Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/264934-2a7f-428b-afe5-81d214edf298/1/tN1tZY4UVx6Dn3gT2jHyIXQigY4.mft
File: tN1tZY4UVx6Dn3gT2jHyIXQigY4.mft (raw, json)
Hash identifier: 8/NN1N3cRL0fMDf09PHWl2rLMGYYcyzz3S8JTqPnhgk=
Subject key identifier: C6:C3:24:C7:94:DB:DE:E2:FE:CE:2C:9D:24:F7:44:FD:51:E4:C6:9D
Authority key identifier: B4:DD:6D:65:8E:14:57:1E:83:9F:78:13:DA:31:F2:21:74:22:81:8E
Certificate issuer: /CN=b4dd6d658e14571e839f7813da31f2217422818e
Certificate serial: 019CD6FA1084F8904F4DEB7ED24595987649
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tN1tZY4UVx6Dn3gT2jHyIXQigY4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/264934-2a7f-428b-afe5-81d214edf298/1/tN1tZY4UVx6Dn3gT2jHyIXQigY4.mft
Manifest number: 185E
Signing time: Tue 10 Mar 2026 09:00:38 +0000
Manifest this update: Tue 10 Mar 2026 09:00:38 +0000
Manifest next update: Wed 11 Mar 2026 09:00:38 +0000
Files and hashes: 1: YwaTWFoU_sclTYJB9JwjIcKav1Y.roa (hash: Eu+5SivPrsHncNTTaLf6fSyoRwG5oxFjSNJBm3PvsI0=)
2: tN1tZY4UVx6Dn3gT2jHyIXQigY4.crl (hash: b2zmS2qe+3AKAoQvzQsx8eZtXb7m67LsuTyQFXPDG4c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/264934-2a7f-428b-afe5-81d214edf298/1/tN1tZY4UVx6Dn3gT2jHyIXQigY4.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/264934-2a7f-428b-afe5-81d214edf298/1/tN1tZY4UVx6Dn3gT2jHyIXQigY4.mft
rsync://rpki.ripe.net/repository/DEFAULT/tN1tZY4UVx6Dn3gT2jHyIXQigY4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:d6:fa:10:84:f8:90:4f:4d:eb:7e:d2:45:95:98:76:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4dd6d658e14571e839f7813da31f2217422818e
Validity
Not Before: Mar 10 09:00:38 2026 GMT
Not After : Mar 11 09:00:38 2026 GMT
Subject: CN=c6c324c794dbdee2fece2c9d24f744fd51e4c69d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:71:b1:9b:60:1e:5f:2f:0a:c8:0e:47:37:40:
f8:47:4f:62:ff:72:ad:4a:5c:6d:31:11:8d:48:ef:
5e:43:b0:a9:9f:ab:ec:4f:ab:59:08:c2:22:da:2c:
ad:93:48:9a:a9:bb:af:84:f3:c1:52:eb:bc:0f:5c:
0f:48:1a:96:0f:43:96:d8:33:c5:ae:37:c6:df:a4:
2f:76:48:e2:2c:de:2b:0e:ef:9a:22:55:7c:04:77:
fe:dd:7a:8f:ca:ce:ad:52:ba:31:2a:96:21:4d:67:
61:fb:54:7a:fe:80:81:3e:61:c4:04:67:99:db:e5:
63:7a:18:19:65:98:35:9a:15:a4:e9:35:25:f7:e8:
85:c8:38:39:bd:7e:d3:87:5c:4a:c3:33:36:86:ed:
14:54:25:83:74:df:45:3c:69:9d:77:49:e2:9d:9b:
77:67:76:91:8a:df:d2:f5:64:38:ca:36:c0:36:05:
68:70:e7:29:81:fa:88:88:5a:ee:9c:b2:e6:f2:47:
c5:81:f2:79:60:a1:82:04:c1:3c:e2:fe:dd:8f:e6:
cb:62:ed:2d:c1:48:22:ea:b6:c7:86:58:61:6e:b3:
7a:ff:ca:0d:58:c9:51:55:be:a2:00:df:48:70:2f:
f2:81:0c:96:2f:19:a1:68:65:78:2c:a8:af:a6:47:
1d:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:C3:24:C7:94:DB:DE:E2:FE:CE:2C:9D:24:F7:44:FD:51:E4:C6:9D
X509v3 Authority Key Identifier:
keyid:B4:DD:6D:65:8E:14:57:1E:83:9F:78:13:DA:31:F2:21:74:22:81:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tN1tZY4UVx6Dn3gT2jHyIXQigY4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/264934-2a7f-428b-afe5-81d214edf298/1/tN1tZY4UVx6Dn3gT2jHyIXQigY4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/264934-2a7f-428b-afe5-81d214edf298/1/tN1tZY4UVx6Dn3gT2jHyIXQigY4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:8d:5c:e6:9c:e9:56:7e:6e:b0:1d:34:6e:07:d6:b3:f7:da:
f7:54:2c:8a:35:46:4b:5d:bf:ad:86:04:a3:78:66:5a:c0:eb:
f5:46:87:b9:9a:52:34:29:f8:46:22:8a:64:69:0d:0c:70:5e:
f6:8e:ad:3e:f6:7e:62:14:8c:bd:e0:fc:da:1c:db:39:5b:53:
c8:88:60:e6:bf:2c:19:1e:5d:b6:0d:82:24:4c:6a:4e:6d:f6:
d0:fb:00:c7:87:60:fe:b0:53:0a:d4:f8:46:42:b1:ee:15:10:
ff:f0:95:c4:45:16:21:99:6e:90:e0:12:01:b1:65:d3:fb:cc:
5b:7d:6c:58:b1:43:9e:3d:d7:47:0e:48:82:1f:ea:f8:60:58:
00:4e:54:ef:2a:a7:87:5c:28:46:f4:4b:6e:be:1a:73:64:45:
e5:40:13:01:f6:04:0f:7c:e2:e4:af:de:18:26:35:c2:4a:fc:
80:69:4c:12:30:a5:28:2c:28:dd:99:73:77:4e:8f:0a:14:9b:
2c:4a:57:d0:aa:3f:90:1f:91:07:7e:20:74:72:ed:2e:17:92:
7c:37:6a:44:be:f4:e3:1f:a5:b5:c6:d8:51:35:60:f7:8b:4d:
65:68:8e:7b:e9:75:60:99:31:8c:bc:3e:e0:78:8d:ba:0b:e0:
02:e4:e6:da
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZzW+hCE+JBPTet+0kWVmHZJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0ZGQ2ZDY1OGUxNDU3MWU4MzlmNzgxM2RhMzFmMjIxNzQy
MjgxOGUwHhcNMjYwMzEwMDkwMDM4WhcNMjYwMzExMDkwMDM4WjAzMTEwLwYDVQQD
EyhjNmMzMjRjNzk0ZGJkZWUyZmVjZTJjOWQyNGY3NDRmZDUxZTRjNjlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwXGxm2AeXy8KyA5HN0D4R09i/3Kt
SlxtMRGNSO9eQ7Cpn6vsT6tZCMIi2iytk0iaqbuvhPPBUuu8D1wPSBqWD0OW2DPF
rjfG36QvdkjiLN4rDu+aIlV8BHf+3XqPys6tUroxKpYhTWdh+1R6/oCBPmHEBGeZ
2+VjehgZZZg1mhWk6TUl9+iFyDg5vX7Th1xKwzM2hu0UVCWDdN9FPGmdd0ninZt3
Z3aRit/S9WQ4yjbANgVocOcpgfqIiFrunLLm8kfFgfJ5YKGCBME84v7dj+bLYu0t
wUgi6rbHhlhhbrN6/8oNWMlRVb6iAN9IcC/ygQyWLxmhaGV4LKivpkcd+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMbDJMeU297i/s4snST3RP1R5MadMB8GA1UdIwQY
MBaAFLTdbWWOFFceg594E9ox8iF0IoGOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdE4xdFpZNFVWeDZEbjNnVDJqSHlJWFFpZ1k0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy8yNjQ5MzQtMmE3Zi00MjhiLWFmZTUt
ODFkMjE0ZWRmMjk4LzEvdE4xdFpZNFVWeDZEbjNnVDJqSHlJWFFpZ1k0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy8yNjQ5MzQtMmE3Zi00MjhiLWFmZTUtODFkMjE0ZWRmMjk4
LzEvdE4xdFpZNFVWeDZEbjNnVDJqSHlJWFFpZ1k0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdo1c5pzp
Vn5usB00bgfWs/fa91QsijVGS12/rYYEo3hmWsDr9UaHuZpSNCn4RiKKZGkNDHBe
9o6tPvZ+YhSMveD82hzbOVtTyIhg5r8sGR5dtg2CJExqTm320PsAx4dg/rBTCtT4
RkKx7hUQ//CVxEUWIZlukOASAbFl0/vMW31sWLFDnj3XRw5Igh/q+GBYAE5U7yqn
h1woRvRLbr4ac2RF5UATAfYED3zi5K/eGCY1wkr8gGlMEjClKCwo3Zlzd06PChSb
LEpX0Ko/kB+RB34gdHLtLheSfDdqRL704x+ltcbYUTVg94tNZWiOe+l1YJkxjLw+
4HiNugvgAuTm2g==
-----END CERTIFICATE-----
Generated at Tue Mar 10 18:29:18 2026 by rpki-client