Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/9ff43e-f817-4ebe-a0d9-7a18931d985b/1/tn8bh-Z1L0VDm4UozJaLR3CloPs.mft
File: tn8bh-Z1L0VDm4UozJaLR3CloPs.mft (raw, json)
Hash identifier: oI0wX8kyQ1Cmn65lmxKIFiOQ6pALUsJZ8FU9xAtCQE0=
Subject key identifier: C7:F6:60:8E:66:9E:8B:63:E9:4B:DB:47:2C:C8:BD:64:2F:45:90:13
Authority key identifier: B6:7F:1B:87:E6:75:2F:45:43:9B:85:28:CC:96:8B:47:70:A5:A0:FB
Certificate issuer: /CN=b67f1b87e6752f45439b8528cc968b4770a5a0fb
Certificate serial: 019CE523C7FA66B3D7813346607AC8695E1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tn8bh-Z1L0VDm4UozJaLR3CloPs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/9ff43e-f817-4ebe-a0d9-7a18931d985b/1/tn8bh-Z1L0VDm4UozJaLR3CloPs.mft
Manifest number: 1862
Signing time: Fri 13 Mar 2026 03:00:53 +0000
Manifest this update: Fri 13 Mar 2026 03:00:53 +0000
Manifest next update: Sat 14 Mar 2026 03:00:53 +0000
Files and hashes: 1: LQJRQQjbwBZBO6fcDK7TBARIRcA.roa (hash: kgMdOcv0hribs4xM8yAxDMw6nXQ/d8F0OHR9C1YIdKg=)
2: tn8bh-Z1L0VDm4UozJaLR3CloPs.crl (hash: Ct6gHjIHlwHTAermIB4yFAowTt9G79VNXql20gDZvA0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/9ff43e-f817-4ebe-a0d9-7a18931d985b/1/tn8bh-Z1L0VDm4UozJaLR3CloPs.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/9ff43e-f817-4ebe-a0d9-7a18931d985b/1/tn8bh-Z1L0VDm4UozJaLR3CloPs.mft
rsync://rpki.ripe.net/repository/DEFAULT/tn8bh-Z1L0VDm4UozJaLR3CloPs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e5:23:c7:fa:66:b3:d7:81:33:46:60:7a:c8:69:5e:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b67f1b87e6752f45439b8528cc968b4770a5a0fb
Validity
Not Before: Mar 13 03:00:53 2026 GMT
Not After : Mar 14 03:00:53 2026 GMT
Subject: CN=c7f6608e669e8b63e94bdb472cc8bd642f459013
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:36:82:13:b3:1b:84:b5:4f:16:7a:6b:db:e3:
d4:6b:a1:c4:de:46:12:f6:21:c7:04:32:45:cb:15:
9a:3e:33:60:12:51:3f:28:ff:3e:f9:0e:05:9a:df:
e2:9d:74:f2:7c:2c:fd:fd:4c:d8:a2:91:07:c7:a4:
fc:53:bc:a9:21:c1:1a:96:0c:6b:51:f4:13:73:4f:
68:60:16:fa:d9:7e:42:38:56:ce:da:a4:9b:b8:ea:
e6:dd:97:7b:ca:5b:78:45:62:ab:88:be:29:68:b1:
40:85:ef:ca:58:98:80:53:d1:e2:23:e4:45:b4:c8:
40:2f:5a:31:87:6a:6d:56:28:69:11:39:52:88:79:
9e:1a:fc:2e:ce:b9:f3:08:d5:f4:6f:17:32:ad:11:
1c:f3:ea:9c:4f:48:06:71:bd:8c:b5:16:c4:16:71:
99:7e:b8:7b:cd:dd:56:81:ef:01:3a:05:40:7b:f3:
2e:51:a0:c7:88:c4:47:bf:5f:1d:3e:12:ae:67:95:
8d:4a:7a:fc:9b:28:55:d4:f1:85:d7:1a:7d:53:1c:
df:c4:c1:0b:3b:cb:00:94:e3:fd:dc:8e:69:d9:21:
a7:34:e4:f9:67:fc:06:bc:4e:91:d3:22:5f:04:eb:
80:04:07:01:03:ab:a8:32:32:54:2a:34:a5:3b:3a:
63:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:F6:60:8E:66:9E:8B:63:E9:4B:DB:47:2C:C8:BD:64:2F:45:90:13
X509v3 Authority Key Identifier:
keyid:B6:7F:1B:87:E6:75:2F:45:43:9B:85:28:CC:96:8B:47:70:A5:A0:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tn8bh-Z1L0VDm4UozJaLR3CloPs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/9ff43e-f817-4ebe-a0d9-7a18931d985b/1/tn8bh-Z1L0VDm4UozJaLR3CloPs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/9ff43e-f817-4ebe-a0d9-7a18931d985b/1/tn8bh-Z1L0VDm4UozJaLR3CloPs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:12:1d:9b:a2:9f:45:db:7d:32:2a:02:83:98:df:f0:d3:78:
70:71:9c:b4:04:57:21:29:1d:6b:7b:78:6f:91:42:75:b2:ca:
1c:6f:01:4b:4f:1f:04:79:36:ad:2c:3e:af:ab:13:ad:71:c4:
08:79:f1:78:23:64:fb:c2:a4:f5:9b:41:8c:44:d7:b5:d4:07:
2e:83:e3:53:1e:be:81:47:29:fc:5c:e1:96:b7:51:fc:d4:c7:
cd:df:12:09:60:5c:cc:bf:66:b4:8e:d6:fa:60:c4:3a:2b:10:
b3:61:79:49:85:75:96:97:ab:9d:bc:f8:f5:38:93:06:66:15:
0c:3d:e2:3c:44:57:09:b5:31:af:e9:d6:4c:4c:02:97:ac:c2:
cc:09:62:26:bd:0a:f4:f0:02:6b:f8:45:fa:6d:83:9a:10:da:
57:d9:04:03:c2:4e:32:c8:03:59:b3:62:fb:d7:63:ce:2e:2e:
bc:32:90:12:aa:7a:3f:ee:7d:a4:7b:42:98:27:03:82:18:4a:
2b:13:88:48:0a:5c:4f:a3:ea:57:08:ae:31:9d:07:ea:d3:86:
44:2c:03:bf:cb:d8:0c:ad:ba:98:1b:44:f0:87:39:11:4b:1d:
0b:1a:89:62:e5:59:6c:71:92:51:7a:ec:91:93:cc:cf:78:14:
2d:cf:92:0c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZzlI8f6ZrPXgTNGYHrIaV4fMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI2N2YxYjg3ZTY3NTJmNDU0MzliODUyOGNjOTY4YjQ3NzBh
NWEwZmIwHhcNMjYwMzEzMDMwMDUzWhcNMjYwMzE0MDMwMDUzWjAzMTEwLwYDVQQD
EyhjN2Y2NjA4ZTY2OWU4YjYzZTk0YmRiNDcyY2M4YmQ2NDJmNDU5MDEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqjaCE7MbhLVPFnpr2+PUa6HE3kYS
9iHHBDJFyxWaPjNgElE/KP8++Q4Fmt/inXTyfCz9/UzYopEHx6T8U7ypIcEalgxr
UfQTc09oYBb62X5COFbO2qSbuOrm3Zd7ylt4RWKriL4paLFAhe/KWJiAU9HiI+RF
tMhAL1oxh2ptVihpETlSiHmeGvwuzrnzCNX0bxcyrREc8+qcT0gGcb2MtRbEFnGZ
frh7zd1Wge8BOgVAe/MuUaDHiMRHv18dPhKuZ5WNSnr8myhV1PGF1xp9UxzfxMEL
O8sAlOP93I5p2SGnNOT5Z/wGvE6R0yJfBOuABAcBA6uoMjJUKjSlOzpj3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMf2YI5mnotj6UvbRyzIvWQvRZATMB8GA1UdIwQY
MBaAFLZ/G4fmdS9FQ5uFKMyWi0dwpaD7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdG44YmgtWjFMMFZEbTRVb3pKYUxSM0Nsb1BzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi85ZmY0M2UtZjgxNy00ZWJlLWEwZDkt
N2ExODkzMWQ5ODViLzEvdG44YmgtWjFMMFZEbTRVb3pKYUxSM0Nsb1BzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Zi85ZmY0M2UtZjgxNy00ZWJlLWEwZDktN2ExODkzMWQ5ODVi
LzEvdG44YmgtWjFMMFZEbTRVb3pKYUxSM0Nsb1BzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKhIdm6Kf
Rdt9MioCg5jf8NN4cHGctARXISkda3t4b5FCdbLKHG8BS08fBHk2rSw+r6sTrXHE
CHnxeCNk+8Kk9ZtBjETXtdQHLoPjUx6+gUcp/FzhlrdR/NTHzd8SCWBczL9mtI7W
+mDEOisQs2F5SYV1lpernbz49TiTBmYVDD3iPERXCbUxr+nWTEwCl6zCzAliJr0K
9PACa/hF+m2DmhDaV9kEA8JOMsgDWbNi+9djzi4uvDKQEqp6P+59pHtCmCcDghhK
KxOISApcT6PqVwiuMZ0H6tOGRCwDv8vYDK26mBtE8Ic5EUsdCxqJYuVZbHGSUXrs
kZPMz3gULc+SDA==
-----END CERTIFICATE-----
Generated at Fri Mar 13 09:56:44 2026 by rpki-client