Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/79/1d0c39-2555-468f-be66-ff9bab90af18/1/tmxJhc1gZDIg4GSi4RTXj1sDnCs.mft
File: tmxJhc1gZDIg4GSi4RTXj1sDnCs.mft (raw, json)
Hash identifier: wam+KKZTMHGWVWF1V4InsnYFJBazHnMitNGwVAmjgrI=
Subject key identifier: 98:25:0C:BD:A3:3E:BF:7E:29:03:81:97:2F:8C:01:15:81:6B:E6:6D
Authority key identifier: B6:6C:49:85:CD:60:64:32:20:E0:64:A2:E1:14:D7:8F:5B:03:9C:2B
Certificate issuer: /CN=b66c4985cd60643220e064a2e114d78f5b039c2b
Certificate serial: 01A056D56A099BF8C7947633D0445800F253
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tmxJhc1gZDIg4GSi4RTXj1sDnCs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/1d0c39-2555-468f-be66-ff9bab90af18/1/tmxJhc1gZDIg4GSi4RTXj1sDnCs.mft
Manifest number: 0C7B
Signing time: Mon 31 Aug 2026 08:00:21 +0000
Manifest this update: Mon 31 Aug 2026 08:00:21 +0000
Manifest next update: Tue 01 Sep 2026 08:00:21 +0000
Files and hashes: 1: 4rBeJt2gTE44sAknjaU9icbf798.roa (hash: ZYDnszD6TdxQH5b/70FLacYtJ5dXx4AM/j4gatDDLJQ=)
2: FznKlNjPtV7CgIvm3j4yrj4Hfic.roa (hash: FZIfFOE2MnfZCsnXNURSud4raCCnVXaurgVHkGDoOTc=)
3: tmxJhc1gZDIg4GSi4RTXj1sDnCs.crl (hash: hdO1l8KYtf8PzgSWwwxzlpZg27b3qNx1vPULEB4vbUA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/1d0c39-2555-468f-be66-ff9bab90af18/1/tmxJhc1gZDIg4GSi4RTXj1sDnCs.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/1d0c39-2555-468f-be66-ff9bab90af18/1/tmxJhc1gZDIg4GSi4RTXj1sDnCs.mft
rsync://rpki.ripe.net/repository/DEFAULT/tmxJhc1gZDIg4GSi4RTXj1sDnCs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 08:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:56:d5:6a:09:9b:f8:c7:94:76:33:d0:44:58:00:f2:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b66c4985cd60643220e064a2e114d78f5b039c2b
Validity
Not Before: Aug 31 08:00:21 2026 GMT
Not After : Sep 1 08:00:21 2026 GMT
Subject: CN=98250cbda33ebf7e290381972f8c0115816be66d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:76:8f:02:40:58:e3:08:1e:14:1e:c7:fd:84:
27:01:92:cb:b1:48:48:b8:f6:ec:04:c6:f7:77:47:
ee:08:8c:1f:58:2d:ea:64:0e:d3:e9:15:fb:98:9d:
d8:84:7b:48:ac:b6:4a:d0:e2:8c:bb:2f:65:bd:c9:
e9:ed:d0:ae:2f:e8:a7:24:d6:6e:3d:57:0e:da:7a:
fb:66:c3:08:df:23:65:c5:b7:75:53:86:f3:32:66:
a9:6e:6e:4b:94:ff:2d:d6:90:61:a2:19:a9:74:4b:
d0:2f:a5:7d:27:8e:14:f7:b0:78:c2:41:43:db:8a:
9b:1b:96:8f:02:eb:5d:4c:f6:f9:df:7e:42:de:fb:
cd:ac:cd:c4:ff:fb:47:c2:ca:45:e4:bb:e1:f5:9c:
d1:c2:70:c8:5c:d0:6a:23:c2:3c:c2:b9:2c:3f:ed:
f2:b5:4d:5a:f2:60:08:0a:2d:95:7f:3b:09:01:ca:
11:53:76:2c:c8:7a:73:ae:aa:bc:6d:81:40:c6:81:
a9:e6:08:ba:a8:84:f2:78:18:25:8b:25:60:82:70:
05:ff:4e:63:02:b6:cf:97:b3:59:5d:af:0a:60:78:
fa:6f:77:a8:92:5c:39:d8:64:bf:90:69:59:8b:03:
4b:90:93:8d:ef:df:d4:aa:a9:29:ac:70:83:b6:a2:
fa:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:25:0C:BD:A3:3E:BF:7E:29:03:81:97:2F:8C:01:15:81:6B:E6:6D
X509v3 Authority Key Identifier:
keyid:B6:6C:49:85:CD:60:64:32:20:E0:64:A2:E1:14:D7:8F:5B:03:9C:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tmxJhc1gZDIg4GSi4RTXj1sDnCs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/1d0c39-2555-468f-be66-ff9bab90af18/1/tmxJhc1gZDIg4GSi4RTXj1sDnCs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/1d0c39-2555-468f-be66-ff9bab90af18/1/tmxJhc1gZDIg4GSi4RTXj1sDnCs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:6c:19:92:96:3b:30:46:53:0c:03:1e:ac:62:21:bf:b9:ea:
aa:4d:10:93:e3:75:ec:92:cd:a3:31:a4:c8:f8:9c:fa:65:f0:
de:ba:0b:c6:2b:03:6d:b3:69:69:b4:1d:33:2d:9b:1e:3f:d2:
56:ee:88:97:71:80:cf:08:7c:2a:0f:d8:0d:cb:e9:8d:32:72:
53:f9:8d:ce:91:0b:c6:b9:6b:46:1a:46:67:e2:f7:98:59:f6:
a7:23:64:9a:0b:83:36:b1:66:68:ed:28:55:5a:04:a4:49:01:
68:c0:0e:57:fb:6e:c5:45:53:16:46:b7:e0:ad:15:19:cd:3e:
2b:ab:20:21:e6:3b:f5:b9:70:74:0a:b2:03:09:19:0d:49:7b:
d6:b9:59:74:a4:33:bb:7f:a9:82:a8:68:3f:8a:98:1d:b9:93:
a8:6a:b0:29:2b:bd:90:d1:de:06:e5:5d:b2:d6:78:17:1b:2a:
9d:db:eb:6f:0e:92:7d:cd:4d:98:c7:44:f9:3d:4c:1d:1b:7e:
b8:1c:3b:8a:d1:fa:d3:73:1f:9b:40:e0:e4:46:7c:9f:ed:ca:
c0:6a:62:c6:d2:09:b8:58:5a:62:4d:d9:e7:dd:c8:b1:0d:f1:
4c:de:60:91:80:9e:be:51:05:81:6c:7b:95:14:15:b0:79:72:
58:4a:e1:2a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaBW1WoJm/jHlHYz0ERYAPJTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI2NmM0OTg1Y2Q2MDY0MzIyMGUwNjRhMmUxMTRkNzhmNWIw
MzljMmIwHhcNMjYwODMxMDgwMDIxWhcNMjYwOTAxMDgwMDIxWjAzMTEwLwYDVQQD
Eyg5ODI1MGNiZGEzM2ViZjdlMjkwMzgxOTcyZjhjMDExNTgxNmJlNjZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApHaPAkBY4wgeFB7H/YQnAZLLsUhI
uPbsBMb3d0fuCIwfWC3qZA7T6RX7mJ3YhHtIrLZK0OKMuy9lvcnp7dCuL+inJNZu
PVcO2nr7ZsMI3yNlxbd1U4bzMmapbm5LlP8t1pBhohmpdEvQL6V9J44U97B4wkFD
24qbG5aPAutdTPb5335C3vvNrM3E//tHwspF5Lvh9ZzRwnDIXNBqI8I8wrksP+3y
tU1a8mAICi2VfzsJAcoRU3YsyHpzrqq8bYFAxoGp5gi6qITyeBgliyVggnAF/05j
ArbPl7NZXa8KYHj6b3eoklw52GS/kGlZiwNLkJON79/UqqkprHCDtqL6kQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJglDL2jPr9+KQOBly+MARWBa+ZtMB8GA1UdIwQY
MBaAFLZsSYXNYGQyIOBkouEU149bA5wrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdG14SmhjMWdaRElnNEdTaTRSVFhqMXNEbkNzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS8xZDBjMzktMjU1NS00NjhmLWJlNjYt
ZmY5YmFiOTBhZjE4LzEvdG14SmhjMWdaRElnNEdTaTRSVFhqMXNEbkNzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OS8xZDBjMzktMjU1NS00NjhmLWJlNjYtZmY5YmFiOTBhZjE4
LzEvdG14SmhjMWdaRElnNEdTaTRSVFhqMXNEbkNzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhWwZkpY7
MEZTDAMerGIhv7nqqk0Qk+N17JLNozGkyPic+mXw3roLxisDbbNpabQdMy2bHj/S
Vu6Il3GAzwh8Kg/YDcvpjTJyU/mNzpELxrlrRhpGZ+L3mFn2pyNkmguDNrFmaO0o
VVoEpEkBaMAOV/tuxUVTFka34K0VGc0+K6sgIeY79blwdAqyAwkZDUl71rlZdKQz
u3+pgqhoP4qYHbmTqGqwKSu9kNHeBuVdstZ4Fxsqndvrbw6Sfc1NmMdE+T1MHRt+
uBw7itH603Mfm0Dg5EZ8n+3KwGpixtIJuFhaYk3Z593IsQ3xTN5gkYCevlEFgWx7
lRQVsHlyWErhKg==
-----END CERTIFICATE-----
Generated at Mon Aug 31 11:11:13 2026 by rpki-client