Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/b5fb58-928c-438f-bcef-858f8aca323f/1/TJ--R1YCj6QYejmVlfrGXDwcQ8Y.mft
File: TJ--R1YCj6QYejmVlfrGXDwcQ8Y.mft (raw, json)
Hash identifier: bQ8FJ7CgAOHwg0oXCDYSBrxqMNDzfhtuNqJE4GbA80Y=
Subject key identifier: 91:5E:CD:7B:2C:11:EA:7E:80:C7:3B:53:7E:BE:9C:8C:E3:22:A1:E7
Authority key identifier: 4C:9F:BE:47:56:02:8F:A4:18:7A:39:95:95:FA:C6:5C:3C:1C:43:C6
Certificate issuer: /CN=4c9fbe4756028fa4187a399595fac65c3c1c43c6
Certificate serial: 019F946DEBA1C5863681CC7CBE40078B8EBF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TJ--R1YCj6QYejmVlfrGXDwcQ8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/b5fb58-928c-438f-bcef-858f8aca323f/1/TJ--R1YCj6QYejmVlfrGXDwcQ8Y.mft
Manifest number: 0C10
Signing time: Fri 24 Jul 2026 14:00:59 +0000
Manifest this update: Fri 24 Jul 2026 14:00:59 +0000
Manifest next update: Sat 25 Jul 2026 14:00:59 +0000
Files and hashes: 1: TJ--R1YCj6QYejmVlfrGXDwcQ8Y.crl (hash: 5r9/IRuKXRvTNN56pCNN6epB5S4v3IjXI83h+PCp96c=)
2: aC8UNmy0l7OgPQTZ2nVPiNtSCxQ.roa (hash: L0i81KYUigHRpwI1gm1ehZ81UJds6Brs5hjYir4TlR0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/b5fb58-928c-438f-bcef-858f8aca323f/1/TJ--R1YCj6QYejmVlfrGXDwcQ8Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/b5fb58-928c-438f-bcef-858f8aca323f/1/TJ--R1YCj6QYejmVlfrGXDwcQ8Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/TJ--R1YCj6QYejmVlfrGXDwcQ8Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:6d:eb:a1:c5:86:36:81:cc:7c:be:40:07:8b:8e:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c9fbe4756028fa4187a399595fac65c3c1c43c6
Validity
Not Before: Jul 24 14:00:59 2026 GMT
Not After : Jul 25 14:00:59 2026 GMT
Subject: CN=915ecd7b2c11ea7e80c73b537ebe9c8ce322a1e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:fa:90:b9:df:36:f9:06:50:33:3b:bf:cd:e9:
b2:b4:f6:91:6e:0a:3c:6b:bb:d1:cf:b4:c8:46:f6:
25:fd:13:34:a0:85:50:d0:5d:38:a3:75:ac:29:ac:
de:2e:95:f6:8f:26:06:6a:fa:2a:56:11:9b:b3:76:
85:ee:f4:59:3d:c6:97:bc:9f:84:77:bb:25:c3:d3:
d9:fa:99:c8:a0:99:ab:ec:36:71:c8:fc:e9:d3:62:
a5:f7:91:fd:09:d6:14:bc:58:1b:c7:1c:d0:35:e4:
ec:4c:49:e3:51:71:75:ca:f1:a8:c1:f9:f5:cf:73:
d2:b5:a9:b3:55:ab:8f:c7:c5:76:e4:9e:13:8c:f4:
ad:07:84:ad:8c:ef:56:12:26:44:72:98:c3:f9:54:
4d:b3:3f:a3:20:d7:2f:e2:13:3e:e8:74:75:fd:02:
d9:81:4b:f0:73:65:44:8b:2d:18:f6:62:3c:67:c3:
b2:54:1f:1b:ea:50:4c:9a:f4:ff:b8:3c:98:05:56:
2e:f7:c9:6a:91:6a:73:30:21:15:78:95:15:2e:46:
f2:9e:4d:04:b5:b9:18:83:c0:57:ce:61:d1:97:88:
3a:f7:d0:fb:d8:9e:92:dd:3b:8d:eb:db:dc:fc:03:
c7:5a:82:4f:d4:01:cf:69:a5:43:e4:2f:6c:37:01:
62:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:5E:CD:7B:2C:11:EA:7E:80:C7:3B:53:7E:BE:9C:8C:E3:22:A1:E7
X509v3 Authority Key Identifier:
keyid:4C:9F:BE:47:56:02:8F:A4:18:7A:39:95:95:FA:C6:5C:3C:1C:43:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TJ--R1YCj6QYejmVlfrGXDwcQ8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/b5fb58-928c-438f-bcef-858f8aca323f/1/TJ--R1YCj6QYejmVlfrGXDwcQ8Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/b5fb58-928c-438f-bcef-858f8aca323f/1/TJ--R1YCj6QYejmVlfrGXDwcQ8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:f9:e4:14:1c:a7:7c:08:24:55:d4:5a:66:4a:72:25:bc:56:
fb:5d:df:99:4a:bf:71:ed:3d:b5:09:ec:44:00:b4:36:be:77:
6a:69:07:3e:63:18:cc:56:1f:47:f6:fa:de:90:4e:55:15:72:
0e:c2:42:c6:76:fb:29:2a:62:b8:a5:92:91:dc:8c:c2:79:43:
05:3d:d3:97:fb:30:97:03:cb:e5:d1:34:aa:25:6e:4d:93:62:
6c:4a:ed:ff:46:13:84:80:7f:93:8f:72:3b:bd:0d:db:1f:99:
56:07:1e:40:4f:c8:68:68:a1:a9:2f:ae:d3:96:a7:27:74:67:
ac:c5:5d:f0:a5:e3:f0:c3:41:7f:91:74:99:f7:2a:86:92:19:
06:98:cf:ca:b4:bf:32:df:3a:7f:68:e4:5e:53:53:e6:b1:42:
2f:34:71:db:fb:90:3f:86:c6:98:e4:c8:84:df:e2:15:fd:98:
b4:ac:3b:ba:32:1c:79:26:79:cd:06:d2:c9:c0:20:ab:f2:6f:
9e:60:9b:a0:ab:47:59:ce:45:92:0a:09:8e:7c:cb:9f:2a:c6:
6e:c8:99:97:55:4a:d3:25:bf:52:aa:b7:9f:21:d5:f1:56:7c:
4c:1b:9a:e5:fb:41:d5:36:ec:a2:79:84:d5:29:70:7a:1f:5f:
34:f5:a1:14
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+UbeuhxYY2gcx8vkAHi46/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjOWZiZTQ3NTYwMjhmYTQxODdhMzk5NTk1ZmFjNjVjM2Mx
YzQzYzYwHhcNMjYwNzI0MTQwMDU5WhcNMjYwNzI1MTQwMDU5WjAzMTEwLwYDVQQD
Eyg5MTVlY2Q3YjJjMTFlYTdlODBjNzNiNTM3ZWJlOWM4Y2UzMjJhMWU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsPqQud82+QZQMzu/zemytPaRbgo8
a7vRz7TIRvYl/RM0oIVQ0F04o3WsKazeLpX2jyYGavoqVhGbs3aF7vRZPcaXvJ+E
d7slw9PZ+pnIoJmr7DZxyPzp02Kl95H9CdYUvFgbxxzQNeTsTEnjUXF1yvGowfn1
z3PStamzVauPx8V25J4TjPStB4StjO9WEiZEcpjD+VRNsz+jINcv4hM+6HR1/QLZ
gUvwc2VEiy0Y9mI8Z8OyVB8b6lBMmvT/uDyYBVYu98lqkWpzMCEVeJUVLkbynk0E
tbkYg8BXzmHRl4g699D72J6S3TuN69vc/APHWoJP1AHPaaVD5C9sNwFihQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJFezXssEep+gMc7U36+nIzjIqHnMB8GA1UdIwQY
MBaAFEyfvkdWAo+kGHo5lZX6xlw8HEPGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVEotLVIxWUNqNlFZZWptVmxmckdYRHdjUThZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny9iNWZiNTgtOTI4Yy00MzhmLWJjZWYt
ODU4ZjhhY2EzMjNmLzEvVEotLVIxWUNqNlFZZWptVmxmckdYRHdjUThZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ny9iNWZiNTgtOTI4Yy00MzhmLWJjZWYtODU4ZjhhY2EzMjNm
LzEvVEotLVIxWUNqNlFZZWptVmxmckdYRHdjUThZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc/nkFByn
fAgkVdRaZkpyJbxW+13fmUq/ce09tQnsRAC0Nr53amkHPmMYzFYfR/b63pBOVRVy
DsJCxnb7KSpiuKWSkdyMwnlDBT3Tl/swlwPL5dE0qiVuTZNibErt/0YThIB/k49y
O70N2x+ZVgceQE/IaGihqS+u05anJ3RnrMVd8KXj8MNBf5F0mfcqhpIZBpjPyrS/
Mt86f2jkXlNT5rFCLzRx2/uQP4bGmOTIhN/iFf2YtKw7ujIceSZ5zQbSycAgq/Jv
nmCboKtHWc5FkgoJjnzLnyrGbsiZl1VK0yW/Uqq3nyHV8VZ8TBua5ftB1TbsonmE
1Slweh9fNPWhFA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 17:37:10 2026 by rpki-client