Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/4921f0-5c5c-4014-8ced-1b03e5894e05/1/TMpSYQx3wkBpxqZZ9fdYYkRNIdE.mft
File: TMpSYQx3wkBpxqZZ9fdYYkRNIdE.mft (raw, json)
Hash identifier: yc6q0DdmIysifL5TEkXQjOAwqf9ThuzzoElnT9APoa0=
Subject key identifier: 0C:7E:25:F4:7A:34:59:28:E4:6F:68:70:51:70:65:CE:B4:84:AC:6B
Authority key identifier: 4C:CA:52:61:0C:77:C2:40:69:C6:A6:59:F5:F7:58:62:44:4D:21:D1
Certificate issuer: /CN=4cca52610c77c24069c6a659f5f75862444d21d1
Certificate serial: 019F8EA30A4637D3820D8C04E72263042349
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TMpSYQx3wkBpxqZZ9fdYYkRNIdE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/4921f0-5c5c-4014-8ced-1b03e5894e05/1/TMpSYQx3wkBpxqZZ9fdYYkRNIdE.mft
Manifest number: 0211
Signing time: Thu 23 Jul 2026 11:01:17 +0000
Manifest this update: Thu 23 Jul 2026 11:01:17 +0000
Manifest next update: Fri 24 Jul 2026 11:01:17 +0000
Files and hashes: 1: 7zHV66w7Bkb2Ny1dDTCLE7Wl8ao.asa (hash: lHxtADA9XD8WHImnlrIbVNB8iNbIHqkbRGv2EysJnKE=)
2: TMpSYQx3wkBpxqZZ9fdYYkRNIdE.crl (hash: nId5ursW2OAxZQ94TsRBtw5yZnfASny99fi2XYQATmM=)
3: xG9NFV14N6jhxkLPrteP6dgm9Uo.asa (hash: j7yw0JA2orCei5mBZaM+jkEs+OnrVp/04Pg2/7YewKU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/4921f0-5c5c-4014-8ced-1b03e5894e05/1/TMpSYQx3wkBpxqZZ9fdYYkRNIdE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/4921f0-5c5c-4014-8ced-1b03e5894e05/1/TMpSYQx3wkBpxqZZ9fdYYkRNIdE.mft
rsync://rpki.ripe.net/repository/DEFAULT/TMpSYQx3wkBpxqZZ9fdYYkRNIdE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 11:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8e:a3:0a:46:37:d3:82:0d:8c:04:e7:22:63:04:23:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cca52610c77c24069c6a659f5f75862444d21d1
Validity
Not Before: Jul 23 11:01:17 2026 GMT
Not After : Jul 24 11:01:17 2026 GMT
Subject: CN=0c7e25f47a345928e46f6870517065ceb484ac6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:38:e4:b7:4d:fb:cf:b1:6b:2a:85:a5:76:1a:
50:66:34:c2:94:59:7f:77:15:3f:1d:60:3b:b5:48:
78:dd:ef:4f:01:c2:d6:1d:f0:0c:f2:5f:a5:5d:68:
b6:6b:32:7b:13:57:47:d1:53:02:49:b7:27:9e:5f:
d0:59:28:9f:9f:09:f0:6f:bf:18:34:0c:11:af:5a:
f7:ae:fe:2b:2a:c7:13:14:ba:8e:2a:86:31:a7:d3:
a6:72:3a:2f:13:17:36:be:54:7e:34:b6:a7:27:0b:
8e:7b:9d:5d:d8:5e:ff:ac:e8:2a:b8:a6:06:be:5b:
b4:18:fe:41:bc:d9:e9:ac:e2:55:00:fc:db:7d:16:
7a:3c:96:1e:7a:40:c6:53:f8:c6:56:9a:c6:f0:67:
e3:45:24:88:89:a6:e3:ca:09:c5:08:5f:89:67:96:
8e:ec:7c:72:32:03:5a:10:20:fb:16:1e:8f:08:b9:
d2:36:39:bf:b6:70:f7:87:f7:df:15:69:c6:af:5a:
5e:36:83:bf:42:7e:a5:6f:7e:90:b6:44:14:0d:34:
5f:74:a5:cf:9b:bc:32:85:ff:9c:39:6c:16:8f:17:
27:37:bd:2d:1a:2d:e5:4f:19:15:a7:1c:3d:04:47:
c0:43:77:dc:60:3b:7c:92:f7:f3:2a:24:9e:22:b0:
57:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:7E:25:F4:7A:34:59:28:E4:6F:68:70:51:70:65:CE:B4:84:AC:6B
X509v3 Authority Key Identifier:
keyid:4C:CA:52:61:0C:77:C2:40:69:C6:A6:59:F5:F7:58:62:44:4D:21:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TMpSYQx3wkBpxqZZ9fdYYkRNIdE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/4921f0-5c5c-4014-8ced-1b03e5894e05/1/TMpSYQx3wkBpxqZZ9fdYYkRNIdE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/4921f0-5c5c-4014-8ced-1b03e5894e05/1/TMpSYQx3wkBpxqZZ9fdYYkRNIdE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:5a:66:ec:99:a5:4e:d3:94:8f:c9:ff:10:42:91:59:15:7c:
76:de:62:d5:36:6d:ec:57:27:f5:5c:a4:8d:5f:c6:27:a5:56:
0e:a6:0c:da:c5:80:79:df:d0:71:29:ee:1e:af:41:e1:62:83:
65:54:0c:46:64:12:16:5e:38:c7:ff:aa:7a:40:40:87:00:9b:
0e:cd:6b:ab:3e:80:59:ec:24:6a:35:31:eb:84:54:c5:70:8a:
04:02:b3:19:49:41:6e:29:ce:30:5a:d4:3e:c5:75:11:6c:e0:
c0:74:36:eb:de:9b:99:9b:d5:97:09:0c:5d:fc:24:13:a6:a1:
bc:7a:b3:cf:82:bc:24:40:a8:77:8b:03:cb:50:21:b8:3b:bc:
4c:90:10:8f:1e:4a:32:8f:9c:d7:0a:01:af:28:1a:55:12:54:
dd:26:f9:b2:df:3b:d9:96:fa:06:1c:c9:7c:1d:40:ee:0c:cd:
91:67:da:d9:df:96:ee:47:d5:b6:f3:dc:10:7f:8f:bc:dd:48:
29:b3:18:4f:46:87:bb:91:6f:da:f5:b0:a0:a7:2d:b2:8c:bc:
98:f8:1f:f1:1c:b4:00:04:85:91:82:5d:76:b8:9e:83:e3:0a:
16:5a:24:ea:86:2b:b2:15:07:2e:7e:57:09:3f:2a:8c:b9:93:
f8:ac:42:9d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+OowpGN9OCDYwE5yJjBCNJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjY2E1MjYxMGM3N2MyNDA2OWM2YTY1OWY1Zjc1ODYyNDQ0
ZDIxZDEwHhcNMjYwNzIzMTEwMTE3WhcNMjYwNzI0MTEwMTE3WjAzMTEwLwYDVQQD
EygwYzdlMjVmNDdhMzQ1OTI4ZTQ2ZjY4NzA1MTcwNjVjZWI0ODRhYzZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqDjkt037z7FrKoWldhpQZjTClFl/
dxU/HWA7tUh43e9PAcLWHfAM8l+lXWi2azJ7E1dH0VMCSbcnnl/QWSifnwnwb78Y
NAwRr1r3rv4rKscTFLqOKoYxp9OmcjovExc2vlR+NLanJwuOe51d2F7/rOgquKYG
vlu0GP5BvNnprOJVAPzbfRZ6PJYeekDGU/jGVprG8GfjRSSIiabjygnFCF+JZ5aO
7HxyMgNaECD7Fh6PCLnSNjm/tnD3h/ffFWnGr1peNoO/Qn6lb36QtkQUDTRfdKXP
m7wyhf+cOWwWjxcnN70tGi3lTxkVpxw9BEfAQ3fcYDt8kvfzKiSeIrBXvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAx+JfR6NFko5G9ocFFwZc60hKxrMB8GA1UdIwQY
MBaAFEzKUmEMd8JAacamWfX3WGJETSHRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVE1wU1lReDN3a0JweHFaWjlmZFlZa1JOSWRFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS80OTIxZjAtNWM1Yy00MDE0LThjZWQt
MWIwM2U1ODk0ZTA1LzEvVE1wU1lReDN3a0JweHFaWjlmZFlZa1JOSWRFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMS80OTIxZjAtNWM1Yy00MDE0LThjZWQtMWIwM2U1ODk0ZTA1
LzEvVE1wU1lReDN3a0JweHFaWjlmZFlZa1JOSWRFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnlpm7Jml
TtOUj8n/EEKRWRV8dt5i1TZt7Fcn9VykjV/GJ6VWDqYM2sWAed/QcSnuHq9B4WKD
ZVQMRmQSFl44x/+qekBAhwCbDs1rqz6AWewkajUx64RUxXCKBAKzGUlBbinOMFrU
PsV1EWzgwHQ2696bmZvVlwkMXfwkE6ahvHqzz4K8JECod4sDy1AhuDu8TJAQjx5K
Mo+c1woBrygaVRJU3Sb5st872Zb6BhzJfB1A7gzNkWfa2d+W7kfVtvPcEH+PvN1I
KbMYT0aHu5Fv2vWwoKctsoy8mPgf8Ry0AASFkYJddrieg+MKFlok6oYrshUHLn5X
CT8qjLmT+KxCnQ==
-----END CERTIFICATE-----
Generated at Thu Jul 23 20:22:36 2026 by rpki-client