Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/ec5584-6618-4b12-a11c-3055cb729bcf/1/TDuIzbE_PrEqm-VKsZuqkFWbOWo.mft
File: TDuIzbE_PrEqm-VKsZuqkFWbOWo.mft (raw, json)
Hash identifier: 7452dNLa1/4QfydOYkeFnj6hswcBCoZOGtpOI4U6y8M=
Subject key identifier: 4C:2F:2D:C3:A2:20:28:5B:7D:54:A2:BC:48:F1:9B:61:27:8A:79:C9
Authority key identifier: 4C:3B:88:CD:B1:3F:3E:B1:2A:9B:E5:4A:B1:9B:AA:90:55:9B:39:6A
Certificate issuer: /CN=4c3b88cdb13f3eb12a9be54ab19baa90559b396a
Certificate serial: 019F8F7F62C52A4E6943B71EA0CB6A341519
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TDuIzbE_PrEqm-VKsZuqkFWbOWo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/ec5584-6618-4b12-a11c-3055cb729bcf/1/TDuIzbE_PrEqm-VKsZuqkFWbOWo.mft
Manifest number: 0B60
Signing time: Thu 23 Jul 2026 15:01:57 +0000
Manifest this update: Thu 23 Jul 2026 15:01:57 +0000
Manifest next update: Fri 24 Jul 2026 15:01:57 +0000
Files and hashes: 1: NSzxR15lxLwAdc7Ga165-6mKacc.roa (hash: 3N9qBcothKO0rosVFxeggNkLbRm7QTKDO+BXyY2NEkk=)
2: QXNEa0rLZxlRlsB-8HuZ_VSJWP0.asa (hash: 6rji+pOpggUWT3pycZRN/hU8sc0Lzb5vIQ3TtjqmA1k=)
3: TDuIzbE_PrEqm-VKsZuqkFWbOWo.crl (hash: HMAguLq5WFIBwRWXCCU4GbFhdFT/kcGpoFxcbpIM/v4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/ec5584-6618-4b12-a11c-3055cb729bcf/1/TDuIzbE_PrEqm-VKsZuqkFWbOWo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/ec5584-6618-4b12-a11c-3055cb729bcf/1/TDuIzbE_PrEqm-VKsZuqkFWbOWo.mft
rsync://rpki.ripe.net/repository/DEFAULT/TDuIzbE_PrEqm-VKsZuqkFWbOWo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:7f:62:c5:2a:4e:69:43:b7:1e:a0:cb:6a:34:15:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c3b88cdb13f3eb12a9be54ab19baa90559b396a
Validity
Not Before: Jul 23 15:01:57 2026 GMT
Not After : Jul 24 15:01:57 2026 GMT
Subject: CN=4c2f2dc3a220285b7d54a2bc48f19b61278a79c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:6d:7e:9f:0f:02:44:98:da:88:75:45:20:b1:
23:8b:c5:aa:bf:3b:d3:d8:55:58:ab:f7:ba:4a:08:
10:88:63:72:9d:44:77:f6:ef:93:c6:be:52:81:47:
4f:ef:bb:bb:00:1c:52:60:47:0d:29:de:b2:0c:c1:
75:b5:9c:b2:51:a3:b9:b0:fd:a2:5d:d7:50:03:ad:
93:7d:a7:34:90:38:6d:bb:aa:35:12:08:4e:5e:29:
5f:aa:da:d1:e1:12:35:55:e1:c4:54:38:bb:5a:b1:
2d:fe:9f:ef:3f:0b:9c:40:68:80:3b:17:34:08:e3:
91:6c:13:1d:9c:e2:9c:2c:bf:0e:e9:fb:aa:01:e5:
1d:c9:ce:f0:f3:bc:01:90:2b:1e:b4:1a:2a:a4:ab:
b4:9a:31:9e:42:69:79:12:51:6f:86:d6:c2:e1:ad:
c2:ed:92:62:20:5b:7b:f9:c3:be:14:a4:f6:aa:0b:
2f:74:28:5e:36:60:24:86:c3:53:88:6c:89:95:11:
ed:9b:0e:a3:75:10:be:02:12:42:42:8f:8a:48:31:
5b:f2:d3:ed:00:10:4f:ff:5c:09:b9:2a:22:a7:ff:
f6:96:0a:fe:95:5a:9e:e8:07:66:1d:74:ed:2b:1c:
50:f8:1b:0a:3d:ca:12:a4:db:16:f0:d0:1f:1a:b7:
00:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:2F:2D:C3:A2:20:28:5B:7D:54:A2:BC:48:F1:9B:61:27:8A:79:C9
X509v3 Authority Key Identifier:
keyid:4C:3B:88:CD:B1:3F:3E:B1:2A:9B:E5:4A:B1:9B:AA:90:55:9B:39:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TDuIzbE_PrEqm-VKsZuqkFWbOWo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/ec5584-6618-4b12-a11c-3055cb729bcf/1/TDuIzbE_PrEqm-VKsZuqkFWbOWo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/ec5584-6618-4b12-a11c-3055cb729bcf/1/TDuIzbE_PrEqm-VKsZuqkFWbOWo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:26:7f:f5:ca:a1:61:10:21:fd:1a:d1:56:6b:0e:aa:7a:3b:
51:37:97:c3:91:eb:fb:9a:58:be:8d:1a:33:72:9b:60:8e:eb:
a9:0d:f8:26:e0:94:67:22:ab:ae:93:d3:ad:e6:84:b5:27:4c:
ed:86:47:01:11:67:d5:b8:d1:ab:94:04:cb:23:9f:f2:c8:db:
8a:d5:8b:15:88:7e:c0:bf:33:c9:32:67:b0:35:6d:67:3b:fb:
1d:8a:42:38:90:44:c3:05:9c:fb:c9:74:04:42:4d:e3:5f:c1:
58:66:e9:52:c4:40:fd:02:d6:ea:05:b4:0e:d6:06:89:97:73:
97:da:2c:0b:99:38:12:71:e3:b6:d5:09:69:23:64:1a:58:06:
b9:a5:6a:12:2e:e0:ea:55:1c:3e:8b:2a:3f:fe:44:c2:f6:e7:
59:e3:f4:16:b0:17:fe:c4:a3:0a:4f:d8:ba:f0:15:1b:fe:97:
78:b9:ce:7e:75:c2:7e:f6:f4:41:74:89:03:0f:27:ce:6e:9d:
91:a3:21:c3:84:91:72:89:03:1b:03:07:16:25:43:20:92:48:
6b:42:56:78:a0:ed:4e:4a:59:4b:fc:e6:ce:2f:bb:96:10:c6:
34:b2:fd:43:b3:6f:03:95:fb:71:04:c4:b4:72:fb:6a:7b:31:
cc:14:56:85
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+Pf2LFKk5pQ7ceoMtqNBUZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjM2I4OGNkYjEzZjNlYjEyYTliZTU0YWIxOWJhYTkwNTU5
YjM5NmEwHhcNMjYwNzIzMTUwMTU3WhcNMjYwNzI0MTUwMTU3WjAzMTEwLwYDVQQD
Eyg0YzJmMmRjM2EyMjAyODViN2Q1NGEyYmM0OGYxOWI2MTI3OGE3OWM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqG1+nw8CRJjaiHVFILEji8WqvzvT
2FVYq/e6SggQiGNynUR39u+Txr5SgUdP77u7ABxSYEcNKd6yDMF1tZyyUaO5sP2i
XddQA62Tfac0kDhtu6o1EghOXilfqtrR4RI1VeHEVDi7WrEt/p/vPwucQGiAOxc0
COORbBMdnOKcLL8O6fuqAeUdyc7w87wBkCsetBoqpKu0mjGeQml5ElFvhtbC4a3C
7ZJiIFt7+cO+FKT2qgsvdCheNmAkhsNTiGyJlRHtmw6jdRC+AhJCQo+KSDFb8tPt
ABBP/1wJuSoip//2lgr+lVqe6AdmHXTtKxxQ+BsKPcoSpNsW8NAfGrcA4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEwvLcOiIChbfVSivEjxm2EninnJMB8GA1UdIwQY
MBaAFEw7iM2xPz6xKpvlSrGbqpBVmzlqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVER1SXpiRV9QckVxbS1WS3NadXFrRldiT1dvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy9lYzU1ODQtNjYxOC00YjEyLWExMWMt
MzA1NWNiNzI5YmNmLzEvVER1SXpiRV9QckVxbS1WS3NadXFrRldiT1dvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy9lYzU1ODQtNjYxOC00YjEyLWExMWMtMzA1NWNiNzI5YmNm
LzEvVER1SXpiRV9QckVxbS1WS3NadXFrRldiT1dvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmiZ/9cqh
YRAh/RrRVmsOqno7UTeXw5Hr+5pYvo0aM3KbYI7rqQ34JuCUZyKrrpPTreaEtSdM
7YZHARFn1bjRq5QEyyOf8sjbitWLFYh+wL8zyTJnsDVtZzv7HYpCOJBEwwWc+8l0
BEJN41/BWGbpUsRA/QLW6gW0DtYGiZdzl9osC5k4EnHjttUJaSNkGlgGuaVqEi7g
6lUcPosqP/5EwvbnWeP0FrAX/sSjCk/YuvAVG/6XeLnOfnXCfvb0QXSJAw8nzm6d
kaMhw4SRcokDGwMHFiVDIJJIa0JWeKDtTkpZS/zmzi+7lhDGNLL9Q7NvA5X7cQTE
tHL7ansxzBRWhQ==
-----END CERTIFICATE-----
Generated at Thu Jul 23 21:54:21 2026 by rpki-client