Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/43c451-e4e9-4859-b985-2d9df4ef5f50/1/1TjXcmpfHzPaFdh-XIsOSPUCgb8.mft
File: 1TjXcmpfHzPaFdh-XIsOSPUCgb8.mft (raw, json)
Hash identifier: M/aozEH+0/AUhwkLjru5CLFXsyJWMkKl9SeVErQKuco=
Subject key identifier: 0A:2D:BA:83:01:14:F8:46:DC:E7:C8:8A:45:CA:BB:92:5E:23:55:66
Authority key identifier: D5:38:D7:72:6A:5F:1F:33:DA:15:D8:7E:5C:8B:0E:48:F5:02:81:BF
Certificate issuer: /CN=d538d7726a5f1f33da15d87e5c8b0e48f50281bf
Certificate serial: 019F916DA67BCAA4CDED8DC77A6797582C2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1TjXcmpfHzPaFdh-XIsOSPUCgb8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/43c451-e4e9-4859-b985-2d9df4ef5f50/1/1TjXcmpfHzPaFdh-XIsOSPUCgb8.mft
Manifest number: 11A8
Signing time: Fri 24 Jul 2026 00:01:50 +0000
Manifest this update: Fri 24 Jul 2026 00:01:50 +0000
Manifest next update: Sat 25 Jul 2026 00:01:50 +0000
Files and hashes: 1: 1TjXcmpfHzPaFdh-XIsOSPUCgb8.crl (hash: pHSi9e14j0NsTI9AlL+IIWzKjzgQwCRscc/ZIvlnrew=)
2: 6Pc_yuf6U7fifvpMORJRJWUOec0.roa (hash: YkCtWd8TqjpXFSR0IlaGJlvhxUpQhvA2ISYdw8xN7rc=)
3: SiiyX2N_VudkW_kgHjDWb96Midc.roa (hash: VBfDCyR0GjOaXAtcZCDfH6SSSVgHl3aLvPMUM1TIr7o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/43c451-e4e9-4859-b985-2d9df4ef5f50/1/1TjXcmpfHzPaFdh-XIsOSPUCgb8.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/43c451-e4e9-4859-b985-2d9df4ef5f50/1/1TjXcmpfHzPaFdh-XIsOSPUCgb8.mft
rsync://rpki.ripe.net/repository/DEFAULT/1TjXcmpfHzPaFdh-XIsOSPUCgb8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:6d:a6:7b:ca:a4:cd:ed:8d:c7:7a:67:97:58:2c:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d538d7726a5f1f33da15d87e5c8b0e48f50281bf
Validity
Not Before: Jul 24 00:01:50 2026 GMT
Not After : Jul 25 00:01:50 2026 GMT
Subject: CN=0a2dba830114f846dce7c88a45cabb925e235566
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:7d:5a:34:c1:d9:f7:d5:bc:85:8e:bf:e0:7b:
a8:fa:fb:ab:18:0b:15:94:ae:02:01:b8:6b:2b:94:
7d:0c:b2:aa:39:24:6a:c0:6d:db:ad:49:57:18:73:
84:32:d1:e3:ba:23:93:36:d7:6e:6a:99:63:ea:6e:
0f:6e:14:26:85:37:58:0c:c7:49:6a:bd:0f:e2:8a:
7f:52:00:1a:4f:05:16:07:a3:96:82:d1:28:cf:99:
8b:f4:54:46:70:01:09:39:e4:4a:80:12:a0:2e:ee:
81:57:6e:27:09:94:b3:15:d3:ef:19:e1:1b:1c:4e:
d3:f9:91:d2:97:66:df:55:f9:d1:19:d5:96:e5:13:
db:f1:20:42:7a:18:cf:14:2f:59:8d:17:b1:1e:f3:
2a:a2:fc:12:ee:50:ba:e6:65:7b:32:12:cf:8e:ca:
61:14:1d:46:8e:3c:2a:b7:9f:12:f1:a9:2d:89:58:
af:53:b1:2c:b4:c3:79:d9:8c:9c:48:97:7c:7f:59:
71:7e:f0:12:a4:0f:42:13:b7:2d:69:0c:d9:3a:3b:
c8:9b:ac:2d:bc:8f:57:5a:71:75:36:3e:9a:b5:ad:
60:64:1e:6f:69:1c:00:b6:cb:05:7a:a4:8a:ef:05:
2e:8f:24:0e:16:02:ca:bf:59:d2:b5:d1:10:ff:e3:
6f:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:2D:BA:83:01:14:F8:46:DC:E7:C8:8A:45:CA:BB:92:5E:23:55:66
X509v3 Authority Key Identifier:
keyid:D5:38:D7:72:6A:5F:1F:33:DA:15:D8:7E:5C:8B:0E:48:F5:02:81:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1TjXcmpfHzPaFdh-XIsOSPUCgb8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/43c451-e4e9-4859-b985-2d9df4ef5f50/1/1TjXcmpfHzPaFdh-XIsOSPUCgb8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/43c451-e4e9-4859-b985-2d9df4ef5f50/1/1TjXcmpfHzPaFdh-XIsOSPUCgb8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:01:c8:ae:40:91:54:9b:f8:b0:a3:d0:6a:5e:f8:91:34:c8:
b1:7c:6f:4b:2c:fb:5a:64:25:fd:ee:db:4b:27:da:39:1a:d4:
17:f7:4a:d2:fc:d4:8e:6f:ff:89:ae:51:6a:79:9e:97:ad:e9:
8e:c9:d0:ed:bc:0a:e4:5a:ac:e9:9c:4c:79:2b:41:bb:ac:89:
15:4c:50:95:ea:00:ac:0c:06:56:c7:4c:c6:89:e6:24:2a:aa:
c1:4e:56:41:e0:96:0b:0e:44:16:46:b6:e5:8e:c8:12:11:48:
7d:54:36:c9:df:0d:4d:5c:02:a3:ac:ad:18:43:92:8a:20:89:
85:fb:0c:18:8c:3d:36:b1:04:0e:02:75:b8:17:8c:23:a8:b4:
ad:76:12:74:32:cf:97:91:af:ad:ed:fd:be:94:04:a8:6b:66:
9c:3e:38:21:f8:d4:7c:f0:be:51:8b:e6:8c:f6:62:9d:8f:9c:
97:31:d9:00:a1:c9:c3:df:5f:5c:74:21:9e:b1:94:22:92:f9:
2b:8a:25:88:f4:fc:37:dd:fd:1c:76:1f:2e:e7:f2:b9:71:7b:
a0:32:d6:2a:66:16:b0:6a:58:2e:0e:e6:08:ab:e7:e6:92:5d:
b1:bd:2c:41:f9:d1:f2:62:64:ae:7a:16:d2:78:bc:7e:76:77:
51:f3:22:60
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+RbaZ7yqTN7Y3HemeXWCwuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1MzhkNzcyNmE1ZjFmMzNkYTE1ZDg3ZTVjOGIwZTQ4ZjUw
MjgxYmYwHhcNMjYwNzI0MDAwMTUwWhcNMjYwNzI1MDAwMTUwWjAzMTEwLwYDVQQD
EygwYTJkYmE4MzAxMTRmODQ2ZGNlN2M4OGE0NWNhYmI5MjVlMjM1NTY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwH1aNMHZ99W8hY6/4Huo+vurGAsV
lK4CAbhrK5R9DLKqOSRqwG3brUlXGHOEMtHjuiOTNtduaplj6m4PbhQmhTdYDMdJ
ar0P4op/UgAaTwUWB6OWgtEoz5mL9FRGcAEJOeRKgBKgLu6BV24nCZSzFdPvGeEb
HE7T+ZHSl2bfVfnRGdWW5RPb8SBCehjPFC9ZjRexHvMqovwS7lC65mV7MhLPjsph
FB1Gjjwqt58S8aktiVivU7EstMN52YycSJd8f1lxfvASpA9CE7ctaQzZOjvIm6wt
vI9XWnF1Nj6ata1gZB5vaRwAtssFeqSK7wUujyQOFgLKv1nStdEQ/+NvXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAotuoMBFPhG3OfIikXKu5JeI1VmMB8GA1UdIwQY
MBaAFNU413JqXx8z2hXYflyLDkj1AoG/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMVRqWGNtcGZIelBhRmRoLVhJc09TUFVDZ2I4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC80M2M0NTEtZTRlOS00ODU5LWI5ODUt
MmQ5ZGY0ZWY1ZjUwLzEvMVRqWGNtcGZIelBhRmRoLVhJc09TUFVDZ2I4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC80M2M0NTEtZTRlOS00ODU5LWI5ODUtMmQ5ZGY0ZWY1ZjUw
LzEvMVRqWGNtcGZIelBhRmRoLVhJc09TUFVDZ2I4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXwHIrkCR
VJv4sKPQal74kTTIsXxvSyz7WmQl/e7bSyfaORrUF/dK0vzUjm//ia5Ranmel63p
jsnQ7bwK5Fqs6ZxMeStBu6yJFUxQleoArAwGVsdMxonmJCqqwU5WQeCWCw5EFka2
5Y7IEhFIfVQ2yd8NTVwCo6ytGEOSiiCJhfsMGIw9NrEEDgJ1uBeMI6i0rXYSdDLP
l5Gvre39vpQEqGtmnD44IfjUfPC+UYvmjPZinY+clzHZAKHJw99fXHQhnrGUIpL5
K4oliPT8N939HHYfLufyuXF7oDLWKmYWsGpYLg7mCKvn5pJdsb0sQfnR8mJkrnoW
0ni8fnZ3UfMiYA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 05:01:31 2026 by rpki-client