Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/3bc865-386b-4bea-aba0-66c98c01dfd7/1/tj8U3_NUhamVlBKGMDe4XfqfE9g.mft
File: tj8U3_NUhamVlBKGMDe4XfqfE9g.mft (raw, json)
Hash identifier: AzgBGLearfxVsd3wckfnDKvw5/NUaDGFj5swVuO4GRE=
Subject key identifier: FD:14:47:E5:2E:FE:A1:4D:AE:0F:C4:1F:0F:5B:94:91:F7:AE:63:7E
Authority key identifier: B6:3F:14:DF:F3:54:85:A9:95:94:12:86:30:37:B8:5D:FA:9F:13:D8
Certificate issuer: /CN=b63f14dff35485a9959412863037b85dfa9f13d8
Certificate serial: 019F8FEC8ACF9959A7F2E577E25AB493849F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tj8U3_NUhamVlBKGMDe4XfqfE9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/3bc865-386b-4bea-aba0-66c98c01dfd7/1/tj8U3_NUhamVlBKGMDe4XfqfE9g.mft
Manifest number: 08FB
Signing time: Thu 23 Jul 2026 17:01:11 +0000
Manifest this update: Thu 23 Jul 2026 17:01:11 +0000
Manifest next update: Fri 24 Jul 2026 17:01:11 +0000
Files and hashes: 1: gEvPQohUnuc28gSU_LnB2n8byio.asa (hash: Fubnzf0xJmvbucD3B1n2PG0e9xPoaWRyPDCkp6ZRe2c=)
2: tj8U3_NUhamVlBKGMDe4XfqfE9g.crl (hash: ctexShOU4B05LC/PrvSg7Txx2p2P6/NgpAUV4opkWN4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/3bc865-386b-4bea-aba0-66c98c01dfd7/1/tj8U3_NUhamVlBKGMDe4XfqfE9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/3bc865-386b-4bea-aba0-66c98c01dfd7/1/tj8U3_NUhamVlBKGMDe4XfqfE9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/tj8U3_NUhamVlBKGMDe4XfqfE9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:ec:8a:cf:99:59:a7:f2:e5:77:e2:5a:b4:93:84:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b63f14dff35485a9959412863037b85dfa9f13d8
Validity
Not Before: Jul 23 17:01:11 2026 GMT
Not After : Jul 24 17:01:11 2026 GMT
Subject: CN=fd1447e52efea14dae0fc41f0f5b9491f7ae637e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:02:69:52:26:79:73:0b:fa:cc:32:46:66:29:
f0:c1:dc:56:97:45:80:76:ae:9f:d1:50:a2:8c:d6:
92:4d:e0:e2:69:ff:73:e1:99:fe:40:18:fc:86:8d:
e8:03:08:6e:72:e7:08:28:53:56:74:f6:42:0d:65:
2e:4c:ef:97:7e:3f:92:64:03:cb:7d:f0:ef:4f:b5:
0e:8e:da:52:61:a1:12:5f:e6:31:8a:de:2c:19:7e:
43:44:c1:bb:c0:fa:08:4f:de:aa:b4:f9:5a:db:8e:
2f:67:04:7f:00:f8:39:6d:29:97:6e:76:16:39:de:
2d:e1:d3:63:e1:7e:1b:30:e2:3c:b6:5e:98:4c:a9:
17:36:7f:c4:bb:11:a8:cb:48:bf:6e:d4:0f:1f:29:
f6:46:ff:89:30:86:c5:04:d2:d0:56:e1:b5:35:7c:
1a:91:fa:5d:c9:f4:7d:b5:58:62:c6:cf:54:c1:fa:
49:b9:47:55:8a:3b:e2:a8:11:38:49:72:59:4e:1c:
d2:30:c9:13:a5:a3:34:b0:be:79:77:47:ed:b6:7d:
1c:86:7d:8c:c5:be:3b:be:8e:d2:0c:f5:bd:86:7c:
30:43:93:49:85:1c:4a:19:80:c9:3c:65:5d:6d:3c:
b4:3c:dd:a9:c3:f3:48:41:86:56:e6:fc:c6:2a:a8:
75:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:14:47:E5:2E:FE:A1:4D:AE:0F:C4:1F:0F:5B:94:91:F7:AE:63:7E
X509v3 Authority Key Identifier:
keyid:B6:3F:14:DF:F3:54:85:A9:95:94:12:86:30:37:B8:5D:FA:9F:13:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tj8U3_NUhamVlBKGMDe4XfqfE9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/3bc865-386b-4bea-aba0-66c98c01dfd7/1/tj8U3_NUhamVlBKGMDe4XfqfE9g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/3bc865-386b-4bea-aba0-66c98c01dfd7/1/tj8U3_NUhamVlBKGMDe4XfqfE9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:4f:95:6a:e4:81:24:4c:7a:db:22:9b:8b:4a:f9:85:de:61:
b9:06:f0:db:42:85:f0:c4:4d:69:91:de:dd:a0:03:96:ba:2c:
1e:f0:12:be:4d:4c:7c:03:24:c3:07:6e:b7:0c:e3:07:0d:cd:
a8:02:58:75:98:05:8d:c6:8b:81:f0:ae:0d:8c:69:c8:71:d3:
b7:9e:b2:35:98:f2:a5:24:d3:db:64:1c:91:c8:11:4e:ee:68:
cb:55:ab:c0:88:5d:cd:23:b8:c2:48:0d:80:b0:81:fd:5a:68:
f4:61:b4:69:ed:2d:8a:c9:53:05:55:45:86:25:7d:dc:a2:81:
96:87:b1:e7:59:34:34:e9:ed:a3:f4:5e:20:89:67:a5:6e:80:
14:32:21:80:7b:77:dd:0b:52:3e:61:a7:0d:ca:9b:c8:ba:df:
2b:bb:fa:e9:5f:45:e4:9a:c8:6d:51:62:b5:36:75:f5:16:76:
f6:de:e5:bb:d5:9f:ca:b0:2e:c4:2e:36:f7:c6:f0:e9:01:32:
af:3b:94:30:53:81:51:a6:e0:89:45:af:46:45:90:45:6a:5e:
12:8f:a3:26:ef:39:81:6d:93:61:c8:66:a4:e9:1a:db:f9:9a:
07:aa:9f:31:70:ab:43:92:4d:5f:13:72:fd:2a:3e:c0:85:bc:
44:f7:eb:bd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+P7IrPmVmn8uV34lq0k4SfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI2M2YxNGRmZjM1NDg1YTk5NTk0MTI4NjMwMzdiODVkZmE5
ZjEzZDgwHhcNMjYwNzIzMTcwMTExWhcNMjYwNzI0MTcwMTExWjAzMTEwLwYDVQQD
EyhmZDE0NDdlNTJlZmVhMTRkYWUwZmM0MWYwZjViOTQ5MWY3YWU2MzdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxwJpUiZ5cwv6zDJGZinwwdxWl0WA
dq6f0VCijNaSTeDiaf9z4Zn+QBj8ho3oAwhucucIKFNWdPZCDWUuTO+Xfj+SZAPL
ffDvT7UOjtpSYaESX+Yxit4sGX5DRMG7wPoIT96qtPla244vZwR/APg5bSmXbnYW
Od4t4dNj4X4bMOI8tl6YTKkXNn/EuxGoy0i/btQPHyn2Rv+JMIbFBNLQVuG1NXwa
kfpdyfR9tVhixs9UwfpJuUdVijviqBE4SXJZThzSMMkTpaM0sL55d0fttn0chn2M
xb47vo7SDPW9hnwwQ5NJhRxKGYDJPGVdbTy0PN2pw/NIQYZW5vzGKqh1jQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP0UR+Uu/qFNrg/EHw9blJH3rmN+MB8GA1UdIwQY
MBaAFLY/FN/zVIWplZQShjA3uF36nxPYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdGo4VTNfTlVoYW1WbEJLR01EZTRYZnFmRTlnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy8zYmM4NjUtMzg2Yi00YmVhLWFiYTAt
NjZjOThjMDFkZmQ3LzEvdGo4VTNfTlVoYW1WbEJLR01EZTRYZnFmRTlnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy8zYmM4NjUtMzg2Yi00YmVhLWFiYTAtNjZjOThjMDFkZmQ3
LzEvdGo4VTNfTlVoYW1WbEJLR01EZTRYZnFmRTlnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL0+VauSB
JEx62yKbi0r5hd5huQbw20KF8MRNaZHe3aADlrosHvASvk1MfAMkwwdutwzjBw3N
qAJYdZgFjcaLgfCuDYxpyHHTt56yNZjypSTT22QckcgRTu5oy1WrwIhdzSO4wkgN
gLCB/Vpo9GG0ae0tislTBVVFhiV93KKBloex51k0NOnto/ReIIlnpW6AFDIhgHt3
3QtSPmGnDcqbyLrfK7v66V9F5JrIbVFitTZ19RZ29t7lu9WfyrAuxC4298bw6QEy
rzuUMFOBUabgiUWvRkWQRWpeEo+jJu85gW2TYchmpOka2/maB6qfMXCrQ5JNXxNy
/So+wIW8RPfrvQ==
-----END CERTIFICATE-----
Generated at Thu Jul 23 20:08:14 2026 by rpki-client