Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/c13e12-e50d-4338-8a2f-fffb5a4e762a/1/TZujR0bUSxP2nFOtEl3apkifV5U.mft
File: TZujR0bUSxP2nFOtEl3apkifV5U.mft (raw, json)
Hash identifier: LncrzHTnc36Z4dO+j2yOfPDmgYPrqQv7Oto2avg45w8=
Subject key identifier: 79:02:3B:AD:8B:51:8E:CD:C3:84:F3:1B:03:15:2F:73:83:63:0D:E1
Authority key identifier: 4D:9B:A3:47:46:D4:4B:13:F6:9C:53:AD:12:5D:DA:A6:48:9F:57:95
Certificate issuer: /CN=4d9ba34746d44b13f69c53ad125ddaa6489f5795
Certificate serial: 019F81F953B9484F79DD0D568F98A1CA8EA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TZujR0bUSxP2nFOtEl3apkifV5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/c13e12-e50d-4338-8a2f-fffb5a4e762a/1/TZujR0bUSxP2nFOtEl3apkifV5U.mft
Manifest number: 38
Signing time: Tue 21 Jul 2026 00:00:28 +0000
Manifest this update: Tue 21 Jul 2026 00:00:28 +0000
Manifest next update: Wed 22 Jul 2026 00:00:28 +0000
Files and hashes: 1: DaA_4Jlo0vCjiqyQ9Zy7aoC9TDs.roa (hash: xtXG2aAxB/H8VWm8zgz3IAcnfc0DerNKgS8NAIUzC58=)
2: TZujR0bUSxP2nFOtEl3apkifV5U.crl (hash: cqJdHiQPiEkrE6lgHKqw3/Ny8CqTrkgv7FJAWY8to2w=)
3: pYetnom_wA_ScRV12GudzaQxL8Q.roa (hash: mTXvpDjqAr8VlbSF6rMZfNW8ZydFcM0VEr1K9O3/BqU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/c13e12-e50d-4338-8a2f-fffb5a4e762a/1/TZujR0bUSxP2nFOtEl3apkifV5U.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/c13e12-e50d-4338-8a2f-fffb5a4e762a/1/TZujR0bUSxP2nFOtEl3apkifV5U.mft
rsync://rpki.ripe.net/repository/DEFAULT/TZujR0bUSxP2nFOtEl3apkifV5U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 00:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:81:f9:53:b9:48:4f:79:dd:0d:56:8f:98:a1:ca:8e:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d9ba34746d44b13f69c53ad125ddaa6489f5795
Validity
Not Before: Jul 21 00:00:28 2026 GMT
Not After : Jul 22 00:00:28 2026 GMT
Subject: CN=79023bad8b518ecdc384f31b03152f7383630de1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:d5:b7:38:b8:6d:3b:f0:8f:d2:fb:65:e5:e0:
7d:36:9f:29:79:21:47:33:48:6b:97:7d:b3:37:c3:
61:41:68:a9:14:0f:bf:52:e6:52:6e:0b:91:99:88:
a6:09:7b:8d:8b:18:ed:49:3e:9e:0e:c2:45:f1:29:
ff:5f:59:f2:25:8d:22:21:54:ab:c1:3b:a9:14:f8:
99:67:86:24:4a:be:09:9c:3b:09:58:89:44:80:44:
22:43:09:41:65:4a:e6:77:3d:ba:fa:17:4b:80:29:
0d:85:d1:8f:19:49:42:18:4c:ee:76:55:5a:60:38:
16:12:9a:c1:83:ca:53:af:50:09:9a:ae:02:7d:89:
83:d3:e2:d6:b7:16:3b:90:7a:26:12:f6:6b:2d:12:
6d:2a:86:43:77:5f:b1:37:39:d8:00:bb:d1:87:d5:
a3:36:0d:ff:ce:d3:3e:05:37:a8:e3:15:90:c9:eb:
d7:bb:50:cc:e1:9e:65:7d:cd:99:d4:2b:94:f0:4e:
6d:5d:31:f3:ba:40:8b:94:c7:92:9a:37:f0:59:86:
b7:0f:7f:0d:9c:dc:d9:d5:d2:b1:89:60:75:17:22:
75:bc:bf:78:79:03:7f:55:27:ea:88:40:06:a6:eb:
2e:c3:75:f5:00:5b:9b:43:cb:26:6b:49:56:09:8a:
16:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:02:3B:AD:8B:51:8E:CD:C3:84:F3:1B:03:15:2F:73:83:63:0D:E1
X509v3 Authority Key Identifier:
keyid:4D:9B:A3:47:46:D4:4B:13:F6:9C:53:AD:12:5D:DA:A6:48:9F:57:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TZujR0bUSxP2nFOtEl3apkifV5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/c13e12-e50d-4338-8a2f-fffb5a4e762a/1/TZujR0bUSxP2nFOtEl3apkifV5U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/c13e12-e50d-4338-8a2f-fffb5a4e762a/1/TZujR0bUSxP2nFOtEl3apkifV5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:51:36:ac:39:61:c7:3b:5e:ab:ad:1e:20:3d:71:7e:78:da:
46:8c:dc:a2:f5:f1:23:cc:1b:a7:0c:8a:fd:3c:14:62:f2:9d:
02:24:f8:93:31:61:01:d5:76:2e:84:72:a1:07:91:fc:6b:bd:
73:ba:91:6c:96:1b:9e:84:86:79:ce:0a:1d:3d:69:be:3b:94:
2c:4e:e6:43:af:80:92:cc:25:c6:d8:94:03:3f:af:7b:b5:bb:
0d:60:da:ea:ca:0a:8f:96:c8:2c:2a:44:e9:de:63:f2:0c:5b:
20:de:ee:15:64:8b:40:37:a7:63:8d:74:cd:96:58:30:41:cf:
bd:46:c8:86:43:a8:e3:80:76:82:7b:05:40:fe:08:60:cb:47:
83:8b:2b:42:8a:c6:7a:14:2b:24:95:fe:97:0b:6a:6b:5b:19:
ed:b4:05:0c:99:ad:f3:d9:b5:69:4a:62:e9:f3:dd:59:f2:82:
02:8c:ac:53:8d:c2:25:f3:5c:cc:60:c3:c4:68:55:40:4e:34:
3d:b6:58:85:2b:a8:d9:97:37:df:54:32:11:b5:19:9c:4b:9e:
82:6c:cb:91:06:80:86:80:37:6d:6b:a2:48:0f:76:22:31:d8:
12:31:ab:68:25:da:de:67:8c:aa:0e:d1:cf:4c:d8:01:b7:39:
f0:47:f9:9b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+B+VO5SE953Q1Wj5ihyo6jMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRkOWJhMzQ3NDZkNDRiMTNmNjljNTNhZDEyNWRkYWE2NDg5
ZjU3OTUwHhcNMjYwNzIxMDAwMDI4WhcNMjYwNzIyMDAwMDI4WjAzMTEwLwYDVQQD
Eyg3OTAyM2JhZDhiNTE4ZWNkYzM4NGYzMWIwMzE1MmY3MzgzNjMwZGUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0dW3OLhtO/CP0vtl5eB9Np8peSFH
M0hrl32zN8NhQWipFA+/UuZSbguRmYimCXuNixjtST6eDsJF8Sn/X1nyJY0iIVSr
wTupFPiZZ4YkSr4JnDsJWIlEgEQiQwlBZUrmdz26+hdLgCkNhdGPGUlCGEzudlVa
YDgWEprBg8pTr1AJmq4CfYmD0+LWtxY7kHomEvZrLRJtKoZDd1+xNznYALvRh9Wj
Ng3/ztM+BTeo4xWQyevXu1DM4Z5lfc2Z1CuU8E5tXTHzukCLlMeSmjfwWYa3D38N
nNzZ1dKxiWB1FyJ1vL94eQN/VSfqiEAGpusuw3X1AFubQ8sma0lWCYoW/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHkCO62LUY7Nw4TzGwMVL3ODYw3hMB8GA1UdIwQY
MBaAFE2bo0dG1EsT9pxTrRJd2qZIn1eVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVFp1alIwYlVTeFAybkZPdEVsM2Fwa2lmVjVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9jMTNlMTItZTUwZC00MzM4LThhMmYt
ZmZmYjVhNGU3NjJhLzEvVFp1alIwYlVTeFAybkZPdEVsM2Fwa2lmVjVVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC9jMTNlMTItZTUwZC00MzM4LThhMmYtZmZmYjVhNGU3NjJh
LzEvVFp1alIwYlVTeFAybkZPdEVsM2Fwa2lmVjVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGlE2rDlh
xzteq60eID1xfnjaRozcovXxI8wbpwyK/TwUYvKdAiT4kzFhAdV2LoRyoQeR/Gu9
c7qRbJYbnoSGec4KHT1pvjuULE7mQ6+AkswlxtiUAz+ve7W7DWDa6soKj5bILCpE
6d5j8gxbIN7uFWSLQDenY410zZZYMEHPvUbIhkOo44B2gnsFQP4IYMtHg4srQorG
ehQrJJX+lwtqa1sZ7bQFDJmt89m1aUpi6fPdWfKCAoysU43CJfNczGDDxGhVQE40
PbZYhSuo2Zc331QyEbUZnEuegmzLkQaAhoA3bWuiSA92IjHYEjGraCXa3meMqg7R
z0zYAbc58Ef5mw==
-----END CERTIFICATE-----
Generated at Tue Jul 21 10:02:20 2026 by rpki-client