Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/c43ed2-70b3-45d8-aa28-53fb018a8c0e/1/fTLe2jH-jq_NrW4qBv3iNufRHWE.mft
File: fTLe2jH-jq_NrW4qBv3iNufRHWE.mft (raw, json)
Hash identifier: yTnEBH9/o23PYywrsMg+7Irzs0dcP5tJYiQARVPs6bU=
Subject key identifier: 15:BA:90:81:7B:1F:C0:C1:CE:6A:B9:1F:13:E0:12:A8:4B:20:2C:CB
Authority key identifier: 7D:32:DE:DA:31:FE:8E:AF:CD:AD:6E:2A:06:FD:E2:36:E7:D1:1D:61
Certificate issuer: /CN=7d32deda31fe8eafcdad6e2a06fde236e7d11d61
Certificate serial: 019F92B62D548DE7D99047861B907D3EAE21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fTLe2jH-jq_NrW4qBv3iNufRHWE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/c43ed2-70b3-45d8-aa28-53fb018a8c0e/1/fTLe2jH-jq_NrW4qBv3iNufRHWE.mft
Manifest number: 0D29
Signing time: Fri 24 Jul 2026 06:00:40 +0000
Manifest this update: Fri 24 Jul 2026 06:00:40 +0000
Manifest next update: Sat 25 Jul 2026 06:00:40 +0000
Files and hashes: 1: 1gdiUgqkVNcuiZ2VhHeGGKi3FOc.roa (hash: SI1GZ68MQvNyp6z6E4tf9l9Kh6Fw9zjsRZN+PWTuZfk=)
2: 9jOl6Kcb1BJgHqe3R69MAMfscLs.roa (hash: mbvLuEee7YAsoidgyrb6OTXZspY1pEAVqK8jJs/3DzY=)
3: fTLe2jH-jq_NrW4qBv3iNufRHWE.crl (hash: xF9gQxL6e7C6/nC1oBuVSFIsqg6vBPwOR5v6n39/1I8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/c43ed2-70b3-45d8-aa28-53fb018a8c0e/1/fTLe2jH-jq_NrW4qBv3iNufRHWE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/c43ed2-70b3-45d8-aa28-53fb018a8c0e/1/fTLe2jH-jq_NrW4qBv3iNufRHWE.mft
rsync://rpki.ripe.net/repository/DEFAULT/fTLe2jH-jq_NrW4qBv3iNufRHWE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:b6:2d:54:8d:e7:d9:90:47:86:1b:90:7d:3e:ae:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d32deda31fe8eafcdad6e2a06fde236e7d11d61
Validity
Not Before: Jul 24 06:00:40 2026 GMT
Not After : Jul 25 06:00:40 2026 GMT
Subject: CN=15ba90817b1fc0c1ce6ab91f13e012a84b202ccb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:69:35:c5:8f:09:88:2e:13:d2:22:2d:7e:4a:
a6:78:98:d4:76:27:e5:6a:f9:23:9b:a8:33:40:40:
d0:44:15:c2:57:cf:bf:13:34:b0:dc:92:e2:84:4f:
18:97:d9:5f:98:53:65:34:90:38:ae:0c:78:1f:5c:
3a:1f:87:62:58:d3:0d:e2:d1:fa:a4:de:72:8c:df:
cd:f7:7d:c4:77:d6:4d:37:4c:40:d7:63:67:f2:f1:
9a:ea:65:ab:bd:9c:85:8f:f4:b8:c7:27:e3:a1:1e:
f4:0a:d9:80:9c:8f:cd:75:38:c0:7d:c8:9a:05:4b:
90:ec:e4:a9:30:a2:f1:ba:3d:e2:3d:4f:51:ce:ee:
2a:f0:7e:be:52:f1:e1:28:c7:5b:a5:d1:65:e9:3f:
10:1f:ee:8e:24:3c:3a:94:c8:74:67:a0:4d:d5:74:
b3:7a:02:05:f9:cc:dc:72:e5:04:d6:cb:ab:3a:42:
d7:b5:b8:30:0b:b8:7f:bf:9d:ce:17:39:25:49:e1:
34:ce:29:f5:58:74:a0:27:b6:dd:bb:79:80:1d:f6:
5f:31:55:c6:ca:c0:a9:82:c7:91:7b:d7:44:c2:86:
bb:d1:3e:5c:5a:19:60:2a:f8:6d:04:81:b2:68:09:
8d:e6:23:d2:fc:6c:9b:e4:f5:3a:f7:5c:61:84:82:
60:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:BA:90:81:7B:1F:C0:C1:CE:6A:B9:1F:13:E0:12:A8:4B:20:2C:CB
X509v3 Authority Key Identifier:
keyid:7D:32:DE:DA:31:FE:8E:AF:CD:AD:6E:2A:06:FD:E2:36:E7:D1:1D:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fTLe2jH-jq_NrW4qBv3iNufRHWE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/c43ed2-70b3-45d8-aa28-53fb018a8c0e/1/fTLe2jH-jq_NrW4qBv3iNufRHWE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/c43ed2-70b3-45d8-aa28-53fb018a8c0e/1/fTLe2jH-jq_NrW4qBv3iNufRHWE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:ef:f4:25:87:c2:ef:ee:f0:18:22:91:d7:7e:a7:08:fd:7c:
9c:89:e6:87:ff:9f:b4:9c:5a:34:5d:db:cd:c5:5d:6f:af:d5:
9b:50:e8:58:16:4c:c4:f7:98:2a:3a:14:7a:61:6b:29:c8:ad:
2a:65:2f:ec:13:51:9b:a2:98:b6:08:e7:2d:f6:7f:d8:38:bd:
fd:37:3c:4e:03:bf:f9:6a:6b:29:0b:f0:83:9a:89:8a:a5:2d:
b3:67:17:50:59:db:79:c5:99:20:b7:86:45:d9:53:ce:50:a8:
75:bf:16:7c:95:ec:1e:01:60:5c:89:e3:85:77:b7:5a:c8:9c:
55:35:fb:b3:18:45:5e:ce:2d:c8:6e:14:7c:b6:ab:05:bf:1d:
c3:7f:82:6c:03:ac:3d:6f:8f:f3:79:50:76:5a:45:11:e8:4e:
83:2b:93:54:f7:d8:62:fd:c6:00:0e:b2:6c:8e:cb:10:81:5c:
e4:66:ae:6f:3c:a5:50:4e:62:18:97:c7:61:ce:dc:2d:e7:9f:
83:d3:88:fa:dc:36:0a:d5:c8:e7:d5:fb:2e:97:6c:e7:78:05:
b7:8d:52:05:0d:3d:81:ea:f3:75:8b:b7:89:10:9e:5f:4a:9d:
97:83:57:af:72:76:8a:91:b1:cf:b8:38:c3:21:f4:46:fa:0c:
4d:54:1f:94
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+Sti1UjefZkEeGG5B9Pq4hMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkMzJkZWRhMzFmZThlYWZjZGFkNmUyYTA2ZmRlMjM2ZTdk
MTFkNjEwHhcNMjYwNzI0MDYwMDQwWhcNMjYwNzI1MDYwMDQwWjAzMTEwLwYDVQQD
EygxNWJhOTA4MTdiMWZjMGMxY2U2YWI5MWYxM2UwMTJhODRiMjAyY2NiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo2k1xY8JiC4T0iItfkqmeJjUdifl
avkjm6gzQEDQRBXCV8+/EzSw3JLihE8Yl9lfmFNlNJA4rgx4H1w6H4diWNMN4tH6
pN5yjN/N933Ed9ZNN0xA12Nn8vGa6mWrvZyFj/S4xyfjoR70CtmAnI/NdTjAfcia
BUuQ7OSpMKLxuj3iPU9Rzu4q8H6+UvHhKMdbpdFl6T8QH+6OJDw6lMh0Z6BN1XSz
egIF+czccuUE1surOkLXtbgwC7h/v53OFzklSeE0zin1WHSgJ7bdu3mAHfZfMVXG
ysCpgseRe9dEwoa70T5cWhlgKvhtBIGyaAmN5iPS/Gyb5PU691xhhIJgDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBW6kIF7H8DBzmq5HxPgEqhLICzLMB8GA1UdIwQY
MBaAFH0y3tox/o6vza1uKgb94jbn0R1hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlRMZTJqSC1qcV9Oclc0cUJ2M2lOdWZSSFdFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC9jNDNlZDItNzBiMy00NWQ4LWFhMjgt
NTNmYjAxOGE4YzBlLzEvZlRMZTJqSC1qcV9Oclc0cUJ2M2lOdWZSSFdFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC9jNDNlZDItNzBiMy00NWQ4LWFhMjgtNTNmYjAxOGE4YzBl
LzEvZlRMZTJqSC1qcV9Oclc0cUJ2M2lOdWZSSFdFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ+/0JYfC
7+7wGCKR136nCP18nInmh/+ftJxaNF3bzcVdb6/Vm1DoWBZMxPeYKjoUemFrKcit
KmUv7BNRm6KYtgjnLfZ/2Di9/Tc8TgO/+WprKQvwg5qJiqUts2cXUFnbecWZILeG
RdlTzlCodb8WfJXsHgFgXInjhXe3WsicVTX7sxhFXs4tyG4UfLarBb8dw3+CbAOs
PW+P83lQdlpFEehOgyuTVPfYYv3GAA6ybI7LEIFc5GaubzylUE5iGJfHYc7cLeef
g9OI+tw2CtXI59X7Lpds53gFt41SBQ09gerzdYu3iRCeX0qdl4NXr3J2ipGxz7g4
wyH0RvoMTVQflA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 08:20:59 2026 by rpki-client