Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/d3558d-9057-47db-9959-3060b36b8506/1/tFBNKOZ6IeyW2VsnRj7AMD_hdiw.mft
File: tFBNKOZ6IeyW2VsnRj7AMD_hdiw.mft (raw, json)
Hash identifier: 3sVBR4rW1RGVaQDNUai8PM2amK4xd/4qDPz90U0hPkM=
Subject key identifier: 2E:5E:04:E4:9F:85:AE:61:AD:35:C4:38:93:EF:B3:10:DC:53:50:C9
Authority key identifier: B4:50:4D:28:E6:7A:21:EC:96:D9:5B:27:46:3E:C0:30:3F:E1:76:2C
Certificate issuer: /CN=b4504d28e67a21ec96d95b27463ec0303fe1762c
Certificate serial: 019F916C7CDEEC0F4CB614823271EE962AB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tFBNKOZ6IeyW2VsnRj7AMD_hdiw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/d3558d-9057-47db-9959-3060b36b8506/1/tFBNKOZ6IeyW2VsnRj7AMD_hdiw.mft
Manifest number: 40
Signing time: Fri 24 Jul 2026 00:00:33 +0000
Manifest this update: Fri 24 Jul 2026 00:00:33 +0000
Manifest next update: Sat 25 Jul 2026 00:00:33 +0000
Files and hashes: 1: tFBNKOZ6IeyW2VsnRj7AMD_hdiw.crl (hash: +akBax3JZpPqjoH+quL9oruBbS0dng/BlQGC0/8z7Q8=)
2: vJbwHPz8RQ4zs2gU1mqro7zoibU.roa (hash: sBjiZn8iplUkAmpK3IUiwbDEIQyYz8gkgjFlOTL9wqQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/d3558d-9057-47db-9959-3060b36b8506/1/tFBNKOZ6IeyW2VsnRj7AMD_hdiw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/d3558d-9057-47db-9959-3060b36b8506/1/tFBNKOZ6IeyW2VsnRj7AMD_hdiw.mft
rsync://rpki.ripe.net/repository/DEFAULT/tFBNKOZ6IeyW2VsnRj7AMD_hdiw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:6c:7c:de:ec:0f:4c:b6:14:82:32:71:ee:96:2a:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4504d28e67a21ec96d95b27463ec0303fe1762c
Validity
Not Before: Jul 24 00:00:33 2026 GMT
Not After : Jul 25 00:00:33 2026 GMT
Subject: CN=2e5e04e49f85ae61ad35c43893efb310dc5350c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:f9:55:00:d7:30:01:44:f4:b2:70:0c:9f:d9:
3c:2f:94:89:11:53:55:f7:f4:93:62:b2:44:94:b5:
90:1b:44:28:8d:99:53:24:95:29:59:75:55:68:70:
be:76:5e:1e:a8:bb:67:5c:95:92:d5:b1:e5:40:00:
b5:63:3e:55:72:a3:57:68:aa:db:d7:ea:b9:bd:14:
92:95:c5:c1:2f:f1:0d:9a:81:ac:96:ed:cc:ad:21:
c1:64:1f:ab:fc:e3:ce:00:90:37:13:48:1e:24:85:
af:18:63:da:e5:78:4f:49:ec:3c:13:a6:43:6f:c4:
44:39:73:34:ff:2f:ad:26:a8:55:f6:15:65:2e:f0:
d0:08:72:79:ea:9c:78:3d:9b:b1:1c:07:a2:d6:ae:
99:4a:ef:d3:08:9d:b1:0d:b2:f6:1d:44:cb:9b:31:
53:fd:9f:1f:30:af:fe:96:ba:df:57:c1:1e:1c:d7:
71:a3:8a:93:97:cc:8a:d7:e2:82:8d:4f:62:8f:3f:
5d:41:22:01:b6:24:db:7f:f5:e2:70:4e:81:6a:9e:
c6:67:2e:b5:16:c4:0c:71:86:7f:b0:e7:cb:24:44:
3b:c6:89:ce:06:03:12:2b:0e:36:ac:f4:b1:22:29:
09:cf:9e:26:7a:e6:a5:14:63:86:bd:31:5f:17:41:
b3:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:5E:04:E4:9F:85:AE:61:AD:35:C4:38:93:EF:B3:10:DC:53:50:C9
X509v3 Authority Key Identifier:
keyid:B4:50:4D:28:E6:7A:21:EC:96:D9:5B:27:46:3E:C0:30:3F:E1:76:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tFBNKOZ6IeyW2VsnRj7AMD_hdiw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/d3558d-9057-47db-9959-3060b36b8506/1/tFBNKOZ6IeyW2VsnRj7AMD_hdiw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/d3558d-9057-47db-9959-3060b36b8506/1/tFBNKOZ6IeyW2VsnRj7AMD_hdiw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:20:c2:61:82:be:b5:5b:67:c1:31:a0:0f:78:98:20:6a:7f:
45:4a:04:b9:f3:22:f4:29:52:bb:73:cc:c9:cd:2c:7c:5c:36:
46:eb:de:37:c4:d2:32:1a:bb:54:60:04:84:b9:c6:7f:27:4a:
4e:cf:82:08:3d:01:23:c9:ea:b6:93:48:f7:85:e2:7a:b8:ad:
00:07:58:c4:7f:4b:2a:9c:90:a4:f3:82:13:d8:ae:50:20:38:
0d:fe:01:cb:f2:5c:04:d8:d6:b1:9e:2a:31:c3:38:b7:b0:22:
db:82:99:74:79:ee:a6:00:0e:c0:f1:b2:12:3f:a3:74:83:ad:
59:70:e8:27:a9:64:29:a1:76:60:5e:78:1a:eb:2d:3d:1a:66:
67:7b:82:4e:aa:61:4b:cc:96:b4:e4:0a:74:b2:1e:5c:66:91:
cd:c7:0e:27:b9:a7:22:51:8b:6c:f6:6b:57:2a:19:d9:7c:02:
56:4f:d0:62:c4:34:92:04:3e:5d:44:06:97:61:82:e8:e0:1a:
3e:a2:82:fb:8d:f8:18:20:b1:18:df:83:49:82:02:6f:a0:d5:
33:22:34:7b:f2:c8:3f:4f:b8:80:27:97:42:2f:e4:2f:a9:22:
10:09:c3:bf:6f:c5:90:91:ef:3e:40:39:b7:14:9c:1e:2b:23:
34:42:26:36
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+RbHze7A9MthSCMnHuliq1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0NTA0ZDI4ZTY3YTIxZWM5NmQ5NWIyNzQ2M2VjMDMwM2Zl
MTc2MmMwHhcNMjYwNzI0MDAwMDMzWhcNMjYwNzI1MDAwMDMzWjAzMTEwLwYDVQQD
EygyZTVlMDRlNDlmODVhZTYxYWQzNWM0Mzg5M2VmYjMxMGRjNTM1MGM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp/lVANcwAUT0snAMn9k8L5SJEVNV
9/STYrJElLWQG0QojZlTJJUpWXVVaHC+dl4eqLtnXJWS1bHlQAC1Yz5VcqNXaKrb
1+q5vRSSlcXBL/ENmoGslu3MrSHBZB+r/OPOAJA3E0geJIWvGGPa5XhPSew8E6ZD
b8REOXM0/y+tJqhV9hVlLvDQCHJ56px4PZuxHAei1q6ZSu/TCJ2xDbL2HUTLmzFT
/Z8fMK/+lrrfV8EeHNdxo4qTl8yK1+KCjU9ijz9dQSIBtiTbf/XicE6Bap7GZy61
FsQMcYZ/sOfLJEQ7xonOBgMSKw42rPSxIikJz54meualFGOGvTFfF0GzhwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC5eBOSfha5hrTXEOJPvsxDcU1DJMB8GA1UdIwQY
MBaAFLRQTSjmeiHsltlbJ0Y+wDA/4XYsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdEZCTktPWjZJZXlXMlZzblJqN0FNRF9oZGl3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi9kMzU1OGQtOTA1Ny00N2RiLTk5NTkt
MzA2MGIzNmI4NTA2LzEvdEZCTktPWjZJZXlXMlZzblJqN0FNRF9oZGl3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi9kMzU1OGQtOTA1Ny00N2RiLTk5NTktMzA2MGIzNmI4NTA2
LzEvdEZCTktPWjZJZXlXMlZzblJqN0FNRF9oZGl3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArSDCYYK+
tVtnwTGgD3iYIGp/RUoEufMi9ClSu3PMyc0sfFw2RuveN8TSMhq7VGAEhLnGfydK
Ts+CCD0BI8nqtpNI94XieritAAdYxH9LKpyQpPOCE9iuUCA4Df4By/JcBNjWsZ4q
McM4t7Ai24KZdHnupgAOwPGyEj+jdIOtWXDoJ6lkKaF2YF54GustPRpmZ3uCTqph
S8yWtOQKdLIeXGaRzccOJ7mnIlGLbPZrVyoZ2XwCVk/QYsQ0kgQ+XUQGl2GC6OAa
PqKC+434GCCxGN+DSYICb6DVMyI0e/LIP0+4gCeXQi/kL6kiEAnDv2/FkJHvPkA5
txScHisjNEImNg==
-----END CERTIFICATE-----
Generated at Fri Jul 24 03:55:17 2026 by rpki-client