qf1FLsKxFdnezneWNG0nNKCq3qFHrAz4/xnEu5pbu
zfYnxMSzyqmAcd2K9bRPgiK5xSL0eL/hV9F5vHXXCpXcyhSdfKJuWNJD1v+7qEJ1
5ZWtibWDvrH9D3eA1x/FxJJyxCq6FcMVG5IzPHEBKhB0A7/VDCWWYTaPUS2DTm1M
sHKfkTzbUhD+weK8am5XJzJcSMHPRLV91fwM21+tcgw/smILEahCpquQ3bEeHPHk
9zV9qO1qT4KiIg==
-----END CERTIFICATE-----
Generated at Fri Jul 24 11:16:12 2026 by rpki-client