Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ea/ba784d-746e-49e7-a408-4abaf53a50af/1/tczdiD9t0RTs9vcnFqhGNPZ6yXc.mft
File: tczdiD9t0RTs9vcnFqhGNPZ6yXc.mft (raw, json)
Hash identifier: FJHoaPJhSGLk7ZMK8acO+w3FdqK+hSCaMI2v9XHE0oI=
Subject key identifier: 2C:05:C6:95:75:E8:FA:CE:84:D8:D2:79:61:1D:51:E0:51:39:4B:15
Authority key identifier: B5:CC:DD:88:3F:6D:D1:14:EC:F6:F7:27:16:A8:46:34:F6:7A:C9:77
Certificate issuer: /CN=b5ccdd883f6dd114ecf6f72716a84634f67ac977
Certificate serial: 01A0423C29F158CDAB7DE0DA3C783D26E63E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tczdiD9t0RTs9vcnFqhGNPZ6yXc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/ba784d-746e-49e7-a408-4abaf53a50af/1/tczdiD9t0RTs9vcnFqhGNPZ6yXc.mft
Manifest number: 1053
Signing time: Thu 27 Aug 2026 08:00:34 +0000
Manifest this update: Thu 27 Aug 2026 08:00:34 +0000
Manifest next update: Fri 28 Aug 2026 08:00:34 +0000
Files and hashes: 1: dIqmIrGGl8FI-sOwGOw90e9FkJY.roa (hash: ux/S4urJBgHoaCGluZkTkGPr6Fq78RqIkr3zENS3Pqk=)
2: tczdiD9t0RTs9vcnFqhGNPZ6yXc.crl (hash: 0zghCMR6NaJRjgt16FLlKycog1uRsiGmuKqO/XjwlTQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/ba784d-746e-49e7-a408-4abaf53a50af/1/tczdiD9t0RTs9vcnFqhGNPZ6yXc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/ba784d-746e-49e7-a408-4abaf53a50af/1/tczdiD9t0RTs9vcnFqhGNPZ6yXc.mft
rsync://rpki.ripe.net/repository/DEFAULT/tczdiD9t0RTs9vcnFqhGNPZ6yXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 28 Aug 2026 08:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:42:3c:29:f1:58:cd:ab:7d:e0:da:3c:78:3d:26:e6:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5ccdd883f6dd114ecf6f72716a84634f67ac977
Validity
Not Before: Aug 27 08:00:34 2026 GMT
Not After : Aug 28 08:00:34 2026 GMT
Subject: CN=2c05c69575e8face84d8d279611d51e051394b15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:8b:10:0b:4c:55:91:e1:4c:d9:6c:08:02:b2:
9e:af:8f:a3:64:e2:79:fd:79:75:3e:7c:c0:75:f4:
c1:84:f1:c8:b0:78:0c:a9:e5:16:3f:93:af:48:47:
73:e7:a3:b3:83:6e:45:f7:5e:45:b0:33:6b:50:06:
39:30:cb:7c:98:57:48:d9:c9:d5:6a:7a:19:40:34:
32:cb:07:e2:67:54:6c:6f:dd:11:3d:f1:78:1d:e9:
15:a6:3f:48:a0:1b:5a:63:74:3f:7d:16:f8:59:3a:
83:2f:13:fc:ac:44:f1:62:c9:71:32:6c:35:a7:e2:
a8:d3:f1:1d:4e:a0:07:96:39:33:9b:84:6f:5b:e5:
84:4d:fd:29:80:d4:18:e1:8f:47:16:ea:4c:bd:b8:
1f:07:61:70:ac:0b:d8:67:57:73:ef:7d:9a:7c:91:
a0:3e:5d:90:f7:06:19:be:41:ac:22:29:0e:a6:2b:
ae:ce:26:48:78:21:ba:e4:d3:01:67:73:f2:c9:22:
a1:2e:b9:4b:93:ae:a9:d4:a0:5a:75:3a:cb:b5:cc:
b5:62:ed:48:07:7d:73:26:32:28:9e:8a:8b:b3:bb:
75:7c:54:22:61:ae:48:39:c6:7d:53:88:36:fb:5a:
8b:07:46:11:9a:b6:06:bd:93:04:5f:d1:6e:50:d8:
ec:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:05:C6:95:75:E8:FA:CE:84:D8:D2:79:61:1D:51:E0:51:39:4B:15
X509v3 Authority Key Identifier:
keyid:B5:CC:DD:88:3F:6D:D1:14:EC:F6:F7:27:16:A8:46:34:F6:7A:C9:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tczdiD9t0RTs9vcnFqhGNPZ6yXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/ba784d-746e-49e7-a408-4abaf53a50af/1/tczdiD9t0RTs9vcnFqhGNPZ6yXc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/ba784d-746e-49e7-a408-4abaf53a50af/1/tczdiD9t0RTs9vcnFqhGNPZ6yXc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:14:81:50:fd:7f:ef:d6:92:85:68:6e:a8:1a:37:ab:42:c3:
74:f5:09:8a:ad:25:d6:cb:ed:14:a5:cc:61:3a:44:fe:5a:5c:
b4:3b:fc:bf:41:42:e7:f6:59:88:cd:82:ac:75:f1:61:0b:8a:
95:a4:e8:7e:61:e7:6c:47:3d:e2:a4:4f:b5:2e:06:4c:26:4c:
f8:1a:bd:05:d5:b3:7d:45:bd:b5:a0:ce:6b:47:f9:1e:46:c8:
b0:5d:3c:94:a9:67:ef:3f:b9:31:cf:03:d4:fe:07:a8:dd:f0:
e2:0c:ad:ad:4d:d0:83:fd:b0:65:7e:9b:c4:21:b4:f1:c2:ca:
92:67:00:76:42:71:67:13:25:d9:dd:97:b5:43:6c:ed:ea:4c:
6b:fe:5f:a6:7a:df:f6:cf:93:fc:2b:7a:ed:7a:d0:58:2e:a7:
13:85:7f:10:80:db:90:1d:3f:1d:41:e5:00:2d:c0:bd:aa:27:
33:da:c3:2c:af:da:a8:09:26:f8:7b:c7:8d:d7:fd:76:b9:bf:
6f:1e:41:f3:68:7d:7b:48:4a:ab:83:12:8b:42:e4:80:5a:ef:
6d:ec:57:af:c7:4b:c3:9f:85:e8:f1:b3:ce:e2:f2:db:73:4f:
7a:5a:61:37:9a:37:70:95:e4:98:38:93:7e:c7:5f:41:33:94:
19:cc:fe:48
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaBCPCnxWM2rfeDaPHg9JuY+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1Y2NkZDg4M2Y2ZGQxMTRlY2Y2ZjcyNzE2YTg0NjM0ZjY3
YWM5NzcwHhcNMjYwODI3MDgwMDM0WhcNMjYwODI4MDgwMDM0WjAzMTEwLwYDVQQD
EygyYzA1YzY5NTc1ZThmYWNlODRkOGQyNzk2MTFkNTFlMDUxMzk0YjE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1IsQC0xVkeFM2WwIArKer4+jZOJ5
/Xl1PnzAdfTBhPHIsHgMqeUWP5OvSEdz56Ozg25F915FsDNrUAY5MMt8mFdI2cnV
anoZQDQyywfiZ1Rsb90RPfF4HekVpj9IoBtaY3Q/fRb4WTqDLxP8rETxYslxMmw1
p+Ko0/EdTqAHljkzm4RvW+WETf0pgNQY4Y9HFupMvbgfB2FwrAvYZ1dz732afJGg
Pl2Q9wYZvkGsIikOpiuuziZIeCG65NMBZ3PyySKhLrlLk66p1KBadTrLtcy1Yu1I
B31zJjIonoqLs7t1fFQiYa5IOcZ9U4g2+1qLB0YRmrYGvZMEX9FuUNjshQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCwFxpV16PrOhNjSeWEdUeBROUsVMB8GA1UdIwQY
MBaAFLXM3Yg/bdEU7Pb3JxaoRjT2esl3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdGN6ZGlEOXQwUlRzOXZjbkZxaEdOUFo2eVhjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS9iYTc4NGQtNzQ2ZS00OWU3LWE0MDgt
NGFiYWY1M2E1MGFmLzEvdGN6ZGlEOXQwUlRzOXZjbkZxaEdOUFo2eVhjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYS9iYTc4NGQtNzQ2ZS00OWU3LWE0MDgtNGFiYWY1M2E1MGFm
LzEvdGN6ZGlEOXQwUlRzOXZjbkZxaEdOUFo2eVhjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqBSBUP1/
79aShWhuqBo3q0LDdPUJiq0l1svtFKXMYTpE/lpctDv8v0FC5/ZZiM2CrHXxYQuK
laTofmHnbEc94qRPtS4GTCZM+Bq9BdWzfUW9taDOa0f5HkbIsF08lKln7z+5Mc8D
1P4HqN3w4gytrU3Qg/2wZX6bxCG08cLKkmcAdkJxZxMl2d2XtUNs7epMa/5fpnrf
9s+T/Ct67XrQWC6nE4V/EIDbkB0/HUHlAC3AvaonM9rDLK/aqAkm+HvHjdf9drm/
bx5B82h9e0hKq4MSi0LkgFrvbexXr8dLw5+F6PGzzuLy23NPelphN5o3cJXkmDiT
fsdfQTOUGcz+SA==
-----END CERTIFICATE-----
Generated at Thu Aug 27 12:25:54 2026 by rpki-client