Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/b011d3-bdba-45cd-a8ac-e0be89c4f169/1/tqFlTa6WxTJXjOHfHruCIdu2gUU.mft
File: tqFlTa6WxTJXjOHfHruCIdu2gUU.mft (raw, json)
Hash identifier: pQJpuzCEo8wg048Vwh2TY0RVZMzFHkJFEbB9mwcCG+E=
Subject key identifier: AD:BC:34:25:70:C1:DB:27:D6:CD:DB:F2:FB:A9:6F:7A:EE:5C:D9:DC
Authority key identifier: B6:A1:65:4D:AE:96:C5:32:57:8C:E1:DF:1E:BB:82:21:DB:B6:81:45
Certificate issuer: /CN=b6a1654dae96c532578ce1df1ebb8221dbb68145
Certificate serial: 019F939203E2B29F84E09558641D93397803
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tqFlTa6WxTJXjOHfHruCIdu2gUU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/b011d3-bdba-45cd-a8ac-e0be89c4f169/1/tqFlTa6WxTJXjOHfHruCIdu2gUU.mft
Manifest number: 19C8
Signing time: Fri 24 Jul 2026 10:00:47 +0000
Manifest this update: Fri 24 Jul 2026 10:00:47 +0000
Manifest next update: Sat 25 Jul 2026 10:00:47 +0000
Files and hashes: 1: QW73u8rMuH1v1Kv7BEJQbwmdG30.roa (hash: 86pULR+fbjp+HIMXs4j+2SEmIr4Htvw47MfRZHiRzRU=)
2: ehZg7NVKRiPcTGHWVyISklSxV_0.roa (hash: Dyhn6Vhbep1Q3HKDE2Bpn72ONwXFiRAQ/djQCOZfQXE=)
3: tqFlTa6WxTJXjOHfHruCIdu2gUU.crl (hash: xeuhJBzN6HtW3BrHCkd59UgPysUq6sQBsdmZroWsACY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/b011d3-bdba-45cd-a8ac-e0be89c4f169/1/tqFlTa6WxTJXjOHfHruCIdu2gUU.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/b011d3-bdba-45cd-a8ac-e0be89c4f169/1/tqFlTa6WxTJXjOHfHruCIdu2gUU.mft
rsync://rpki.ripe.net/repository/DEFAULT/tqFlTa6WxTJXjOHfHruCIdu2gUU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:92:03:e2:b2:9f:84:e0:95:58:64:1d:93:39:78:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6a1654dae96c532578ce1df1ebb8221dbb68145
Validity
Not Before: Jul 24 10:00:47 2026 GMT
Not After : Jul 25 10:00:47 2026 GMT
Subject: CN=adbc342570c1db27d6cddbf2fba96f7aee5cd9dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:ca:3f:87:04:83:bb:ca:f4:cf:96:12:5b:7c:
45:a0:1c:ea:0b:2f:e0:09:05:38:11:fb:ad:42:45:
81:17:cf:fb:81:7a:cb:ae:d6:a7:25:1a:8e:48:5b:
d5:db:5b:65:b9:f2:98:53:0a:2e:61:68:50:79:51:
57:90:97:0c:25:92:d9:15:dd:b6:ba:f5:cc:77:52:
61:ef:cd:59:32:24:fb:b0:fc:6e:7b:cf:ba:63:4a:
9e:8d:ba:60:c7:fe:3e:b0:ac:18:90:ee:7d:e2:98:
00:a4:b2:89:07:fe:e3:e9:4b:57:fc:74:dc:7b:c7:
89:de:73:34:34:9f:58:b6:65:22:94:a7:52:8f:5b:
b9:f9:ee:7e:3c:0b:08:18:61:fe:17:1e:c9:6e:b0:
73:74:32:65:ad:3f:e9:94:7b:71:a1:0b:bd:8a:c8:
6c:a1:d9:22:15:0d:20:b2:36:a8:7f:69:68:ab:cf:
5c:c3:5b:77:5b:4c:55:9f:85:a9:86:86:23:2f:58:
bf:c7:6e:05:53:e8:cb:3e:b0:65:ca:9e:15:07:22:
09:fb:a2:f0:d3:90:cf:46:fc:a9:4c:75:5a:83:1e:
dc:d9:89:d7:09:c7:14:65:f4:05:83:c4:8b:8d:43:
84:72:de:dc:32:a6:6d:f8:5b:ba:2d:e9:d4:6d:7a:
13:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:BC:34:25:70:C1:DB:27:D6:CD:DB:F2:FB:A9:6F:7A:EE:5C:D9:DC
X509v3 Authority Key Identifier:
keyid:B6:A1:65:4D:AE:96:C5:32:57:8C:E1:DF:1E:BB:82:21:DB:B6:81:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tqFlTa6WxTJXjOHfHruCIdu2gUU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/b011d3-bdba-45cd-a8ac-e0be89c4f169/1/tqFlTa6WxTJXjOHfHruCIdu2gUU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/b011d3-bdba-45cd-a8ac-e0be89c4f169/1/tqFlTa6WxTJXjOHfHruCIdu2gUU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:f1:75:0c:65:13:2a:2c:ab:7b:60:1a:94:42:bd:dd:18:3b:
c5:81:3f:35:0a:0b:34:51:6f:ea:3a:c4:be:2a:2c:fb:d3:57:
ee:1d:29:ee:64:96:9c:73:78:d5:eb:0d:76:44:dd:da:46:86:
cc:85:32:06:2c:50:e3:af:b8:ae:f2:04:74:a9:98:71:09:e7:
9b:3a:65:3d:99:2b:f5:53:4c:34:2b:2a:c6:49:10:b9:f4:d9:
6b:32:33:91:b1:5e:6c:79:35:20:bc:46:d8:02:c9:79:cb:3a:
37:52:55:4c:7b:79:52:58:c8:b6:8d:ce:bf:13:30:fa:93:0c:
06:8d:37:38:bf:fd:61:db:5a:56:0c:70:3d:e6:e3:56:69:b5:
e6:a6:a4:a3:5f:86:6f:b5:05:9e:c9:e7:13:4d:81:c1:d2:66:
0f:ab:a1:76:22:9a:9b:f7:0e:ee:b8:d6:14:f6:9d:5d:51:a7:
6a:7d:fc:91:dd:ef:c9:c4:cb:d0:5f:f2:d7:b9:c2:10:31:c8:
04:34:67:0e:43:89:41:c5:c4:b6:d5:02:d1:e5:03:8c:90:2d:
c5:53:ce:41:96:1d:96:dd:4d:e2:98:56:73:d2:87:1d:5b:92:
93:b4:52:ae:55:87:44:39:45:a7:f4:e9:82:84:27:e3:c4:fd:
ae:59:6d:3d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+TkgPisp+E4JVYZB2TOXgDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI2YTE2NTRkYWU5NmM1MzI1NzhjZTFkZjFlYmI4MjIxZGJi
NjgxNDUwHhcNMjYwNzI0MTAwMDQ3WhcNMjYwNzI1MTAwMDQ3WjAzMTEwLwYDVQQD
EyhhZGJjMzQyNTcwYzFkYjI3ZDZjZGRiZjJmYmE5NmY3YWVlNWNkOWRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6Mo/hwSDu8r0z5YSW3xFoBzqCy/g
CQU4EfutQkWBF8/7gXrLrtanJRqOSFvV21tlufKYUwouYWhQeVFXkJcMJZLZFd22
uvXMd1Jh781ZMiT7sPxue8+6Y0qejbpgx/4+sKwYkO594pgApLKJB/7j6UtX/HTc
e8eJ3nM0NJ9YtmUilKdSj1u5+e5+PAsIGGH+Fx7JbrBzdDJlrT/plHtxoQu9ishs
odkiFQ0gsjaof2loq89cw1t3W0xVn4WphoYjL1i/x24FU+jLPrBlyp4VByIJ+6Lw
05DPRvypTHVagx7c2YnXCccUZfQFg8SLjUOEct7cMqZt+Fu6LenUbXoTvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK28NCVwwdsn1s3b8vupb3ruXNncMB8GA1UdIwQY
MBaAFLahZU2ulsUyV4zh3x67giHbtoFFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdHFGbFRhNld4VEpYak9IZkhydUNJZHUyZ1VVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC9iMDExZDMtYmRiYS00NWNkLWE4YWMt
ZTBiZTg5YzRmMTY5LzEvdHFGbFRhNld4VEpYak9IZkhydUNJZHUyZ1VVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC9iMDExZDMtYmRiYS00NWNkLWE4YWMtZTBiZTg5YzRmMTY5
LzEvdHFGbFRhNld4VEpYak9IZkhydUNJZHUyZ1VVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMfF1DGUT
Kiyre2AalEK93Rg7xYE/NQoLNFFv6jrEvios+9NX7h0p7mSWnHN41esNdkTd2kaG
zIUyBixQ46+4rvIEdKmYcQnnmzplPZkr9VNMNCsqxkkQufTZazIzkbFebHk1ILxG
2ALJecs6N1JVTHt5UljIto3OvxMw+pMMBo03OL/9YdtaVgxwPebjVmm15qako1+G
b7UFnsnnE02BwdJmD6uhdiKam/cO7rjWFPadXVGnan38kd3vycTL0F/y17nCEDHI
BDRnDkOJQcXEttUC0eUDjJAtxVPOQZYdlt1N4phWc9KHHVuSk7RSrlWHRDlFp/Tp
goQn48T9rlltPQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 16:14:35 2026 by rpki-client