Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/95dbce-d4e9-41f1-82dc-e84cb1da21bd/1/tEH8gb4caZv_xFKL3JyTMwElo20.mft
File: tEH8gb4caZv_xFKL3JyTMwElo20.mft (raw, json)
Hash identifier: gMwBEafIK9AktsQtP2nN7ELQIrcchbBaN/dCcfsR50o=
Subject key identifier: 11:21:27:61:44:1B:DF:34:CA:1F:E3:40:D0:18:1D:1D:92:33:63:2B
Authority key identifier: B4:41:FC:81:BE:1C:69:9B:FF:C4:52:8B:DC:9C:93:33:01:25:A3:6D
Certificate issuer: /CN=b441fc81be1c699bffc4528bdc9c93330125a36d
Certificate serial: 01A0189C775DE86FB9D3390858B00756E21F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tEH8gb4caZv_xFKL3JyTMwElo20.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/95dbce-d4e9-41f1-82dc-e84cb1da21bd/1/tEH8gb4caZv_xFKL3JyTMwElo20.mft
Manifest number: 86
Signing time: Wed 19 Aug 2026 06:01:42 +0000
Manifest this update: Wed 19 Aug 2026 06:01:42 +0000
Manifest next update: Thu 20 Aug 2026 06:01:42 +0000
Files and hashes: 1: tEH8gb4caZv_xFKL3JyTMwElo20.crl (hash: W+Hh65zCauat7u/CC2Tuw638fUuNnG6PRL54PyiWyrU=)
2: yyonxWMV91Z2Iy_izhRbZlfmQz8.roa (hash: U35LAOz/goOJLZMkOqSlfS1X+wiK+fXvB4Ca7DHTgOo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/95dbce-d4e9-41f1-82dc-e84cb1da21bd/1/tEH8gb4caZv_xFKL3JyTMwElo20.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/95dbce-d4e9-41f1-82dc-e84cb1da21bd/1/tEH8gb4caZv_xFKL3JyTMwElo20.mft
rsync://rpki.ripe.net/repository/DEFAULT/tEH8gb4caZv_xFKL3JyTMwElo20.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Aug 2026 06:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:18:9c:77:5d:e8:6f:b9:d3:39:08:58:b0:07:56:e2:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b441fc81be1c699bffc4528bdc9c93330125a36d
Validity
Not Before: Aug 19 06:01:42 2026 GMT
Not After : Aug 20 06:01:42 2026 GMT
Subject: CN=11212761441bdf34ca1fe340d0181d1d9233632b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:c4:b9:3a:d7:2a:b1:f7:35:6c:06:0a:a5:a3:
9b:6d:bd:ce:63:8c:52:86:89:af:6f:1a:8e:57:22:
4f:75:8c:e6:8b:83:dc:8d:98:0d:a9:62:91:99:5e:
31:8d:5f:26:09:ba:6b:73:3c:d5:69:4a:f8:9d:9e:
d9:5d:8a:3f:18:0a:45:0c:63:c3:be:a0:5f:3e:01:
d2:23:4d:16:23:85:ee:6a:83:72:f2:51:75:0e:97:
19:cb:1c:9b:3c:8c:70:19:69:15:60:1d:49:54:ff:
55:8e:e2:25:c6:f1:cb:04:52:45:fe:d4:4b:cb:a6:
fd:ac:7b:9f:58:0b:6d:5f:ca:d8:34:60:de:15:22:
77:56:8b:4a:e0:3c:81:4e:6b:8e:d1:fa:84:6c:d7:
56:43:aa:8f:1d:a0:a9:9c:b2:3d:9f:8a:81:7d:f9:
64:da:4a:25:da:6b:e8:1c:90:9d:18:6f:a7:01:f3:
11:50:ff:ea:9c:83:4f:47:14:f7:8e:49:ef:4f:4c:
c3:b4:a2:4b:f9:37:42:f5:5f:9d:a8:e4:d7:b1:ef:
2e:26:9a:31:fc:22:b9:42:94:10:5d:5e:c7:2d:24:
d9:bc:78:be:28:ca:a3:1e:f3:c9:02:6c:0c:54:f5:
6e:fc:1b:48:e3:14:b0:9f:90:de:97:ca:82:d6:9b:
56:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:21:27:61:44:1B:DF:34:CA:1F:E3:40:D0:18:1D:1D:92:33:63:2B
X509v3 Authority Key Identifier:
keyid:B4:41:FC:81:BE:1C:69:9B:FF:C4:52:8B:DC:9C:93:33:01:25:A3:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tEH8gb4caZv_xFKL3JyTMwElo20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/95dbce-d4e9-41f1-82dc-e84cb1da21bd/1/tEH8gb4caZv_xFKL3JyTMwElo20.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/95dbce-d4e9-41f1-82dc-e84cb1da21bd/1/tEH8gb4caZv_xFKL3JyTMwElo20.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:0f:87:a9:e8:cf:76:2d:ed:a8:1f:38:68:e7:a9:72:6f:f3:
71:bc:58:aa:86:71:a1:9b:b1:7a:c3:32:87:01:07:6d:ca:0c:
79:60:07:db:3c:d5:ee:cb:4a:1e:d0:a0:37:fc:a7:3d:e6:82:
81:ae:5c:d2:49:50:0a:20:a8:91:6b:3d:b5:2f:c1:04:a9:80:
79:ff:bd:01:9a:61:36:45:76:b7:d6:d9:7e:5d:a2:22:23:b9:
83:4f:f6:26:d1:6a:4e:07:55:bf:3c:c7:56:08:ca:fd:ac:2c:
2f:ad:8c:62:76:ad:09:b8:01:8b:99:8f:74:59:1b:af:76:63:
e2:1a:08:f4:9f:aa:9b:b2:d9:d9:4e:6a:fb:c0:e3:05:8e:d5:
c2:d3:41:47:b1:0c:ad:05:96:39:6b:3e:f9:b6:7f:69:d5:12:
b3:28:83:29:73:db:a9:5a:00:ef:fb:d6:26:db:22:6e:11:3e:
7c:55:79:02:87:59:7d:60:71:4b:cf:df:e0:93:9b:7c:21:16:
37:0c:c8:31:d7:b1:32:8f:ef:4c:f7:35:04:88:e3:6c:1a:97:
1b:f3:e2:a6:04:47:10:df:59:39:49:a8:95:68:d1:5d:db:4a:
ab:6a:45:26:70:a7:65:cd:03:ee:c7:31:89:46:15:18:7a:4f:
18:eb:78:14
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaAYnHdd6G+50zkIWLAHVuIfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0NDFmYzgxYmUxYzY5OWJmZmM0NTI4YmRjOWM5MzMzMDEy
NWEzNmQwHhcNMjYwODE5MDYwMTQyWhcNMjYwODIwMDYwMTQyWjAzMTEwLwYDVQQD
EygxMTIxMjc2MTQ0MWJkZjM0Y2ExZmUzNDBkMDE4MWQxZDkyMzM2MzJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv8S5Otcqsfc1bAYKpaObbb3OY4xS
homvbxqOVyJPdYzmi4PcjZgNqWKRmV4xjV8mCbprczzVaUr4nZ7ZXYo/GApFDGPD
vqBfPgHSI00WI4XuaoNy8lF1DpcZyxybPIxwGWkVYB1JVP9VjuIlxvHLBFJF/tRL
y6b9rHufWAttX8rYNGDeFSJ3VotK4DyBTmuO0fqEbNdWQ6qPHaCpnLI9n4qBfflk
2kol2mvoHJCdGG+nAfMRUP/qnINPRxT3jknvT0zDtKJL+TdC9V+dqOTXse8uJpox
/CK5QpQQXV7HLSTZvHi+KMqjHvPJAmwMVPVu/BtI4xSwn5Del8qC1ptWLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBEhJ2FEG980yh/jQNAYHR2SM2MrMB8GA1UdIwQY
MBaAFLRB/IG+HGmb/8RSi9yckzMBJaNtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdEVIOGdiNGNhWnZfeEZLTDNKeVRNd0VsbzIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS85NWRiY2UtZDRlOS00MWYxLTgyZGMt
ZTg0Y2IxZGEyMWJkLzEvdEVIOGdiNGNhWnZfeEZLTDNKeVRNd0VsbzIwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS85NWRiY2UtZDRlOS00MWYxLTgyZGMtZTg0Y2IxZGEyMWJk
LzEvdEVIOGdiNGNhWnZfeEZLTDNKeVRNd0VsbzIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFA+HqejP
di3tqB84aOepcm/zcbxYqoZxoZuxesMyhwEHbcoMeWAH2zzV7stKHtCgN/ynPeaC
ga5c0klQCiCokWs9tS/BBKmAef+9AZphNkV2t9bZfl2iIiO5g0/2JtFqTgdVvzzH
VgjK/awsL62MYnatCbgBi5mPdFkbr3Zj4hoI9J+qm7LZ2U5q+8DjBY7VwtNBR7EM
rQWWOWs++bZ/adUSsyiDKXPbqVoA7/vWJtsibhE+fFV5AodZfWBxS8/f4JObfCEW
NwzIMdexMo/vTPc1BIjjbBqXG/PipgRHEN9ZOUmolWjRXdtKq2pFJnCnZc0D7scx
iUYVGHpPGOt4FA==
-----END CERTIFICATE-----
Generated at Wed Aug 19 15:11:06 2026 by rpki-client