Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/139ebd-5abf-4254-8933-6f97dfc10fe7/1/T893EF-VB1zlhdQn6XdU6PAHqLk.mft
File: T893EF-VB1zlhdQn6XdU6PAHqLk.mft (raw, json)
Hash identifier: y7nBnm3R0D9ovbBvcEkmoALldtexnhoT6C25yjZKu3w=
Subject key identifier: 60:12:52:F2:4C:EE:8E:83:66:76:9F:24:EE:5A:9E:89:6E:6A:DD:71
Authority key identifier: 4F:CF:77:10:5F:95:07:5C:E5:85:D4:27:E9:77:54:E8:F0:07:A8:B9
Certificate issuer: /CN=4fcf77105f95075ce585d427e97754e8f007a8b9
Certificate serial: 019D390A59A8045130EBB7DD628BD25BF538
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T893EF-VB1zlhdQn6XdU6PAHqLk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/139ebd-5abf-4254-8933-6f97dfc10fe7/1/T893EF-VB1zlhdQn6XdU6PAHqLk.mft
Manifest number: 0BF0
Signing time: Sun 29 Mar 2026 10:01:12 +0000
Manifest this update: Sun 29 Mar 2026 10:01:12 +0000
Manifest next update: Mon 30 Mar 2026 10:01:12 +0000
Files and hashes: 1: T893EF-VB1zlhdQn6XdU6PAHqLk.crl (hash: VYKK2vG/g/IcI3T/+0paw6NqenRTmjzSKljAA+11yQM=)
2: vGITqOM2Qr7qYaxHjQA6bgwtMHQ.roa (hash: oAck/TCVUq6iwApW0WsXsYIkY48wx+OrIDhclhnJfcU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/139ebd-5abf-4254-8933-6f97dfc10fe7/1/T893EF-VB1zlhdQn6XdU6PAHqLk.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/139ebd-5abf-4254-8933-6f97dfc10fe7/1/T893EF-VB1zlhdQn6XdU6PAHqLk.mft
rsync://rpki.ripe.net/repository/DEFAULT/T893EF-VB1zlhdQn6XdU6PAHqLk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:0a:59:a8:04:51:30:eb:b7:dd:62:8b:d2:5b:f5:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fcf77105f95075ce585d427e97754e8f007a8b9
Validity
Not Before: Mar 29 10:01:12 2026 GMT
Not After : Mar 30 10:01:12 2026 GMT
Subject: CN=601252f24cee8e8366769f24ee5a9e896e6add71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:80:32:18:67:97:ae:e8:7d:56:1f:09:09:f4:
ce:a8:93:35:04:76:2c:93:f8:3e:ee:1d:04:49:fc:
c9:f2:52:ec:89:02:8e:84:07:0d:d5:8e:f5:94:7f:
1a:ed:31:69:e9:ad:44:12:cf:ff:48:89:aa:6c:b8:
0a:e7:b9:e7:87:58:4d:df:28:21:4f:65:44:5f:f5:
a8:af:a1:bf:cb:83:45:ee:d5:f6:72:d8:be:69:ac:
f6:ec:da:47:bd:0a:91:91:f7:c1:b7:b4:8e:d7:38:
f0:01:b8:9e:55:dc:24:b9:55:c1:7e:be:fd:36:41:
b4:dd:b7:d9:b9:d4:e4:79:86:3b:aa:29:af:55:e4:
55:e9:68:94:fc:db:3d:df:33:ae:d5:35:81:a5:4c:
be:19:9f:df:e0:7c:52:38:bf:6c:b3:bf:c5:26:53:
d5:f7:f9:35:89:99:07:4e:31:90:0d:bb:76:52:b7:
37:86:5f:e9:9d:30:1c:d6:58:a1:2b:5c:10:55:13:
6b:32:3a:b4:f3:c8:5d:d5:18:91:44:d1:eb:8d:56:
40:5b:b3:95:b0:6f:f0:93:ab:6d:f3:78:96:c6:65:
1d:94:9a:eb:c8:fb:0c:cf:95:31:9a:b5:32:d4:40:
c1:4b:01:6c:9d:bd:99:9a:b3:d8:e2:54:b9:bc:83:
85:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:12:52:F2:4C:EE:8E:83:66:76:9F:24:EE:5A:9E:89:6E:6A:DD:71
X509v3 Authority Key Identifier:
keyid:4F:CF:77:10:5F:95:07:5C:E5:85:D4:27:E9:77:54:E8:F0:07:A8:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T893EF-VB1zlhdQn6XdU6PAHqLk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/139ebd-5abf-4254-8933-6f97dfc10fe7/1/T893EF-VB1zlhdQn6XdU6PAHqLk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/139ebd-5abf-4254-8933-6f97dfc10fe7/1/T893EF-VB1zlhdQn6XdU6PAHqLk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:50:44:78:1a:59:d1:c2:17:dd:f9:3c:16:32:39:55:a6:f8:
28:b2:8c:8a:2a:42:50:dd:1c:5d:74:2e:98:ea:2e:5c:e1:4a:
9e:c1:da:45:86:bc:b0:a9:d3:be:47:27:92:9b:1d:52:98:be:
c8:19:b3:15:22:84:b6:ef:f2:bc:ac:cf:5b:05:46:52:ae:68:
cd:6c:16:cc:d9:c9:ec:fb:b5:71:10:df:7c:ba:12:0c:b6:f2:
80:05:f3:92:5d:c4:d8:e1:b4:a7:54:df:75:e3:bd:df:b6:87:
e0:ed:0b:b8:06:6c:ca:45:91:6b:a3:5c:0d:84:c9:ba:23:57:
ba:b3:d7:f6:ef:d7:4f:94:32:cc:0b:99:7d:d0:73:62:db:c1:
f9:4e:b2:b1:85:cd:dd:ce:3a:77:5e:49:05:8b:39:2b:3a:f9:
65:8e:3d:e2:7a:3a:e7:16:9f:82:ec:f9:65:54:4b:a8:39:82:
ac:50:28:ab:26:b4:fa:72:a2:14:6d:a4:9b:3a:cd:0b:ae:cb:
d9:8f:28:f4:39:ae:d9:e8:23:dd:73:9d:47:08:d8:38:cf:66:
d0:e6:8e:8f:8c:35:86:87:de:7b:28:52:95:93:f4:cf:a3:e7:
f1:47:8b:41:09:7a:f8:42:c6:ef:8e:61:ef:89:c3:66:76:8c:
4e:69:49:df
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05ClmoBFEw67fdYovSW/U4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmY2Y3NzEwNWY5NTA3NWNlNTg1ZDQyN2U5Nzc1NGU4ZjAw
N2E4YjkwHhcNMjYwMzI5MTAwMTEyWhcNMjYwMzMwMTAwMTEyWjAzMTEwLwYDVQQD
Eyg2MDEyNTJmMjRjZWU4ZTgzNjY3NjlmMjRlZTVhOWU4OTZlNmFkZDcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuoAyGGeXruh9Vh8JCfTOqJM1BHYs
k/g+7h0ESfzJ8lLsiQKOhAcN1Y71lH8a7TFp6a1EEs//SImqbLgK57nnh1hN3ygh
T2VEX/Wor6G/y4NF7tX2cti+aaz27NpHvQqRkffBt7SO1zjwAbieVdwkuVXBfr79
NkG03bfZudTkeYY7qimvVeRV6WiU/Ns93zOu1TWBpUy+GZ/f4HxSOL9ss7/FJlPV
9/k1iZkHTjGQDbt2Urc3hl/pnTAc1lihK1wQVRNrMjq088hd1RiRRNHrjVZAW7OV
sG/wk6tt83iWxmUdlJrryPsMz5UxmrUy1EDBSwFsnb2ZmrPY4lS5vIOFqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGASUvJM7o6DZnafJO5anoluat1xMB8GA1UdIwQY
MBaAFE/PdxBflQdc5YXUJ+l3VOjwB6i5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDg5M0VGLVZCMXpsaGRRbjZYZFU2UEFIcUxrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi8xMzllYmQtNWFiZi00MjU0LTg5MzMt
NmY5N2RmYzEwZmU3LzEvVDg5M0VGLVZCMXpsaGRRbjZYZFU2UEFIcUxrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Mi8xMzllYmQtNWFiZi00MjU0LTg5MzMtNmY5N2RmYzEwZmU3
LzEvVDg5M0VGLVZCMXpsaGRRbjZYZFU2UEFIcUxrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAFBEeBpZ
0cIX3fk8FjI5Vab4KLKMiipCUN0cXXQumOouXOFKnsHaRYa8sKnTvkcnkpsdUpi+
yBmzFSKEtu/yvKzPWwVGUq5ozWwWzNnJ7Pu1cRDffLoSDLbygAXzkl3E2OG0p1Tf
deO937aH4O0LuAZsykWRa6NcDYTJuiNXurPX9u/XT5QyzAuZfdBzYtvB+U6ysYXN
3c46d15JBYs5Kzr5ZY494no65xafguz5ZVRLqDmCrFAoqya0+nKiFG2kmzrNC67L
2Y8o9Dmu2egj3XOdRwjYOM9m0OaOj4w1hofeeyhSlZP0z6Pn8UeLQQl6+ELG745h
74nDZnaMTmlJ3w==
-----END CERTIFICATE-----
Generated at Sun Mar 29 15:26:37 2026 by rpki-client