Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/813a44-bcb2-482c-ab3b-06c847006c86/1/tUnvhv60KbYHuyNz-Rb6VNJ5l1I.mft
File: tUnvhv60KbYHuyNz-Rb6VNJ5l1I.mft (raw, json)
Hash identifier: Wmo7Eykvn6sTpGY6kUeshwy3xtn1Omq+E9wBAyM9iwM=
Subject key identifier: 98:65:8E:C4:2B:8F:93:50:45:AF:42:20:80:F3:A8:81:04:60:36:1E
Authority key identifier: B5:49:EF:86:FE:B4:29:B6:07:BB:23:73:F9:16:FA:54:D2:79:97:52
Certificate issuer: /CN=b549ef86feb429b607bb2373f916fa54d2799752
Certificate serial: 019FA485CC334FA45599D2C74FB4EC84E2AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tUnvhv60KbYHuyNz-Rb6VNJ5l1I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/813a44-bcb2-482c-ab3b-06c847006c86/1/tUnvhv60KbYHuyNz-Rb6VNJ5l1I.mft
Manifest number: 0153
Signing time: Mon 27 Jul 2026 17:00:59 +0000
Manifest this update: Mon 27 Jul 2026 17:00:59 +0000
Manifest next update: Tue 28 Jul 2026 17:00:59 +0000
Files and hashes: 1: B_M_pSDYnQq_v2dspjpisJOp3eI.roa (hash: fnEBYCIgV363yh16vBQAS+8SDA4YNK4W+uJelnRAVc4=)
2: tUnvhv60KbYHuyNz-Rb6VNJ5l1I.crl (hash: dNksnnGcwhXpjL42sZZJ1e0nYT8iwdlfaPXLJ13qfck=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/813a44-bcb2-482c-ab3b-06c847006c86/1/tUnvhv60KbYHuyNz-Rb6VNJ5l1I.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/813a44-bcb2-482c-ab3b-06c847006c86/1/tUnvhv60KbYHuyNz-Rb6VNJ5l1I.mft
rsync://rpki.ripe.net/repository/DEFAULT/tUnvhv60KbYHuyNz-Rb6VNJ5l1I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 17:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a4:85:cc:33:4f:a4:55:99:d2:c7:4f:b4:ec:84:e2:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b549ef86feb429b607bb2373f916fa54d2799752
Validity
Not Before: Jul 27 17:00:59 2026 GMT
Not After : Jul 28 17:00:59 2026 GMT
Subject: CN=98658ec42b8f935045af422080f3a8810460361e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:b3:9a:89:88:81:30:00:7b:b9:02:da:81:b6:
1a:73:42:12:b0:8b:e7:ee:32:ec:34:9c:b3:ad:d7:
44:16:a4:36:91:9b:55:23:97:6c:93:91:52:5d:b4:
77:e7:f3:34:3a:f1:80:c7:a3:31:04:2d:ee:b3:4a:
68:7d:82:83:f6:b4:b7:16:99:82:7c:d0:27:aa:31:
0c:b6:8a:72:af:75:a0:bd:cc:4a:b8:0b:40:b9:57:
12:11:38:c4:96:1f:ba:57:34:c8:70:6d:0f:b0:e7:
0c:f5:12:d3:c6:4c:7a:44:8a:39:61:2b:fa:3f:2f:
22:88:0f:85:a0:c6:52:eb:1d:b9:d3:9f:66:1c:fb:
e0:22:e4:9f:db:62:cd:20:85:48:99:35:b6:a1:7f:
5a:46:0f:17:e7:71:26:8e:00:4f:e1:08:d0:53:ba:
c8:e3:81:66:73:a6:51:79:49:7e:d7:61:c2:ad:1a:
45:c0:d2:48:8e:97:50:b8:53:9b:36:69:b0:b4:83:
72:36:93:72:41:bb:46:17:90:0c:81:9f:3c:e1:58:
17:43:29:b0:93:ed:2b:41:cb:1e:76:ce:2f:c9:de:
0d:5f:97:82:dd:e2:d8:c3:7a:8c:51:61:f6:89:d0:
90:91:de:83:65:71:8f:c9:2f:bd:90:7c:44:00:65:
83:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:65:8E:C4:2B:8F:93:50:45:AF:42:20:80:F3:A8:81:04:60:36:1E
X509v3 Authority Key Identifier:
keyid:B5:49:EF:86:FE:B4:29:B6:07:BB:23:73:F9:16:FA:54:D2:79:97:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tUnvhv60KbYHuyNz-Rb6VNJ5l1I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/813a44-bcb2-482c-ab3b-06c847006c86/1/tUnvhv60KbYHuyNz-Rb6VNJ5l1I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/813a44-bcb2-482c-ab3b-06c847006c86/1/tUnvhv60KbYHuyNz-Rb6VNJ5l1I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:4c:ba:ad:64:14:7b:49:e1:47:92:51:f7:3c:e0:7f:a4:67:
25:d5:44:53:bc:72:cc:71:2c:ab:1e:fe:bd:71:0c:8c:85:d6:
d9:fe:af:e3:d2:f7:1b:ed:e3:72:92:92:9a:e9:b6:e9:bb:10:
e4:66:6a:eb:7a:ea:31:18:14:c6:4c:a5:14:55:09:99:70:d0:
d8:93:51:26:9d:37:47:a5:24:14:6d:44:be:cc:fd:3a:aa:16:
9e:af:71:af:08:15:c9:47:bc:60:79:f9:e4:2d:db:c9:7c:cc:
db:3c:5c:ff:09:24:bf:cb:53:65:28:60:f3:56:85:30:f4:24:
c2:26:04:96:07:7e:70:21:89:d2:e3:0c:93:8f:ed:dc:e9:2b:
c0:c3:60:03:7c:87:b8:60:73:91:96:c1:2a:4e:62:42:f7:71:
1e:f2:30:de:5a:3e:9b:f8:dc:df:3e:1a:78:35:3e:86:62:87:
01:ba:c3:b5:8a:5d:b9:37:7e:6c:35:c9:1b:61:3f:a8:26:1c:
6d:7f:5a:a5:eb:9b:a0:2e:f9:5b:52:65:b2:12:da:71:f5:27:
1c:b8:12:22:45:f1:c9:f2:e8:24:0a:c4:98:9b:ed:03:31:5e:
a2:9a:7b:12:8b:cc:31:db:12:ec:37:e4:91:c2:90:4f:b2:b1:
24:13:b9:12
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+khcwzT6RVmdLHT7TshOKuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1NDllZjg2ZmViNDI5YjYwN2JiMjM3M2Y5MTZmYTU0ZDI3
OTk3NTIwHhcNMjYwNzI3MTcwMDU5WhcNMjYwNzI4MTcwMDU5WjAzMTEwLwYDVQQD
Eyg5ODY1OGVjNDJiOGY5MzUwNDVhZjQyMjA4MGYzYTg4MTA0NjAzNjFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx7OaiYiBMAB7uQLagbYac0ISsIvn
7jLsNJyzrddEFqQ2kZtVI5dsk5FSXbR35/M0OvGAx6MxBC3us0pofYKD9rS3FpmC
fNAnqjEMtopyr3WgvcxKuAtAuVcSETjElh+6VzTIcG0PsOcM9RLTxkx6RIo5YSv6
Py8iiA+FoMZS6x25059mHPvgIuSf22LNIIVImTW2oX9aRg8X53EmjgBP4QjQU7rI
44Fmc6ZReUl+12HCrRpFwNJIjpdQuFObNmmwtINyNpNyQbtGF5AMgZ884VgXQymw
k+0rQcseds4vyd4NX5eC3eLYw3qMUWH2idCQkd6DZXGPyS+9kHxEAGWDGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJhljsQrj5NQRa9CIIDzqIEEYDYeMB8GA1UdIwQY
MBaAFLVJ74b+tCm2B7sjc/kW+lTSeZdSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFVudmh2NjBLYllIdXlOei1SYjZWTko1bDFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny84MTNhNDQtYmNiMi00ODJjLWFiM2It
MDZjODQ3MDA2Yzg2LzEvdFVudmh2NjBLYllIdXlOei1SYjZWTko1bDFJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ny84MTNhNDQtYmNiMi00ODJjLWFiM2ItMDZjODQ3MDA2Yzg2
LzEvdFVudmh2NjBLYllIdXlOei1SYjZWTko1bDFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqUy6rWQU
e0nhR5JR9zzgf6RnJdVEU7xyzHEsqx7+vXEMjIXW2f6v49L3G+3jcpKSmum26bsQ
5GZq63rqMRgUxkylFFUJmXDQ2JNRJp03R6UkFG1Evsz9OqoWnq9xrwgVyUe8YHn5
5C3byXzM2zxc/wkkv8tTZShg81aFMPQkwiYElgd+cCGJ0uMMk4/t3OkrwMNgA3yH
uGBzkZbBKk5iQvdxHvIw3lo+m/jc3z4aeDU+hmKHAbrDtYpduTd+bDXJG2E/qCYc
bX9apeuboC75W1JlshLacfUnHLgSIkXxyfLoJArEmJvtAzFeopp7EovMMdsS7Dfk
kcKQT7KxJBO5Eg==
-----END CERTIFICATE-----
Generated at Tue Jul 28 03:14:44 2026 by rpki-client