Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/672a2f-ac2b-4631-ab3d-c2bc1451f271/1/tcfYHsTEBVxnP_VxzK0Hw6aZEF4.mft
File: tcfYHsTEBVxnP_VxzK0Hw6aZEF4.mft (raw, json)
Hash identifier: o8nB7cMAeb6XWCfceKLgJ2K1+nb6slkY5rn/sd5F1X8=
Subject key identifier: 8E:9C:78:91:8E:C8:02:15:0C:02:27:54:AC:9A:9B:D9:1D:E1:B9:EF
Authority key identifier: B5:C7:D8:1E:C4:C4:05:5C:67:3F:F5:71:CC:AD:07:C3:A6:99:10:5E
Certificate issuer: /CN=b5c7d81ec4c4055c673ff571ccad07c3a699105e
Certificate serial: 019E1F11149A2563872AD6E2C0827F3FDC03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tcfYHsTEBVxnP_VxzK0Hw6aZEF4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/672a2f-ac2b-4631-ab3d-c2bc1451f271/1/tcfYHsTEBVxnP_VxzK0Hw6aZEF4.mft
Manifest number: 0C61
Signing time: Wed 13 May 2026 02:01:13 +0000
Manifest this update: Wed 13 May 2026 02:01:13 +0000
Manifest next update: Thu 14 May 2026 02:01:13 +0000
Files and hashes: 1: BOgwaBfeVQSIIpapc527zkUmHqU.roa (hash: nrw7ZZfH7PdSf3N6nWnSJG5fTiZauLCGIT/x1kU9vbo=)
2: iMohY32XGfMe49GauUZuk8wSe_o.roa (hash: g/W9WUEJtZqHaB3GKVuuSkkBsgjFZgj3NGrp3JQbfpw=)
3: taAXT03F3M3JAGdGzCZ9PUX6syw.roa (hash: fgpH3fuH0sJY/Yp9V/TwIQ+R+Yd9bAUVli6dhikUJko=)
4: tcfYHsTEBVxnP_VxzK0Hw6aZEF4.crl (hash: zzuLeZF26JC0x4XDXuLd48Kbz1jmqh9aD0ARi9bMIHg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/672a2f-ac2b-4631-ab3d-c2bc1451f271/1/tcfYHsTEBVxnP_VxzK0Hw6aZEF4.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/672a2f-ac2b-4631-ab3d-c2bc1451f271/1/tcfYHsTEBVxnP_VxzK0Hw6aZEF4.mft
rsync://rpki.ripe.net/repository/DEFAULT/tcfYHsTEBVxnP_VxzK0Hw6aZEF4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:11:14:9a:25:63:87:2a:d6:e2:c0:82:7f:3f:dc:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5c7d81ec4c4055c673ff571ccad07c3a699105e
Validity
Not Before: May 13 02:01:13 2026 GMT
Not After : May 14 02:01:13 2026 GMT
Subject: CN=8e9c78918ec802150c022754ac9a9bd91de1b9ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:52:48:ff:b1:f8:98:fe:06:e9:82:39:9e:75:
dd:5d:62:d1:67:eb:7b:5c:9e:76:3c:4c:14:ba:9c:
85:aa:8a:33:5d:c8:5c:ce:55:c9:2b:ae:59:0b:f1:
41:b6:28:cc:85:fe:e9:af:20:84:0e:73:47:a3:2e:
30:42:2f:4d:1c:69:4c:c9:3f:52:ac:6c:04:d3:52:
af:18:62:a2:93:4c:7f:b9:15:7f:7b:3a:00:b8:ec:
ad:73:85:01:a5:92:9c:a7:3f:8e:4a:f7:e6:fc:ab:
4f:af:c3:80:dc:5e:32:fe:f4:5d:65:86:4f:62:67:
c8:6b:2b:97:09:b2:08:a6:a1:c0:06:58:eb:5c:f2:
cc:2e:47:5b:eb:84:03:3f:ff:47:c8:15:a9:4c:4f:
bd:10:8a:ac:59:f8:c7:04:53:c0:8f:8f:d3:64:60:
e0:e5:96:39:8a:cf:2d:c2:53:27:8a:eb:46:91:1f:
3f:86:ab:19:03:f3:37:97:4c:22:c8:77:2a:ef:dd:
ef:55:3c:4e:68:69:b4:ca:c1:f8:16:31:46:40:e0:
44:e6:74:ea:04:98:13:49:be:a4:38:30:ac:d2:35:
65:e6:f1:cb:9a:83:4c:98:3a:4f:e4:7c:53:cd:c2:
ea:31:aa:8b:2e:bd:82:ca:86:49:1f:47:bd:b3:b1:
2b:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:9C:78:91:8E:C8:02:15:0C:02:27:54:AC:9A:9B:D9:1D:E1:B9:EF
X509v3 Authority Key Identifier:
keyid:B5:C7:D8:1E:C4:C4:05:5C:67:3F:F5:71:CC:AD:07:C3:A6:99:10:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tcfYHsTEBVxnP_VxzK0Hw6aZEF4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/672a2f-ac2b-4631-ab3d-c2bc1451f271/1/tcfYHsTEBVxnP_VxzK0Hw6aZEF4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/672a2f-ac2b-4631-ab3d-c2bc1451f271/1/tcfYHsTEBVxnP_VxzK0Hw6aZEF4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:d6:58:0c:bc:1d:21:99:6e:67:e5:bb:a8:48:f0:bd:6d:2e:
c8:1e:24:77:c3:12:01:90:ad:8c:fb:c3:c5:11:52:fc:0e:f1:
a3:61:ef:67:60:bb:30:e3:65:5f:80:f1:2b:dd:9b:98:af:66:
a1:43:69:b4:29:12:2a:91:81:a2:c8:1d:48:05:04:bf:b6:2d:
04:74:32:6f:24:de:47:ef:22:85:a6:d3:0f:ba:7b:0a:b2:b5:
01:a6:ee:ff:fc:f0:d4:77:f1:0d:0f:ce:4b:f7:c3:eb:b2:04:
12:63:f6:d4:81:17:42:98:86:db:0b:c5:ec:96:08:89:7e:20:
78:67:84:1b:09:c4:9c:b0:a0:d5:b7:62:01:67:cb:da:1b:25:
55:da:bb:9b:43:e8:04:68:c9:80:94:33:b5:a5:e0:cc:84:99:
ac:50:d2:0e:1e:9b:6d:21:76:7e:aa:92:b9:dd:93:13:e5:ca:
75:2a:96:86:a8:c9:f9:32:81:51:c2:a4:b8:b3:b4:42:72:b5:
56:db:55:32:d8:54:39:e8:43:6e:bc:cf:48:4c:69:38:ca:cc:
c6:ed:60:86:5f:39:1e:82:e9:92:4e:f0:28:db:a8:c6:3b:4c:
f0:b3:30:aa:f5:39:70:7a:18:7b:8f:8b:fa:87:b4:71:a3:f0:
9a:23:08:a4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4fERSaJWOHKtbiwIJ/P9wDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1YzdkODFlYzRjNDA1NWM2NzNmZjU3MWNjYWQwN2MzYTY5
OTEwNWUwHhcNMjYwNTEzMDIwMTEzWhcNMjYwNTE0MDIwMTEzWjAzMTEwLwYDVQQD
Eyg4ZTljNzg5MThlYzgwMjE1MGMwMjI3NTRhYzlhOWJkOTFkZTFiOWVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA11JI/7H4mP4G6YI5nnXdXWLRZ+t7
XJ52PEwUupyFqoozXchczlXJK65ZC/FBtijMhf7pryCEDnNHoy4wQi9NHGlMyT9S
rGwE01KvGGKik0x/uRV/ezoAuOytc4UBpZKcpz+OSvfm/KtPr8OA3F4y/vRdZYZP
YmfIayuXCbIIpqHABljrXPLMLkdb64QDP/9HyBWpTE+9EIqsWfjHBFPAj4/TZGDg
5ZY5is8twlMniutGkR8/hqsZA/M3l0wiyHcq793vVTxOaGm0ysH4FjFGQOBE5nTq
BJgTSb6kODCs0jVl5vHLmoNMmDpP5HxTzcLqMaqLLr2CyoZJH0e9s7ErtwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI6ceJGOyAIVDAInVKyam9kd4bnvMB8GA1UdIwQY
MBaAFLXH2B7ExAVcZz/1ccytB8OmmRBeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdGNmWUhzVEVCVnhuUF9WeHpLMEh3NmFaRUY0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi82NzJhMmYtYWMyYi00NjMxLWFiM2Qt
YzJiYzE0NTFmMjcxLzEvdGNmWUhzVEVCVnhuUF9WeHpLMEh3NmFaRUY0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZi82NzJhMmYtYWMyYi00NjMxLWFiM2QtYzJiYzE0NTFmMjcx
LzEvdGNmWUhzVEVCVnhuUF9WeHpLMEh3NmFaRUY0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIdZYDLwd
IZluZ+W7qEjwvW0uyB4kd8MSAZCtjPvDxRFS/A7xo2HvZ2C7MONlX4DxK92bmK9m
oUNptCkSKpGBosgdSAUEv7YtBHQybyTeR+8ihabTD7p7CrK1Aabu//zw1HfxDQ/O
S/fD67IEEmP21IEXQpiG2wvF7JYIiX4geGeEGwnEnLCg1bdiAWfL2hslVdq7m0Po
BGjJgJQztaXgzISZrFDSDh6bbSF2fqqSud2TE+XKdSqWhqjJ+TKBUcKkuLO0QnK1
VttVMthUOehDbrzPSExpOMrMxu1ghl85HoLpkk7wKNuoxjtM8LMwqvU5cHoYe4+L
+oe0caPwmiMIpA==
-----END CERTIFICATE-----
Generated at Wed May 13 06:06:20 2026 by rpki-client