Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/9e9122-bbff-48d9-98c6-0a4286f3cfbe/1/tfV-SevwmLxT6Ns4iIHJI2nZv4w.mft
File: tfV-SevwmLxT6Ns4iIHJI2nZv4w.mft (raw, json)
Hash identifier: rbkZmqXXQ0xHwEV8OQvToCIDqqleLBvfvR6/r9CAuUA=
Subject key identifier: 5B:EC:E8:7A:D0:4D:3E:29:8A:07:FF:FE:7E:45:1A:C3:33:32:C1:46
Authority key identifier: B5:F5:7E:49:EB:F0:98:BC:53:E8:DB:38:88:81:C9:23:69:D9:BF:8C
Certificate issuer: /CN=b5f57e49ebf098bc53e8db388881c92369d9bf8c
Certificate serial: 019DCFE34EEA5E506C05400C6E37B370A5EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tfV-SevwmLxT6Ns4iIHJI2nZv4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/9e9122-bbff-48d9-98c6-0a4286f3cfbe/1/tfV-SevwmLxT6Ns4iIHJI2nZv4w.mft
Manifest number: 1661
Signing time: Mon 27 Apr 2026 17:01:13 +0000
Manifest this update: Mon 27 Apr 2026 17:01:13 +0000
Manifest next update: Tue 28 Apr 2026 17:01:13 +0000
Files and hashes: 1: 7zP-vrGMSLLfqRfiE-wgv93MQnc.roa (hash: RFbWknjP21J0ZtXdcY+/jqdLrNcb7a87Mqd1uXals1g=)
2: GmKON0n4q41F09JbkIeSWlYg2vg.roa (hash: MA8HRllJQ5XTGjB4uhWUi8OdDfPzCM6iy7P4PReIInE=)
3: tfV-SevwmLxT6Ns4iIHJI2nZv4w.crl (hash: d9NG8ERjnA6rhTDhkVINxsjKDhXXeycSKLr1XogValc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/9e9122-bbff-48d9-98c6-0a4286f3cfbe/1/tfV-SevwmLxT6Ns4iIHJI2nZv4w.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/9e9122-bbff-48d9-98c6-0a4286f3cfbe/1/tfV-SevwmLxT6Ns4iIHJI2nZv4w.mft
rsync://rpki.ripe.net/repository/DEFAULT/tfV-SevwmLxT6Ns4iIHJI2nZv4w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 17:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cf:e3:4e:ea:5e:50:6c:05:40:0c:6e:37:b3:70:a5:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5f57e49ebf098bc53e8db388881c92369d9bf8c
Validity
Not Before: Apr 27 17:01:13 2026 GMT
Not After : Apr 28 17:01:13 2026 GMT
Subject: CN=5bece87ad04d3e298a07fffe7e451ac33332c146
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:ef:ef:36:d7:7b:1b:24:7b:8f:95:f7:b0:ac:
f5:97:46:bc:cd:1c:b4:5a:b3:86:d2:0a:0f:ae:0a:
d7:a9:f9:e8:20:e6:5d:92:51:40:4d:0d:af:58:0c:
f0:c0:fb:01:76:ed:6b:63:69:74:84:ae:c2:73:71:
a4:71:8c:77:33:c2:b6:d4:67:cf:df:27:e6:94:13:
52:4d:a4:3b:69:6f:ab:79:ce:6e:8a:19:a5:e2:4b:
71:c7:fe:b6:a5:9d:c3:05:1c:a3:a3:0c:cf:fd:0d:
c8:e7:6e:b4:59:3a:7a:65:02:b2:72:d8:1a:a3:3a:
01:0d:99:1f:22:4f:e0:d2:d5:1b:c3:39:0b:bc:57:
76:5a:f6:bd:59:89:b2:48:cc:37:c5:12:f7:29:e1:
7a:b0:4f:eb:ef:42:a9:ec:4a:1a:54:f1:5c:01:c1:
58:83:be:62:75:9d:4d:97:66:03:7d:13:38:d3:48:
4d:da:a0:fc:4f:c3:2d:a1:5e:04:7e:c7:32:c7:c5:
e4:52:36:bd:f1:30:0c:00:7f:26:0b:30:85:b2:e0:
d5:4b:42:4d:32:e0:09:d5:33:59:67:95:21:2b:e9:
be:8b:68:66:77:94:15:27:fe:69:e7:d0:56:ba:ff:
c7:2c:3b:e4:89:a1:f7:66:84:71:97:5d:f0:6a:19:
c4:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:EC:E8:7A:D0:4D:3E:29:8A:07:FF:FE:7E:45:1A:C3:33:32:C1:46
X509v3 Authority Key Identifier:
keyid:B5:F5:7E:49:EB:F0:98:BC:53:E8:DB:38:88:81:C9:23:69:D9:BF:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tfV-SevwmLxT6Ns4iIHJI2nZv4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/9e9122-bbff-48d9-98c6-0a4286f3cfbe/1/tfV-SevwmLxT6Ns4iIHJI2nZv4w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/9e9122-bbff-48d9-98c6-0a4286f3cfbe/1/tfV-SevwmLxT6Ns4iIHJI2nZv4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:77:08:3e:ec:8f:b3:51:49:34:67:16:1c:39:23:16:9d:f9:
88:92:40:02:b3:4b:2b:8c:76:1a:f5:5a:ae:cd:27:d2:06:d5:
d7:74:a1:2f:95:e6:6f:b4:db:c4:24:7d:0c:d4:6b:46:f1:ce:
34:24:0e:5e:2b:f5:0a:ca:6a:44:99:fc:42:47:6b:14:eb:43:
f7:c3:bf:80:12:b7:30:db:7d:e2:80:0a:52:89:a0:a0:04:22:
6b:fd:55:c7:16:81:cc:2b:f2:ed:02:11:e1:da:cd:cc:4d:d4:
7f:6f:d7:7e:d3:7f:fc:5b:74:b1:54:d2:c8:a4:0d:6c:db:fe:
9c:f1:87:c6:d7:b3:69:1c:bd:35:34:19:26:bd:9a:c3:60:47:
94:c7:04:9c:9d:92:de:80:1a:ae:b5:bd:d3:a7:a7:83:0d:24:
a6:45:17:dc:a6:52:bc:c8:dd:1c:6d:8f:49:38:74:64:f9:40:
0c:eb:de:80:86:23:7a:86:7b:49:e0:6d:f9:e9:99:45:74:33:
1d:7a:17:14:72:9a:31:2f:84:6e:de:15:ff:14:f3:42:23:a3:
34:5a:00:92:56:aa:a3:8c:9c:05:0e:1b:31:e4:09:b0:54:85:
b3:05:22:20:eb:c4:9b:ce:f0:f1:13:30:3b:ac:03:05:c5:05:
7b:fd:d4:c5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3P407qXlBsBUAMbjezcKXqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1ZjU3ZTQ5ZWJmMDk4YmM1M2U4ZGIzODg4ODFjOTIzNjlk
OWJmOGMwHhcNMjYwNDI3MTcwMTEzWhcNMjYwNDI4MTcwMTEzWjAzMTEwLwYDVQQD
Eyg1YmVjZTg3YWQwNGQzZTI5OGEwN2ZmZmU3ZTQ1MWFjMzMzMzJjMTQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1O/vNtd7GyR7j5X3sKz1l0a8zRy0
WrOG0goPrgrXqfnoIOZdklFATQ2vWAzwwPsBdu1rY2l0hK7Cc3GkcYx3M8K21GfP
3yfmlBNSTaQ7aW+rec5uihml4ktxx/62pZ3DBRyjowzP/Q3I5260WTp6ZQKyctga
ozoBDZkfIk/g0tUbwzkLvFd2Wva9WYmySMw3xRL3KeF6sE/r70Kp7EoaVPFcAcFY
g75idZ1Nl2YDfRM400hN2qD8T8MtoV4Efscyx8XkUja98TAMAH8mCzCFsuDVS0JN
MuAJ1TNZZ5UhK+m+i2hmd5QVJ/5p59BWuv/HLDvkiaH3ZoRxl13wahnEiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFvs6HrQTT4pigf//n5FGsMzMsFGMB8GA1UdIwQY
MBaAFLX1fknr8Ji8U+jbOIiBySNp2b+MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdGZWLVNldndtTHhUNk5zNGlJSEpJMm5adjR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS85ZTkxMjItYmJmZi00OGQ5LTk4YzYt
MGE0Mjg2ZjNjZmJlLzEvdGZWLVNldndtTHhUNk5zNGlJSEpJMm5adjR3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MS85ZTkxMjItYmJmZi00OGQ5LTk4YzYtMGE0Mjg2ZjNjZmJl
LzEvdGZWLVNldndtTHhUNk5zNGlJSEpJMm5adjR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEncIPuyP
s1FJNGcWHDkjFp35iJJAArNLK4x2GvVars0n0gbV13ShL5Xmb7TbxCR9DNRrRvHO
NCQOXiv1CspqRJn8QkdrFOtD98O/gBK3MNt94oAKUomgoAQia/1VxxaBzCvy7QIR
4drNzE3Uf2/XftN//Ft0sVTSyKQNbNv+nPGHxtezaRy9NTQZJr2aw2BHlMcEnJ2S
3oAarrW906engw0kpkUX3KZSvMjdHG2PSTh0ZPlADOvegIYjeoZ7SeBt+emZRXQz
HXoXFHKaMS+Ebt4V/xTzQiOjNFoAklaqo4ycBQ4bMeQJsFSFswUiIOvEm87w8RMw
O6wDBcUFe/3UxQ==
-----END CERTIFICATE-----
Generated at Mon Apr 27 22:29:57 2026 by rpki-client