Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/c7caf3-eb08-4556-a5b7-fc6e77884054/1/tGS0UjqJcrni9GpPShY06XAnrt8.mft
File: tGS0UjqJcrni9GpPShY06XAnrt8.mft (raw, json)
Hash identifier: 1jaPf4f3cYEktPA8/t0+asm4shXyj71GzeUh6Hc9wM8=
Subject key identifier: 09:07:07:05:9C:04:A7:74:A3:91:E9:18:3B:C7:B8:AC:EA:3B:74:A1
Authority key identifier: B4:64:B4:52:3A:89:72:B9:E2:F4:6A:4F:4A:16:34:E9:70:27:AE:DF
Certificate issuer: /CN=b464b4523a8972b9e2f46a4f4a1634e97027aedf
Certificate serial: 019DECA3E017B1F0619C033F5AD90CA046E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tGS0UjqJcrni9GpPShY06XAnrt8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/c7caf3-eb08-4556-a5b7-fc6e77884054/1/tGS0UjqJcrni9GpPShY06XAnrt8.mft
Manifest number: 08B7
Signing time: Sun 03 May 2026 07:00:55 +0000
Manifest this update: Sun 03 May 2026 07:00:55 +0000
Manifest next update: Mon 04 May 2026 07:00:55 +0000
Files and hashes: 1: 9Bk2DNR2uYMUyRc1vkqhEEQ_U7I.roa (hash: stlOV3eHfF1Tw/j9xaX8GJThoN6iWH1T13ESnbBJcL8=)
2: hB5bKIzKCvcbl8ogbaBmur_bdIs.roa (hash: Uyup6v2aW5b2Hld6LVCK6C+h9+vlfo2ENPD8ezX9qzQ=)
3: tGS0UjqJcrni9GpPShY06XAnrt8.crl (hash: I5B8GpYVYxxBb9gDTCbg5AAHNpP52uT7v+OX/FP5Rj4=)
4: ybJz7bnKGkBBxiMObl5o-Qmd4SE.roa (hash: JhVcV+03zxVD2R4ZSByn4pLYKVYrGi9gl0bLGuBHrWE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/c7caf3-eb08-4556-a5b7-fc6e77884054/1/tGS0UjqJcrni9GpPShY06XAnrt8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/c7caf3-eb08-4556-a5b7-fc6e77884054/1/tGS0UjqJcrni9GpPShY06XAnrt8.mft
rsync://rpki.ripe.net/repository/DEFAULT/tGS0UjqJcrni9GpPShY06XAnrt8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 04 May 2026 05:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ec:a3:e0:17:b1:f0:61:9c:03:3f:5a:d9:0c:a0:46:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b464b4523a8972b9e2f46a4f4a1634e97027aedf
Validity
Not Before: May 3 07:00:55 2026 GMT
Not After : May 4 07:00:55 2026 GMT
Subject: CN=090707059c04a774a391e9183bc7b8acea3b74a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:4a:b6:fe:59:4e:b1:78:f6:e3:77:6b:8b:31:
19:01:76:01:10:a7:cd:9d:b6:94:66:f5:1b:6f:e8:
dd:53:77:6e:7c:0f:44:62:b6:7f:dd:c0:32:7d:66:
ac:f7:be:61:4c:28:56:ae:24:da:8a:28:e9:d2:de:
86:35:a7:b3:ef:94:b4:8b:1b:34:66:dd:52:9e:5a:
f3:d9:3b:aa:8c:b9:2f:d2:d6:7c:fa:be:da:11:a2:
d5:20:27:ae:d3:e6:9a:09:cf:66:18:16:b4:55:0b:
e0:33:a7:8d:a5:b1:ec:6d:a2:13:1e:4f:0b:be:a4:
43:75:13:46:fb:71:32:e8:c7:ca:48:e1:96:8a:0e:
d8:8a:c8:b3:6b:9d:de:95:46:24:af:3b:d0:28:12:
7c:c6:7e:3f:40:56:e7:c3:d0:c2:9d:0e:35:29:bd:
12:7f:1c:ef:ca:b1:c7:96:9f:21:43:9a:a3:9a:a7:
2d:42:df:09:dd:ef:91:59:3a:94:d0:f5:ae:1f:34:
ec:c8:95:7d:7f:53:2b:00:0c:91:a3:d9:1c:e8:d4:
45:47:b6:cf:7f:6c:f8:cc:83:3c:d6:31:64:fd:7f:
de:c6:8d:05:c2:b7:9a:d3:29:7c:68:71:21:5b:c8:
a1:90:34:b8:c1:75:84:7c:25:8e:da:f8:5e:b0:74:
d8:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:07:07:05:9C:04:A7:74:A3:91:E9:18:3B:C7:B8:AC:EA:3B:74:A1
X509v3 Authority Key Identifier:
keyid:B4:64:B4:52:3A:89:72:B9:E2:F4:6A:4F:4A:16:34:E9:70:27:AE:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tGS0UjqJcrni9GpPShY06XAnrt8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/c7caf3-eb08-4556-a5b7-fc6e77884054/1/tGS0UjqJcrni9GpPShY06XAnrt8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/c7caf3-eb08-4556-a5b7-fc6e77884054/1/tGS0UjqJcrni9GpPShY06XAnrt8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:db:7e:ca:a3:65:da:f3:2a:ea:9e:a9:0a:47:f9:84:be:68:
19:48:c2:f8:17:89:d2:c9:ac:e4:ae:67:6f:8e:90:14:5c:53:
0a:fa:ce:8f:87:dc:2e:ac:58:c9:ec:59:22:6e:b3:d1:55:48:
54:56:67:a5:9b:99:34:16:96:da:56:cd:9c:da:39:62:3b:19:
4d:26:a2:01:88:6f:d4:98:c5:dd:63:9b:3c:17:2a:c9:6a:df:
3b:82:6d:59:00:5f:b9:94:c6:14:da:12:93:40:b6:df:66:b7:
53:1c:48:0b:59:89:f2:06:0f:c7:14:e2:80:ed:f1:83:41:0e:
59:59:db:3c:97:fb:50:a0:3b:84:a1:03:db:b0:fd:55:fa:9c:
6a:75:58:94:16:f4:47:97:eb:17:f4:44:15:1b:48:46:d0:da:
b9:d0:03:bb:ed:30:60:e9:08:8a:7d:d0:20:ac:a5:df:23:22:
14:cc:c5:3e:99:f5:c7:24:87:f0:4e:e9:a9:e4:eb:92:2d:cf:
fb:5c:38:df:8c:ec:cb:20:d9:91:00:d4:28:a1:1f:5f:36:86:
f8:23:ec:f9:82:5e:95:c3:2f:2c:61:89:bf:57:fb:3b:0f:72:
52:0d:22:c5:4b:d3:76:20:c9:61:c8:a0:5e:55:a1:e1:7d:dd:
ed:5f:92:9c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3so+AXsfBhnAM/WtkMoEblMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0NjRiNDUyM2E4OTcyYjllMmY0NmE0ZjRhMTYzNGU5NzAy
N2FlZGYwHhcNMjYwNTAzMDcwMDU1WhcNMjYwNTA0MDcwMDU1WjAzMTEwLwYDVQQD
EygwOTA3MDcwNTljMDRhNzc0YTM5MWU5MTgzYmM3YjhhY2VhM2I3NGExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvUq2/llOsXj243drizEZAXYBEKfN
nbaUZvUbb+jdU3dufA9EYrZ/3cAyfWas975hTChWriTaiijp0t6GNaez75S0ixs0
Zt1Snlrz2TuqjLkv0tZ8+r7aEaLVICeu0+aaCc9mGBa0VQvgM6eNpbHsbaITHk8L
vqRDdRNG+3Ey6MfKSOGWig7Yisiza53elUYkrzvQKBJ8xn4/QFbnw9DCnQ41Kb0S
fxzvyrHHlp8hQ5qjmqctQt8J3e+RWTqU0PWuHzTsyJV9f1MrAAyRo9kc6NRFR7bP
f2z4zIM81jFk/X/exo0Fwrea0yl8aHEhW8ihkDS4wXWEfCWO2vhesHTYgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAkHBwWcBKd0o5HpGDvHuKzqO3ShMB8GA1UdIwQY
MBaAFLRktFI6iXK54vRqT0oWNOlwJ67fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdEdTMFVqcUpjcm5pOUdwUFNoWTA2WEFucnQ4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi9jN2NhZjMtZWIwOC00NTU2LWE1Yjct
ZmM2ZTc3ODg0MDU0LzEvdEdTMFVqcUpjcm5pOUdwUFNoWTA2WEFucnQ4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZi9jN2NhZjMtZWIwOC00NTU2LWE1YjctZmM2ZTc3ODg0MDU0
LzEvdEdTMFVqcUpjcm5pOUdwUFNoWTA2WEFucnQ4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALdt+yqNl
2vMq6p6pCkf5hL5oGUjC+BeJ0sms5K5nb46QFFxTCvrOj4fcLqxYyexZIm6z0VVI
VFZnpZuZNBaW2lbNnNo5YjsZTSaiAYhv1JjF3WObPBcqyWrfO4JtWQBfuZTGFNoS
k0C232a3UxxIC1mJ8gYPxxTigO3xg0EOWVnbPJf7UKA7hKED27D9VfqcanVYlBb0
R5frF/REFRtIRtDaudADu+0wYOkIin3QIKyl3yMiFMzFPpn1xySH8E7pqeTrki3P
+1w434zsyyDZkQDUKKEfXzaG+CPs+YJelcMvLGGJv1f7Ow9yUg0ixUvTdiDJYcig
XlWh4X3d7V+SnA==
-----END CERTIFICATE-----
Generated at Sun May 3 15:35:12 2026 by rpki-client