Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/9dd8ae-4afc-44c1-9bd0-c532195eef49/1/tKfQVIK4TTu2BPCZvK-eftNGiJo.mft
File: tKfQVIK4TTu2BPCZvK-eftNGiJo.mft (raw, json)
Hash identifier: Z5RkHYQfZWYmcXj/kjWDAOiM5WnnUBG8/ODCW+ihJPE=
Subject key identifier: 6D:90:B8:05:D5:5E:17:D4:6A:9E:43:67:7A:2A:A7:7A:AB:96:5F:63
Authority key identifier: B4:A7:D0:54:82:B8:4D:3B:B6:04:F0:99:BC:AF:9E:7E:D3:46:88:9A
Certificate issuer: /CN=b4a7d05482b84d3bb604f099bcaf9e7ed346889a
Certificate serial: 019FA4852E190A5E0452AC4B8180C2B7B147
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tKfQVIK4TTu2BPCZvK-eftNGiJo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/9dd8ae-4afc-44c1-9bd0-c532195eef49/1/tKfQVIK4TTu2BPCZvK-eftNGiJo.mft
Manifest number: 19CE
Signing time: Mon 27 Jul 2026 17:00:19 +0000
Manifest this update: Mon 27 Jul 2026 17:00:19 +0000
Manifest next update: Tue 28 Jul 2026 17:00:19 +0000
Files and hashes: 1: awToJLBsyk0T4IcWFD08IQBrMn8.roa (hash: D6jszyrJ34yNygrEuO9QJPaleqlFTsrRTxhepr3reTI=)
2: tKfQVIK4TTu2BPCZvK-eftNGiJo.crl (hash: ldkf1VkKxis1Iozc3rpG4/0Q+3xu+zZPEDUo/YaSVDk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/9dd8ae-4afc-44c1-9bd0-c532195eef49/1/tKfQVIK4TTu2BPCZvK-eftNGiJo.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/9dd8ae-4afc-44c1-9bd0-c532195eef49/1/tKfQVIK4TTu2BPCZvK-eftNGiJo.mft
rsync://rpki.ripe.net/repository/DEFAULT/tKfQVIK4TTu2BPCZvK-eftNGiJo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 13:48:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a4:85:2e:19:0a:5e:04:52:ac:4b:81:80:c2:b7:b1:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4a7d05482b84d3bb604f099bcaf9e7ed346889a
Validity
Not Before: Jul 27 17:00:19 2026 GMT
Not After : Jul 28 17:00:19 2026 GMT
Subject: CN=6d90b805d55e17d46a9e43677a2aa77aab965f63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:81:05:24:12:12:1e:51:ee:97:64:97:2b:80:
97:3b:10:5a:34:b7:04:8c:fc:4a:23:a9:ce:56:6d:
e8:a8:b7:88:eb:32:a8:82:d4:e3:fa:7c:18:fc:ef:
7a:6a:45:bd:31:ae:f1:b8:e1:ad:88:c6:37:96:ee:
6a:ec:65:4d:c4:d5:5b:f3:62:79:ac:4a:f3:2a:f0:
68:d9:06:60:3c:41:7e:a8:68:b1:4a:5c:77:07:f6:
16:b1:d6:68:90:fe:da:a8:b0:38:26:95:0d:d2:37:
38:b4:41:ed:a6:3a:49:00:af:18:7d:95:6c:c3:2e:
48:f4:0d:02:5b:4d:61:6e:c4:85:d0:01:9f:fd:b4:
e1:50:d9:2a:a9:44:d4:bf:e4:3f:71:67:58:f3:f0:
7c:b6:2e:93:9a:2d:af:8d:61:76:7d:1a:e2:88:61:
d0:18:72:b7:50:34:81:dd:e6:f7:4a:90:32:42:56:
e5:57:9e:17:e2:9f:81:7f:f0:0d:86:45:27:d4:2d:
eb:2b:ab:53:77:a8:15:da:75:e6:9f:e5:16:ad:48:
04:d2:b1:8d:f3:51:38:1c:99:a5:c6:89:f3:6e:58:
fe:f6:20:c6:65:fa:b2:5e:dc:80:98:27:10:7a:3d:
c4:c1:79:c6:78:38:1b:f4:ed:fc:cd:6d:d5:8b:de:
a2:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:90:B8:05:D5:5E:17:D4:6A:9E:43:67:7A:2A:A7:7A:AB:96:5F:63
X509v3 Authority Key Identifier:
keyid:B4:A7:D0:54:82:B8:4D:3B:B6:04:F0:99:BC:AF:9E:7E:D3:46:88:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tKfQVIK4TTu2BPCZvK-eftNGiJo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/9dd8ae-4afc-44c1-9bd0-c532195eef49/1/tKfQVIK4TTu2BPCZvK-eftNGiJo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/9dd8ae-4afc-44c1-9bd0-c532195eef49/1/tKfQVIK4TTu2BPCZvK-eftNGiJo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:10:e5:dd:31:5f:9c:a5:f8:fe:10:6b:01:07:5f:7a:74:7d:
8c:19:20:98:bb:ad:0f:68:af:f8:9e:a2:c9:b7:42:40:09:f5:
8c:20:3c:f8:83:cf:a9:e3:12:89:25:05:25:91:f1:22:69:e6:
8a:ae:b0:ff:8e:22:57:8f:8f:f1:70:95:86:6a:b3:20:25:2c:
1c:e1:34:79:47:02:d5:b9:db:3b:12:db:16:b0:f5:97:72:16:
3c:a6:4e:f8:ef:61:5a:7a:c9:00:53:aa:fb:83:12:19:ca:20:
b5:cb:9a:53:19:16:b6:d6:a5:27:39:87:fb:44:ef:02:7c:81:
40:0e:67:98:a1:7a:92:80:01:10:b9:ed:19:7e:82:56:d4:da:
13:b9:dc:d3:9e:7b:e8:6f:a4:7d:fc:dc:62:e5:99:08:4d:d4:
85:33:0e:5b:8c:43:f9:3d:03:99:c6:b1:46:21:89:2b:35:38:
4a:60:a0:04:8f:05:a6:be:7f:d5:34:ce:68:da:39:73:dc:18:
23:32:b2:7b:8d:3d:20:08:45:5b:c6:ad:33:da:ba:0c:a5:7d:
ed:d3:b3:d4:86:03:e9:b0:72:27:66:1d:6e:c5:ec:10:04:7f:
e3:bc:92:5d:23:7e:a3:95:91:6c:9e:e2:64:e1:09:33:ff:4e:
b8:24:3e:48
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+khS4ZCl4EUqxLgYDCt7FHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0YTdkMDU0ODJiODRkM2JiNjA0ZjA5OWJjYWY5ZTdlZDM0
Njg4OWEwHhcNMjYwNzI3MTcwMDE5WhcNMjYwNzI4MTcwMDE5WjAzMTEwLwYDVQQD
Eyg2ZDkwYjgwNWQ1NWUxN2Q0NmE5ZTQzNjc3YTJhYTc3YWFiOTY1ZjYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArIEFJBISHlHul2SXK4CXOxBaNLcE
jPxKI6nOVm3oqLeI6zKogtTj+nwY/O96akW9Ma7xuOGtiMY3lu5q7GVNxNVb82J5
rErzKvBo2QZgPEF+qGixSlx3B/YWsdZokP7aqLA4JpUN0jc4tEHtpjpJAK8YfZVs
wy5I9A0CW01hbsSF0AGf/bThUNkqqUTUv+Q/cWdY8/B8ti6Tmi2vjWF2fRriiGHQ
GHK3UDSB3eb3SpAyQlblV54X4p+Bf/ANhkUn1C3rK6tTd6gV2nXmn+UWrUgE0rGN
81E4HJmlxonzblj+9iDGZfqyXtyAmCcQej3EwXnGeDgb9O38zW3Vi96ioQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG2QuAXVXhfUap5DZ3oqp3qrll9jMB8GA1UdIwQY
MBaAFLSn0FSCuE07tgTwmbyvnn7TRoiaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdEtmUVZJSzRUVHUyQlBDWnZLLWVmdE5HaUpvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC85ZGQ4YWUtNGFmYy00NGMxLTliZDAt
YzUzMjE5NWVlZjQ5LzEvdEtmUVZJSzRUVHUyQlBDWnZLLWVmdE5HaUpvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC85ZGQ4YWUtNGFmYy00NGMxLTliZDAtYzUzMjE5NWVlZjQ5
LzEvdEtmUVZJSzRUVHUyQlBDWnZLLWVmdE5HaUpvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlhDl3TFf
nKX4/hBrAQdfenR9jBkgmLutD2iv+J6iybdCQAn1jCA8+IPPqeMSiSUFJZHxImnm
iq6w/44iV4+P8XCVhmqzICUsHOE0eUcC1bnbOxLbFrD1l3IWPKZO+O9hWnrJAFOq
+4MSGcogtcuaUxkWttalJzmH+0TvAnyBQA5nmKF6koABELntGX6CVtTaE7nc0557
6G+kffzcYuWZCE3UhTMOW4xD+T0DmcaxRiGJKzU4SmCgBI8Fpr5/1TTOaNo5c9wY
IzKye409IAhFW8atM9q6DKV97dOz1IYD6bByJ2YdbsXsEAR/47ySXSN+o5WRbJ7i
ZOEJM/9OuCQ+SA==
-----END CERTIFICATE-----
Generated at Mon Jul 27 21:02:04 2026 by rpki-client