Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/80d9df-eaf3-48b6-8fd5-0acc892b11d2/1/TzYQM0T807V1ny2z88cHE3b54jM.mft
File: TzYQM0T807V1ny2z88cHE3b54jM.mft (raw, json)
Hash identifier: u/TSvtwetPeNPF7EB6VPmaIUlAae5hOxtDkMzaOG+P8=
Subject key identifier: D0:8C:15:DD:AD:94:26:7F:E1:0A:7D:87:80:6E:C0:BE:7A:85:1B:69
Authority key identifier: 4F:36:10:33:44:FC:D3:B5:75:9F:2D:B3:F3:C7:07:13:76:F9:E2:33
Certificate issuer: /CN=4f36103344fcd3b5759f2db3f3c7071376f9e233
Certificate serial: 019D39E53C90D75CAFD3DCEB8717A69CF6C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TzYQM0T807V1ny2z88cHE3b54jM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/80d9df-eaf3-48b6-8fd5-0acc892b11d2/1/TzYQM0T807V1ny2z88cHE3b54jM.mft
Manifest number: 187E
Signing time: Sun 29 Mar 2026 14:00:17 +0000
Manifest this update: Sun 29 Mar 2026 14:00:17 +0000
Manifest next update: Mon 30 Mar 2026 14:00:17 +0000
Files and hashes: 1: 87ELvGR-tVd6OIalv11-VasMdI0.roa (hash: GT+ViPlDKtnswlta2ucK3jOCqFPeg5F12bpU1G0NLyM=)
2: 9HtQbFiuMYK5vn6ZdJ9A8WN33CU.roa (hash: NhpPo4MiaM2h+3uIW+206u04bojlNWdCKr/u5d1izOo=)
3: EgoHat_Mmduzy9sVoMLljVSWe1M.roa (hash: sKWx6PYAthDawxft6PEnQMKdlybWEO/LK5TV06bp3aI=)
4: Kdv421FxArGX_lR7dnoK8dbBkd8.roa (hash: QF5wI0hLNiGqV5YB/2mk9biUU4gFL01FMlpDcSvN+Dk=)
5: TzYQM0T807V1ny2z88cHE3b54jM.crl (hash: DWqR9VIT3p5SPqS5DuEVpHIzZPD7GK/4CYB6v5lvC9k=)
6: VOy2pqg45DcbaU8g-AYkzB6uwX4.roa (hash: VFjQyoH7Ml5NUEDn/pVO3lEP5cH7fnzrRe/Tnl0alSQ=)
7: jueFlTq5Wpmf63P1qlwF3ekSIBo.roa (hash: 73q0Fc/38Tfq14N513XX+nWtiK95t2QQLqH0dSyYsFc=)
8: weCSLgcy81oriQwLxEbz5cBeJzg.roa (hash: TJPfh6TbLdnCL07UGvGbszVyYvuSMqDOujw1k7u6TFw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/80d9df-eaf3-48b6-8fd5-0acc892b11d2/1/TzYQM0T807V1ny2z88cHE3b54jM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/80d9df-eaf3-48b6-8fd5-0acc892b11d2/1/TzYQM0T807V1ny2z88cHE3b54jM.mft
rsync://rpki.ripe.net/repository/DEFAULT/TzYQM0T807V1ny2z88cHE3b54jM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:e5:3c:90:d7:5c:af:d3:dc:eb:87:17:a6:9c:f6:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f36103344fcd3b5759f2db3f3c7071376f9e233
Validity
Not Before: Mar 29 14:00:17 2026 GMT
Not After : Mar 30 14:00:17 2026 GMT
Subject: CN=d08c15ddad94267fe10a7d87806ec0be7a851b69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:f8:09:12:27:d4:ab:13:28:a5:3b:53:f2:7a:
4a:d7:89:75:36:db:36:f0:d6:93:d1:e1:54:f2:2c:
9f:72:49:c0:a8:de:11:3e:74:dd:8a:87:c2:0e:df:
bc:b5:40:cf:b5:c1:55:2c:1c:24:4b:9b:4c:44:7a:
23:8c:89:4c:35:de:7a:16:3d:66:f9:2c:da:39:65:
19:ae:31:ac:5f:05:93:4f:e6:a1:f5:a4:6c:18:c7:
3a:9d:59:75:a3:db:79:5e:9b:3b:23:b6:0d:98:46:
57:91:15:b6:22:b4:bb:64:a2:02:17:a4:57:e8:46:
e5:08:5d:75:ab:15:ef:10:22:7f:62:90:19:b6:dd:
03:6d:9a:37:63:42:22:96:85:c7:61:55:fe:3c:e8:
54:49:9a:00:2e:e6:51:24:17:ae:ff:03:f8:76:08:
79:d4:3a:92:48:db:0d:da:f9:03:75:48:5b:0d:60:
62:d6:bd:97:3d:db:38:97:04:0b:d5:7b:e0:67:54:
ae:38:3d:91:6c:cb:8f:28:df:27:16:b4:b1:af:34:
26:94:e3:ed:e3:9f:b4:19:36:7e:e4:a2:0a:61:29:
2a:73:0f:52:fd:fb:df:88:25:e2:9b:94:2d:b1:cb:
b7:cb:e7:30:d3:d5:45:f4:af:4c:4b:aa:c1:e1:66:
cd:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:8C:15:DD:AD:94:26:7F:E1:0A:7D:87:80:6E:C0:BE:7A:85:1B:69
X509v3 Authority Key Identifier:
keyid:4F:36:10:33:44:FC:D3:B5:75:9F:2D:B3:F3:C7:07:13:76:F9:E2:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TzYQM0T807V1ny2z88cHE3b54jM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/80d9df-eaf3-48b6-8fd5-0acc892b11d2/1/TzYQM0T807V1ny2z88cHE3b54jM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/80d9df-eaf3-48b6-8fd5-0acc892b11d2/1/TzYQM0T807V1ny2z88cHE3b54jM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:33:fe:03:f8:d4:65:7e:4a:05:eb:7a:90:6d:e0:cc:68:5f:
aa:59:34:96:83:0d:ac:8c:28:37:e4:c3:32:68:7b:73:41:9e:
69:7e:87:4e:58:ab:03:39:41:22:84:97:6c:b9:63:af:6b:ec:
fc:70:ff:7a:7f:26:3a:4a:f6:1a:3a:1e:a5:8b:0b:9b:89:9c:
33:29:a4:7c:05:0d:87:ce:99:d2:5a:4d:14:81:6d:fc:5a:0e:
0d:a7:13:ed:48:9f:34:cb:2f:4d:c0:89:1f:14:f3:b1:67:f5:
08:2d:ff:66:6c:e7:d5:8f:89:18:ed:db:09:c6:2a:bd:33:bb:
8c:bb:6f:81:c8:aa:e6:64:27:1f:e3:ed:2d:53:66:29:51:cd:
7a:94:ed:bd:4a:14:6b:fc:d4:4b:d1:e7:b2:10:04:1d:83:8e:
6d:23:aa:f3:b0:7f:38:41:b0:d9:c7:d9:f2:ed:fa:cb:b0:86:
92:b7:8d:8e:eb:21:a9:1d:39:8a:0b:54:3b:35:01:7d:52:6c:
e8:db:4b:f9:9f:05:fc:05:8c:aa:ac:5e:0e:da:de:d9:c5:c3:
f8:e1:f9:1d:63:3e:e9:09:97:fb:1f:08:8a:f7:b7:76:fe:df:
c3:93:d2:2f:6c:15:49:84:ab:62:59:1b:fe:45:e2:c5:3d:97:
08:c0:2c:7f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ055TyQ11yv09zrhxemnPbHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMzYxMDMzNDRmY2QzYjU3NTlmMmRiM2YzYzcwNzEzNzZm
OWUyMzMwHhcNMjYwMzI5MTQwMDE3WhcNMjYwMzMwMTQwMDE3WjAzMTEwLwYDVQQD
EyhkMDhjMTVkZGFkOTQyNjdmZTEwYTdkODc4MDZlYzBiZTdhODUxYjY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlPgJEifUqxMopTtT8npK14l1Nts2
8NaT0eFU8iyfcknAqN4RPnTdiofCDt+8tUDPtcFVLBwkS5tMRHojjIlMNd56Fj1m
+SzaOWUZrjGsXwWTT+ah9aRsGMc6nVl1o9t5Xps7I7YNmEZXkRW2IrS7ZKICF6RX
6EblCF11qxXvECJ/YpAZtt0DbZo3Y0IiloXHYVX+POhUSZoALuZRJBeu/wP4dgh5
1DqSSNsN2vkDdUhbDWBi1r2XPds4lwQL1XvgZ1SuOD2RbMuPKN8nFrSxrzQmlOPt
45+0GTZ+5KIKYSkqcw9S/fvfiCXim5Qtscu3y+cw09VF9K9MS6rB4WbNiwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNCMFd2tlCZ/4Qp9h4BuwL56hRtpMB8GA1UdIwQY
MBaAFE82EDNE/NO1dZ8ts/PHBxN2+eIzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHpZUU0wVDgwN1Yxbnkyejg4Y0hFM2I1NGpNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy84MGQ5ZGYtZWFmMy00OGI2LThmZDUt
MGFjYzg5MmIxMWQyLzEvVHpZUU0wVDgwN1Yxbnkyejg4Y0hFM2I1NGpNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYy84MGQ5ZGYtZWFmMy00OGI2LThmZDUtMGFjYzg5MmIxMWQy
LzEvVHpZUU0wVDgwN1Yxbnkyejg4Y0hFM2I1NGpNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFDP+A/jU
ZX5KBet6kG3gzGhfqlk0loMNrIwoN+TDMmh7c0GeaX6HTlirAzlBIoSXbLljr2vs
/HD/en8mOkr2GjoepYsLm4mcMymkfAUNh86Z0lpNFIFt/FoODacT7UifNMsvTcCJ
HxTzsWf1CC3/Zmzn1Y+JGO3bCcYqvTO7jLtvgciq5mQnH+PtLVNmKVHNepTtvUoU
a/zUS9HnshAEHYOObSOq87B/OEGw2cfZ8u36y7CGkreNjushqR05igtUOzUBfVJs
6NtL+Z8F/AWMqqxeDtre2cXD+OH5HWM+6QmX+x8Iive3dv7fw5PSL2wVSYSrYlkb
/kXixT2XCMAsfw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 18:46:12 2026 by rpki-client