Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/5f5bc8-e5f3-421d-9fa0-fefe8e34006c/1/tOiC9xca9tzczJzXn5jexnV_4Yk.mft
File: tOiC9xca9tzczJzXn5jexnV_4Yk.mft (raw, json)
Hash identifier: 1kcQccoR4KA24E8YJN1UkSPvSr9xDS0nK4s5BbSd3Co=
Subject key identifier: AE:63:DD:CF:F5:DB:B1:E5:07:1F:6A:3C:DB:39:90:3E:81:87:30:30
Authority key identifier: B4:E8:82:F7:17:1A:F6:DC:DC:CC:9C:D7:9F:98:DE:C6:75:7F:E1:89
Certificate issuer: /CN=b4e882f7171af6dcdccc9cd79f98dec6757fe189
Certificate serial: 019D38D342098E56AFBEA5940E396376C071
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tOiC9xca9tzczJzXn5jexnV_4Yk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/5f5bc8-e5f3-421d-9fa0-fefe8e34006c/1/tOiC9xca9tzczJzXn5jexnV_4Yk.mft
Manifest number: 188D
Signing time: Sun 29 Mar 2026 09:01:02 +0000
Manifest this update: Sun 29 Mar 2026 09:01:02 +0000
Manifest next update: Mon 30 Mar 2026 09:01:02 +0000
Files and hashes: 1: mRAbVrC4vL4GmozrjHi2i0Iaytw.roa (hash: vC24nQiiHK47q4YRBJHF/HkE+eYaEpAw6ZvG99eAnwU=)
2: tOiC9xca9tzczJzXn5jexnV_4Yk.crl (hash: cscsoMi4OOpmoz44BDZR192WXFrrO27uW0OAreRMIEc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/5f5bc8-e5f3-421d-9fa0-fefe8e34006c/1/tOiC9xca9tzczJzXn5jexnV_4Yk.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/5f5bc8-e5f3-421d-9fa0-fefe8e34006c/1/tOiC9xca9tzczJzXn5jexnV_4Yk.mft
rsync://rpki.ripe.net/repository/DEFAULT/tOiC9xca9tzczJzXn5jexnV_4Yk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:42:09:8e:56:af:be:a5:94:0e:39:63:76:c0:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4e882f7171af6dcdccc9cd79f98dec6757fe189
Validity
Not Before: Mar 29 09:01:02 2026 GMT
Not After : Mar 30 09:01:02 2026 GMT
Subject: CN=ae63ddcff5dbb1e5071f6a3cdb39903e81873030
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:5b:7f:68:2d:d3:46:df:b6:99:5c:d4:d8:ce:
dc:a9:6b:6c:3a:d5:2a:a1:ac:47:b7:c6:70:bc:8e:
a5:4e:37:63:8e:e6:a3:01:b8:2f:4c:1b:fd:3c:e1:
e3:a7:f5:62:b6:33:46:00:be:fe:2d:0a:4a:38:97:
74:aa:39:33:0f:85:bb:e7:ae:14:56:81:dd:ab:c4:
94:4a:5d:c2:2c:0e:96:e7:31:c9:30:2b:c4:06:6c:
5b:4a:75:8a:28:8c:7f:3d:5a:b0:7b:51:23:5c:2e:
64:72:a0:ba:fd:cb:e0:f9:17:7e:02:37:e8:90:f8:
45:3c:0a:21:98:4c:d0:36:0f:3e:09:79:a4:d2:38:
04:59:6f:b4:9a:f2:90:10:84:58:e0:7b:f0:53:0b:
ab:36:18:8a:80:2c:3c:dc:cb:e9:30:bf:81:15:2b:
ab:3b:1b:96:87:24:d4:30:fc:18:e0:4b:94:85:aa:
ad:c7:40:35:07:60:1e:43:94:14:40:72:cb:a8:e4:
e7:f1:54:7f:dd:2f:1d:b3:27:36:51:93:c6:e8:2b:
77:17:ff:db:be:95:36:77:f3:a9:ec:2f:37:34:dc:
63:96:6b:14:a3:d4:d0:4b:c9:74:b7:bb:ec:38:35:
21:3e:77:de:de:73:25:61:34:91:31:24:f0:4a:29:
b8:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:63:DD:CF:F5:DB:B1:E5:07:1F:6A:3C:DB:39:90:3E:81:87:30:30
X509v3 Authority Key Identifier:
keyid:B4:E8:82:F7:17:1A:F6:DC:DC:CC:9C:D7:9F:98:DE:C6:75:7F:E1:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tOiC9xca9tzczJzXn5jexnV_4Yk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/5f5bc8-e5f3-421d-9fa0-fefe8e34006c/1/tOiC9xca9tzczJzXn5jexnV_4Yk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/5f5bc8-e5f3-421d-9fa0-fefe8e34006c/1/tOiC9xca9tzczJzXn5jexnV_4Yk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:3d:00:5b:fd:fc:fd:de:aa:2c:ac:7d:11:eb:df:cf:fd:63:
0b:82:74:e8:52:a3:6f:af:83:dc:23:63:84:e1:d0:85:4d:0c:
3f:78:a3:99:91:fb:3b:1c:e1:89:df:59:39:2b:4c:96:18:b0:
00:ff:7f:57:fc:81:82:aa:92:47:75:d6:a9:09:d7:1e:dd:3a:
24:b6:71:44:85:78:54:f3:74:a7:90:6e:e7:64:20:57:59:d9:
f1:eb:02:b0:c4:2d:b1:f2:e7:63:85:42:2e:43:d5:26:2a:7d:
36:e1:09:b7:a3:95:81:8c:14:22:bd:08:cf:64:5d:bf:ff:d9:
c3:db:44:79:81:39:74:ab:51:38:1c:0a:da:78:49:58:45:bf:
39:6d:2a:a4:c3:ee:14:66:38:93:69:6e:20:62:24:e0:fb:6e:
92:64:e7:ae:3c:e9:77:c0:5b:5a:6a:4c:52:d2:f9:e3:bb:d8:
53:66:47:2e:af:52:9a:9d:1b:f1:8e:3b:68:e8:c6:c1:6a:19:
1f:e7:6e:ca:1d:f9:92:21:2f:82:c4:a8:a6:7e:9f:d1:a7:2f:
5b:9f:2d:4c:ae:82:b9:1d:4d:f6:e2:0c:d7:0d:b6:90:73:75:
bf:c0:7b:ce:4b:48:9b:2e:d1:3a:9f:ee:3a:c9:85:7c:a2:2a:
67:59:cb:35
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0400IJjlavvqWUDjljdsBxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0ZTg4MmY3MTcxYWY2ZGNkY2NjOWNkNzlmOThkZWM2NzU3
ZmUxODkwHhcNMjYwMzI5MDkwMTAyWhcNMjYwMzMwMDkwMTAyWjAzMTEwLwYDVQQD
EyhhZTYzZGRjZmY1ZGJiMWU1MDcxZjZhM2NkYjM5OTAzZTgxODczMDMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs1t/aC3TRt+2mVzU2M7cqWtsOtUq
oaxHt8ZwvI6lTjdjjuajAbgvTBv9POHjp/VitjNGAL7+LQpKOJd0qjkzD4W7564U
VoHdq8SUSl3CLA6W5zHJMCvEBmxbSnWKKIx/PVqwe1EjXC5kcqC6/cvg+Rd+Ajfo
kPhFPAohmEzQNg8+CXmk0jgEWW+0mvKQEIRY4HvwUwurNhiKgCw83MvpML+BFSur
OxuWhyTUMPwY4EuUhaqtx0A1B2AeQ5QUQHLLqOTn8VR/3S8dsyc2UZPG6Ct3F//b
vpU2d/Op7C83NNxjlmsUo9TQS8l0t7vsODUhPnfe3nMlYTSRMSTwSim4tQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK5j3c/127HlBx9qPNs5kD6BhzAwMB8GA1UdIwQY
MBaAFLTogvcXGvbc3Myc15+Y3sZ1f+GJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdE9pQzl4Y2E5dHpjekp6WG41amV4blZfNFlrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My81ZjViYzgtZTVmMy00MjFkLTlmYTAt
ZmVmZThlMzQwMDZjLzEvdE9pQzl4Y2E5dHpjekp6WG41amV4blZfNFlrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81My81ZjViYzgtZTVmMy00MjFkLTlmYTAtZmVmZThlMzQwMDZj
LzEvdE9pQzl4Y2E5dHpjekp6WG41amV4blZfNFlrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbD0AW/38
/d6qLKx9Eevfz/1jC4J06FKjb6+D3CNjhOHQhU0MP3ijmZH7Oxzhid9ZOStMlhiw
AP9/V/yBgqqSR3XWqQnXHt06JLZxRIV4VPN0p5Bu52QgV1nZ8esCsMQtsfLnY4VC
LkPVJip9NuEJt6OVgYwUIr0Iz2Rdv//Zw9tEeYE5dKtROBwK2nhJWEW/OW0qpMPu
FGY4k2luIGIk4PtukmTnrjzpd8BbWmpMUtL547vYU2ZHLq9Smp0b8Y47aOjGwWoZ
H+duyh35kiEvgsSopn6f0acvW58tTK6CuR1N9uIM1w22kHN1v8B7zktImy7ROp/u
OsmFfKIqZ1nLNQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:45:49 2026 by rpki-client