Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/a5056f-6948-4130-9077-5f3d06f6a5d2/1/TEvkM5Snwr8ej9-7HVBvo3rHMjE.mft
File: TEvkM5Snwr8ej9-7HVBvo3rHMjE.mft (raw, json)
Hash identifier: Q7kcSSUEV2htT+7A4B30fXKAIntYVV+onlexQt7pDcM=
Subject key identifier: 88:AC:60:66:C9:05:7C:DD:26:E7:66:96:8C:28:6E:8C:17:59:B6:31
Authority key identifier: 4C:4B:E4:33:94:A7:C2:BF:1E:8F:DF:BB:1D:50:6F:A3:7A:C7:32:31
Certificate issuer: /CN=4c4be43394a7c2bf1e8fdfbb1d506fa37ac73231
Certificate serial: 019D386667FD952693AB046BC3748EE4D7B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TEvkM5Snwr8ej9-7HVBvo3rHMjE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/a5056f-6948-4130-9077-5f3d06f6a5d2/1/TEvkM5Snwr8ej9-7HVBvo3rHMjE.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 07:02:08 +0000
Manifest this update: Sun 29 Mar 2026 07:02:08 +0000
Manifest next update: Mon 30 Mar 2026 07:02:08 +0000
Files and hashes: 1: HvD-KyEebZg0h4HW06zJm6RwnGU.roa (hash: VtrmuoyXYF78h8UEa9MliL+Xy0F2Gl7FRj7/hpHAjYA=)
2: TEvkM5Snwr8ej9-7HVBvo3rHMjE.crl (hash: TViU1t8zA2MIJIyhIfZsvAtmoUX2slW9EELmr3vXKaM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/a5056f-6948-4130-9077-5f3d06f6a5d2/1/TEvkM5Snwr8ej9-7HVBvo3rHMjE.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/a5056f-6948-4130-9077-5f3d06f6a5d2/1/TEvkM5Snwr8ej9-7HVBvo3rHMjE.mft
rsync://rpki.ripe.net/repository/DEFAULT/TEvkM5Snwr8ej9-7HVBvo3rHMjE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:67:fd:95:26:93:ab:04:6b:c3:74:8e:e4:d7:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c4be43394a7c2bf1e8fdfbb1d506fa37ac73231
Validity
Not Before: Mar 29 07:02:08 2026 GMT
Not After : Mar 30 07:02:08 2026 GMT
Subject: CN=88ac6066c9057cdd26e766968c286e8c1759b631
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:5d:5b:ee:c4:70:ee:a3:48:ab:7b:c6:90:f5:
e8:ab:24:48:7d:26:5a:56:39:e0:cf:67:dd:47:07:
15:24:d0:d9:7a:fc:fa:02:a1:fa:bb:dd:ce:af:bf:
81:5c:00:5a:3b:d2:ba:a1:fd:18:6d:25:7f:80:2e:
67:f7:2d:d4:fe:e4:07:66:39:68:41:ba:c7:f8:50:
70:64:a5:72:8c:e3:44:16:a2:1a:de:3c:81:1f:cb:
7b:8e:8a:09:4d:f6:8c:e0:4b:34:ef:4a:7d:76:73:
44:56:df:01:bf:71:c0:81:b4:d1:05:ce:d1:ed:6c:
8a:1f:53:e0:0b:11:32:d7:76:4d:5a:33:f4:c1:cb:
92:19:ff:57:d1:80:dd:bb:b8:c8:a0:66:52:e8:50:
35:60:2a:58:d8:00:8d:7b:2f:19:a7:1e:3f:72:fa:
4a:f5:1a:6d:bb:7e:0a:7b:b9:8e:53:d6:09:f8:0d:
a4:b1:f3:45:be:43:e9:92:e8:7e:53:26:b5:4e:1c:
4f:4e:ad:67:99:12:a6:9f:dc:13:2f:71:80:63:fb:
43:93:3a:e4:bb:ea:51:f3:73:dd:7c:fe:76:e1:15:
70:2f:b7:64:3c:20:2b:49:ad:2e:e8:db:74:5e:03:
ca:32:b3:3c:26:61:35:84:b5:b3:94:bc:97:fa:f8:
76:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:AC:60:66:C9:05:7C:DD:26:E7:66:96:8C:28:6E:8C:17:59:B6:31
X509v3 Authority Key Identifier:
keyid:4C:4B:E4:33:94:A7:C2:BF:1E:8F:DF:BB:1D:50:6F:A3:7A:C7:32:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TEvkM5Snwr8ej9-7HVBvo3rHMjE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/a5056f-6948-4130-9077-5f3d06f6a5d2/1/TEvkM5Snwr8ej9-7HVBvo3rHMjE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/a5056f-6948-4130-9077-5f3d06f6a5d2/1/TEvkM5Snwr8ej9-7HVBvo3rHMjE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:de:ef:be:ba:4a:47:0c:72:f3:35:74:14:c0:ad:77:41:e3:
74:38:37:48:52:aa:96:71:6d:57:2f:ec:46:00:b2:c6:32:1a:
50:8b:e6:c0:4c:b4:d6:88:c8:55:3e:02:10:1c:b5:17:89:6c:
8d:6a:4e:25:88:e0:04:a1:9a:22:e5:e3:ff:08:d2:bf:25:6d:
74:16:39:86:9f:ea:5f:90:d3:f8:fd:ed:b0:8d:90:e1:c6:a4:
92:83:95:06:23:70:7e:77:96:be:99:4c:53:cf:d1:ec:07:9e:
32:49:1d:d9:ae:bb:82:f9:ef:02:53:80:3f:db:17:44:76:80:
99:e0:e8:9b:79:54:b7:ec:7c:b9:98:10:9d:60:25:dc:3c:83:
b1:ab:fe:a3:35:af:1e:e6:3e:4e:92:49:04:ff:6c:0e:a0:73:
51:cf:a7:c1:23:d3:0a:21:d1:3e:9e:b9:c2:39:c4:88:9d:24:
43:a7:e6:25:fb:41:fa:40:ac:07:10:b5:5d:97:d0:b6:de:65:
ca:de:72:8d:7e:91:6d:e3:95:59:dd:e9:d4:45:8e:d9:fa:7e:
05:8a:88:2c:9f:b5:fd:a0:39:b1:2a:85:61:bb:c2:65:4e:49:
00:08:a1:22:59:03:58:c3:9c:34:3e:7c:34:cb:d8:d6:75:b7:
11:7e:d3:f8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04Zmf9lSaTqwRrw3SO5Ne2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjNGJlNDMzOTRhN2MyYmYxZThmZGZiYjFkNTA2ZmEzN2Fj
NzMyMzEwHhcNMjYwMzI5MDcwMjA4WhcNMjYwMzMwMDcwMjA4WjAzMTEwLwYDVQQD
Eyg4OGFjNjA2NmM5MDU3Y2RkMjZlNzY2OTY4YzI4NmU4YzE3NTliNjMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnl1b7sRw7qNIq3vGkPXoqyRIfSZa
Vjngz2fdRwcVJNDZevz6AqH6u93Or7+BXABaO9K6of0YbSV/gC5n9y3U/uQHZjlo
QbrH+FBwZKVyjONEFqIa3jyBH8t7jooJTfaM4Es070p9dnNEVt8Bv3HAgbTRBc7R
7WyKH1PgCxEy13ZNWjP0wcuSGf9X0YDdu7jIoGZS6FA1YCpY2ACNey8Zpx4/cvpK
9Rptu34Ke7mOU9YJ+A2ksfNFvkPpkuh+Uya1ThxPTq1nmRKmn9wTL3GAY/tDkzrk
u+pR83PdfP524RVwL7dkPCArSa0u6Nt0XgPKMrM8JmE1hLWzlLyX+vh29wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIisYGbJBXzdJudmlowobowXWbYxMB8GA1UdIwQY
MBaAFExL5DOUp8K/Ho/fux1Qb6N6xzIxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVEV2a001U253cjhlajktN0hWQnZvM3JITWpFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC9hNTA1NmYtNjk0OC00MTMwLTkwNzct
NWYzZDA2ZjZhNWQyLzEvVEV2a001U253cjhlajktN0hWQnZvM3JITWpFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZC9hNTA1NmYtNjk0OC00MTMwLTkwNzctNWYzZDA2ZjZhNWQy
LzEvVEV2a001U253cjhlajktN0hWQnZvM3JITWpFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaN7vvrpK
Rwxy8zV0FMCtd0HjdDg3SFKqlnFtVy/sRgCyxjIaUIvmwEy01ojIVT4CEBy1F4ls
jWpOJYjgBKGaIuXj/wjSvyVtdBY5hp/qX5DT+P3tsI2Q4cakkoOVBiNwfneWvplM
U8/R7AeeMkkd2a67gvnvAlOAP9sXRHaAmeDom3lUt+x8uZgQnWAl3DyDsav+ozWv
HuY+TpJJBP9sDqBzUc+nwSPTCiHRPp65wjnEiJ0kQ6fmJftB+kCsBxC1XZfQtt5l
yt5yjX6RbeOVWd3p1EWO2fp+BYqILJ+1/aA5sSqFYbvCZU5JAAihIlkDWMOcND58
NMvY1nW3EX7T+A==
-----END CERTIFICATE-----
Generated at Sun Mar 29 14:56:03 2026 by rpki-client