Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/722ccd-47c2-4b48-b957-bc5d3c91673b/1/TNP05Wf9VB5a8MnojRGpDT4h1Gc.mft
File: TNP05Wf9VB5a8MnojRGpDT4h1Gc.mft (raw, json)
Hash identifier: mKzF3ImJArvS5WIRek1PxtAw4T5R0BwsOok554Yl+9A=
Subject key identifier: 59:85:C5:C7:17:12:C4:BF:F1:54:A9:F6:DE:FF:7D:D1:5F:62:91:FA
Authority key identifier: 4C:D3:F4:E5:67:FD:54:1E:5A:F0:C9:E8:8D:11:A9:0D:3E:21:D4:67
Certificate issuer: /CN=4cd3f4e567fd541e5af0c9e88d11a90d3e21d467
Certificate serial: 019F419A2EA12EAE515C130320A9D105ACC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TNP05Wf9VB5a8MnojRGpDT4h1Gc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/722ccd-47c2-4b48-b957-bc5d3c91673b/1/TNP05Wf9VB5a8MnojRGpDT4h1Gc.mft
Manifest number: 018C
Signing time: Wed 08 Jul 2026 12:00:51 +0000
Manifest this update: Wed 08 Jul 2026 12:00:51 +0000
Manifest next update: Thu 09 Jul 2026 12:00:51 +0000
Files and hashes: 1: H1FxR3lsZeaaxaUL76X_AXEsmFw.roa (hash: Dx2fttv2xm/avvPL3cDG4ptacElYPtPXnn8b4aHQDDQ=)
2: TNP05Wf9VB5a8MnojRGpDT4h1Gc.crl (hash: FtwN1og/jt8XcyD5bam03VgZX/T21K99uhbhGCykU2c=)
3: nTO_7v382DQXa1KT96uc5_krM68.roa (hash: lvxYvuFUrUzZ06gSOq8z2zV5Teg8Jnnl+h1rg47zK30=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/722ccd-47c2-4b48-b957-bc5d3c91673b/1/TNP05Wf9VB5a8MnojRGpDT4h1Gc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/722ccd-47c2-4b48-b957-bc5d3c91673b/1/TNP05Wf9VB5a8MnojRGpDT4h1Gc.mft
rsync://rpki.ripe.net/repository/DEFAULT/TNP05Wf9VB5a8MnojRGpDT4h1Gc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Jul 2026 12:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:41:9a:2e:a1:2e:ae:51:5c:13:03:20:a9:d1:05:ac:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cd3f4e567fd541e5af0c9e88d11a90d3e21d467
Validity
Not Before: Jul 8 12:00:51 2026 GMT
Not After : Jul 9 12:00:51 2026 GMT
Subject: CN=5985c5c71712c4bff154a9f6deff7dd15f6291fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:cc:3a:3c:14:0b:fe:17:34:73:13:ab:55:eb:
c3:8d:8f:e2:db:2f:28:76:d1:29:f9:23:96:f4:a6:
35:8e:0b:86:07:2d:2d:70:d3:67:af:ac:6e:30:80:
f3:80:12:52:63:3c:3d:06:ff:2f:d9:a0:c7:34:d1:
39:de:bf:8a:3c:e9:69:d9:de:0a:c0:d1:32:84:f7:
ab:3f:2f:bd:83:e7:2e:05:a5:47:2f:98:b2:ee:97:
c6:a8:b0:1b:64:6b:26:34:31:a4:bc:24:5f:cf:ae:
9f:6c:a3:a2:a0:60:cc:87:59:35:25:99:c3:fc:06:
3d:f9:7c:39:4d:33:3a:b2:2c:b9:b4:25:c6:9a:26:
5b:37:1a:09:9d:d4:98:b3:e3:13:a4:01:28:b0:46:
d3:fa:36:e6:51:af:6f:69:ef:65:f7:44:65:20:9f:
8d:44:7b:aa:60:f7:55:f8:21:70:d3:8e:82:7a:b0:
7a:2d:08:af:76:04:7a:a3:bf:f6:d7:17:3f:0f:40:
e1:33:3c:fd:ab:4c:12:6f:9f:01:b4:ad:86:29:07:
f2:1a:f8:22:5c:d0:16:b9:ab:d3:79:a5:60:bb:c7:
cc:d3:b0:71:fd:1d:fa:d1:dd:1b:81:fd:2c:f7:97:
c9:19:b2:8d:27:85:ef:81:b1:6b:9e:63:d0:72:b1:
57:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:85:C5:C7:17:12:C4:BF:F1:54:A9:F6:DE:FF:7D:D1:5F:62:91:FA
X509v3 Authority Key Identifier:
keyid:4C:D3:F4:E5:67:FD:54:1E:5A:F0:C9:E8:8D:11:A9:0D:3E:21:D4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TNP05Wf9VB5a8MnojRGpDT4h1Gc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/722ccd-47c2-4b48-b957-bc5d3c91673b/1/TNP05Wf9VB5a8MnojRGpDT4h1Gc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/722ccd-47c2-4b48-b957-bc5d3c91673b/1/TNP05Wf9VB5a8MnojRGpDT4h1Gc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:39:36:5a:0e:bb:f5:da:aa:39:e3:e8:5c:74:e2:d2:20:a4:
9f:88:dd:27:a2:b3:0d:ee:66:15:b6:b7:99:6a:9d:56:60:ba:
ca:53:41:97:a5:62:09:57:4d:0f:66:0c:b1:0f:00:9b:8d:a1:
6a:ab:67:27:bb:05:ca:f3:70:5d:33:0f:4d:c8:25:78:55:cb:
76:99:c8:f7:e1:38:7a:9b:8f:4e:54:54:1e:fd:52:9b:86:78:
52:9d:c3:7a:ac:39:93:ac:ea:06:0b:97:ce:2f:5d:e3:58:09:
54:fb:ec:cc:17:71:3c:08:59:fe:8f:f2:01:49:78:4e:ce:71:
e3:c9:24:40:7b:8f:90:e8:ba:ff:b6:8c:5f:5f:a1:c2:12:c0:
66:dd:20:75:52:11:85:2d:1f:b4:e3:c4:77:8b:d9:4e:86:f5:
b0:dd:f1:7d:e3:a2:a7:50:4e:c4:df:52:83:1f:55:af:b7:a5:
20:01:60:12:3a:28:26:86:c7:ec:a6:49:1a:d7:6a:f5:7b:4d:
3e:86:05:5b:00:e7:45:89:cc:59:2c:1a:1a:06:15:d0:8b:d8:
6c:f3:42:24:e8:cc:a5:8f:4c:c9:ee:20:ee:14:de:35:43:bc:
7f:11:90:a9:94:a0:4a:58:31:63:0f:c4:1a:e3:a1:7f:48:3a:
76:ac:25:05
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ9Bmi6hLq5RXBMDIKnRBazFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjZDNmNGU1NjdmZDU0MWU1YWYwYzllODhkMTFhOTBkM2Uy
MWQ0NjcwHhcNMjYwNzA4MTIwMDUxWhcNMjYwNzA5MTIwMDUxWjAzMTEwLwYDVQQD
Eyg1OTg1YzVjNzE3MTJjNGJmZjE1NGE5ZjZkZWZmN2RkMTVmNjI5MWZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz8w6PBQL/hc0cxOrVevDjY/i2y8o
dtEp+SOW9KY1jguGBy0tcNNnr6xuMIDzgBJSYzw9Bv8v2aDHNNE53r+KPOlp2d4K
wNEyhPerPy+9g+cuBaVHL5iy7pfGqLAbZGsmNDGkvCRfz66fbKOioGDMh1k1JZnD
/AY9+Xw5TTM6siy5tCXGmiZbNxoJndSYs+MTpAEosEbT+jbmUa9vae9l90RlIJ+N
RHuqYPdV+CFw046CerB6LQivdgR6o7/21xc/D0DhMzz9q0wSb58BtK2GKQfyGvgi
XNAWuavTeaVgu8fM07Bx/R360d0bgf0s95fJGbKNJ4XvgbFrnmPQcrFXWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFmFxccXEsS/8VSp9t7/fdFfYpH6MB8GA1UdIwQY
MBaAFEzT9OVn/VQeWvDJ6I0RqQ0+IdRnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVE5QMDVXZjlWQjVhOE1ub2pSR3BEVDRoMUdjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS83MjJjY2QtNDdjMi00YjQ4LWI5NTct
YmM1ZDNjOTE2NzNiLzEvVE5QMDVXZjlWQjVhOE1ub2pSR3BEVDRoMUdjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNS83MjJjY2QtNDdjMi00YjQ4LWI5NTctYmM1ZDNjOTE2NzNi
LzEvVE5QMDVXZjlWQjVhOE1ub2pSR3BEVDRoMUdjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASTk2Wg67
9dqqOePoXHTi0iCkn4jdJ6KzDe5mFba3mWqdVmC6ylNBl6ViCVdND2YMsQ8Am42h
aqtnJ7sFyvNwXTMPTcgleFXLdpnI9+E4epuPTlRUHv1Sm4Z4Up3Deqw5k6zqBguX
zi9d41gJVPvszBdxPAhZ/o/yAUl4Ts5x48kkQHuPkOi6/7aMX1+hwhLAZt0gdVIR
hS0ftOPEd4vZTob1sN3xfeOip1BOxN9Sgx9Vr7elIAFgEjooJobH7KZJGtdq9XtN
PoYFWwDnRYnMWSwaGgYV0IvYbPNCJOjMpY9Mye4g7hTeNUO8fxGQqZSgSlgxYw/E
GuOhf0g6dqwlBQ==
-----END CERTIFICATE-----
Generated at Wed Jul 8 16:46:27 2026 by rpki-client