Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/bf748d-c4ca-4fd1-a59d-4060f211f3c3/1/tFOis_uD2Gx4BswGYNgpEZ2TdbQ.mft
File: tFOis_uD2Gx4BswGYNgpEZ2TdbQ.mft (raw, json)
Hash identifier: v/5Ukgy/p3u7MPFcIidQayylVNyyC0fbyv7uBQYD9cI=
Subject key identifier: F3:8F:7D:71:F8:D3:0E:2B:1A:FF:E3:19:B9:C1:83:33:E8:0D:D8:F2
Authority key identifier: B4:53:A2:B3:FB:83:D8:6C:78:06:CC:06:60:D8:29:11:9D:93:75:B4
Certificate issuer: /CN=b453a2b3fb83d86c7806cc0660d829119d9375b4
Certificate serial: 019F8455675EE7D9766DCB41855D8B341360
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tFOis_uD2Gx4BswGYNgpEZ2TdbQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/bf748d-c4ca-4fd1-a59d-4060f211f3c3/1/tFOis_uD2Gx4BswGYNgpEZ2TdbQ.mft
Manifest number: 0A97
Signing time: Tue 21 Jul 2026 11:00:17 +0000
Manifest this update: Tue 21 Jul 2026 11:00:17 +0000
Manifest next update: Wed 22 Jul 2026 11:00:17 +0000
Files and hashes: 1: pf4imHRU2e6GfZe8rQKhzIc5LBg.roa (hash: dsJgVjGxo4nm0IH9s2QS1ktYyvlCS7K764cL/mH8BNg=)
2: tFOis_uD2Gx4BswGYNgpEZ2TdbQ.crl (hash: KgwWWuzUuvRFjdaJl9Whnww1yeFLHfgfg6hD9Uswmm4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/bf748d-c4ca-4fd1-a59d-4060f211f3c3/1/tFOis_uD2Gx4BswGYNgpEZ2TdbQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/bf748d-c4ca-4fd1-a59d-4060f211f3c3/1/tFOis_uD2Gx4BswGYNgpEZ2TdbQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/tFOis_uD2Gx4BswGYNgpEZ2TdbQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 11:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:84:55:67:5e:e7:d9:76:6d:cb:41:85:5d:8b:34:13:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b453a2b3fb83d86c7806cc0660d829119d9375b4
Validity
Not Before: Jul 21 11:00:17 2026 GMT
Not After : Jul 22 11:00:17 2026 GMT
Subject: CN=f38f7d71f8d30e2b1affe319b9c18333e80dd8f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:06:09:d6:6b:07:8a:d9:2c:38:91:c5:f0:54:
92:d9:da:34:2e:42:50:79:3e:bc:8a:3e:87:a1:e4:
e7:8e:1f:b8:4d:2a:78:31:29:d5:14:d5:23:8f:eb:
17:63:32:ec:63:b5:be:7e:44:30:83:4a:89:3c:23:
25:a1:5f:f7:4c:1b:97:80:2e:f5:04:b9:72:50:1f:
8a:4a:e9:f8:b2:77:5a:4c:d9:a6:01:82:68:8a:2f:
6d:1d:21:c4:7e:61:c3:8e:9e:72:90:c3:bf:02:4a:
24:6e:92:3f:14:99:73:33:4b:cc:9a:e2:71:33:c9:
c9:c4:3e:a5:a2:65:2e:60:15:69:00:6a:a6:21:ee:
82:91:2f:6e:25:14:71:d9:ea:c8:88:ce:31:28:45:
2c:3a:08:1f:2c:6f:13:dd:c4:b7:03:dc:ee:25:6a:
66:30:43:8f:d7:20:6c:59:9b:17:98:98:84:d9:92:
94:a5:2b:8f:42:09:5c:dd:e7:5a:bd:28:5c:63:3b:
bb:fe:9f:7f:2c:c7:87:50:ee:79:80:4b:c8:33:4f:
00:be:7b:f3:9e:2b:90:2d:0d:48:d8:c2:51:5f:3c:
c4:85:e0:a0:32:ba:dc:59:6a:13:65:9a:4a:d8:dc:
cd:da:64:d4:f9:79:aa:3b:f7:b5:8c:9a:77:35:72:
ed:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:8F:7D:71:F8:D3:0E:2B:1A:FF:E3:19:B9:C1:83:33:E8:0D:D8:F2
X509v3 Authority Key Identifier:
keyid:B4:53:A2:B3:FB:83:D8:6C:78:06:CC:06:60:D8:29:11:9D:93:75:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tFOis_uD2Gx4BswGYNgpEZ2TdbQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/bf748d-c4ca-4fd1-a59d-4060f211f3c3/1/tFOis_uD2Gx4BswGYNgpEZ2TdbQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/bf748d-c4ca-4fd1-a59d-4060f211f3c3/1/tFOis_uD2Gx4BswGYNgpEZ2TdbQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cc:73:18:b0:d4:af:02:d1:ad:c1:2c:56:0d:ba:aa:3d:f2:eb:
9f:ef:26:cd:4e:a7:a9:89:a3:cf:9e:21:26:6d:de:51:eb:ab:
ec:7a:6b:98:a5:39:79:f7:19:cf:f0:c3:22:cb:a9:29:b7:c3:
31:b9:8e:d3:d5:88:0f:9e:f5:6a:3f:41:3b:25:f8:22:f6:be:
2b:a9:00:c1:ca:31:ed:20:7a:a6:e3:6c:2b:30:ef:cf:b2:a9:
f7:02:97:c1:6d:77:22:a7:ed:1d:23:68:c3:81:56:91:ad:1f:
23:45:d3:ec:12:36:78:51:b8:9e:9a:db:a0:ed:2b:67:3e:2f:
a9:43:7c:ec:7a:c7:20:9c:e0:e7:95:98:0c:ea:6e:c1:68:34:
e9:08:7d:a6:ce:bc:96:b9:9d:e0:9c:d2:ca:61:0f:0d:c1:62:
85:82:8e:8e:a6:7e:31:fa:c8:eb:bb:dd:8b:47:c7:6b:61:fd:
2f:2a:26:44:e9:91:e3:4b:47:bd:c7:ae:43:20:ee:a6:c1:9d:
13:e2:ed:b8:00:0a:f9:ef:f3:db:24:b1:b7:c4:f0:ef:1f:13:
6e:38:92:cb:ec:e5:18:63:7a:f4:bd:6e:48:c4:1f:2d:da:73:
5c:46:df:6e:10:ee:66:cf:0c:f1:a0:50:02:c4:ec:4a:b0:5a:
04:a1:c0:63
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+EVWde59l2bctBhV2LNBNgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0NTNhMmIzZmI4M2Q4NmM3ODA2Y2MwNjYwZDgyOTExOWQ5
Mzc1YjQwHhcNMjYwNzIxMTEwMDE3WhcNMjYwNzIyMTEwMDE3WjAzMTEwLwYDVQQD
EyhmMzhmN2Q3MWY4ZDMwZTJiMWFmZmUzMTliOWMxODMzM2U4MGRkOGYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsAYJ1msHitksOJHF8FSS2do0LkJQ
eT68ij6HoeTnjh+4TSp4MSnVFNUjj+sXYzLsY7W+fkQwg0qJPCMloV/3TBuXgC71
BLlyUB+KSun4sndaTNmmAYJoii9tHSHEfmHDjp5ykMO/AkokbpI/FJlzM0vMmuJx
M8nJxD6lomUuYBVpAGqmIe6CkS9uJRRx2erIiM4xKEUsOggfLG8T3cS3A9zuJWpm
MEOP1yBsWZsXmJiE2ZKUpSuPQglc3edavShcYzu7/p9/LMeHUO55gEvIM08Avnvz
niuQLQ1I2MJRXzzEheCgMrrcWWoTZZpK2NzN2mTU+XmqO/e1jJp3NXLtuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPOPfXH40w4rGv/jGbnBgzPoDdjyMB8GA1UdIwQY
MBaAFLRTorP7g9hseAbMBmDYKRGdk3W0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdEZPaXNfdUQyR3g0QnN3R1lOZ3BFWjJUZGJRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi9iZjc0OGQtYzRjYS00ZmQxLWE1OWQt
NDA2MGYyMTFmM2MzLzEvdEZPaXNfdUQyR3g0QnN3R1lOZ3BFWjJUZGJRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi9iZjc0OGQtYzRjYS00ZmQxLWE1OWQtNDA2MGYyMTFmM2Mz
LzEvdEZPaXNfdUQyR3g0QnN3R1lOZ3BFWjJUZGJRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzHMYsNSv
AtGtwSxWDbqqPfLrn+8mzU6nqYmjz54hJm3eUeur7HprmKU5efcZz/DDIsupKbfD
MbmO09WID571aj9BOyX4Iva+K6kAwcox7SB6puNsKzDvz7Kp9wKXwW13IqftHSNo
w4FWka0fI0XT7BI2eFG4nprboO0rZz4vqUN87HrHIJzg55WYDOpuwWg06Qh9ps68
lrmd4JzSymEPDcFihYKOjqZ+MfrI67vdi0fHa2H9LyomROmR40tHvceuQyDupsGd
E+LtuAAK+e/z2ySxt8Tw7x8TbjiSy+zlGGN69L1uSMQfLdpzXEbfbhDuZs8M8aBQ
AsTsSrBaBKHAYw==
-----END CERTIFICATE-----
Generated at Tue Jul 21 20:52:36 2026 by rpki-client