Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/99dcca-963a-4003-bfaf-a1169a289c54/1/TODEiXTgrnBa9Q7Q1lJH0afmL9s.mft
File: TODEiXTgrnBa9Q7Q1lJH0afmL9s.mft (raw, json)
Hash identifier: weCyzkT/G2T0r6Qgns4x7N5t02J+Tz3v6CiUnvvumK0=
Subject key identifier: 67:55:6C:A5:B2:6A:E2:85:1B:46:4F:FD:3D:D2:4A:D1:2A:69:D8:7F
Authority key identifier: 4C:E0:C4:89:74:E0:AE:70:5A:F5:0E:D0:D6:52:47:D1:A7:E6:2F:DB
Certificate issuer: /CN=4ce0c48974e0ae705af50ed0d65247d1a7e62fdb
Certificate serial: 019F81F943FC8695859ED88466AB30D37119
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TODEiXTgrnBa9Q7Q1lJH0afmL9s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/99dcca-963a-4003-bfaf-a1169a289c54/1/TODEiXTgrnBa9Q7Q1lJH0afmL9s.mft
Manifest number: 38
Signing time: Tue 21 Jul 2026 00:00:24 +0000
Manifest this update: Tue 21 Jul 2026 00:00:24 +0000
Manifest next update: Wed 22 Jul 2026 00:00:24 +0000
Files and hashes: 1: TODEiXTgrnBa9Q7Q1lJH0afmL9s.crl (hash: flUpH4zL5XSpLMj9cFuY9fOOHCFOs4nDXeitv5u9lRI=)
2: ebblHkxH_4mxEtlIvQdRAh9glJA.roa (hash: 3iH299M2+mtu/XgvXbZ9sMSTDosmnZ7V4KjCGJX9hzQ=)
3: i5z3KQc2e0-K2v0h5qLdZBQJJXU.roa (hash: KrOQvD/t0VuGa9aPl/HCdbKeqmz1JIB0jRemVYeffNA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/99dcca-963a-4003-bfaf-a1169a289c54/1/TODEiXTgrnBa9Q7Q1lJH0afmL9s.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/99dcca-963a-4003-bfaf-a1169a289c54/1/TODEiXTgrnBa9Q7Q1lJH0afmL9s.mft
rsync://rpki.ripe.net/repository/DEFAULT/TODEiXTgrnBa9Q7Q1lJH0afmL9s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:81:f9:43:fc:86:95:85:9e:d8:84:66:ab:30:d3:71:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ce0c48974e0ae705af50ed0d65247d1a7e62fdb
Validity
Not Before: Jul 21 00:00:24 2026 GMT
Not After : Jul 22 00:00:24 2026 GMT
Subject: CN=67556ca5b26ae2851b464ffd3dd24ad12a69d87f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:cf:1a:6d:fe:cb:ab:4e:1f:9a:77:6b:65:96:
7d:9a:de:fc:63:7b:4c:8a:a7:ce:e4:22:b8:3c:0f:
7f:69:77:09:fa:d3:25:56:27:b7:d4:fa:3d:b3:e0:
5c:b5:58:a0:f7:13:5e:9f:17:52:fb:d2:e3:f2:08:
59:a8:f2:6a:b5:eb:f6:1d:cd:72:b5:36:97:dd:96:
58:c5:44:60:94:13:d5:3c:88:4a:68:ed:69:55:89:
7e:3f:91:91:5c:95:4b:b7:74:d4:ba:b4:c1:ad:9e:
10:e2:73:94:d4:74:3f:df:88:16:ef:10:b5:bb:2a:
fc:93:da:86:ca:2e:d2:de:97:b1:27:d3:b2:01:c0:
0b:20:9a:57:4f:20:a9:14:ad:c1:45:6c:bf:33:c7:
89:8b:c1:96:8d:5a:dc:a1:43:c4:d9:2f:39:91:ec:
4f:df:91:c3:2c:ba:54:79:35:f7:61:f6:15:a5:3f:
9e:38:ec:ea:65:c2:31:9b:2d:d9:8f:19:99:3e:7e:
52:02:e4:ff:f9:f5:e0:e4:26:b9:92:00:e1:eb:99:
83:0d:7f:21:40:84:78:aa:7a:15:15:6a:b3:cc:27:
6e:25:85:1d:af:da:ee:f6:e5:90:0f:5b:ef:c8:c1:
88:c0:23:19:aa:10:53:92:33:7a:ae:55:ee:7e:87:
9b:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:55:6C:A5:B2:6A:E2:85:1B:46:4F:FD:3D:D2:4A:D1:2A:69:D8:7F
X509v3 Authority Key Identifier:
keyid:4C:E0:C4:89:74:E0:AE:70:5A:F5:0E:D0:D6:52:47:D1:A7:E6:2F:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TODEiXTgrnBa9Q7Q1lJH0afmL9s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/99dcca-963a-4003-bfaf-a1169a289c54/1/TODEiXTgrnBa9Q7Q1lJH0afmL9s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/99dcca-963a-4003-bfaf-a1169a289c54/1/TODEiXTgrnBa9Q7Q1lJH0afmL9s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:ba:fe:83:93:35:5f:48:48:ff:18:4b:24:88:7e:f8:65:2e:
91:5b:44:57:bf:3d:fa:fc:dd:6a:bc:b1:f6:87:48:ba:c0:b1:
e8:a6:db:20:42:49:ee:8b:b9:e0:e1:ef:e2:a2:a7:dd:4a:9b:
a1:82:3e:b0:cb:79:9b:a5:d1:45:f9:c6:03:05:94:9d:4e:d9:
a9:b0:65:ae:fc:e5:4f:a8:19:d2:bf:fa:45:5d:14:1f:f2:bc:
34:b8:16:9d:b7:be:aa:7e:f5:91:e9:87:dd:c6:ce:de:de:29:
29:cc:a6:00:49:9a:ee:14:39:98:ce:41:ea:4b:8f:13:1e:60:
ea:55:53:17:50:7a:9d:49:4f:ea:ab:fb:35:5e:29:3a:fe:71:
b9:3f:f4:7c:f3:0c:66:82:34:6a:a2:66:dc:33:fe:a6:eb:a3:
40:82:5e:56:cb:dc:3d:c8:68:f9:37:61:5f:11:99:89:7f:65:
62:52:3d:9a:ee:df:77:a2:d9:28:54:5b:fb:ae:08:21:82:a6:
19:51:7f:9f:37:40:74:1c:86:13:3c:1f:3d:3f:ef:93:9e:6b:
1c:f6:5b:e8:7b:e7:54:c3:a5:0f:06:5a:c9:15:8f:f8:ad:77:
83:6e:e4:ad:42:dd:26:32:91:f8:08:51:62:c2:ce:b3:fe:40:
1d:de:ce:f5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+B+UP8hpWFntiEZqsw03EZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjZTBjNDg5NzRlMGFlNzA1YWY1MGVkMGQ2NTI0N2QxYTdl
NjJmZGIwHhcNMjYwNzIxMDAwMDI0WhcNMjYwNzIyMDAwMDI0WjAzMTEwLwYDVQQD
Eyg2NzU1NmNhNWIyNmFlMjg1MWI0NjRmZmQzZGQyNGFkMTJhNjlkODdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxc8abf7Lq04fmndrZZZ9mt78Y3tM
iqfO5CK4PA9/aXcJ+tMlVie31Po9s+BctVig9xNenxdS+9Lj8ghZqPJqtev2Hc1y
tTaX3ZZYxURglBPVPIhKaO1pVYl+P5GRXJVLt3TUurTBrZ4Q4nOU1HQ/34gW7xC1
uyr8k9qGyi7S3pexJ9OyAcALIJpXTyCpFK3BRWy/M8eJi8GWjVrcoUPE2S85kexP
35HDLLpUeTX3YfYVpT+eOOzqZcIxmy3ZjxmZPn5SAuT/+fXg5Ca5kgDh65mDDX8h
QIR4qnoVFWqzzCduJYUdr9ru9uWQD1vvyMGIwCMZqhBTkjN6rlXufoebMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGdVbKWyauKFG0ZP/T3SStEqadh/MB8GA1UdIwQY
MBaAFEzgxIl04K5wWvUO0NZSR9Gn5i/bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVE9ERWlYVGdybkJhOVE3UTFsSkgwYWZtTDlzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny85OWRjY2EtOTYzYS00MDAzLWJmYWYt
YTExNjlhMjg5YzU0LzEvVE9ERWlYVGdybkJhOVE3UTFsSkgwYWZtTDlzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ny85OWRjY2EtOTYzYS00MDAzLWJmYWYtYTExNjlhMjg5YzU0
LzEvVE9ERWlYVGdybkJhOVE3UTFsSkgwYWZtTDlzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKbr+g5M1
X0hI/xhLJIh++GUukVtEV789+vzdaryx9odIusCx6KbbIEJJ7ou54OHv4qKn3Uqb
oYI+sMt5m6XRRfnGAwWUnU7ZqbBlrvzlT6gZ0r/6RV0UH/K8NLgWnbe+qn71kemH
3cbO3t4pKcymAEma7hQ5mM5B6kuPEx5g6lVTF1B6nUlP6qv7NV4pOv5xuT/0fPMM
ZoI0aqJm3DP+puujQIJeVsvcPcho+TdhXxGZiX9lYlI9mu7fd6LZKFRb+64IIYKm
GVF/nzdAdByGEzwfPT/vk55rHPZb6HvnVMOlDwZayRWP+K13g27krULdJjKR+AhR
YsLOs/5AHd7O9Q==
-----END CERTIFICATE-----
Generated at Tue Jul 21 06:56:20 2026 by rpki-client