Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/f01712-72bb-4088-8b61-7fe20f2efed4/1/tpqu8c6hny-Sb1cJYVRc_k7WmvY.mft
File: tpqu8c6hny-Sb1cJYVRc_k7WmvY.mft (raw, json)
Hash identifier: ixnP3RCXc1wnVCGkl8r4qUnZMPDehdzmIl2sSYgAeOc=
Subject key identifier: A0:02:83:AE:5F:36:7E:B2:78:40:B3:1D:D9:E7:2A:DF:09:2E:50:46
Authority key identifier: B6:9A:AE:F1:CE:A1:9F:2F:92:6F:57:09:61:54:5C:FE:4E:D6:9A:F6
Certificate issuer: /CN=b69aaef1cea19f2f926f570961545cfe4ed69af6
Certificate serial: 019FA2609808E86D1E0FBA2EF107DB0EF5E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tpqu8c6hny-Sb1cJYVRc_k7WmvY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/f01712-72bb-4088-8b61-7fe20f2efed4/1/tpqu8c6hny-Sb1cJYVRc_k7WmvY.mft
Manifest number: 096E
Signing time: Mon 27 Jul 2026 07:01:07 +0000
Manifest this update: Mon 27 Jul 2026 07:01:07 +0000
Manifest next update: Tue 28 Jul 2026 07:01:07 +0000
Files and hashes: 1: tpqu8c6hny-Sb1cJYVRc_k7WmvY.crl (hash: V/pPpYa6WszzgV6qbf4Hhrk7aUUhPLyjdLnJt/UuNi0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/f01712-72bb-4088-8b61-7fe20f2efed4/1/tpqu8c6hny-Sb1cJYVRc_k7WmvY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/f01712-72bb-4088-8b61-7fe20f2efed4/1/tpqu8c6hny-Sb1cJYVRc_k7WmvY.mft
rsync://rpki.ripe.net/repository/DEFAULT/tpqu8c6hny-Sb1cJYVRc_k7WmvY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 07:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a2:60:98:08:e8:6d:1e:0f:ba:2e:f1:07:db:0e:f5:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b69aaef1cea19f2f926f570961545cfe4ed69af6
Validity
Not Before: Jul 27 07:01:07 2026 GMT
Not After : Jul 28 07:01:07 2026 GMT
Subject: CN=a00283ae5f367eb27840b31dd9e72adf092e5046
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:35:84:77:02:d4:6b:04:e2:64:5a:c5:4a:27:
84:a6:b5:b9:59:bf:b6:a9:21:b0:74:c0:2c:9b:6d:
d3:ec:9c:5d:76:48:37:45:4f:04:4d:11:9b:34:7c:
d5:d5:ec:11:44:0e:db:d4:6f:93:2e:fc:ce:3a:de:
46:9e:01:38:4f:43:61:ce:fc:6f:dc:06:a2:3e:1c:
4d:10:16:2c:04:47:49:d6:ef:57:df:f1:b3:2f:64:
37:c0:7e:3f:0c:82:e4:19:d5:cc:3c:dc:06:47:4e:
76:a8:42:4d:47:99:14:28:47:3f:f5:aa:c7:af:07:
88:bc:ba:fb:da:99:88:44:06:5e:c4:4b:28:46:ce:
bb:0c:d8:32:c9:00:8a:82:e7:bf:94:89:72:d9:e7:
ca:a5:62:42:63:d5:78:1d:16:6f:65:0e:72:1f:33:
cf:40:72:56:7d:77:ba:82:fe:91:18:9f:c9:e7:2f:
25:a2:39:db:8d:60:20:27:70:12:ac:13:31:6c:af:
bb:75:f0:b9:46:c6:8b:16:05:f7:93:94:9e:91:3c:
e9:db:08:99:dd:1e:64:9b:56:aa:4f:f1:9c:12:da:
fa:03:90:4e:7f:1e:87:bd:e1:d3:f0:78:1e:2a:93:
6b:d3:6c:bf:7f:d8:ac:aa:5d:41:04:38:46:ca:54:
99:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:02:83:AE:5F:36:7E:B2:78:40:B3:1D:D9:E7:2A:DF:09:2E:50:46
X509v3 Authority Key Identifier:
keyid:B6:9A:AE:F1:CE:A1:9F:2F:92:6F:57:09:61:54:5C:FE:4E:D6:9A:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tpqu8c6hny-Sb1cJYVRc_k7WmvY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/f01712-72bb-4088-8b61-7fe20f2efed4/1/tpqu8c6hny-Sb1cJYVRc_k7WmvY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/f01712-72bb-4088-8b61-7fe20f2efed4/1/tpqu8c6hny-Sb1cJYVRc_k7WmvY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:aa:e1:db:1e:2e:94:01:39:bd:9c:4a:17:cc:76:4b:8a:c3:
b7:5d:08:b6:f7:62:e4:72:b4:86:26:91:53:b1:3a:33:85:87:
40:56:55:aa:60:b5:6d:b8:72:0a:6a:64:78:6a:f1:54:36:1a:
0e:fe:9c:93:58:c8:72:35:d0:c3:9a:9c:66:5d:64:f6:26:f9:
af:e5:02:5c:10:d5:63:34:13:6b:6a:d5:2d:31:5a:17:e2:0c:
d6:a3:cb:9d:b7:ff:eb:f2:87:35:87:4e:9d:19:1f:19:2b:d1:
01:bf:d3:56:43:ff:c1:bf:75:21:5e:bd:bb:e0:3a:09:26:45:
6a:8f:e2:6b:8f:95:f7:40:30:57:1a:a2:23:8c:40:78:0a:21:
fc:29:67:aa:b4:73:99:6f:94:a9:1d:72:c8:84:d5:18:06:22:
5f:62:4e:89:d6:f4:d0:84:0e:27:2e:e1:62:44:67:20:18:db:
65:6e:fd:f2:90:95:c7:54:45:0c:3b:7d:d9:d0:c4:a0:4e:f2:
bf:3b:b9:25:84:6e:20:b0:25:42:fe:a4:d2:5c:87:26:2c:30:
61:85:e7:f3:bd:9f:a3:6f:82:b2:a6:f0:82:1d:9f:fe:0f:3e:
17:f7:d1:18:b0:67:57:7b:1d:76:e4:9e:d9:fc:ec:36:37:2f:
6b:d6:99:ee
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+iYJgI6G0eD7ou8QfbDvXhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI2OWFhZWYxY2VhMTlmMmY5MjZmNTcwOTYxNTQ1Y2ZlNGVk
NjlhZjYwHhcNMjYwNzI3MDcwMTA3WhcNMjYwNzI4MDcwMTA3WjAzMTEwLwYDVQQD
EyhhMDAyODNhZTVmMzY3ZWIyNzg0MGIzMWRkOWU3MmFkZjA5MmU1MDQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnTWEdwLUawTiZFrFSieEprW5Wb+2
qSGwdMAsm23T7Jxddkg3RU8ETRGbNHzV1ewRRA7b1G+TLvzOOt5GngE4T0Nhzvxv
3AaiPhxNEBYsBEdJ1u9X3/GzL2Q3wH4/DILkGdXMPNwGR052qEJNR5kUKEc/9arH
rweIvLr72pmIRAZexEsoRs67DNgyyQCKgue/lIly2efKpWJCY9V4HRZvZQ5yHzPP
QHJWfXe6gv6RGJ/J5y8lojnbjWAgJ3ASrBMxbK+7dfC5RsaLFgX3k5SekTzp2wiZ
3R5km1aqT/GcEtr6A5BOfx6HveHT8HgeKpNr02y/f9isql1BBDhGylSZeQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKACg65fNn6yeECzHdnnKt8JLlBGMB8GA1UdIwQY
MBaAFLaarvHOoZ8vkm9XCWFUXP5O1pr2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdHBxdThjNmhueS1TYjFjSllWUmNfazdXbXZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS9mMDE3MTItNzJiYi00MDg4LThiNjEt
N2ZlMjBmMmVmZWQ0LzEvdHBxdThjNmhueS1TYjFjSllWUmNfazdXbXZZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS9mMDE3MTItNzJiYi00MDg4LThiNjEtN2ZlMjBmMmVmZWQ0
LzEvdHBxdThjNmhueS1TYjFjSllWUmNfazdXbXZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArqrh2x4u
lAE5vZxKF8x2S4rDt10Itvdi5HK0hiaRU7E6M4WHQFZVqmC1bbhyCmpkeGrxVDYa
Dv6ck1jIcjXQw5qcZl1k9ib5r+UCXBDVYzQTa2rVLTFaF+IM1qPLnbf/6/KHNYdO
nRkfGSvRAb/TVkP/wb91IV69u+A6CSZFao/ia4+V90AwVxqiI4xAeAoh/ClnqrRz
mW+UqR1yyITVGAYiX2JOidb00IQOJy7hYkRnIBjbZW798pCVx1RFDDt92dDEoE7y
vzu5JYRuILAlQv6k0lyHJiwwYYXn872fo2+Csqbwgh2f/g8+F/fRGLBnV3sdduSe
2fzsNjcva9aZ7g==
-----END CERTIFICATE-----
Generated at Mon Jul 27 09:28:50 2026 by rpki-client