Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/dc11d6-4c35-4daa-a7de-3e51bcd14736/1/ITyyohgafTb0DkF1jWJ_cBpgIEI.mft
File: ITyyohgafTb0DkF1jWJ_cBpgIEI.mft (raw, json)
Hash identifier: xPLfAM89jqrS6nzVDHm5+0KRfyCa/cpX87MRIfsLusc=
Subject key identifier: 01:BB:3A:3D:32:D7:24:88:5D:EB:05:BE:61:C7:C3:B0:14:AC:93:CA
Authority key identifier: 21:3C:B2:A2:18:1A:7D:36:F4:0E:41:75:8D:62:7F:70:1A:60:20:42
Certificate issuer: /CN=213cb2a2181a7d36f40e41758d627f701a602042
Certificate serial: 019D37BFF85BC718E12408843DB98D79FD0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITyyohgafTb0DkF1jWJ_cBpgIEI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/dc11d6-4c35-4daa-a7de-3e51bcd14736/1/ITyyohgafTb0DkF1jWJ_cBpgIEI.mft
Manifest number: 078D
Signing time: Sun 29 Mar 2026 04:00:20 +0000
Manifest this update: Sun 29 Mar 2026 04:00:20 +0000
Manifest next update: Mon 30 Mar 2026 04:00:20 +0000
Files and hashes: 1: ITyyohgafTb0DkF1jWJ_cBpgIEI.crl (hash: bKOdsKJZaaNMM3Sk+5zTs8YC91P3bdr3d6qAUOW6mW0=)
2: t6rzb9V4CtqE19d3fvrivglZ8JY.roa (hash: 4D9YdlVLAXYceYahdSlYP72+fLVK34lQxVM5oI1tuvo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/dc11d6-4c35-4daa-a7de-3e51bcd14736/1/ITyyohgafTb0DkF1jWJ_cBpgIEI.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/dc11d6-4c35-4daa-a7de-3e51bcd14736/1/ITyyohgafTb0DkF1jWJ_cBpgIEI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ITyyohgafTb0DkF1jWJ_cBpgIEI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:bf:f8:5b:c7:18:e1:24:08:84:3d:b9:8d:79:fd:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=213cb2a2181a7d36f40e41758d627f701a602042
Validity
Not Before: Mar 29 04:00:20 2026 GMT
Not After : Mar 30 04:00:20 2026 GMT
Subject: CN=01bb3a3d32d724885deb05be61c7c3b014ac93ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:9d:69:cc:1b:43:25:1d:5e:d4:21:33:b6:19:
e6:01:da:c3:e0:3f:6f:25:06:e1:61:44:f1:91:57:
a9:8c:ca:d1:3f:6b:b3:35:21:6d:eb:63:58:53:6b:
23:60:1b:ee:21:e1:a6:b1:42:1a:c4:02:08:70:11:
73:d2:e6:c7:dc:fa:0c:22:a4:14:62:4d:26:28:c8:
00:13:b0:02:37:67:b9:f7:44:7e:9a:8c:fd:c3:3a:
60:8a:ad:37:bb:11:32:e0:62:6b:41:8f:bf:50:ec:
2c:91:89:0f:29:b2:e9:4d:a8:bd:4c:08:0d:f8:e6:
99:43:a3:21:6a:61:7f:16:f1:52:bf:82:f9:23:1e:
57:64:59:bc:58:80:bd:40:fc:5d:76:a9:70:15:2e:
61:21:d5:79:9c:76:cf:ed:d0:f3:0c:6d:36:a2:e2:
64:68:8a:5d:df:c1:2a:a0:e6:1e:16:36:3d:ac:c3:
3a:09:24:75:a1:d9:04:b2:3d:b5:ce:55:02:9e:3d:
50:96:24:e1:57:cd:ac:64:4f:1a:55:eb:06:36:28:
57:2e:67:64:62:47:0b:7b:ba:22:37:26:57:96:b1:
e6:95:29:c0:9a:06:9d:96:57:63:30:63:c9:4a:be:
6d:b3:c5:57:db:f5:26:e1:9f:1e:b4:2f:09:0d:8a:
83:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:BB:3A:3D:32:D7:24:88:5D:EB:05:BE:61:C7:C3:B0:14:AC:93:CA
X509v3 Authority Key Identifier:
keyid:21:3C:B2:A2:18:1A:7D:36:F4:0E:41:75:8D:62:7F:70:1A:60:20:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITyyohgafTb0DkF1jWJ_cBpgIEI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/dc11d6-4c35-4daa-a7de-3e51bcd14736/1/ITyyohgafTb0DkF1jWJ_cBpgIEI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/dc11d6-4c35-4daa-a7de-3e51bcd14736/1/ITyyohgafTb0DkF1jWJ_cBpgIEI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:70:6d:a3:d5:6b:38:9e:db:65:6e:be:11:e5:c5:aa:71:ce:
59:b1:52:46:1d:e9:89:f7:e4:e3:50:bd:b0:8f:a9:70:6e:76:
a2:c9:39:d1:98:6a:5a:e2:cb:2b:de:ca:a4:30:c5:1e:13:77:
af:04:a1:a7:23:ee:00:03:30:e8:ba:a0:0b:32:11:3a:6e:29:
0b:73:4e:06:3f:45:97:14:31:74:a2:a6:dc:bf:ee:e5:2d:39:
e0:1e:71:7e:b5:27:55:bf:6a:f9:1c:ed:25:a7:d9:88:5c:12:
54:bc:39:be:99:fb:d4:12:f4:90:6a:9e:39:76:cd:eb:6e:e3:
69:35:d8:9f:81:d0:d9:77:1a:4a:9f:28:1e:96:d4:5c:aa:51:
1d:dc:55:79:06:12:5e:73:14:f6:1d:3b:e5:18:42:75:0a:51:
75:1c:1a:78:b3:df:a5:99:c0:cd:72:17:68:68:0f:18:59:40:
e7:60:03:85:85:85:26:77:8e:21:75:d9:de:b9:7b:9c:be:76:
94:e8:19:5c:29:1a:60:0e:11:0e:34:79:1d:68:23:87:cc:20:
b1:2d:27:7d:bb:f7:db:9c:64:56:06:e9:7d:bd:03:f3:fa:81:
7d:16:6c:55:04:02:f4:e0:28:6c:b3:e0:09:69:28:11:d0:f7:
ae:45:80:f3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03v/hbxxjhJAiEPbmNef0OMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxM2NiMmEyMTgxYTdkMzZmNDBlNDE3NThkNjI3ZjcwMWE2
MDIwNDIwHhcNMjYwMzI5MDQwMDIwWhcNMjYwMzMwMDQwMDIwWjAzMTEwLwYDVQQD
EygwMWJiM2EzZDMyZDcyNDg4NWRlYjA1YmU2MWM3YzNiMDE0YWM5M2NhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlJ1pzBtDJR1e1CEzthnmAdrD4D9v
JQbhYUTxkVepjMrRP2uzNSFt62NYU2sjYBvuIeGmsUIaxAIIcBFz0ubH3PoMIqQU
Yk0mKMgAE7ACN2e590R+moz9wzpgiq03uxEy4GJrQY+/UOwskYkPKbLpTai9TAgN
+OaZQ6MhamF/FvFSv4L5Ix5XZFm8WIC9QPxddqlwFS5hIdV5nHbP7dDzDG02ouJk
aIpd38EqoOYeFjY9rMM6CSR1odkEsj21zlUCnj1QliThV82sZE8aVesGNihXLmdk
YkcLe7oiNyZXlrHmlSnAmgadlldjMGPJSr5ts8VX2/Um4Z8etC8JDYqDHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAG7Oj0y1ySIXesFvmHHw7AUrJPKMB8GA1UdIwQY
MBaAFCE8sqIYGn029A5BdY1if3AaYCBCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVR5eW9oZ2FmVGIwRGtGMWpXSl9jQnBnSUVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9kYzExZDYtNGMzNS00ZGFhLWE3ZGUt
M2U1MWJjZDE0NzM2LzEvSVR5eW9oZ2FmVGIwRGtGMWpXSl9jQnBnSUVJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS9kYzExZDYtNGMzNS00ZGFhLWE3ZGUtM2U1MWJjZDE0NzM2
LzEvSVR5eW9oZ2FmVGIwRGtGMWpXSl9jQnBnSUVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHXBto9Vr
OJ7bZW6+EeXFqnHOWbFSRh3piffk41C9sI+pcG52osk50ZhqWuLLK97KpDDFHhN3
rwShpyPuAAMw6LqgCzIROm4pC3NOBj9FlxQxdKKm3L/u5S054B5xfrUnVb9q+Rzt
JafZiFwSVLw5vpn71BL0kGqeOXbN627jaTXYn4HQ2XcaSp8oHpbUXKpRHdxVeQYS
XnMU9h075RhCdQpRdRwaeLPfpZnAzXIXaGgPGFlA52ADhYWFJneOIXXZ3rl7nL52
lOgZXCkaYA4RDjR5HWgjh8wgsS0nfbv325xkVgbpfb0D8/qBfRZsVQQC9OAobLPg
CWkoEdD3rkWA8w==
-----END CERTIFICATE-----
Generated at Sun Mar 29 13:44:45 2026 by rpki-client