Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/c991ee-bd41-4ad1-b88d-6fc5fca09629/1/T_hs8z4V6kCJ2inip4gddG34Ju8.mft
File: T_hs8z4V6kCJ2inip4gddG34Ju8.mft (raw, json)
Hash identifier: pKWaPt5iylBsd1x9fM4hB3RE5v//aPY8VVBtcg5f7DM=
Subject key identifier: 48:A4:B6:C7:A2:0B:26:30:90:BB:B6:86:4F:74:3C:6A:C2:B2:42:96
Authority key identifier: 4F:F8:6C:F3:3E:15:EA:40:89:DA:29:E2:A7:88:1D:74:6D:F8:26:EF
Certificate issuer: /CN=4ff86cf33e15ea4089da29e2a7881d746df826ef
Certificate serial: 019F84C391BFC26F45AB0AD9661D1235EE5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T_hs8z4V6kCJ2inip4gddG34Ju8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/c991ee-bd41-4ad1-b88d-6fc5fca09629/1/T_hs8z4V6kCJ2inip4gddG34Ju8.mft
Manifest number: 1322
Signing time: Tue 21 Jul 2026 13:00:37 +0000
Manifest this update: Tue 21 Jul 2026 13:00:37 +0000
Manifest next update: Wed 22 Jul 2026 13:00:37 +0000
Files and hashes: 1: 1v3IPl8M1eJPBhCAK7u4vq4rUaI.roa (hash: fKYCNJCehScelohhLM2BpKiOwF7K+yob2FjJd+Ycr6M=)
2: T_hs8z4V6kCJ2inip4gddG34Ju8.crl (hash: +kCU7t7nkF6usv26NBle21E0WguWKbqeknSjiHX6/+g=)
3: pxD_Y88xrQvnAVjSRtOa0jsr7OQ.roa (hash: +SNLZHSRdVfvPSo1qQ3dQv0AK0ZdBnAQ1eRjccxs6zQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/c991ee-bd41-4ad1-b88d-6fc5fca09629/1/T_hs8z4V6kCJ2inip4gddG34Ju8.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/c991ee-bd41-4ad1-b88d-6fc5fca09629/1/T_hs8z4V6kCJ2inip4gddG34Ju8.mft
rsync://rpki.ripe.net/repository/DEFAULT/T_hs8z4V6kCJ2inip4gddG34Ju8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 13:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:84:c3:91:bf:c2:6f:45:ab:0a:d9:66:1d:12:35:ee:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ff86cf33e15ea4089da29e2a7881d746df826ef
Validity
Not Before: Jul 21 13:00:37 2026 GMT
Not After : Jul 22 13:00:37 2026 GMT
Subject: CN=48a4b6c7a20b263090bbb6864f743c6ac2b24296
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:25:97:bf:aa:a1:e3:d8:50:8e:b0:73:59:9f:
36:0b:75:9b:54:9e:b7:ad:30:2a:e1:d2:96:90:3f:
13:6b:9b:b6:a8:bd:70:8b:ac:3a:c4:b8:3a:1c:fb:
e3:6e:74:29:32:76:9b:91:dd:9e:e4:cd:90:ac:f9:
e7:7e:82:22:cc:f2:82:f9:04:7a:88:8a:88:5a:d6:
a8:f7:43:97:59:27:0a:78:74:ab:2f:7a:3a:1c:94:
21:01:3c:12:0c:66:ba:f7:fe:81:02:76:25:f0:74:
fe:bc:a8:8f:d6:0a:dc:08:64:15:70:83:e0:07:af:
31:d1:41:16:46:7f:9c:45:46:8d:31:e3:5d:04:30:
61:50:70:e2:a5:fd:94:89:17:10:62:3b:2f:65:6f:
1c:4f:35:91:bd:26:71:7a:da:00:ae:26:96:63:3f:
6c:b8:7a:66:9a:6b:b8:26:2a:18:92:2f:c8:43:ba:
e6:c0:58:b5:cf:02:c6:b8:08:74:53:8a:e0:63:2e:
e2:0a:aa:6f:ea:cb:66:ba:63:e8:44:4f:65:45:eb:
ab:0d:47:a5:c9:4a:a0:c0:75:7e:b4:5c:de:90:c1:
00:10:65:b0:d9:fb:89:c1:04:85:88:a5:fd:64:ba:
c0:f9:67:fc:ae:30:77:b3:e3:b6:ba:d5:2e:21:e5:
b8:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:A4:B6:C7:A2:0B:26:30:90:BB:B6:86:4F:74:3C:6A:C2:B2:42:96
X509v3 Authority Key Identifier:
keyid:4F:F8:6C:F3:3E:15:EA:40:89:DA:29:E2:A7:88:1D:74:6D:F8:26:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T_hs8z4V6kCJ2inip4gddG34Ju8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/c991ee-bd41-4ad1-b88d-6fc5fca09629/1/T_hs8z4V6kCJ2inip4gddG34Ju8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/c991ee-bd41-4ad1-b88d-6fc5fca09629/1/T_hs8z4V6kCJ2inip4gddG34Ju8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:e4:6b:98:f1:d7:f7:ca:56:00:a4:a4:5b:e0:29:9a:c8:55:
67:ca:c9:7b:28:ff:f2:ab:e5:d4:9d:9e:39:95:0f:39:5a:f2:
75:17:97:c0:2b:14:2e:13:25:bd:81:59:08:fd:9d:6c:44:be:
8e:f0:02:37:8e:22:14:c0:a5:f8:e4:da:19:54:44:97:e2:66:
7e:9c:5f:6a:fb:64:c6:88:36:e1:62:ca:0c:bf:8b:1e:f1:60:
28:1c:9e:59:f4:6e:39:17:c1:0e:88:20:41:a1:7c:c6:af:54:
a3:76:81:98:4c:23:77:e1:9f:45:ce:7e:ad:0b:f1:55:3a:f8:
89:4e:01:b0:66:ac:70:87:9c:2d:16:7e:62:3e:a1:74:4e:b9:
b3:ac:ff:51:b8:ff:eb:83:2d:31:32:37:a6:42:4b:76:a8:5f:
d9:df:bd:b5:be:85:ea:77:4e:c6:41:cc:b0:9d:9f:1d:db:1f:
a1:01:a0:78:57:39:55:3f:51:cc:19:26:7c:b0:e4:29:f4:48:
89:07:d6:3a:ee:77:b9:c0:81:7e:88:bb:9a:a6:bc:a9:25:8a:
c8:2a:9a:20:3b:65:13:35:b9:e2:a0:96:7c:76:30:5e:2a:5f:
13:27:58:37:7c:59:7d:b1:68:e6:91:a7:99:b2:ea:83:31:ee:
60:85:9e:ad
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+Ew5G/wm9FqwrZZh0SNe5eMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmZjg2Y2YzM2UxNWVhNDA4OWRhMjllMmE3ODgxZDc0NmRm
ODI2ZWYwHhcNMjYwNzIxMTMwMDM3WhcNMjYwNzIyMTMwMDM3WjAzMTEwLwYDVQQD
Eyg0OGE0YjZjN2EyMGIyNjMwOTBiYmI2ODY0Zjc0M2M2YWMyYjI0Mjk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuyWXv6qh49hQjrBzWZ82C3WbVJ63
rTAq4dKWkD8Ta5u2qL1wi6w6xLg6HPvjbnQpMnabkd2e5M2QrPnnfoIizPKC+QR6
iIqIWtao90OXWScKeHSrL3o6HJQhATwSDGa69/6BAnYl8HT+vKiP1grcCGQVcIPg
B68x0UEWRn+cRUaNMeNdBDBhUHDipf2UiRcQYjsvZW8cTzWRvSZxetoAriaWYz9s
uHpmmmu4JioYki/IQ7rmwFi1zwLGuAh0U4rgYy7iCqpv6stmumPoRE9lReurDUel
yUqgwHV+tFzekMEAEGWw2fuJwQSFiKX9ZLrA+Wf8rjB3s+O2utUuIeW4xwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEiktseiCyYwkLu2hk90PGrCskKWMB8GA1UdIwQY
MBaAFE/4bPM+FepAidop4qeIHXRt+CbvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVF9oczh6NFY2a0NKMmluaXA0Z2RkRzM0SnU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC9jOTkxZWUtYmQ0MS00YWQxLWI4OGQt
NmZjNWZjYTA5NjI5LzEvVF9oczh6NFY2a0NKMmluaXA0Z2RkRzM0SnU4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMC9jOTkxZWUtYmQ0MS00YWQxLWI4OGQtNmZjNWZjYTA5NjI5
LzEvVF9oczh6NFY2a0NKMmluaXA0Z2RkRzM0SnU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALeRrmPHX
98pWAKSkW+ApmshVZ8rJeyj/8qvl1J2eOZUPOVrydReXwCsULhMlvYFZCP2dbES+
jvACN44iFMCl+OTaGVREl+Jmfpxfavtkxog24WLKDL+LHvFgKByeWfRuORfBDogg
QaF8xq9Uo3aBmEwjd+GfRc5+rQvxVTr4iU4BsGascIecLRZ+Yj6hdE65s6z/Ubj/
64MtMTI3pkJLdqhf2d+9tb6F6ndOxkHMsJ2fHdsfoQGgeFc5VT9RzBkmfLDkKfRI
iQfWOu53ucCBfoi7mqa8qSWKyCqaIDtlEzW54qCWfHYwXipfEydYN3xZfbFo5pGn
mbLqgzHuYIWerQ==
-----END CERTIFICATE-----
Generated at Tue Jul 21 20:04:18 2026 by rpki-client