Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/df6e25-923c-4838-864f-d4b37e44ab7c/1/TDkFWmmQuCQIzxq_KTE3gOJJpMk.mft
File: TDkFWmmQuCQIzxq_KTE3gOJJpMk.mft (raw, json)
Hash identifier: VVtGkT4ZmGt44yq5KOpgwS6ofdmyCdu4rUcxMePZu2I=
Subject key identifier: D4:31:E5:94:5D:97:71:F8:D8:4D:F8:06:5C:E7:AB:66:69:3B:D2:09
Authority key identifier: 4C:39:05:5A:69:90:B8:24:08:CF:1A:BF:29:31:37:80:E2:49:A4:C9
Certificate issuer: /CN=4c39055a6990b82408cf1abf29313780e249a4c9
Certificate serial: 019FA1BB999C087ACBFC45BAFA5D39A36822
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TDkFWmmQuCQIzxq_KTE3gOJJpMk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/df6e25-923c-4838-864f-d4b37e44ab7c/1/TDkFWmmQuCQIzxq_KTE3gOJJpMk.mft
Manifest number: 1539
Signing time: Mon 27 Jul 2026 04:00:54 +0000
Manifest this update: Mon 27 Jul 2026 04:00:54 +0000
Manifest next update: Tue 28 Jul 2026 04:00:54 +0000
Files and hashes: 1: 0cFklTq5mcU3EaGFeQ9ahLNCFS0.roa (hash: IjEBs0Y3nrFmZdto8V+GvCaLtfCze3iFGsvEQJ0wMpA=)
2: TDkFWmmQuCQIzxq_KTE3gOJJpMk.crl (hash: LhDtda+81suGl4gURO3oA2beZdCzV62Pgz+FvavBj9Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/df6e25-923c-4838-864f-d4b37e44ab7c/1/TDkFWmmQuCQIzxq_KTE3gOJJpMk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/df6e25-923c-4838-864f-d4b37e44ab7c/1/TDkFWmmQuCQIzxq_KTE3gOJJpMk.mft
rsync://rpki.ripe.net/repository/DEFAULT/TDkFWmmQuCQIzxq_KTE3gOJJpMk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 04:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:bb:99:9c:08:7a:cb:fc:45:ba:fa:5d:39:a3:68:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c39055a6990b82408cf1abf29313780e249a4c9
Validity
Not Before: Jul 27 04:00:54 2026 GMT
Not After : Jul 28 04:00:54 2026 GMT
Subject: CN=d431e5945d9771f8d84df8065ce7ab66693bd209
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:00:a1:e7:37:5c:9a:cd:41:96:a1:fa:fc:5e:
6e:84:9a:55:a8:79:2d:0c:2c:7f:c5:b8:f3:f9:e6:
67:c1:1b:93:d2:b3:14:77:26:d9:62:b0:d9:18:a1:
7a:ba:ee:4e:c8:85:2a:81:c4:11:04:2c:5e:8e:93:
66:c4:17:8c:dc:ef:6a:c5:b7:da:36:e9:c3:fd:c8:
76:47:5a:19:dc:71:91:ce:8c:1d:84:21:a3:9d:34:
65:d3:ad:ce:c9:18:53:b5:a5:44:dd:c3:58:14:3c:
f8:f8:3c:42:8d:ef:53:20:0a:c9:19:c7:63:98:cf:
b3:f3:96:cd:85:c5:9a:6b:21:74:c3:0a:1f:ca:d2:
09:94:37:2c:3c:23:7a:32:16:96:b0:6f:8c:c8:61:
90:c4:b7:70:ad:38:82:f1:56:67:6f:21:8b:5d:67:
93:a9:6e:a1:81:55:af:da:eb:02:59:0c:7c:de:a2:
55:5c:94:a6:99:43:c2:49:fd:a9:80:13:57:39:f5:
90:ed:9e:39:d2:b3:16:28:88:17:2e:5e:4b:4c:c9:
cd:c0:65:e8:d5:32:5d:4f:e7:60:92:a8:55:e0:e3:
4f:9b:7e:42:8a:e2:7d:07:fc:b4:4f:cd:56:bb:f9:
3e:fb:0d:4b:3f:d3:3d:d4:ae:43:cc:ac:41:69:a6:
f1:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:31:E5:94:5D:97:71:F8:D8:4D:F8:06:5C:E7:AB:66:69:3B:D2:09
X509v3 Authority Key Identifier:
keyid:4C:39:05:5A:69:90:B8:24:08:CF:1A:BF:29:31:37:80:E2:49:A4:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TDkFWmmQuCQIzxq_KTE3gOJJpMk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/df6e25-923c-4838-864f-d4b37e44ab7c/1/TDkFWmmQuCQIzxq_KTE3gOJJpMk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/df6e25-923c-4838-864f-d4b37e44ab7c/1/TDkFWmmQuCQIzxq_KTE3gOJJpMk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:48:77:f9:d5:79:e8:09:59:69:96:86:13:2b:6c:10:a9:65:
90:70:9f:e5:bb:be:55:ae:ff:b4:69:28:87:08:e8:b7:e2:50:
20:ec:a8:1c:34:b1:97:bb:27:c9:04:3e:af:2b:46:3e:e8:eb:
a5:62:03:47:3c:f1:5f:4b:4e:00:38:f0:7b:c4:0f:0c:fa:24:
a9:87:60:5e:43:f8:e0:f7:d2:26:22:38:70:ab:c1:3e:38:51:
a7:be:c5:78:4c:84:a3:b7:7f:8f:38:98:a8:09:db:2f:be:47:
d1:6c:87:2e:28:3e:30:a1:a9:0e:b7:09:ee:73:ff:80:0b:bc:
c1:02:df:2b:b2:d3:fa:d8:82:ac:4b:e9:a0:6f:31:2b:7f:1e:
ec:17:71:d6:50:72:44:bb:6c:03:03:cf:65:54:72:a6:08:14:
ae:fe:ab:3d:e7:c9:4e:b4:1e:65:d5:8f:ea:00:1f:06:bc:c6:
32:3a:33:99:50:5d:fa:88:d8:61:90:7f:47:89:6e:8c:51:79:
f2:92:2e:d4:28:6d:2f:40:33:24:13:c9:0e:82:c9:84:28:0d:
68:48:23:fc:c3:bb:ec:26:bb:a3:f8:9f:9e:13:1a:f9:42:a0:
89:2b:e4:9a:19:f6:60:63:d4:4e:7f:6e:f6:f0:97:c2:5c:0e:
ca:db:26:e5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+hu5mcCHrL/EW6+l05o2giMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjMzkwNTVhNjk5MGI4MjQwOGNmMWFiZjI5MzEzNzgwZTI0
OWE0YzkwHhcNMjYwNzI3MDQwMDU0WhcNMjYwNzI4MDQwMDU0WjAzMTEwLwYDVQQD
EyhkNDMxZTU5NDVkOTc3MWY4ZDg0ZGY4MDY1Y2U3YWI2NjY5M2JkMjA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6QCh5zdcms1BlqH6/F5uhJpVqHkt
DCx/xbjz+eZnwRuT0rMUdybZYrDZGKF6uu5OyIUqgcQRBCxejpNmxBeM3O9qxbfa
NunD/ch2R1oZ3HGRzowdhCGjnTRl063OyRhTtaVE3cNYFDz4+DxCje9TIArJGcdj
mM+z85bNhcWaayF0wwofytIJlDcsPCN6MhaWsG+MyGGQxLdwrTiC8VZnbyGLXWeT
qW6hgVWv2usCWQx83qJVXJSmmUPCSf2pgBNXOfWQ7Z450rMWKIgXLl5LTMnNwGXo
1TJdT+dgkqhV4ONPm35CiuJ9B/y0T81Wu/k++w1LP9M91K5DzKxBaabxgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNQx5ZRdl3H42E34Blznq2ZpO9IJMB8GA1UdIwQY
MBaAFEw5BVppkLgkCM8avykxN4DiSaTJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVERrRldtbVF1Q1FJenhxX0tURTNnT0pKcE1rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy9kZjZlMjUtOTIzYy00ODM4LTg2NGYt
ZDRiMzdlNDRhYjdjLzEvVERrRldtbVF1Q1FJenhxX0tURTNnT0pKcE1rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy9kZjZlMjUtOTIzYy00ODM4LTg2NGYtZDRiMzdlNDRhYjdj
LzEvVERrRldtbVF1Q1FJenhxX0tURTNnT0pKcE1rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd0h3+dV5
6AlZaZaGEytsEKllkHCf5bu+Va7/tGkohwjot+JQIOyoHDSxl7snyQQ+rytGPujr
pWIDRzzxX0tOADjwe8QPDPokqYdgXkP44PfSJiI4cKvBPjhRp77FeEyEo7d/jziY
qAnbL75H0WyHLig+MKGpDrcJ7nP/gAu8wQLfK7LT+tiCrEvpoG8xK38e7Bdx1lBy
RLtsAwPPZVRypggUrv6rPefJTrQeZdWP6gAfBrzGMjozmVBd+ojYYZB/R4lujFF5
8pIu1ChtL0AzJBPJDoLJhCgNaEgj/MO77Ca7o/ifnhMa+UKgiSvkmhn2YGPUTn9u
9vCXwlwOytsm5Q==
-----END CERTIFICATE-----
Generated at Mon Jul 27 11:12:17 2026 by rpki-client