Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/e5195d-6698-4604-9114-68b3768f50dc/1/TXaD1upTn-8ba22910ox0F5fCiM.mft
File: TXaD1upTn-8ba22910ox0F5fCiM.mft (raw, json)
Hash identifier: 1T3MhvgKJAhbsTQKBQGGWMSYsAtWN4sbtCJcXZoMCbE=
Subject key identifier: 1A:E8:6E:55:CC:92:AB:CE:7B:39:D1:CB:4D:0B:46:0B:BA:55:15:5D
Authority key identifier: 4D:76:83:D6:EA:53:9F:EF:1B:6B:6D:BD:D7:4A:31:D0:5E:5F:0A:23
Certificate issuer: /CN=4d7683d6ea539fef1b6b6dbdd74a31d05e5f0a23
Certificate serial: 019D38D3859934A99A9A44B51F1758E78674
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TXaD1upTn-8ba22910ox0F5fCiM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/e5195d-6698-4604-9114-68b3768f50dc/1/TXaD1upTn-8ba22910ox0F5fCiM.mft
Manifest number: 1894
Signing time: Sun 29 Mar 2026 09:01:19 +0000
Manifest this update: Sun 29 Mar 2026 09:01:19 +0000
Manifest next update: Mon 30 Mar 2026 09:01:19 +0000
Files and hashes: 1: 9nRBo0Yomhpgm9TNkjDZWwhznG4.roa (hash: JVKW/CXhEruKd4nkDT8EtdFwFBbGNGwV/vGyVQso2YA=)
2: CJ1p60ncJ6lwmkba6tzp8PwUtGA.roa (hash: Fs77R9OF/tCUM07EJYitJlab1am9Hn64q8ob0oebDkA=)
3: PabEzo_xhzNh86GJKwujZAVSaKY.roa (hash: KpQX2bvuJbagEXNR3/7qIg5Rru1wDlXdCAjMjXG/6Mc=)
4: TXaD1upTn-8ba22910ox0F5fCiM.crl (hash: e2zSWYzSyJnwC5vWfOCcd+IT3YbdcbFrWHyPpW35eOE=)
5: fTj8VjA3jlGkhYbcidRdlQKvw2s.roa (hash: jRzOWOgwnHuf2EMT7ZgwseHhtj6/xt+nW051JNR2aY4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/e5195d-6698-4604-9114-68b3768f50dc/1/TXaD1upTn-8ba22910ox0F5fCiM.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/e5195d-6698-4604-9114-68b3768f50dc/1/TXaD1upTn-8ba22910ox0F5fCiM.mft
rsync://rpki.ripe.net/repository/DEFAULT/TXaD1upTn-8ba22910ox0F5fCiM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:85:99:34:a9:9a:9a:44:b5:1f:17:58:e7:86:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d7683d6ea539fef1b6b6dbdd74a31d05e5f0a23
Validity
Not Before: Mar 29 09:01:19 2026 GMT
Not After : Mar 30 09:01:19 2026 GMT
Subject: CN=1ae86e55cc92abce7b39d1cb4d0b460bba55155d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:a2:3a:05:78:01:82:f1:f4:08:cf:a5:f9:a6:
10:04:ec:19:b3:d0:bf:47:dc:88:cf:66:1f:eb:c0:
e7:0a:25:37:5b:53:fb:e3:69:5e:a9:ff:20:4a:0f:
cc:f8:0f:8f:45:04:60:d8:6d:7f:cd:68:7a:52:80:
85:28:40:e3:d2:44:1f:2e:b6:09:d1:2d:c0:df:29:
91:9b:79:a8:04:27:fd:1b:3a:3f:2b:92:f5:a1:80:
9e:d8:a8:fa:42:28:54:61:5c:fe:a8:69:89:c7:78:
4a:f1:fa:cc:bd:11:b7:da:9a:83:85:6f:e0:e8:14:
0f:07:21:b1:e0:6a:3d:04:b4:ed:8b:7b:3d:d5:83:
6e:3c:c0:b1:d7:47:e7:14:80:91:f5:af:90:9c:0d:
f8:84:c8:aa:22:61:a1:9c:0c:b5:b5:10:fd:62:a9:
5e:2d:99:ca:04:66:f2:3d:f2:61:4c:bc:01:8d:3d:
18:3a:ac:8c:22:69:9c:4c:6e:1a:a3:4c:44:2a:1b:
cf:22:2a:47:0d:66:bf:45:7b:85:5e:64:64:35:95:
6c:6e:ae:cf:9c:be:5d:21:2a:d2:41:c1:0c:82:d4:
c4:db:62:a0:ab:4c:3e:d4:48:16:55:95:65:6b:fb:
a5:44:13:69:e1:a2:e7:f5:b5:d4:70:cc:bf:7f:28:
93:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:E8:6E:55:CC:92:AB:CE:7B:39:D1:CB:4D:0B:46:0B:BA:55:15:5D
X509v3 Authority Key Identifier:
keyid:4D:76:83:D6:EA:53:9F:EF:1B:6B:6D:BD:D7:4A:31:D0:5E:5F:0A:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TXaD1upTn-8ba22910ox0F5fCiM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e5195d-6698-4604-9114-68b3768f50dc/1/TXaD1upTn-8ba22910ox0F5fCiM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e5195d-6698-4604-9114-68b3768f50dc/1/TXaD1upTn-8ba22910ox0F5fCiM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:62:6d:3b:6a:cb:f8:21:8a:e8:91:79:81:a2:03:84:30:9a:
d8:e8:61:65:58:0e:1c:7d:90:27:b3:f2:68:c3:1c:c7:5c:75:
25:a1:57:52:2d:75:4a:44:f0:75:d3:71:07:ac:bb:3f:ed:b2:
c9:9b:d7:41:8c:ec:ab:21:0d:38:44:2c:30:b3:05:25:68:ce:
ba:d8:f2:73:e1:91:8a:30:e8:54:4a:36:2c:e4:4c:2d:da:8e:
ba:5d:9d:f2:77:b4:f7:b9:c4:0b:f9:d7:c3:09:46:de:5f:a5:
48:08:81:b6:7e:47:12:73:ea:c7:d1:28:00:40:9f:e2:28:87:
1b:88:0e:94:79:b4:a2:42:4a:ed:e2:d2:73:df:85:fc:0a:f7:
f7:97:48:55:6f:d7:bc:4a:1b:e7:1b:8c:f2:40:bb:3a:ce:cf:
74:f7:79:4f:f9:ae:5c:42:51:04:e1:99:74:89:e4:c2:ab:05:
38:8d:ea:9f:10:b7:ac:6c:a7:6b:83:9d:02:2a:ea:25:f1:6c:
c9:f7:d2:56:0b:3e:ca:c7:27:28:dc:94:79:3a:5b:ac:4c:e2:
83:6b:4c:88:79:fa:18:33:91:69:b6:92:04:93:54:01:a4:75:
e8:70:7b:e3:ca:1b:7e:6d:fd:24:b8:7f:4b:ba:49:45:28:83:
b0:2d:6c:67
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0404WZNKmamkS1HxdY54Z0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRkNzY4M2Q2ZWE1MzlmZWYxYjZiNmRiZGQ3NGEzMWQwNWU1
ZjBhMjMwHhcNMjYwMzI5MDkwMTE5WhcNMjYwMzMwMDkwMTE5WjAzMTEwLwYDVQQD
EygxYWU4NmU1NWNjOTJhYmNlN2IzOWQxY2I0ZDBiNDYwYmJhNTUxNTVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv6I6BXgBgvH0CM+l+aYQBOwZs9C/
R9yIz2Yf68DnCiU3W1P742leqf8gSg/M+A+PRQRg2G1/zWh6UoCFKEDj0kQfLrYJ
0S3A3ymRm3moBCf9Gzo/K5L1oYCe2Kj6QihUYVz+qGmJx3hK8frMvRG32pqDhW/g
6BQPByGx4Go9BLTti3s91YNuPMCx10fnFICR9a+QnA34hMiqImGhnAy1tRD9Yqle
LZnKBGbyPfJhTLwBjT0YOqyMImmcTG4ao0xEKhvPIipHDWa/RXuFXmRkNZVsbq7P
nL5dISrSQcEMgtTE22Kgq0w+1EgWVZVla/ulRBNp4aLn9bXUcMy/fyiTqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBroblXMkqvOeznRy00LRgu6VRVdMB8GA1UdIwQY
MBaAFE12g9bqU5/vG2ttvddKMdBeXwojMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVFhhRDF1cFRuLThiYTIyOTEwb3gwRjVmQ2lNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS9lNTE5NWQtNjY5OC00NjA0LTkxMTQt
NjhiMzc2OGY1MGRjLzEvVFhhRDF1cFRuLThiYTIyOTEwb3gwRjVmQ2lNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS9lNTE5NWQtNjY5OC00NjA0LTkxMTQtNjhiMzc2OGY1MGRj
LzEvVFhhRDF1cFRuLThiYTIyOTEwb3gwRjVmQ2lNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnWJtO2rL
+CGK6JF5gaIDhDCa2OhhZVgOHH2QJ7PyaMMcx1x1JaFXUi11SkTwddNxB6y7P+2y
yZvXQYzsqyENOEQsMLMFJWjOutjyc+GRijDoVEo2LORMLdqOul2d8ne097nEC/nX
wwlG3l+lSAiBtn5HEnPqx9EoAECf4iiHG4gOlHm0okJK7eLSc9+F/Ar395dIVW/X
vEob5xuM8kC7Os7PdPd5T/muXEJRBOGZdInkwqsFOI3qnxC3rGyna4OdAirqJfFs
yffSVgs+yscnKNyUeTpbrEzig2tMiHn6GDORabaSBJNUAaR16HB748obfm39JLh/
S7pJRSiDsC1sZw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:59:19 2026 by rpki-client