Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/6f40dd-4c07-405b-a042-f9250dd79fe9/1/TNcQtlNz4NkQ2nBjb8FDwGul3aw.mft
File: TNcQtlNz4NkQ2nBjb8FDwGul3aw.mft (raw, json)
Hash identifier: x4YFcT3/I11oGQVi+YLP6ml0a+h/KPprP0qn1QxmcAg=
Subject key identifier: D3:D6:55:AD:1A:3A:9A:DF:C0:89:A2:DF:9F:FA:38:22:AE:63:69:63
Authority key identifier: 4C:D7:10:B6:53:73:E0:D9:10:DA:70:63:6F:C1:43:C0:6B:A5:DD:AC
Certificate issuer: /CN=4cd710b65373e0d910da70636fc143c06ba5ddac
Certificate serial: 019D38D38499090BAB5D81BE6A6335406354
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TNcQtlNz4NkQ2nBjb8FDwGul3aw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/6f40dd-4c07-405b-a042-f9250dd79fe9/1/TNcQtlNz4NkQ2nBjb8FDwGul3aw.mft
Manifest number: 17E5
Signing time: Sun 29 Mar 2026 09:01:19 +0000
Manifest this update: Sun 29 Mar 2026 09:01:19 +0000
Manifest next update: Mon 30 Mar 2026 09:01:19 +0000
Files and hashes: 1: TNcQtlNz4NkQ2nBjb8FDwGul3aw.crl (hash: HF4/GwHAXFZGke/dpUTQ0K666CAOuGnvKS66bIazVZ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/6f40dd-4c07-405b-a042-f9250dd79fe9/1/TNcQtlNz4NkQ2nBjb8FDwGul3aw.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/6f40dd-4c07-405b-a042-f9250dd79fe9/1/TNcQtlNz4NkQ2nBjb8FDwGul3aw.mft
rsync://rpki.ripe.net/repository/DEFAULT/TNcQtlNz4NkQ2nBjb8FDwGul3aw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:84:99:09:0b:ab:5d:81:be:6a:63:35:40:63:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cd710b65373e0d910da70636fc143c06ba5ddac
Validity
Not Before: Mar 29 09:01:19 2026 GMT
Not After : Mar 30 09:01:19 2026 GMT
Subject: CN=d3d655ad1a3a9adfc089a2df9ffa3822ae636963
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:34:5a:6a:18:40:0e:78:68:2e:c7:9e:1f:db:
62:93:ca:6c:aa:38:71:86:69:1a:16:36:29:97:83:
1c:f2:75:36:e7:00:bb:69:7d:13:0e:97:aa:b5:1b:
98:0c:24:92:77:41:64:a5:b0:d6:6e:3d:51:b6:a8:
35:f6:f5:94:29:a1:1b:49:bc:54:83:36:f2:45:6a:
5e:bd:bb:a4:02:94:43:a4:f7:c7:69:79:cd:35:51:
98:f9:de:f3:d0:52:52:2b:ad:0d:9b:ab:1b:86:5d:
ca:49:01:06:70:0d:bf:db:04:1f:f7:ac:2f:5e:7b:
81:31:01:f4:00:0b:26:9c:83:84:e8:9c:8c:37:66:
2a:83:7f:1d:0b:3e:8d:22:17:c2:ea:e7:c2:9a:4e:
e9:72:fa:45:ea:72:d7:54:55:4d:ee:85:3a:44:59:
9e:f7:78:82:7c:5c:5a:8a:54:83:8f:f5:49:03:7a:
58:bc:55:0a:cb:19:74:f5:07:ce:06:e2:bd:89:de:
3f:5f:54:18:2e:2b:24:a4:a5:4c:89:4b:e7:9d:2b:
c9:af:24:c9:ba:ee:6a:8c:84:fd:df:2b:02:85:92:
9e:a1:b1:16:3c:73:cb:86:f9:59:78:14:80:e0:bc:
12:43:01:ee:9a:14:6c:73:cf:2d:5f:78:2d:83:4d:
5b:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:D6:55:AD:1A:3A:9A:DF:C0:89:A2:DF:9F:FA:38:22:AE:63:69:63
X509v3 Authority Key Identifier:
keyid:4C:D7:10:B6:53:73:E0:D9:10:DA:70:63:6F:C1:43:C0:6B:A5:DD:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TNcQtlNz4NkQ2nBjb8FDwGul3aw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/6f40dd-4c07-405b-a042-f9250dd79fe9/1/TNcQtlNz4NkQ2nBjb8FDwGul3aw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/6f40dd-4c07-405b-a042-f9250dd79fe9/1/TNcQtlNz4NkQ2nBjb8FDwGul3aw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:25:8b:5a:9d:6b:a9:55:6c:7e:b5:8a:34:74:a8:c0:7e:3e:
a9:6c:16:4a:d5:c1:90:17:58:98:86:85:c7:d4:a5:6e:f4:a9:
29:7c:06:c4:00:36:97:0d:6f:a3:04:55:e0:63:f3:b8:6f:a5:
00:62:81:2d:25:c1:56:75:ab:ea:72:95:a9:14:9e:3d:71:e3:
dc:af:a0:30:de:b5:db:ad:f3:33:87:56:7a:a2:1b:86:ea:65:
67:3b:71:02:d1:d9:74:fe:14:5d:ca:40:15:fd:50:f9:8d:88:
3b:4f:e7:10:05:09:6a:e2:12:27:22:70:97:84:dd:a4:fa:13:
81:da:c1:8f:07:01:ca:f6:2a:c4:04:d8:4c:b9:b7:f3:0a:96:
76:1d:b5:36:c1:51:a4:e1:6e:99:f9:25:d2:a6:fe:15:cb:37:
e3:c7:0e:9b:20:d3:53:d4:b0:f2:e4:60:12:a8:3d:fc:80:68:
83:8d:d5:21:0b:34:c3:b2:b2:b1:16:ae:63:54:bc:cf:5d:eb:
f1:bd:f4:12:f3:27:8e:e6:9e:bc:11:6e:c1:5b:33:c2:d0:f3:
95:9d:a5:57:c0:78:ac:a7:64:87:4e:be:ff:67:cb:15:fd:a9:
85:bd:ef:91:5c:4d:2a:77:ff:de:2a:3b:46:8f:74:04:ad:9f:
8a:45:72:cd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0404SZCQurXYG+amM1QGNUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjZDcxMGI2NTM3M2UwZDkxMGRhNzA2MzZmYzE0M2MwNmJh
NWRkYWMwHhcNMjYwMzI5MDkwMTE5WhcNMjYwMzMwMDkwMTE5WjAzMTEwLwYDVQQD
EyhkM2Q2NTVhZDFhM2E5YWRmYzA4OWEyZGY5ZmZhMzgyMmFlNjM2OTYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1DRaahhADnhoLseeH9tik8psqjhx
hmkaFjYpl4Mc8nU25wC7aX0TDpeqtRuYDCSSd0FkpbDWbj1Rtqg19vWUKaEbSbxU
gzbyRWpevbukApRDpPfHaXnNNVGY+d7z0FJSK60Nm6sbhl3KSQEGcA2/2wQf96wv
XnuBMQH0AAsmnIOE6JyMN2Yqg38dCz6NIhfC6ufCmk7pcvpF6nLXVFVN7oU6RFme
93iCfFxailSDj/VJA3pYvFUKyxl09QfOBuK9id4/X1QYLiskpKVMiUvnnSvJryTJ
uu5qjIT93ysChZKeobEWPHPLhvlZeBSA4LwSQwHumhRsc88tX3gtg01b1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNPWVa0aOprfwImi35/6OCKuY2ljMB8GA1UdIwQY
MBaAFEzXELZTc+DZENpwY2/BQ8Brpd2sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVE5jUXRsTno0TmtRMm5CamI4RkR3R3VsM2F3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny82ZjQwZGQtNGMwNy00MDViLWEwNDIt
ZjkyNTBkZDc5ZmU5LzEvVE5jUXRsTno0TmtRMm5CamI4RkR3R3VsM2F3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny82ZjQwZGQtNGMwNy00MDViLWEwNDItZjkyNTBkZDc5ZmU5
LzEvVE5jUXRsTno0TmtRMm5CamI4RkR3R3VsM2F3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvyWLWp1r
qVVsfrWKNHSowH4+qWwWStXBkBdYmIaFx9SlbvSpKXwGxAA2lw1vowRV4GPzuG+l
AGKBLSXBVnWr6nKVqRSePXHj3K+gMN61263zM4dWeqIbhuplZztxAtHZdP4UXcpA
Ff1Q+Y2IO0/nEAUJauISJyJwl4TdpPoTgdrBjwcByvYqxATYTLm38wqWdh21NsFR
pOFumfkl0qb+Fcs348cOmyDTU9Sw8uRgEqg9/IBog43VIQs0w7KysRauY1S8z13r
8b30EvMnjuaevBFuwVszwtDzlZ2lV8B4rKdkh06+/2fLFf2phb3vkVxNKnf/3io7
Ro90BK2fikVyzQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:28:13 2026 by rpki-client