Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d3df26-3db5-4539-8030-f2ce77e3191e/1/TiopnxgqH9UdSwNimXr3qq4Na-k.mft
File: TiopnxgqH9UdSwNimXr3qq4Na-k.mft (raw, json)
Hash identifier: 5jnyKUG4lKTQJ7003CzrZVTNnv1N325NLwSJFqaxLc0=
Subject key identifier: 4E:A1:3A:21:D2:5B:53:21:54:13:CC:E4:D9:BE:D6:80:48:B9:85:36
Authority key identifier: 4E:2A:29:9F:18:2A:1F:D5:1D:4B:03:62:99:7A:F7:AA:AE:0D:6B:E9
Certificate issuer: /CN=4e2a299f182a1fd51d4b0362997af7aaae0d6be9
Certificate serial: 019D389BCE69A75F1E297AB543F0354F53E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TiopnxgqH9UdSwNimXr3qq4Na-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d3df26-3db5-4539-8030-f2ce77e3191e/1/TiopnxgqH9UdSwNimXr3qq4Na-k.mft
Manifest number: 1892
Signing time: Sun 29 Mar 2026 08:00:28 +0000
Manifest this update: Sun 29 Mar 2026 08:00:28 +0000
Manifest next update: Mon 30 Mar 2026 08:00:28 +0000
Files and hashes: 1: 2k317uytVg1LgjGnM4csFnuL6uw.roa (hash: X5Q8tV/hqbcuK15v8loayY7mcbXwTofvZ2nrjL9ZwFs=)
2: RQBMarFkU3OrDTBkZypKiOwxqg8.roa (hash: WhhYg2h0zkcqk2yaFPJERRYww67tY59hAk64ZXv/RAg=)
3: TiopnxgqH9UdSwNimXr3qq4Na-k.crl (hash: kLw2RwrVcLv9sEStRrrWUnjOeuudTwpWYfIloC1qtzM=)
4: v9i47anpnbrdLEZ-n1nwTrZVjyg.roa (hash: z6aINaroQHvMvD3JovJtp4EHLXzys7G2ZYIjVrJrEgw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/d3df26-3db5-4539-8030-f2ce77e3191e/1/TiopnxgqH9UdSwNimXr3qq4Na-k.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/d3df26-3db5-4539-8030-f2ce77e3191e/1/TiopnxgqH9UdSwNimXr3qq4Na-k.mft
rsync://rpki.ripe.net/repository/DEFAULT/TiopnxgqH9UdSwNimXr3qq4Na-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9b:ce:69:a7:5f:1e:29:7a:b5:43:f0:35:4f:53:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e2a299f182a1fd51d4b0362997af7aaae0d6be9
Validity
Not Before: Mar 29 08:00:28 2026 GMT
Not After : Mar 30 08:00:28 2026 GMT
Subject: CN=4ea13a21d25b53215413cce4d9bed68048b98536
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:33:16:b1:1c:f2:9e:17:27:51:2c:4f:81:db:
c9:dc:78:70:55:87:49:9e:72:94:e6:49:9b:12:66:
dd:7a:9a:d1:ce:39:f6:f4:95:58:1d:aa:75:7d:08:
fa:14:ce:4d:74:9e:7a:0d:87:83:c3:3a:c2:88:7f:
8b:9a:41:07:f9:99:f7:4e:56:28:42:a7:e1:04:2c:
a0:86:b7:01:8e:d3:15:05:73:05:ec:2b:9a:3f:0f:
c0:af:39:2c:eb:e4:3e:db:12:7d:11:c1:d7:60:f2:
44:5c:4e:a2:e2:71:fb:7b:63:94:77:28:ce:89:8a:
6e:ed:33:ed:07:48:b0:d4:60:b8:a9:29:36:02:a7:
b8:52:b9:58:24:7e:8e:1e:f8:2c:3e:d5:dc:54:56:
a7:f4:8e:5e:06:46:b1:86:9c:61:2a:4d:2a:d1:32:
17:7b:19:5f:bd:fe:32:7d:9f:35:78:40:7f:53:70:
ca:29:7e:2f:1f:31:f5:17:e1:03:f3:ae:c7:dc:7a:
d3:f9:8f:dd:51:69:7a:68:1f:ef:56:02:48:31:1a:
80:5b:87:40:8a:25:30:0e:4c:ce:53:20:2c:c6:f1:
d8:4d:b2:b9:5e:f1:36:de:a6:c6:da:61:6c:64:53:
41:e3:a1:25:04:44:7c:cd:89:59:38:fa:1e:51:9d:
db:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:A1:3A:21:D2:5B:53:21:54:13:CC:E4:D9:BE:D6:80:48:B9:85:36
X509v3 Authority Key Identifier:
keyid:4E:2A:29:9F:18:2A:1F:D5:1D:4B:03:62:99:7A:F7:AA:AE:0D:6B:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TiopnxgqH9UdSwNimXr3qq4Na-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d3df26-3db5-4539-8030-f2ce77e3191e/1/TiopnxgqH9UdSwNimXr3qq4Na-k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d3df26-3db5-4539-8030-f2ce77e3191e/1/TiopnxgqH9UdSwNimXr3qq4Na-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:6a:ff:99:a1:91:4f:04:d8:b9:20:bf:d8:4c:f0:db:0f:c1:
e4:b5:48:0f:80:e4:55:51:4a:9e:7d:8b:be:1a:0c:d4:81:ff:
81:b5:36:9c:4b:4c:f1:08:d5:b3:03:04:33:34:69:ce:de:ee:
b6:26:f1:26:5c:7e:ed:20:7f:f0:aa:81:3a:fe:58:01:9c:34:
54:c2:54:ca:e4:0e:c3:41:55:23:78:97:b2:10:6d:bb:e8:59:
40:05:a8:99:17:da:ed:1b:8f:53:59:7c:b5:5a:0e:19:95:44:
4e:1a:1f:5f:78:3e:ae:0a:d0:d7:83:1d:e1:96:b1:9e:c6:48:
d7:8f:59:77:52:85:19:fd:bc:4f:9b:b5:81:fa:ca:87:00:50:
4b:af:13:94:78:86:66:9e:1f:f1:23:52:94:e1:fb:17:a3:5f:
cc:5b:1e:1b:ad:32:c6:3e:de:cf:ad:a4:be:92:db:fb:32:cf:
21:92:f8:36:45:1c:85:cd:91:78:dd:a7:35:de:34:94:7f:1a:
7a:09:3b:d1:b7:6d:10:2a:69:b1:a7:a6:09:e1:0b:7a:98:41:
fe:15:c9:4c:99:8f:7d:57:1f:06:3f:fc:64:03:b1:eb:d5:46:
9b:34:22:ec:b9:b6:0c:cb:ad:77:9c:da:46:82:d7:fe:68:d6:
e4:c6:93:82
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04m85pp18eKXq1Q/A1T1PkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRlMmEyOTlmMTgyYTFmZDUxZDRiMDM2Mjk5N2FmN2FhYWUw
ZDZiZTkwHhcNMjYwMzI5MDgwMDI4WhcNMjYwMzMwMDgwMDI4WjAzMTEwLwYDVQQD
Eyg0ZWExM2EyMWQyNWI1MzIxNTQxM2NjZTRkOWJlZDY4MDQ4Yjk4NTM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0DMWsRzynhcnUSxPgdvJ3HhwVYdJ
nnKU5kmbEmbdeprRzjn29JVYHap1fQj6FM5NdJ56DYeDwzrCiH+LmkEH+Zn3TlYo
QqfhBCyghrcBjtMVBXMF7CuaPw/Arzks6+Q+2xJ9EcHXYPJEXE6i4nH7e2OUdyjO
iYpu7TPtB0iw1GC4qSk2Aqe4UrlYJH6OHvgsPtXcVFan9I5eBkaxhpxhKk0q0TIX
exlfvf4yfZ81eEB/U3DKKX4vHzH1F+ED867H3HrT+Y/dUWl6aB/vVgJIMRqAW4dA
iiUwDkzOUyAsxvHYTbK5XvE23qbG2mFsZFNB46ElBER8zYlZOPoeUZ3bQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE6hOiHSW1MhVBPM5Nm+1oBIuYU2MB8GA1UdIwQY
MBaAFE4qKZ8YKh/VHUsDYpl696quDWvpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVGlvcG54Z3FIOVVkU3dOaW1YcjNxcTROYS1rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9kM2RmMjYtM2RiNS00NTM5LTgwMzAt
ZjJjZTc3ZTMxOTFlLzEvVGlvcG54Z3FIOVVkU3dOaW1YcjNxcTROYS1rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC9kM2RmMjYtM2RiNS00NTM5LTgwMzAtZjJjZTc3ZTMxOTFl
LzEvVGlvcG54Z3FIOVVkU3dOaW1YcjNxcTROYS1rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArWr/maGR
TwTYuSC/2Ezw2w/B5LVID4DkVVFKnn2LvhoM1IH/gbU2nEtM8QjVswMEMzRpzt7u
tibxJlx+7SB/8KqBOv5YAZw0VMJUyuQOw0FVI3iXshBtu+hZQAWomRfa7RuPU1l8
tVoOGZVEThofX3g+rgrQ14Md4ZaxnsZI149Zd1KFGf28T5u1gfrKhwBQS68TlHiG
Zp4f8SNSlOH7F6NfzFseG60yxj7ez62kvpLb+zLPIZL4NkUchc2ReN2nNd40lH8a
egk70bdtECppsaemCeELephB/hXJTJmPfVcfBj/8ZAOx69VGmzQi7Lm2DMutd5za
RoLX/mjW5MaTgg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:53:12 2026 by rpki-client