Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/884aae-2203-4f21-91a4-8f1ff3880102/1/Tu24VWoM8egtjnx5BY8O-1BALKY.mft
File: Tu24VWoM8egtjnx5BY8O-1BALKY.mft (raw, json)
Hash identifier: VchHwAZHmPwdOFyOrol8y2qfR+LkSBG6jG1OJpaS3B8=
Subject key identifier: DE:CF:16:89:CD:34:BA:08:AE:49:1A:32:E5:09:71:81:C1:63:3B:4E
Authority key identifier: 4E:ED:B8:55:6A:0C:F1:E8:2D:8E:7C:79:05:8F:0E:FB:50:40:2C:A6
Certificate issuer: /CN=4eedb8556a0cf1e82d8e7c79058f0efb50402ca6
Certificate serial: 019D37BFF20740BCD29659B1CAB9CC271844
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tu24VWoM8egtjnx5BY8O-1BALKY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/884aae-2203-4f21-91a4-8f1ff3880102/1/Tu24VWoM8egtjnx5BY8O-1BALKY.mft
Manifest number: 020B
Signing time: Sun 29 Mar 2026 04:00:19 +0000
Manifest this update: Sun 29 Mar 2026 04:00:19 +0000
Manifest next update: Mon 30 Mar 2026 04:00:19 +0000
Files and hashes: 1: Tu24VWoM8egtjnx5BY8O-1BALKY.crl (hash: LmAnOQdcNRdJpSjhdkLiFxU5qhMmZ/HZLzn8CRACZ8g=)
2: c3hVC3AMElxQ2gQM00S6h3ot4Ps.roa (hash: 6HgFrXl2jim8+KrnKQ6sq1jTwbkU8y1XtU8TNMvAGjM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/884aae-2203-4f21-91a4-8f1ff3880102/1/Tu24VWoM8egtjnx5BY8O-1BALKY.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/884aae-2203-4f21-91a4-8f1ff3880102/1/Tu24VWoM8egtjnx5BY8O-1BALKY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tu24VWoM8egtjnx5BY8O-1BALKY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:bf:f2:07:40:bc:d2:96:59:b1:ca:b9:cc:27:18:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4eedb8556a0cf1e82d8e7c79058f0efb50402ca6
Validity
Not Before: Mar 29 04:00:19 2026 GMT
Not After : Mar 30 04:00:19 2026 GMT
Subject: CN=decf1689cd34ba08ae491a32e5097181c1633b4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:ee:98:69:82:ac:05:9b:3c:d6:ef:62:69:7c:
70:b0:5d:51:4d:63:68:9a:f4:5b:c7:13:79:5c:da:
81:1e:30:e0:bc:90:71:5c:89:af:bc:b1:1a:c1:c6:
5f:45:f7:64:98:ed:fd:c1:18:0d:ab:3c:31:b8:cc:
d0:25:45:2d:81:fb:f7:3b:d2:51:9a:a6:cb:5b:d0:
34:01:5e:de:20:8c:5e:46:c7:83:58:82:da:9b:4e:
ba:1d:8b:ad:5b:35:c9:45:e6:98:da:ec:bd:9a:45:
c6:4b:a9:0a:95:e3:7a:0a:bd:bf:c3:74:da:b3:d6:
7d:4c:26:13:fe:12:87:a6:69:d0:98:72:33:6a:bf:
02:46:b9:5c:c7:71:bc:71:4c:37:79:75:9e:3e:36:
27:a3:6b:52:da:db:da:99:4f:03:15:22:87:f1:57:
4e:ac:26:c9:3f:16:21:d6:e1:a8:8a:31:57:1f:02:
46:20:1a:a0:4a:6e:96:19:2c:3e:80:71:f7:d0:d5:
20:2e:35:a0:0e:38:35:d3:eb:64:0e:68:ae:98:04:
f2:01:d6:f0:cd:16:43:94:5c:18:6e:ab:ed:6d:ac:
6d:88:d0:d6:fe:4e:08:3c:1e:2b:23:15:d6:ab:83:
51:f9:28:fb:3b:31:b9:c5:a6:4e:4b:57:7d:19:28:
cb:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:CF:16:89:CD:34:BA:08:AE:49:1A:32:E5:09:71:81:C1:63:3B:4E
X509v3 Authority Key Identifier:
keyid:4E:ED:B8:55:6A:0C:F1:E8:2D:8E:7C:79:05:8F:0E:FB:50:40:2C:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tu24VWoM8egtjnx5BY8O-1BALKY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/884aae-2203-4f21-91a4-8f1ff3880102/1/Tu24VWoM8egtjnx5BY8O-1BALKY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/884aae-2203-4f21-91a4-8f1ff3880102/1/Tu24VWoM8egtjnx5BY8O-1BALKY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:12:6a:60:68:b9:db:ee:e8:61:9d:57:31:4c:93:9d:89:2c:
86:e2:ea:67:b5:b6:df:ac:4d:69:e3:49:14:2e:a7:a9:7e:57:
a3:75:47:aa:0d:8c:2e:0b:9e:4d:5c:7f:9f:3d:53:13:4c:be:
2f:00:27:69:1f:f2:f4:a5:3f:24:fb:6c:10:47:28:33:ad:97:
1f:d5:42:ef:22:f9:07:e0:4e:51:fd:30:e0:7e:f4:81:6d:cb:
d6:f2:6c:6f:98:d3:a9:2f:19:24:05:4f:7e:04:df:09:75:3f:
cf:79:5f:7b:2f:e4:80:e6:b7:1f:cc:55:e2:99:39:7d:87:ce:
cf:0a:56:73:d1:da:34:17:0e:68:60:5c:c4:09:9a:21:7c:74:
83:20:c1:51:b3:eb:4e:8f:55:52:74:b3:07:14:bc:a4:b8:86:
4d:44:3a:73:67:e3:91:65:d0:05:4b:da:fb:19:e3:86:5d:f5:
f8:1a:9d:e2:b1:36:da:95:53:c6:97:13:c2:ab:00:ab:bd:f1:
31:44:4a:92:80:3d:ae:94:bb:50:c3:73:b8:61:98:6c:7e:5e:
e4:a4:d0:4c:f2:2c:6d:de:9e:64:8c:16:4c:17:fa:53:f7:96:
53:ed:d8:c7:38:2d:5f:51:1b:47:81:20:71:db:39:34:c7:1a:
93:a4:72:04
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03v/IHQLzSllmxyrnMJxhEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRlZWRiODU1NmEwY2YxZTgyZDhlN2M3OTA1OGYwZWZiNTA0
MDJjYTYwHhcNMjYwMzI5MDQwMDE5WhcNMjYwMzMwMDQwMDE5WjAzMTEwLwYDVQQD
EyhkZWNmMTY4OWNkMzRiYTA4YWU0OTFhMzJlNTA5NzE4MWMxNjMzYjRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApe6YaYKsBZs81u9iaXxwsF1RTWNo
mvRbxxN5XNqBHjDgvJBxXImvvLEawcZfRfdkmO39wRgNqzwxuMzQJUUtgfv3O9JR
mqbLW9A0AV7eIIxeRseDWILam066HYutWzXJReaY2uy9mkXGS6kKleN6Cr2/w3Ta
s9Z9TCYT/hKHpmnQmHIzar8CRrlcx3G8cUw3eXWePjYno2tS2tvamU8DFSKH8VdO
rCbJPxYh1uGoijFXHwJGIBqgSm6WGSw+gHH30NUgLjWgDjg10+tkDmiumATyAdbw
zRZDlFwYbqvtbaxtiNDW/k4IPB4rIxXWq4NR+Sj7OzG5xaZOS1d9GSjLOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN7PFonNNLoIrkkaMuUJcYHBYztOMB8GA1UdIwQY
MBaAFE7tuFVqDPHoLY58eQWPDvtQQCymMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHUyNFZXb004ZWd0am54NUJZOE8tMUJBTEtZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi84ODRhYWUtMjIwMy00ZjIxLTkxYTQt
OGYxZmYzODgwMTAyLzEvVHUyNFZXb004ZWd0am54NUJZOE8tMUJBTEtZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi84ODRhYWUtMjIwMy00ZjIxLTkxYTQtOGYxZmYzODgwMTAy
LzEvVHUyNFZXb004ZWd0am54NUJZOE8tMUJBTEtZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaxJqYGi5
2+7oYZ1XMUyTnYkshuLqZ7W236xNaeNJFC6nqX5Xo3VHqg2MLgueTVx/nz1TE0y+
LwAnaR/y9KU/JPtsEEcoM62XH9VC7yL5B+BOUf0w4H70gW3L1vJsb5jTqS8ZJAVP
fgTfCXU/z3lfey/kgOa3H8xV4pk5fYfOzwpWc9HaNBcOaGBcxAmaIXx0gyDBUbPr
To9VUnSzBxS8pLiGTUQ6c2fjkWXQBUva+xnjhl31+Bqd4rE22pVTxpcTwqsAq73x
MURKkoA9rpS7UMNzuGGYbH5e5KTQTPIsbd6eZIwWTBf6U/eWU+3YxzgtX1EbR4Eg
cds5NMcak6RyBA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:59 2026 by rpki-client