Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/2c58d4-7a73-4d62-af86-26f0666590ed/1/Txf-YMOq5IFd21vYFp7wiLD_iAA.mft
File: Txf-YMOq5IFd21vYFp7wiLD_iAA.mft (raw, json)
Hash identifier: nKRMPFJF8Y3nSWsDidbnTLhQ4TwaCc2GRWwzNLhEspI=
Subject key identifier: A5:84:D0:5E:51:1E:D7:42:45:CA:20:28:36:18:F9:36:4B:1E:6D:71
Authority key identifier: 4F:17:FE:60:C3:AA:E4:81:5D:DB:5B:D8:16:9E:F0:88:B0:FF:88:00
Certificate issuer: /CN=4f17fe60c3aae4815ddb5bd8169ef088b0ff8800
Certificate serial: 019F11F7ACED0BB6FB9DC9A629491D5775A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Txf-YMOq5IFd21vYFp7wiLD_iAA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/2c58d4-7a73-4d62-af86-26f0666590ed/1/Txf-YMOq5IFd21vYFp7wiLD_iAA.mft
Manifest number: 85
Signing time: Mon 29 Jun 2026 06:01:12 +0000
Manifest this update: Mon 29 Jun 2026 06:01:12 +0000
Manifest next update: Tue 30 Jun 2026 06:01:12 +0000
Files and hashes: 1: 8QmLJNa-_EnzDtcCcd2zqbb73Z8.asa (hash: E1mQECWPw1tiHBtWESa7EJB6He3X4+7LGeXYc5u2GM4=)
2: Txf-YMOq5IFd21vYFp7wiLD_iAA.crl (hash: alEvoLWVIbu2d4G8U+exgwmbxlUG0YyiIW89wwJyrI4=)
3: sfOsjn-CrEsbuGZfo_GU02Seuc0.roa (hash: QuCtUcV2rfjyf/avZCog8Qa9or52pG6qZ7ZDsQCk2sE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/2c58d4-7a73-4d62-af86-26f0666590ed/1/Txf-YMOq5IFd21vYFp7wiLD_iAA.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/2c58d4-7a73-4d62-af86-26f0666590ed/1/Txf-YMOq5IFd21vYFp7wiLD_iAA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Txf-YMOq5IFd21vYFp7wiLD_iAA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:11:f7:ac:ed:0b:b6:fb:9d:c9:a6:29:49:1d:57:75:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f17fe60c3aae4815ddb5bd8169ef088b0ff8800
Validity
Not Before: Jun 29 06:01:12 2026 GMT
Not After : Jun 30 06:01:12 2026 GMT
Subject: CN=a584d05e511ed74245ca20283618f9364b1e6d71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:7f:40:29:11:51:ec:aa:94:ef:f6:cd:a7:3b:
1f:69:af:f9:d9:50:f4:22:d2:d1:b6:67:ba:e8:76:
7c:a7:7f:2b:05:d5:30:81:9e:47:54:65:b4:ed:0b:
e2:5a:89:fc:87:74:15:71:7c:91:65:db:65:ed:fd:
bb:b8:05:a9:8f:00:1b:83:d3:f0:f4:96:1b:7d:7a:
c0:1b:e6:6d:4f:b1:b2:af:59:1b:0b:b9:49:a7:43:
60:f3:a9:bf:81:2b:aa:c4:93:44:67:45:00:e8:6e:
e0:81:bb:ce:a0:08:04:50:ce:5a:a3:d3:cc:8b:b6:
18:79:43:74:76:68:d0:a4:dd:d1:bb:db:6f:fc:2a:
73:4a:88:91:dd:5c:c9:5b:39:85:07:18:84:e4:11:
3c:05:1e:59:b3:cc:f2:70:89:06:5b:7d:8b:9d:3d:
64:a8:39:06:31:d9:0a:7f:31:8d:f7:fd:9f:d7:45:
a1:fa:6d:41:12:d7:4e:7b:a1:a4:05:a4:f3:2d:19:
01:17:4b:f6:3e:6e:6e:60:b3:56:f8:95:7f:5b:f4:
66:6d:d9:9c:3d:85:66:2f:2a:2d:99:35:de:c5:06:
16:59:ba:f9:4c:de:07:1d:a6:40:14:0d:f2:bf:65:
8e:43:d8:97:29:ff:91:8e:dc:f2:2d:cc:7f:bf:3b:
db:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:84:D0:5E:51:1E:D7:42:45:CA:20:28:36:18:F9:36:4B:1E:6D:71
X509v3 Authority Key Identifier:
keyid:4F:17:FE:60:C3:AA:E4:81:5D:DB:5B:D8:16:9E:F0:88:B0:FF:88:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Txf-YMOq5IFd21vYFp7wiLD_iAA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/2c58d4-7a73-4d62-af86-26f0666590ed/1/Txf-YMOq5IFd21vYFp7wiLD_iAA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/2c58d4-7a73-4d62-af86-26f0666590ed/1/Txf-YMOq5IFd21vYFp7wiLD_iAA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:21:37:f3:13:74:e2:19:29:be:0d:84:42:dc:8e:72:11:4b:
ba:9c:a0:18:7c:fc:82:31:a9:4d:24:7c:83:8a:1b:1e:f6:07:
69:6a:f7:bc:1b:e3:d6:0b:8c:42:40:ab:c5:29:b9:6c:6e:2b:
a1:9c:63:d4:2a:12:13:37:d0:58:83:5b:4c:ed:aa:77:86:89:
be:63:8c:3b:3c:85:d0:12:59:e4:10:94:1d:82:8d:7e:61:12:
52:3d:0f:e6:8f:93:84:ea:1d:51:d9:2b:56:ea:23:26:8f:21:
71:4f:88:da:bf:ce:8a:b5:1e:21:5d:0a:2b:18:44:d5:b9:f0:
6c:b3:20:63:be:76:7a:a3:0c:24:fc:ac:37:12:e1:f0:b4:68:
b6:5f:14:6e:eb:24:59:30:90:65:20:41:16:eb:c3:dd:23:b7:
91:f2:ea:29:9b:92:52:15:aa:30:d7:cf:3d:ae:0c:f3:50:30:
f0:5b:00:00:8f:20:78:f8:66:88:c3:6a:05:b4:f7:5a:0a:7b:
76:ad:7d:fb:f0:14:ab:d1:65:de:d9:f8:d7:78:59:e0:0a:c7:
5f:3b:97:9a:8b:52:57:74:29:ad:d4:65:56:38:ed:da:65:5d:
71:09:20:5d:ba:bf:d5:39:c0:f5:6c:23:a0:19:76:e4:54:bf:
cd:cb:01:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 10:40:38 2026 by rpki-client