Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/cb8339-cee3-4037-bacc-dc8b52e3ea0a/1/TV8MsGpaR7TdrH9Nbf1Eq6TTHy4.mft
File: TV8MsGpaR7TdrH9Nbf1Eq6TTHy4.mft (raw, json)
Hash identifier: lwmfroe0gTI2dDE0KtB/Wsgi3RLt4pHM8l3LiydfpuE=
Subject key identifier: 52:C0:19:53:A3:D7:46:E8:DC:A5:D5:D7:32:63:93:D0:04:E1:2A:B3
Authority key identifier: 4D:5F:0C:B0:6A:5A:47:B4:DD:AC:7F:4D:6D:FD:44:AB:A4:D3:1F:2E
Certificate issuer: /CN=4d5f0cb06a5a47b4ddac7f4d6dfd44aba4d31f2e
Certificate serial: 019D3941687EB3BBB8B48A6B50428A632203
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TV8MsGpaR7TdrH9Nbf1Eq6TTHy4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/cb8339-cee3-4037-bacc-dc8b52e3ea0a/1/TV8MsGpaR7TdrH9Nbf1Eq6TTHy4.mft
Manifest number: 189C
Signing time: Sun 29 Mar 2026 11:01:21 +0000
Manifest this update: Sun 29 Mar 2026 11:01:21 +0000
Manifest next update: Mon 30 Mar 2026 11:01:21 +0000
Files and hashes: 1: S_xAw4TAKD0Hmw2xnhtHL3k5aoY.roa (hash: vxfwKl9OJNlj62NwZPK4TBDjwebx7L8XA//O2MRpF/I=)
2: TV8MsGpaR7TdrH9Nbf1Eq6TTHy4.crl (hash: DQjDbzjS0qfqY1+7zNaHyItZwsFtVtA0MHLwrzKQ9ZM=)
3: c-YCWyzoKuSSywaDEkzGQvM7mCM.roa (hash: LATRwAOMpRe3Y12ruNlNc3V0nVK0fS7nwrlPNDtss+I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/cb8339-cee3-4037-bacc-dc8b52e3ea0a/1/TV8MsGpaR7TdrH9Nbf1Eq6TTHy4.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/cb8339-cee3-4037-bacc-dc8b52e3ea0a/1/TV8MsGpaR7TdrH9Nbf1Eq6TTHy4.mft
rsync://rpki.ripe.net/repository/DEFAULT/TV8MsGpaR7TdrH9Nbf1Eq6TTHy4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:68:7e:b3:bb:b8:b4:8a:6b:50:42:8a:63:22:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d5f0cb06a5a47b4ddac7f4d6dfd44aba4d31f2e
Validity
Not Before: Mar 29 11:01:21 2026 GMT
Not After : Mar 30 11:01:21 2026 GMT
Subject: CN=52c01953a3d746e8dca5d5d7326393d004e12ab3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:9b:ae:45:76:df:68:5a:06:ba:1c:71:93:d4:
10:6c:ae:54:d2:f0:4e:37:4d:20:54:c1:d5:ed:24:
76:54:08:cd:ad:33:b0:3f:6d:25:bf:c0:db:35:50:
6e:f2:0e:92:3a:3b:1b:c1:7e:06:fc:4d:e0:cf:37:
e8:5c:7b:1b:ec:21:77:81:38:8e:8d:09:a4:cb:a8:
58:94:1d:7a:0d:34:0b:7d:04:24:d1:ba:83:e0:9f:
5d:3c:6e:5d:ac:3e:3e:19:30:1a:ab:6a:9a:a5:2e:
e5:33:e6:01:9a:6b:f8:f1:d2:5b:0a:44:7f:c5:fe:
9c:80:06:bc:bb:19:5a:fc:0d:ae:7d:40:25:e8:96:
d6:1b:52:9b:80:80:41:42:1b:61:bf:19:09:db:3c:
50:c2:3f:b5:50:79:37:bd:6d:ba:59:bf:17:3b:54:
a3:16:69:67:71:ea:d4:b1:8b:2b:bc:04:da:66:44:
c5:48:6d:de:c4:2f:78:8a:87:c6:3e:ae:bf:06:8b:
f9:bc:8c:b9:4b:0a:5d:cf:2e:6b:31:5c:69:f9:13:
6d:b6:c4:f6:d0:51:92:9e:54:94:72:77:01:78:91:
4f:5d:d9:04:21:f7:c5:b2:df:d8:9f:ae:69:57:90:
3e:00:93:99:75:fc:4d:76:0e:65:16:5d:15:0d:b7:
3a:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:C0:19:53:A3:D7:46:E8:DC:A5:D5:D7:32:63:93:D0:04:E1:2A:B3
X509v3 Authority Key Identifier:
keyid:4D:5F:0C:B0:6A:5A:47:B4:DD:AC:7F:4D:6D:FD:44:AB:A4:D3:1F:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TV8MsGpaR7TdrH9Nbf1Eq6TTHy4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/cb8339-cee3-4037-bacc-dc8b52e3ea0a/1/TV8MsGpaR7TdrH9Nbf1Eq6TTHy4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/cb8339-cee3-4037-bacc-dc8b52e3ea0a/1/TV8MsGpaR7TdrH9Nbf1Eq6TTHy4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:17:de:e4:83:83:cf:8d:f2:24:32:4c:10:fb:62:e6:91:a6:
d4:e7:ed:74:0e:16:27:12:b0:59:c4:6a:21:f9:99:8a:1a:88:
a1:70:89:87:2a:a6:75:04:c2:bb:aa:cd:4b:1d:3d:1b:5d:62:
07:76:96:5e:31:3c:d5:6d:ff:ff:08:ab:57:e9:74:2b:d5:d8:
7a:9f:43:78:41:b2:54:aa:b2:65:bd:bf:8d:97:0a:b0:9d:8e:
39:47:14:78:dd:16:93:db:a8:7a:9b:5a:e5:2f:c5:28:05:a6:
cd:ab:90:a4:ce:af:e8:c3:29:43:75:8f:a0:61:d7:97:46:5a:
97:a7:b9:57:a4:72:ae:2a:fb:ad:65:19:17:29:d7:ff:da:0f:
3a:0b:75:3b:bf:d9:f6:be:22:9a:0c:fc:27:f3:c7:3c:51:0b:
0f:c4:97:36:24:12:7a:bf:ff:02:70:6a:dc:22:fb:90:d5:70:
92:29:58:44:d8:72:53:a8:c6:22:8e:65:3b:31:f8:c1:81:6f:
d7:d3:0a:ce:47:ad:af:18:44:d9:bc:1b:b6:04:76:b6:49:a4:
fc:f6:98:25:f7:52:2a:45:40:1e:5f:6a:3d:f0:6b:53:7c:37:
e4:c2:66:e5:5f:97:bd:54:f7:0d:ca:f5:22:1a:d1:32:a2:e6:
e2:51:af:0a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05QWh+s7u4tIprUEKKYyIDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRkNWYwY2IwNmE1YTQ3YjRkZGFjN2Y0ZDZkZmQ0NGFiYTRk
MzFmMmUwHhcNMjYwMzI5MTEwMTIxWhcNMjYwMzMwMTEwMTIxWjAzMTEwLwYDVQQD
Eyg1MmMwMTk1M2EzZDc0NmU4ZGNhNWQ1ZDczMjYzOTNkMDA0ZTEyYWIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2puuRXbfaFoGuhxxk9QQbK5U0vBO
N00gVMHV7SR2VAjNrTOwP20lv8DbNVBu8g6SOjsbwX4G/E3gzzfoXHsb7CF3gTiO
jQmky6hYlB16DTQLfQQk0bqD4J9dPG5drD4+GTAaq2qapS7lM+YBmmv48dJbCkR/
xf6cgAa8uxla/A2ufUAl6JbWG1KbgIBBQhthvxkJ2zxQwj+1UHk3vW26Wb8XO1Sj
FmlncerUsYsrvATaZkTFSG3exC94iofGPq6/Bov5vIy5Swpdzy5rMVxp+RNttsT2
0FGSnlSUcncBeJFPXdkEIffFst/Yn65pV5A+AJOZdfxNdg5lFl0VDbc6fwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFLAGVOj10bo3KXV1zJjk9AE4SqzMB8GA1UdIwQY
MBaAFE1fDLBqWke03ax/TW39RKuk0x8uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVFY4TXNHcGFSN1Rkckg5TmJmMUVxNlRUSHk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi9jYjgzMzktY2VlMy00MDM3LWJhY2Mt
ZGM4YjUyZTNlYTBhLzEvVFY4TXNHcGFSN1Rkckg5TmJmMUVxNlRUSHk0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMi9jYjgzMzktY2VlMy00MDM3LWJhY2MtZGM4YjUyZTNlYTBh
LzEvVFY4TXNHcGFSN1Rkckg5TmJmMUVxNlRUSHk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnRfe5IOD
z43yJDJMEPti5pGm1OftdA4WJxKwWcRqIfmZihqIoXCJhyqmdQTCu6rNSx09G11i
B3aWXjE81W3//wirV+l0K9XYep9DeEGyVKqyZb2/jZcKsJ2OOUcUeN0Wk9uoepta
5S/FKAWmzauQpM6v6MMpQ3WPoGHXl0Zal6e5V6Ryrir7rWUZFynX/9oPOgt1O7/Z
9r4imgz8J/PHPFELD8SXNiQSer//AnBq3CL7kNVwkilYRNhyU6jGIo5lOzH4wYFv
19MKzketrxhE2bwbtgR2tkmk/PaYJfdSKkVAHl9qPfBrU3w35MJm5V+XvVT3Dcr1
IhrRMqLm4lGvCg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 17:00:17 2026 by rpki-client