Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/731f82-b18f-4d5c-b122-452badfd5a6d/1/TxSbhH0xKT9wHhz5ndjKDruwtb0.mft
File: TxSbhH0xKT9wHhz5ndjKDruwtb0.mft (raw, json)
Hash identifier: o0L+1CicxYzCmzawnQWmVPAb5QylJfMRO3ahphM/IKI=
Subject key identifier: 53:8B:B0:17:4D:AA:35:FF:8B:5B:76:EF:57:E1:78:83:4D:BE:A9:63
Authority key identifier: 4F:14:9B:84:7D:31:29:3F:70:1E:1C:F9:9D:D8:CA:0E:BB:B0:B5:BD
Certificate issuer: /CN=4f149b847d31293f701e1cf99dd8ca0ebbb0b5bd
Certificate serial: 019D37F706682817921B34C719DA92AC7FCA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxSbhH0xKT9wHhz5ndjKDruwtb0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/731f82-b18f-4d5c-b122-452badfd5a6d/1/TxSbhH0xKT9wHhz5ndjKDruwtb0.mft
Manifest number: 11EE
Signing time: Sun 29 Mar 2026 05:00:29 +0000
Manifest this update: Sun 29 Mar 2026 05:00:29 +0000
Manifest next update: Mon 30 Mar 2026 05:00:29 +0000
Files and hashes: 1: FvKj3Djs8TT6ypv05g8sMqJXOlA.roa (hash: tfDMARTocl58JXc9IeJSQaWJFyjzzrUR3p+6fLmC9V4=)
2: TxSbhH0xKT9wHhz5ndjKDruwtb0.crl (hash: uPA7HDzmbp8PNjt7KBQ/6qPgftLZUMexke6bgFW9Hqw=)
3: h07ZqTc0uqELKn3DOxOskKYqbI4.roa (hash: FJf5zVyfQ2yme32gVPw1Ih+VvDivHZUWDg5Nah7gYOk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/731f82-b18f-4d5c-b122-452badfd5a6d/1/TxSbhH0xKT9wHhz5ndjKDruwtb0.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/731f82-b18f-4d5c-b122-452badfd5a6d/1/TxSbhH0xKT9wHhz5ndjKDruwtb0.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxSbhH0xKT9wHhz5ndjKDruwtb0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:06:68:28:17:92:1b:34:c7:19:da:92:ac:7f:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f149b847d31293f701e1cf99dd8ca0ebbb0b5bd
Validity
Not Before: Mar 29 05:00:29 2026 GMT
Not After : Mar 30 05:00:29 2026 GMT
Subject: CN=538bb0174daa35ff8b5b76ef57e178834dbea963
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:53:6c:c4:8e:ff:95:6f:a1:85:39:d4:a2:14:
7c:9f:a4:d1:ae:90:69:dd:fa:18:8f:4b:6f:f7:bf:
2a:ab:1e:9f:82:77:54:59:a8:fe:20:fd:9b:aa:8e:
6e:a1:e0:5e:57:1f:25:c2:06:73:83:0f:92:13:78:
2c:ac:ee:cd:dd:43:01:1d:be:62:cd:e2:16:f5:62:
59:74:4d:f5:30:e3:d3:15:e1:93:0c:e4:38:b7:b1:
2a:f1:81:4c:0a:d0:29:69:8b:02:17:a7:aa:a6:00:
f0:83:a2:dd:28:b3:6a:59:0f:5b:6e:cb:45:8f:f4:
1d:e1:47:22:dd:c3:36:4d:fa:d6:46:61:cc:01:b4:
02:04:c1:89:ae:68:f7:a9:4e:61:02:21:b5:d0:b3:
e3:c2:d2:d7:b5:57:d2:9c:a5:79:1b:2c:66:c5:52:
c1:e1:5a:4c:ec:1f:4a:ee:38:0b:f2:20:53:07:d8:
8e:51:d2:1d:c8:40:77:27:38:8f:8f:60:63:d7:13:
9b:54:23:59:13:b9:6b:c5:8f:f2:3a:ae:c3:d1:ef:
ca:60:51:58:0f:5b:81:c4:12:fe:61:ee:0b:4e:1b:
8f:82:b3:02:26:11:38:e5:a0:d7:aa:4c:5e:97:73:
20:03:de:d0:68:19:0f:f8:ea:46:aa:19:14:19:32:
87:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:8B:B0:17:4D:AA:35:FF:8B:5B:76:EF:57:E1:78:83:4D:BE:A9:63
X509v3 Authority Key Identifier:
keyid:4F:14:9B:84:7D:31:29:3F:70:1E:1C:F9:9D:D8:CA:0E:BB:B0:B5:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxSbhH0xKT9wHhz5ndjKDruwtb0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/731f82-b18f-4d5c-b122-452badfd5a6d/1/TxSbhH0xKT9wHhz5ndjKDruwtb0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/731f82-b18f-4d5c-b122-452badfd5a6d/1/TxSbhH0xKT9wHhz5ndjKDruwtb0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:3c:91:49:3b:32:a8:79:83:e0:10:c9:4f:1d:06:08:5c:26:
99:70:e3:7b:24:27:3a:4a:99:12:86:d4:60:51:18:04:99:b4:
3f:fc:0f:d0:1a:94:58:5f:e8:24:4a:08:67:71:61:e3:ce:7f:
aa:7b:95:f3:01:65:74:6a:2d:3a:64:66:fb:cd:1d:11:98:df:
8b:f1:fd:e4:91:fb:04:65:ff:83:bf:6d:13:70:6b:76:21:43:
00:6c:af:42:00:e8:32:7d:b3:c1:26:63:99:0d:0d:17:e7:97:
75:37:5d:bb:cc:59:06:89:7e:34:41:63:3e:f8:26:ff:9a:d6:
dd:24:d9:cc:bc:00:7e:bc:62:a1:4c:8d:5c:95:f1:86:fd:55:
b5:3e:cd:b6:d0:52:c7:df:04:37:19:1a:39:b2:db:7a:d8:57:
b3:51:0d:18:bc:32:86:38:8c:d0:4c:4a:59:82:a0:85:04:96:
39:88:50:87:51:32:2e:16:80:d0:84:19:11:93:dd:11:a4:fa:
57:78:71:fc:c6:4d:19:ac:8e:ab:99:b3:f7:bc:70:21:b5:66:
9f:93:7c:4c:1f:aa:fc:10:b5:ef:0b:68:b9:61:73:3d:93:d6:
1b:59:33:f4:91:ee:d9:e2:2e:31:ed:9e:43:31:76:91:b0:a0:
bc:00:8d:d5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ039wZoKBeSGzTHGdqSrH/KMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMTQ5Yjg0N2QzMTI5M2Y3MDFlMWNmOTlkZDhjYTBlYmJi
MGI1YmQwHhcNMjYwMzI5MDUwMDI5WhcNMjYwMzMwMDUwMDI5WjAzMTEwLwYDVQQD
Eyg1MzhiYjAxNzRkYWEzNWZmOGI1Yjc2ZWY1N2UxNzg4MzRkYmVhOTYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtlNsxI7/lW+hhTnUohR8n6TRrpBp
3foYj0tv978qqx6fgndUWaj+IP2bqo5uoeBeVx8lwgZzgw+SE3gsrO7N3UMBHb5i
zeIW9WJZdE31MOPTFeGTDOQ4t7Eq8YFMCtApaYsCF6eqpgDwg6LdKLNqWQ9bbstF
j/Qd4Uci3cM2TfrWRmHMAbQCBMGJrmj3qU5hAiG10LPjwtLXtVfSnKV5GyxmxVLB
4VpM7B9K7jgL8iBTB9iOUdIdyEB3JziPj2Bj1xObVCNZE7lrxY/yOq7D0e/KYFFY
D1uBxBL+Ye4LThuPgrMCJhE45aDXqkxel3MgA97QaBkP+OpGqhkUGTKHhwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFOLsBdNqjX/i1t271fheINNvqljMB8GA1UdIwQY
MBaAFE8Um4R9MSk/cB4c+Z3Yyg67sLW9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhTYmhIMHhLVDl3SGh6NW5kaktEcnV3dGIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy83MzFmODItYjE4Zi00ZDVjLWIxMjIt
NDUyYmFkZmQ1YTZkLzEvVHhTYmhIMHhLVDl3SGh6NW5kaktEcnV3dGIwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy83MzFmODItYjE4Zi00ZDVjLWIxMjItNDUyYmFkZmQ1YTZk
LzEvVHhTYmhIMHhLVDl3SGh6NW5kaktEcnV3dGIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQDyRSTsy
qHmD4BDJTx0GCFwmmXDjeyQnOkqZEobUYFEYBJm0P/wP0BqUWF/oJEoIZ3Fh485/
qnuV8wFldGotOmRm+80dEZjfi/H95JH7BGX/g79tE3BrdiFDAGyvQgDoMn2zwSZj
mQ0NF+eXdTddu8xZBol+NEFjPvgm/5rW3STZzLwAfrxioUyNXJXxhv1VtT7NttBS
x98ENxkaObLbethXs1ENGLwyhjiM0ExKWYKghQSWOYhQh1EyLhaA0IQZEZPdEaT6
V3hx/MZNGayOq5mz97xwIbVmn5N8TB+q/BC17wtouWFzPZPWG1kz9JHu2eIuMe2e
QzF2kbCgvACN1Q==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:33:12 2026 by rpki-client