Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/55d584-19a1-47c0-95a6-bc8e0b69ac12/1/tEjWJqkg5C2s0OlI6Wal5LzDwRw.mft
File: tEjWJqkg5C2s0OlI6Wal5LzDwRw.mft (raw, json)
Hash identifier: wiarGQ5LjDaFcHZj9SbEuRzkQNmWFSyARfRzxiFnPe4=
Subject key identifier: 08:3D:A7:40:02:D1:6B:0E:03:E7:A1:8F:F0:27:B0:14:D8:AF:9C:A3
Authority key identifier: B4:48:D6:26:A9:20:E4:2D:AC:D0:E9:48:E9:66:A5:E4:BC:C3:C1:1C
Certificate issuer: /CN=b448d626a920e42dacd0e948e966a5e4bcc3c11c
Certificate serial: 019D38D2CFC836BC62D1205122F0141F1B94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tEjWJqkg5C2s0OlI6Wal5LzDwRw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/55d584-19a1-47c0-95a6-bc8e0b69ac12/1/tEjWJqkg5C2s0OlI6Wal5LzDwRw.mft
Manifest number: 12EF
Signing time: Sun 29 Mar 2026 09:00:32 +0000
Manifest this update: Sun 29 Mar 2026 09:00:32 +0000
Manifest next update: Mon 30 Mar 2026 09:00:32 +0000
Files and hashes: 1: Ts1c5R1pfarxRE69RZTUbL8j2wI.roa (hash: ZcQpB70U2YO+2we7XC8myVB/BAIh03F9aXKEn9a2hG4=)
2: tEjWJqkg5C2s0OlI6Wal5LzDwRw.crl (hash: DY6vYZdItGwLZSSLMxjOHaxcyDh+X8T7TZ3lVOK+VE0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/55d584-19a1-47c0-95a6-bc8e0b69ac12/1/tEjWJqkg5C2s0OlI6Wal5LzDwRw.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/55d584-19a1-47c0-95a6-bc8e0b69ac12/1/tEjWJqkg5C2s0OlI6Wal5LzDwRw.mft
rsync://rpki.ripe.net/repository/DEFAULT/tEjWJqkg5C2s0OlI6Wal5LzDwRw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:cf:c8:36:bc:62:d1:20:51:22:f0:14:1f:1b:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b448d626a920e42dacd0e948e966a5e4bcc3c11c
Validity
Not Before: Mar 29 09:00:32 2026 GMT
Not After : Mar 30 09:00:32 2026 GMT
Subject: CN=083da74002d16b0e03e7a18ff027b014d8af9ca3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:39:ee:1b:13:80:66:33:c0:c0:e3:8e:c6:92:
ee:ce:e7:b1:76:a0:4a:da:d6:48:96:60:8e:fa:4b:
ba:7c:c5:18:89:f2:82:78:bf:e0:24:f2:da:f1:79:
c5:c1:78:27:1b:b4:74:8b:2b:12:42:91:f7:79:9f:
79:00:51:46:f4:e9:af:e0:1d:da:46:8c:9c:c0:c2:
9d:46:7e:99:a6:b7:2f:b8:21:7e:66:9a:9d:28:18:
a6:a1:7c:67:9b:48:4b:2a:80:b9:70:46:2c:f1:19:
d2:ae:e4:6f:59:cd:19:3c:4b:9d:32:22:a8:70:38:
2e:7c:70:4a:4a:d8:85:18:0c:18:12:cf:5c:e9:0e:
ca:0b:d2:1e:ee:1a:dd:44:b0:0f:ac:2b:49:37:ab:
63:13:36:97:35:63:df:53:ac:f7:02:9c:be:c2:e0:
5c:44:13:36:e2:f3:69:1a:6c:68:e7:e0:b8:70:60:
0c:92:7d:a3:3b:50:7c:2c:a7:c9:95:4d:70:65:bd:
7b:0e:79:72:92:ee:da:6c:3f:18:35:32:af:d2:d2:
c5:ca:4b:41:48:d2:2c:1b:93:91:8b:ee:27:c0:30:
ec:10:9a:98:e4:88:af:9d:63:51:2d:f7:36:27:f7:
c4:21:00:75:90:0c:84:6c:ed:bc:73:ea:97:65:31:
ba:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:3D:A7:40:02:D1:6B:0E:03:E7:A1:8F:F0:27:B0:14:D8:AF:9C:A3
X509v3 Authority Key Identifier:
keyid:B4:48:D6:26:A9:20:E4:2D:AC:D0:E9:48:E9:66:A5:E4:BC:C3:C1:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tEjWJqkg5C2s0OlI6Wal5LzDwRw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/55d584-19a1-47c0-95a6-bc8e0b69ac12/1/tEjWJqkg5C2s0OlI6Wal5LzDwRw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/55d584-19a1-47c0-95a6-bc8e0b69ac12/1/tEjWJqkg5C2s0OlI6Wal5LzDwRw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:2e:2b:6f:0e:2f:dd:5a:7c:f1:e2:e8:ba:b1:bb:f5:75:b1:
92:59:3c:6e:6c:d0:37:8b:36:97:db:02:f2:9d:7c:d9:e0:30:
a4:da:64:1f:20:e5:74:3a:5d:5a:ee:27:36:26:03:8d:52:ee:
9b:cb:8b:70:ee:b0:cf:f4:65:56:09:c3:a0:95:5c:31:4e:83:
eb:a7:b4:1a:70:dc:38:f1:ee:3f:fb:b2:72:49:0a:60:97:7c:
39:76:e9:10:be:e4:a4:cb:1a:d1:60:4c:bb:7e:65:81:63:d9:
1e:09:5f:8b:45:e0:d0:da:27:4c:a2:34:3e:79:44:1b:7d:4c:
fc:5a:33:31:3b:72:f2:ca:0f:3f:86:8b:d2:12:2c:2b:19:a5:
74:2b:7c:73:7a:f9:2a:50:27:ae:76:14:b2:60:f4:57:72:36:
c0:e6:41:b2:37:ef:63:2a:6a:7c:81:fe:c5:ae:a2:98:ff:e6:
04:11:4e:a4:7b:1b:76:78:86:e2:ea:5a:d8:f4:d5:1e:70:bd:
2e:73:b6:c4:87:11:59:6e:dd:b6:51:28:05:67:bc:5e:99:e7:
27:62:e4:f2:7d:46:8c:39:02:f7:5c:4e:52:40:23:07:84:23:
86:4c:b1:74:89:b9:1e:7e:fb:6d:9e:6e:7b:7d:fe:51:f7:6f:
cb:ff:1c:d8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ040s/INrxi0SBRIvAUHxuUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0NDhkNjI2YTkyMGU0MmRhY2QwZTk0OGU5NjZhNWU0YmNj
M2MxMWMwHhcNMjYwMzI5MDkwMDMyWhcNMjYwMzMwMDkwMDMyWjAzMTEwLwYDVQQD
EygwODNkYTc0MDAyZDE2YjBlMDNlN2ExOGZmMDI3YjAxNGQ4YWY5Y2EzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxjnuGxOAZjPAwOOOxpLuzuexdqBK
2tZIlmCO+ku6fMUYifKCeL/gJPLa8XnFwXgnG7R0iysSQpH3eZ95AFFG9Omv4B3a
RoycwMKdRn6ZprcvuCF+ZpqdKBimoXxnm0hLKoC5cEYs8RnSruRvWc0ZPEudMiKo
cDgufHBKStiFGAwYEs9c6Q7KC9Ie7hrdRLAPrCtJN6tjEzaXNWPfU6z3Apy+wuBc
RBM24vNpGmxo5+C4cGAMkn2jO1B8LKfJlU1wZb17Dnlyku7abD8YNTKv0tLFyktB
SNIsG5ORi+4nwDDsEJqY5IivnWNRLfc2J/fEIQB1kAyEbO28c+qXZTG6SQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAg9p0AC0WsOA+ehj/AnsBTYr5yjMB8GA1UdIwQY
MBaAFLRI1iapIOQtrNDpSOlmpeS8w8EcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdEVqV0pxa2c1QzJzME9sSTZXYWw1THpEd1J3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy81NWQ1ODQtMTlhMS00N2MwLTk1YTYt
YmM4ZTBiNjlhYzEyLzEvdEVqV0pxa2c1QzJzME9sSTZXYWw1THpEd1J3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy81NWQ1ODQtMTlhMS00N2MwLTk1YTYtYmM4ZTBiNjlhYzEy
LzEvdEVqV0pxa2c1QzJzME9sSTZXYWw1THpEd1J3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMy4rbw4v
3Vp88eLourG79XWxklk8bmzQN4s2l9sC8p182eAwpNpkHyDldDpdWu4nNiYDjVLu
m8uLcO6wz/RlVgnDoJVcMU6D66e0GnDcOPHuP/uyckkKYJd8OXbpEL7kpMsa0WBM
u35lgWPZHglfi0Xg0NonTKI0PnlEG31M/FozMTty8soPP4aL0hIsKxmldCt8c3r5
KlAnrnYUsmD0V3I2wOZBsjfvYypqfIH+xa6imP/mBBFOpHsbdniG4upa2PTVHnC9
LnO2xIcRWW7dtlEoBWe8XpnnJ2Lk8n1GjDkC91xOUkAjB4QjhkyxdIm5Hn77bZ5u
e33+Ufdvy/8c2A==
-----END CERTIFICATE-----
Generated at Sun Mar 29 18:38:31 2026 by rpki-client