Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/ccf3a5-030d-4b54-8079-8a5f169a5ae7/1/TzVzzX1WHNN-DzMfbKON6SAgQrI.mft
File: TzVzzX1WHNN-DzMfbKON6SAgQrI.mft (raw, json)
Hash identifier: 9aCVx2TJObQHBsX5nwpkoJEGl2U6Ad935fdDaczZiSY=
Subject key identifier: BD:F6:B8:82:0E:F8:0C:12:99:F8:FF:6D:4C:02:B6:9C:2A:B0:F2:DE
Authority key identifier: 4F:35:73:CD:7D:56:1C:D3:7E:0F:33:1F:6C:A3:8D:E9:20:20:42:B2
Certificate issuer: /CN=4f3573cd7d561cd37e0f331f6ca38de9202042b2
Certificate serial: 019F85D663A1AF71C6C05BA5A86C65BB018C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TzVzzX1WHNN-DzMfbKON6SAgQrI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/ccf3a5-030d-4b54-8079-8a5f169a5ae7/1/TzVzzX1WHNN-DzMfbKON6SAgQrI.mft
Manifest number: 0ED7
Signing time: Tue 21 Jul 2026 18:00:47 +0000
Manifest this update: Tue 21 Jul 2026 18:00:47 +0000
Manifest next update: Wed 22 Jul 2026 18:00:47 +0000
Files and hashes: 1: 64yTSgcbmjpKAYlvmgIcfumrEFE.roa (hash: 55p0izKTNl/c/EZ7S9t+Y7oaqYI6l5T9RwPtRmB8IuY=)
2: TzVzzX1WHNN-DzMfbKON6SAgQrI.crl (hash: cmPnS8iFwzVMEnV81imryoydESgiv9wL3PdmmeSDokY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/ccf3a5-030d-4b54-8079-8a5f169a5ae7/1/TzVzzX1WHNN-DzMfbKON6SAgQrI.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/ccf3a5-030d-4b54-8079-8a5f169a5ae7/1/TzVzzX1WHNN-DzMfbKON6SAgQrI.mft
rsync://rpki.ripe.net/repository/DEFAULT/TzVzzX1WHNN-DzMfbKON6SAgQrI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:85:d6:63:a1:af:71:c6:c0:5b:a5:a8:6c:65:bb:01:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f3573cd7d561cd37e0f331f6ca38de9202042b2
Validity
Not Before: Jul 21 18:00:47 2026 GMT
Not After : Jul 22 18:00:47 2026 GMT
Subject: CN=bdf6b8820ef80c1299f8ff6d4c02b69c2ab0f2de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:61:f4:8f:78:bb:8d:4d:ab:0f:8e:94:38:14:
c9:ce:83:31:47:87:1c:ce:7c:9f:36:a0:46:2d:01:
a1:a3:bc:61:09:37:8b:70:19:de:ae:27:ac:e0:70:
8e:e4:a2:dd:7c:31:4f:1c:e5:c6:ca:24:57:b7:f4:
06:e0:1d:bf:f3:e3:c2:52:e6:29:f4:14:a0:45:98:
ed:16:da:70:ad:85:1c:97:d2:7c:f2:a6:3f:68:d5:
84:40:b3:64:e2:de:58:1b:12:ba:d4:e3:4c:0e:dd:
b4:37:44:32:8a:94:36:c5:04:71:a9:88:47:49:23:
80:9b:90:e8:f9:48:49:e7:81:95:71:b1:5d:14:87:
73:5d:81:5c:ad:5a:01:73:e7:90:c2:60:4f:61:31:
a1:52:ef:cc:0c:20:8c:56:1d:3d:5d:05:1f:e5:3f:
5c:91:21:c1:de:60:e3:71:17:9c:2e:fa:ca:ab:86:
3a:2b:66:8c:9b:99:e6:43:57:13:fa:b9:10:c9:aa:
a2:86:14:10:d7:43:44:b8:82:1f:db:49:ae:7a:cc:
0c:7b:58:a0:fa:26:08:f5:a9:dd:39:7d:6e:d4:8d:
d5:fc:af:5b:ad:66:4a:47:20:f1:db:16:db:0d:0d:
37:7a:4a:19:41:c9:d9:56:83:77:97:d1:1d:46:cc:
3e:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:F6:B8:82:0E:F8:0C:12:99:F8:FF:6D:4C:02:B6:9C:2A:B0:F2:DE
X509v3 Authority Key Identifier:
keyid:4F:35:73:CD:7D:56:1C:D3:7E:0F:33:1F:6C:A3:8D:E9:20:20:42:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TzVzzX1WHNN-DzMfbKON6SAgQrI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/ccf3a5-030d-4b54-8079-8a5f169a5ae7/1/TzVzzX1WHNN-DzMfbKON6SAgQrI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/ccf3a5-030d-4b54-8079-8a5f169a5ae7/1/TzVzzX1WHNN-DzMfbKON6SAgQrI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:08:e2:bd:b5:c2:51:bc:86:52:4e:5c:b9:fa:d5:95:2f:00:
3f:24:d5:74:0f:e6:b4:4b:f5:82:02:99:df:1d:05:00:5e:0b:
c5:a1:b7:58:b1:8c:83:50:dc:dc:30:a6:04:ac:e5:76:74:83:
d5:01:06:da:bb:b3:da:5c:58:5d:35:2b:5c:e9:90:d0:22:53:
08:2d:df:b9:01:b7:5c:f1:31:81:63:dc:22:79:21:07:e4:c0:
63:31:70:33:ed:0c:8f:44:ce:03:48:f2:65:ff:1e:2b:02:17:
e2:9d:3a:9d:d0:93:3f:6c:d7:98:63:88:54:9a:f2:39:a3:ec:
b9:cf:90:cb:67:95:23:48:f2:40:af:fe:03:8c:a1:c1:5e:60:
e3:30:25:f3:9e:d4:02:d4:91:69:f9:d3:8e:b6:0e:11:77:ee:
55:d0:83:c6:70:53:91:d9:a4:ad:38:dc:4f:0e:cd:b1:5b:5b:
9b:e5:74:2b:52:5b:72:2e:9d:68:9e:07:0c:76:99:4f:a9:ae:
0f:48:b1:f9:96:b1:76:6d:80:5e:c9:e2:ba:e6:85:25:77:48:
f8:ae:78:9c:18:97:42:b1:d2:08:e1:37:cc:c6:6a:78:e2:85:
bf:b2:51:bc:6d:16:cd:7a:66:0d:9a:0f:0e:d6:9b:6f:45:e9:
f8:89:68:b1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+F1mOhr3HGwFulqGxluwGMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMzU3M2NkN2Q1NjFjZDM3ZTBmMzMxZjZjYTM4ZGU5MjAy
MDQyYjIwHhcNMjYwNzIxMTgwMDQ3WhcNMjYwNzIyMTgwMDQ3WjAzMTEwLwYDVQQD
EyhiZGY2Yjg4MjBlZjgwYzEyOTlmOGZmNmQ0YzAyYjY5YzJhYjBmMmRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyWH0j3i7jU2rD46UOBTJzoMxR4cc
znyfNqBGLQGho7xhCTeLcBneries4HCO5KLdfDFPHOXGyiRXt/QG4B2/8+PCUuYp
9BSgRZjtFtpwrYUcl9J88qY/aNWEQLNk4t5YGxK61ONMDt20N0QyipQ2xQRxqYhH
SSOAm5Do+UhJ54GVcbFdFIdzXYFcrVoBc+eQwmBPYTGhUu/MDCCMVh09XQUf5T9c
kSHB3mDjcRecLvrKq4Y6K2aMm5nmQ1cT+rkQyaqihhQQ10NEuIIf20mueswMe1ig
+iYI9andOX1u1I3V/K9brWZKRyDx2xbbDQ03ekoZQcnZVoN3l9EdRsw+UwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL32uIIO+AwSmfj/bUwCtpwqsPLeMB8GA1UdIwQY
MBaAFE81c819VhzTfg8zH2yjjekgIEKyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHpWenpYMVdITk4tRHpNZmJLT042U0FnUXJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi9jY2YzYTUtMDMwZC00YjU0LTgwNzkt
OGE1ZjE2OWE1YWU3LzEvVHpWenpYMVdITk4tRHpNZmJLT042U0FnUXJJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Zi9jY2YzYTUtMDMwZC00YjU0LTgwNzktOGE1ZjE2OWE1YWU3
LzEvVHpWenpYMVdITk4tRHpNZmJLT042U0FnUXJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlgjivbXC
UbyGUk5cufrVlS8APyTVdA/mtEv1ggKZ3x0FAF4LxaG3WLGMg1Dc3DCmBKzldnSD
1QEG2ruz2lxYXTUrXOmQ0CJTCC3fuQG3XPExgWPcInkhB+TAYzFwM+0Mj0TOA0jy
Zf8eKwIX4p06ndCTP2zXmGOIVJryOaPsuc+Qy2eVI0jyQK/+A4yhwV5g4zAl857U
AtSRafnTjrYOEXfuVdCDxnBTkdmkrTjcTw7NsVtbm+V0K1Jbci6daJ4HDHaZT6mu
D0ix+Zaxdm2AXsniuuaFJXdI+K54nBiXQrHSCOE3zMZqeOKFv7JRvG0WzXpmDZoP
Dtabb0Xp+IlosQ==
-----END CERTIFICATE-----
Generated at Tue Jul 21 23:06:58 2026 by rpki-client