Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/100919-d951-4a6e-9f0c-7cca3a2e7490/1/tx9IaL1AkpK1aVnzWkwU_MJUcuw.mft
File: tx9IaL1AkpK1aVnzWkwU_MJUcuw.mft (raw, json)
Hash identifier: H+sOacpmLwaOC5m9v8KVlvbDlO0KWRzuZIdEWjtS5Lg=
Subject key identifier: 58:94:AF:FF:4C:0E:CE:3D:B7:E2:16:62:1A:39:42:00:F7:C4:6E:9D
Authority key identifier: B7:1F:48:68:BD:40:92:92:B5:69:59:F3:5A:4C:14:FC:C2:54:72:EC
Certificate issuer: /CN=b71f4868bd409292b56959f35a4c14fcc25472ec
Certificate serial: 019D386578B8D0E5B332DCD2541EB3E07237
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tx9IaL1AkpK1aVnzWkwU_MJUcuw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/100919-d951-4a6e-9f0c-7cca3a2e7490/1/tx9IaL1AkpK1aVnzWkwU_MJUcuw.mft
Manifest number: 057A
Signing time: Sun 29 Mar 2026 07:01:07 +0000
Manifest this update: Sun 29 Mar 2026 07:01:07 +0000
Manifest next update: Mon 30 Mar 2026 07:01:07 +0000
Files and hashes: 1: EgBYTsP4WnLdOgI7v9fWewoBmRQ.roa (hash: SdXuNAo4cL+y4o9C6xVzKmsv8YTzVdsZLx73iiyVrKA=)
2: LfLdRDtUwafS7E6VWyXgK2UQq9g.asa (hash: lI3eaRCZDcPeEC/xgibETDzOKxk64bCjv0zsjJHosh8=)
3: tx9IaL1AkpK1aVnzWkwU_MJUcuw.crl (hash: DEpWbweUkZ7/Q87B9m5RugE/PCyjn19io38VwnfNtKo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/100919-d951-4a6e-9f0c-7cca3a2e7490/1/tx9IaL1AkpK1aVnzWkwU_MJUcuw.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/100919-d951-4a6e-9f0c-7cca3a2e7490/1/tx9IaL1AkpK1aVnzWkwU_MJUcuw.mft
rsync://rpki.ripe.net/repository/DEFAULT/tx9IaL1AkpK1aVnzWkwU_MJUcuw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:78:b8:d0:e5:b3:32:dc:d2:54:1e:b3:e0:72:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b71f4868bd409292b56959f35a4c14fcc25472ec
Validity
Not Before: Mar 29 07:01:07 2026 GMT
Not After : Mar 30 07:01:07 2026 GMT
Subject: CN=5894afff4c0ece3db7e216621a394200f7c46e9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:4c:ac:3d:58:46:d2:55:40:f1:f6:ca:24:e9:
99:53:5a:be:f2:63:2c:6f:c3:75:7a:34:9c:58:ab:
0a:d2:b9:e8:25:e4:bc:0c:1c:3f:f7:bb:c9:4e:fa:
fb:e9:5d:48:11:71:a6:1c:fa:e1:24:44:9d:37:9c:
6d:ab:4e:b7:24:16:a5:f7:85:9b:cd:fa:11:03:a2:
ce:98:fc:ea:4e:d8:cb:82:68:4a:19:e7:5e:66:c0:
cc:61:54:15:e5:39:6b:4a:51:98:58:de:c1:f8:39:
0d:0c:3c:60:0e:d1:f3:f8:4f:99:b0:85:e7:7c:02:
a5:06:1d:5b:03:15:94:d3:66:0c:a3:b2:00:d9:5a:
58:57:88:63:a2:70:33:f4:aa:93:2e:35:c0:ec:8f:
e2:f5:93:6d:be:89:de:88:a1:a1:d0:6b:3f:69:97:
72:f4:6a:59:4e:cf:6d:49:5a:cd:a1:bb:89:3c:87:
72:6f:34:b2:f4:82:e6:cc:b0:4a:8f:0c:31:a8:7d:
59:e6:76:82:7d:2e:9d:6a:55:22:5b:e3:59:20:49:
67:2c:25:74:3b:25:08:2d:59:10:df:fd:16:16:80:
ba:cf:c1:ba:90:a0:51:73:92:45:3a:20:b0:b2:4c:
a2:e5:e1:0c:e7:01:15:c9:d1:95:ff:36:3a:f5:51:
77:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:94:AF:FF:4C:0E:CE:3D:B7:E2:16:62:1A:39:42:00:F7:C4:6E:9D
X509v3 Authority Key Identifier:
keyid:B7:1F:48:68:BD:40:92:92:B5:69:59:F3:5A:4C:14:FC:C2:54:72:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tx9IaL1AkpK1aVnzWkwU_MJUcuw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/100919-d951-4a6e-9f0c-7cca3a2e7490/1/tx9IaL1AkpK1aVnzWkwU_MJUcuw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/100919-d951-4a6e-9f0c-7cca3a2e7490/1/tx9IaL1AkpK1aVnzWkwU_MJUcuw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:7c:ed:ec:80:96:7a:b0:a8:8f:5c:71:bc:00:08:e9:44:e5:
6c:13:b7:88:c5:25:2b:43:16:8a:ca:75:d8:91:d9:c0:de:fa:
4c:eb:a7:91:e3:c7:b4:82:80:64:1e:c1:7d:ec:b4:4c:53:47:
1e:c8:a0:f8:ee:d2:a0:73:51:55:89:39:5d:40:c8:9f:f8:1e:
a9:21:b6:b5:d3:06:18:48:01:18:ca:59:4d:59:db:1c:9d:53:
42:48:98:7b:80:7c:d7:68:f3:16:2d:f2:71:15:9b:88:1d:f4:
51:af:3c:7b:23:e2:c1:24:76:13:c8:36:d2:44:e1:0f:8a:53:
8e:ce:38:12:bf:cb:23:72:a4:18:ba:25:d1:87:7c:2b:f8:a4:
8a:e2:55:24:9f:ad:9a:07:ea:81:6b:c6:fe:60:59:6c:f2:76:
9c:1f:f7:f7:cb:a4:04:b7:18:23:f3:09:a5:e2:e0:66:26:b7:
fd:b3:77:6b:0d:d8:d7:a4:7c:2e:94:6e:1c:ff:1e:2e:54:e0:
b4:68:0a:2a:61:da:d6:a0:e0:74:1a:0d:b2:37:d0:85:f9:9d:
98:ad:07:9e:62:07:9a:7d:be:f4:17:08:19:f8:21:c4:cd:91:
7f:c7:54:aa:84:d0:0c:f5:da:6d:80:5d:a4:33:94:34:e0:e5:
97:f8:60:41
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04ZXi40OWzMtzSVB6z4HI3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3MWY0ODY4YmQ0MDkyOTJiNTY5NTlmMzVhNGMxNGZjYzI1
NDcyZWMwHhcNMjYwMzI5MDcwMTA3WhcNMjYwMzMwMDcwMTA3WjAzMTEwLwYDVQQD
Eyg1ODk0YWZmZjRjMGVjZTNkYjdlMjE2NjIxYTM5NDIwMGY3YzQ2ZTlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+EysPVhG0lVA8fbKJOmZU1q+8mMs
b8N1ejScWKsK0rnoJeS8DBw/97vJTvr76V1IEXGmHPrhJESdN5xtq063JBal94Wb
zfoRA6LOmPzqTtjLgmhKGedeZsDMYVQV5TlrSlGYWN7B+DkNDDxgDtHz+E+ZsIXn
fAKlBh1bAxWU02YMo7IA2VpYV4hjonAz9KqTLjXA7I/i9ZNtvoneiKGh0Gs/aZdy
9GpZTs9tSVrNobuJPIdybzSy9ILmzLBKjwwxqH1Z5naCfS6dalUiW+NZIElnLCV0
OyUILVkQ3/0WFoC6z8G6kKBRc5JFOiCwskyi5eEM5wEVydGV/zY69VF3UQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFiUr/9MDs49t+IWYho5QgD3xG6dMB8GA1UdIwQY
MBaAFLcfSGi9QJKStWlZ81pMFPzCVHLsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdHg5SWFMMUFrcEsxYVZueldrd1VfTUpVY3V3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC8xMDA5MTktZDk1MS00YTZlLTlmMGMt
N2NjYTNhMmU3NDkwLzEvdHg5SWFMMUFrcEsxYVZueldrd1VfTUpVY3V3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OC8xMDA5MTktZDk1MS00YTZlLTlmMGMtN2NjYTNhMmU3NDkw
LzEvdHg5SWFMMUFrcEsxYVZueldrd1VfTUpVY3V3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATHzt7ICW
erCoj1xxvAAI6UTlbBO3iMUlK0MWisp12JHZwN76TOunkePHtIKAZB7Bfey0TFNH
Hsig+O7SoHNRVYk5XUDIn/geqSG2tdMGGEgBGMpZTVnbHJ1TQkiYe4B812jzFi3y
cRWbiB30Ua88eyPiwSR2E8g20kThD4pTjs44Er/LI3KkGLol0Yd8K/ikiuJVJJ+t
mgfqgWvG/mBZbPJ2nB/398ukBLcYI/MJpeLgZia3/bN3aw3Y16R8LpRuHP8eLlTg
tGgKKmHa1qDgdBoNsjfQhfmdmK0HnmIHmn2+9BcIGfghxM2Rf8dUqoTQDPXabYBd
pDOUNODll/hgQQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:45:30 2026 by rpki-client