Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/995fbd-91fb-43bb-8f26-cd4bd44275c5/1/tTAFYZaI77r_0G4QikO98gZD4NY.mft
File: tTAFYZaI77r_0G4QikO98gZD4NY.mft (raw, json)
Hash identifier: JFuEvuLhb5EaEJioCVuG2hlFVdIeL1UOh5KxQG1qvzA=
Subject key identifier: DB:B3:6D:B7:E1:93:D0:22:90:2A:79:23:07:B7:74:E7:7F:FE:6D:26
Authority key identifier: B5:30:05:61:96:88:EF:BA:FF:D0:6E:10:8A:43:BD:F2:06:43:E0:D6
Certificate issuer: /CN=b53005619688efbaffd06e108a43bdf20643e0d6
Certificate serial: 019D397834A5600D44ED5A8CE3F87627B474
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tTAFYZaI77r_0G4QikO98gZD4NY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/995fbd-91fb-43bb-8f26-cd4bd44275c5/1/tTAFYZaI77r_0G4QikO98gZD4NY.mft
Manifest number: 1896
Signing time: Sun 29 Mar 2026 12:01:12 +0000
Manifest this update: Sun 29 Mar 2026 12:01:12 +0000
Manifest next update: Mon 30 Mar 2026 12:01:12 +0000
Files and hashes: 1: ExGpRunqaEGx1C87iYbOQskR5uw.roa (hash: RiaEfvnW4XKOfGx9ToOnBoSA9Vrw+toQDu46/ctYlAQ=)
2: SH-0mJS__xq0Nrwordyx2eNpy6E.roa (hash: MFyq3HcX0V4paZzyvO44VehUzFoDp8T3DaYSoMIBwAg=)
3: eUXXUdsIFWgmK4QDPBj079S1krA.roa (hash: tLqc3PNhBtm/slptj0WlzHoHZqeLEYUFaZxJp22uQOY=)
4: tTAFYZaI77r_0G4QikO98gZD4NY.crl (hash: LLNBrs+5MgID3TpOmx8OCD67aPYTPijzq1GGgJ6Jy0w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/995fbd-91fb-43bb-8f26-cd4bd44275c5/1/tTAFYZaI77r_0G4QikO98gZD4NY.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/995fbd-91fb-43bb-8f26-cd4bd44275c5/1/tTAFYZaI77r_0G4QikO98gZD4NY.mft
rsync://rpki.ripe.net/repository/DEFAULT/tTAFYZaI77r_0G4QikO98gZD4NY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:78:34:a5:60:0d:44:ed:5a:8c:e3:f8:76:27:b4:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b53005619688efbaffd06e108a43bdf20643e0d6
Validity
Not Before: Mar 29 12:01:12 2026 GMT
Not After : Mar 30 12:01:12 2026 GMT
Subject: CN=dbb36db7e193d022902a792307b774e77ffe6d26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:f5:e3:74:31:6c:0a:1d:bb:80:3d:8b:04:bb:
62:81:19:3c:2d:4d:cb:48:c4:a9:96:64:44:8d:5d:
e8:67:44:51:ff:7c:b6:f4:11:bb:fa:20:e7:50:28:
e2:e1:d4:3d:c7:12:ee:28:84:a7:59:80:21:eb:4c:
70:70:90:0f:96:f8:08:5c:d0:a1:ce:a7:af:f7:e4:
b8:5a:3d:b3:c4:29:e9:7a:64:91:45:04:31:93:21:
84:01:97:5d:6d:ea:01:73:24:a9:64:57:3f:ab:e9:
a9:e0:9e:d0:7f:21:6d:df:8d:d2:cc:69:64:02:bf:
42:ff:4d:0a:13:d1:67:01:21:7f:76:c0:d8:ed:c4:
fb:94:4b:46:69:0d:d8:8f:38:f9:39:aa:20:38:b8:
fe:eb:27:45:56:87:08:50:7a:12:ad:a6:35:05:20:
0d:39:be:df:b3:48:d1:ec:cd:41:98:ba:30:04:f1:
c3:ca:6c:7b:a3:4e:b5:2a:46:37:25:02:33:bc:2d:
d7:e5:75:a3:f5:e9:14:d3:6c:ef:b0:52:cb:48:ff:
47:b8:29:05:da:b9:74:df:e6:41:a3:5d:d6:32:13:
23:fa:4c:3a:33:22:48:c1:36:33:1d:a6:42:37:82:
26:c0:f5:55:88:4f:21:a0:56:a4:db:a4:75:d6:59:
17:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:B3:6D:B7:E1:93:D0:22:90:2A:79:23:07:B7:74:E7:7F:FE:6D:26
X509v3 Authority Key Identifier:
keyid:B5:30:05:61:96:88:EF:BA:FF:D0:6E:10:8A:43:BD:F2:06:43:E0:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tTAFYZaI77r_0G4QikO98gZD4NY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/995fbd-91fb-43bb-8f26-cd4bd44275c5/1/tTAFYZaI77r_0G4QikO98gZD4NY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/995fbd-91fb-43bb-8f26-cd4bd44275c5/1/tTAFYZaI77r_0G4QikO98gZD4NY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:a1:66:26:8e:b8:99:32:1a:61:b7:b4:b6:bd:30:9f:b8:df:
2f:62:e1:b2:79:eb:48:d1:ac:8e:ac:fb:a2:bf:fe:5e:2f:3a:
39:c9:8f:0b:a5:89:5d:68:0d:0d:36:09:f8:aa:0f:8f:be:20:
31:db:4e:31:c4:4c:20:b9:45:c3:b3:b4:b4:56:f4:86:a3:87:
0d:e7:8e:46:6d:90:e6:b3:09:eb:00:d4:c5:63:f3:6d:45:e5:
dd:67:96:13:e4:e8:ee:df:7e:ad:ab:58:91:96:c2:0b:d2:f2:
ff:f5:ec:b0:89:c3:a8:72:d8:d4:b8:5e:8f:fc:2b:ca:ab:ac:
89:7d:94:bd:45:0d:98:de:8d:0d:b0:0e:c0:c3:e0:34:93:ad:
b7:6d:53:43:a1:33:3b:1e:02:bf:f7:42:e1:a2:93:ed:81:55:
9f:4c:13:84:68:d5:8d:ff:45:19:56:63:e8:5d:0b:86:10:df:
0c:1a:14:02:3d:b0:cd:5e:13:6b:09:7f:aa:14:b1:24:6b:b7:
bd:6e:ff:ed:58:70:6e:21:a6:d6:27:f6:89:78:32:d3:c2:5f:
43:5c:69:3b:b5:ec:4f:2d:1d:c5:20:69:4b:89:86:b0:9a:29:
87:9e:46:aa:b1:c6:6f:a7:dd:93:24:08:9a:dc:e8:27:c4:e8:
7d:ed:bd:45
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05eDSlYA1E7VqM4/h2J7R0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1MzAwNTYxOTY4OGVmYmFmZmQwNmUxMDhhNDNiZGYyMDY0
M2UwZDYwHhcNMjYwMzI5MTIwMTEyWhcNMjYwMzMwMTIwMTEyWjAzMTEwLwYDVQQD
EyhkYmIzNmRiN2UxOTNkMDIyOTAyYTc5MjMwN2I3NzRlNzdmZmU2ZDI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr/XjdDFsCh27gD2LBLtigRk8LU3L
SMSplmREjV3oZ0RR/3y29BG7+iDnUCji4dQ9xxLuKISnWYAh60xwcJAPlvgIXNCh
zqev9+S4Wj2zxCnpemSRRQQxkyGEAZddbeoBcySpZFc/q+mp4J7QfyFt343SzGlk
Ar9C/00KE9FnASF/dsDY7cT7lEtGaQ3Yjzj5OaogOLj+6ydFVocIUHoSraY1BSAN
Ob7fs0jR7M1BmLowBPHDymx7o061KkY3JQIzvC3X5XWj9ekU02zvsFLLSP9HuCkF
2rl03+ZBo13WMhMj+kw6MyJIwTYzHaZCN4ImwPVViE8hoFak26R11lkXXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNuzbbfhk9AikCp5Iwe3dOd//m0mMB8GA1UdIwQY
MBaAFLUwBWGWiO+6/9BuEIpDvfIGQ+DWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFRBRllaYUk3N3JfMEc0UWlrTzk4Z1pENE5ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy85OTVmYmQtOTFmYi00M2JiLThmMjYt
Y2Q0YmQ0NDI3NWM1LzEvdFRBRllaYUk3N3JfMEc0UWlrTzk4Z1pENE5ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNy85OTVmYmQtOTFmYi00M2JiLThmMjYtY2Q0YmQ0NDI3NWM1
LzEvdFRBRllaYUk3N3JfMEc0UWlrTzk4Z1pENE5ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGqFmJo64
mTIaYbe0tr0wn7jfL2LhsnnrSNGsjqz7or/+Xi86OcmPC6WJXWgNDTYJ+KoPj74g
MdtOMcRMILlFw7O0tFb0hqOHDeeORm2Q5rMJ6wDUxWPzbUXl3WeWE+To7t9+ratY
kZbCC9Ly//XssInDqHLY1Lhej/wryqusiX2UvUUNmN6NDbAOwMPgNJOtt21TQ6Ez
Ox4Cv/dC4aKT7YFVn0wThGjVjf9FGVZj6F0LhhDfDBoUAj2wzV4Tawl/qhSxJGu3
vW7/7VhwbiGm1if2iXgy08JfQ1xpO7XsTy0dxSBpS4mGsJoph55GqrHGb6fdkyQI
mtzoJ8Tofe29RQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 18:36:21 2026 by rpki-client