Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/c8b40c-2c0b-47ff-b921-e631463b123b/1/Tml3iQJzeX38xAIrkMBGF-sd8Sk.mft
File: Tml3iQJzeX38xAIrkMBGF-sd8Sk.mft (raw, json)
Hash identifier: c2UdOJ+9So1t+Seh/YdwXpQTHoQJbfn4AxDnBJuGaEw=
Subject key identifier: A1:8E:97:5B:C5:36:7D:D8:AF:81:67:88:B4:59:AC:BF:10:34:EB:8B
Authority key identifier: 4E:69:77:89:02:73:79:7D:FC:C4:02:2B:90:C0:46:17:EB:1D:F1:29
Certificate issuer: /CN=4e6977890273797dfcc4022b90c04617eb1df129
Certificate serial: 019FF5D904A90CFFD418A9EF80794D485455
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tml3iQJzeX38xAIrkMBGF-sd8Sk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/c8b40c-2c0b-47ff-b921-e631463b123b/1/Tml3iQJzeX38xAIrkMBGF-sd8Sk.mft
Manifest number: 74
Signing time: Wed 12 Aug 2026 12:01:08 +0000
Manifest this update: Wed 12 Aug 2026 12:01:08 +0000
Manifest next update: Thu 13 Aug 2026 12:01:08 +0000
Files and hashes: 1: 76fuJqCnyM96XEK3XxGjc6ze908.roa (hash: th/ZnBNOEGf6s4sOu5GgwpSyFXSOhHyXMejJbNorthU=)
2: Tml3iQJzeX38xAIrkMBGF-sd8Sk.crl (hash: pzDv0CN1FYGBiACv15P1sTuVsIPZCxjlF8hDqrCAdvk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/c8b40c-2c0b-47ff-b921-e631463b123b/1/Tml3iQJzeX38xAIrkMBGF-sd8Sk.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/c8b40c-2c0b-47ff-b921-e631463b123b/1/Tml3iQJzeX38xAIrkMBGF-sd8Sk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tml3iQJzeX38xAIrkMBGF-sd8Sk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Aug 2026 12:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f5:d9:04:a9:0c:ff:d4:18:a9:ef:80:79:4d:48:54:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e6977890273797dfcc4022b90c04617eb1df129
Validity
Not Before: Aug 12 12:01:08 2026 GMT
Not After : Aug 13 12:01:08 2026 GMT
Subject: CN=a18e975bc5367dd8af816788b459acbf1034eb8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:17:a5:7d:e0:93:33:ff:4c:60:16:a3:34:b8:
85:0d:f5:3a:4f:f2:2b:ad:d2:fc:54:b5:f3:96:8a:
1d:20:db:c1:48:02:57:49:7b:ba:ba:5a:e9:9b:16:
01:9e:36:15:04:be:bb:f2:ff:61:00:b5:b2:63:f8:
77:e0:95:2f:6f:7b:0c:bc:57:0e:f2:a7:c8:04:4b:
1c:5e:43:27:25:04:f0:71:12:1d:12:15:ef:61:d3:
19:36:c0:41:04:86:71:d2:eb:0f:d3:6b:13:7c:00:
d8:07:b5:11:4c:a4:8f:00:ec:ff:32:f5:c5:4e:53:
21:d7:9f:76:68:0f:8c:54:d8:1e:c7:c3:24:9a:b1:
07:41:fc:0c:68:15:01:3d:33:9c:12:af:12:9b:52:
c0:77:3b:63:df:6c:3a:8c:a0:ac:0b:d4:e2:a9:6f:
cb:ed:f2:1f:66:a4:3b:0f:2f:5a:e3:76:8e:78:87:
ca:4c:bf:cb:6f:5e:54:8a:91:e3:66:5d:d7:43:9b:
f7:70:dd:ae:79:a2:8c:7d:f8:de:e2:17:02:26:e4:
5a:7e:68:f0:11:73:6e:fe:67:6b:75:86:b0:04:4d:
63:32:98:e9:0d:8f:8e:9d:69:f4:22:01:5d:eb:62:
4c:07:61:19:f8:a8:e0:c1:dc:6d:28:60:15:c4:31:
ba:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:8E:97:5B:C5:36:7D:D8:AF:81:67:88:B4:59:AC:BF:10:34:EB:8B
X509v3 Authority Key Identifier:
keyid:4E:69:77:89:02:73:79:7D:FC:C4:02:2B:90:C0:46:17:EB:1D:F1:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tml3iQJzeX38xAIrkMBGF-sd8Sk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/c8b40c-2c0b-47ff-b921-e631463b123b/1/Tml3iQJzeX38xAIrkMBGF-sd8Sk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/c8b40c-2c0b-47ff-b921-e631463b123b/1/Tml3iQJzeX38xAIrkMBGF-sd8Sk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:41:a2:df:71:83:9b:e4:79:c6:32:e7:26:b0:29:4f:45:54:
ec:5f:29:f4:9a:eb:49:00:d5:80:d0:b3:b2:70:34:19:42:4c:
81:6e:02:3b:64:92:fd:f7:90:61:cf:b0:e6:2e:46:fa:d7:ff:
18:f9:b6:99:17:9b:41:e3:8d:54:43:c7:80:b9:54:c9:92:bb:
43:f4:ae:46:bc:98:32:f2:1d:f1:19:1f:de:b5:b3:31:77:06:
3d:af:0d:03:bc:1f:0c:df:8f:d0:ed:31:36:24:26:69:7b:4d:
f0:27:db:7b:78:a6:b9:b7:ff:5f:d3:2d:5a:72:a2:3c:80:5a:
7b:cf:6b:b3:fe:b7:8c:09:5e:a8:52:3d:6a:fc:07:f2:5b:53:
23:07:69:fc:d9:42:4b:7a:ed:c6:cc:ce:1d:63:c0:f3:09:3d:
4e:5e:2e:d4:5f:91:f4:29:2b:73:eb:86:bf:b3:e7:68:5c:7a:
56:21:2c:4f:f5:f1:7e:15:d4:7d:ed:70:93:aa:e6:16:5d:fd:
81:fc:1c:57:47:f0:92:23:d5:50:ad:d9:7c:72:af:43:01:fa:
13:49:c2:1b:53:85:1c:8b:10:c0:31:b4:e0:5b:60:3b:47:33:
b7:e0:5f:bf:7a:ab:8d:ee:03:81:83:fd:cb:51:2a:f3:6e:42:
c4:6f:f0:24
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ/12QSpDP/UGKnvgHlNSFRVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRlNjk3Nzg5MDI3Mzc5N2RmY2M0MDIyYjkwYzA0NjE3ZWIx
ZGYxMjkwHhcNMjYwODEyMTIwMTA4WhcNMjYwODEzMTIwMTA4WjAzMTEwLwYDVQQD
EyhhMThlOTc1YmM1MzY3ZGQ4YWY4MTY3ODhiNDU5YWNiZjEwMzRlYjhiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAthelfeCTM/9MYBajNLiFDfU6T/Ir
rdL8VLXzloodINvBSAJXSXu6ulrpmxYBnjYVBL678v9hALWyY/h34JUvb3sMvFcO
8qfIBEscXkMnJQTwcRIdEhXvYdMZNsBBBIZx0usP02sTfADYB7URTKSPAOz/MvXF
TlMh1592aA+MVNgex8MkmrEHQfwMaBUBPTOcEq8Sm1LAdztj32w6jKCsC9TiqW/L
7fIfZqQ7Dy9a43aOeIfKTL/Lb15UipHjZl3XQ5v3cN2ueaKMffje4hcCJuRafmjw
EXNu/mdrdYawBE1jMpjpDY+OnWn0IgFd62JMB2EZ+KjgwdxtKGAVxDG6rwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKGOl1vFNn3Yr4FniLRZrL8QNOuLMB8GA1UdIwQY
MBaAFE5pd4kCc3l9/MQCK5DARhfrHfEpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVG1sM2lRSnplWDM4eEFJcmtNQkdGLXNkOFNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC9jOGI0MGMtMmMwYi00N2ZmLWI5MjEt
ZTYzMTQ2M2IxMjNiLzEvVG1sM2lRSnplWDM4eEFJcmtNQkdGLXNkOFNrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZC9jOGI0MGMtMmMwYi00N2ZmLWI5MjEtZTYzMTQ2M2IxMjNi
LzEvVG1sM2lRSnplWDM4eEFJcmtNQkdGLXNkOFNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS0Gi33GD
m+R5xjLnJrApT0VU7F8p9JrrSQDVgNCzsnA0GUJMgW4CO2SS/feQYc+w5i5G+tf/
GPm2mRebQeONVEPHgLlUyZK7Q/SuRryYMvId8Rkf3rWzMXcGPa8NA7wfDN+P0O0x
NiQmaXtN8Cfbe3imubf/X9MtWnKiPIBae89rs/63jAleqFI9avwH8ltTIwdp/NlC
S3rtxszOHWPA8wk9Tl4u1F+R9Ckrc+uGv7PnaFx6ViEsT/XxfhXUfe1wk6rmFl39
gfwcV0fwkiPVUK3ZfHKvQwH6E0nCG1OFHIsQwDG04FtgO0czt+Bfv3qrje4DgYP9
y1Eq825CxG/wJA==
-----END CERTIFICATE-----
Generated at Wed Aug 12 20:11:30 2026 by rpki-client