Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/5ac21d-7616-4eef-85d7-63b52aa7f8da/1/tzJ2Kl6GHpdt5T0UeG8546ZpaBs.mft
File: tzJ2Kl6GHpdt5T0UeG8546ZpaBs.mft (raw, json)
Hash identifier: SrWuwSU1pxwNDKNO+mA/q8krrnDHyffRHBiusWcohOs=
Subject key identifier: 21:8D:45:B6:96:D8:2E:F3:EC:8F:CA:E1:A0:68:43:E0:BA:36:42:31
Authority key identifier: B7:32:76:2A:5E:86:1E:97:6D:E5:3D:14:78:6F:39:E3:A6:69:68:1B
Certificate issuer: /CN=b732762a5e861e976de53d14786f39e3a669681b
Certificate serial: 019D39AED75E50B4A9E09B93552B877D6336
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tzJ2Kl6GHpdt5T0UeG8546ZpaBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/5ac21d-7616-4eef-85d7-63b52aa7f8da/1/tzJ2Kl6GHpdt5T0UeG8546ZpaBs.mft
Manifest number: 18A0
Signing time: Sun 29 Mar 2026 13:00:52 +0000
Manifest this update: Sun 29 Mar 2026 13:00:52 +0000
Manifest next update: Mon 30 Mar 2026 13:00:52 +0000
Files and hashes: 1: 1VuGqO-b5-MAfDRweaNuv06UwQE.roa (hash: 5cmqBdE+cZUafwo3gwOznhicqwBl1Y6l9Jg+XAX1liI=)
2: 9823jxXqdCSIxcH288HnqavucSI.asa (hash: 3zFrnCZ3fk7mBk5UudxYVrRpKBD3GP7IzVn6x67AU6o=)
3: EwhrUJlTerpzDSxGJYXhc1ipbvY.asa (hash: Kifw3U236SfBdGCg3lUHGjK23zhhUU5LfhGOnN6eMXs=)
4: FhIJYPne7gPWVQQPlSNOQDYojyw.roa (hash: K6YwsovdJ/O0GUapO1LURNQtSxCoIhGALa7CIvhy8bI=)
5: Qqt98OgHdyagvtzakVb3zNMmwKs.roa (hash: BpO8bWnBPYn/bYjQyXDccWI2949LL94WM+S3q4wZu/4=)
6: VvqzmjNZq8EAn7upk3HKESnO2Sg.roa (hash: zi8li6T/eNUQAuUi6F1iTu5taSL1qMtfO51QFh76N4Q=)
7: tzJ2Kl6GHpdt5T0UeG8546ZpaBs.crl (hash: s4GSzZdbvue7kDWBUtZYQmBGxkKUNzfPmSdTi1dBfuQ=)
8: zfs1n8rEspCcwaljPO1LWoriK7A.roa (hash: Cw4La7Iv+J3S/kv3dOrnyO46Wye0r7XGdA/N85GgLG8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/5ac21d-7616-4eef-85d7-63b52aa7f8da/1/tzJ2Kl6GHpdt5T0UeG8546ZpaBs.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/5ac21d-7616-4eef-85d7-63b52aa7f8da/1/tzJ2Kl6GHpdt5T0UeG8546ZpaBs.mft
rsync://rpki.ripe.net/repository/DEFAULT/tzJ2Kl6GHpdt5T0UeG8546ZpaBs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 13:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:ae:d7:5e:50:b4:a9:e0:9b:93:55:2b:87:7d:63:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b732762a5e861e976de53d14786f39e3a669681b
Validity
Not Before: Mar 29 13:00:52 2026 GMT
Not After : Mar 30 13:00:52 2026 GMT
Subject: CN=218d45b696d82ef3ec8fcae1a06843e0ba364231
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:32:18:84:8b:13:df:24:c7:79:a2:a8:51:be:
62:95:96:ce:c0:ed:39:e1:1d:c0:56:3c:53:7c:43:
6f:74:ec:94:ad:37:68:c4:c7:b6:ae:5e:8e:3b:07:
73:20:50:81:55:15:6e:e6:7d:89:46:06:07:c5:34:
61:f0:8c:76:e8:41:4e:67:b7:ef:3c:f6:35:11:f7:
ff:22:84:3c:e2:93:c3:fc:bb:50:29:2a:e5:8b:bf:
bf:0f:5f:1e:cf:75:80:bf:28:d1:a3:b3:c0:b8:21:
91:a8:42:bf:73:5f:90:d2:9a:2a:b6:11:9e:f9:b8:
61:46:72:c7:88:c8:1d:22:12:e2:f3:fd:42:c5:bb:
4e:b4:5b:98:85:5f:46:12:44:fa:94:dd:71:6c:51:
c5:0d:81:77:bd:3a:72:f9:b5:f7:19:5e:50:f2:5b:
5b:6a:d3:0b:b1:28:9a:7f:0b:c8:3b:8c:6a:f9:52:
20:3c:81:0d:28:ea:71:9f:bb:70:bf:30:a6:3c:91:
58:b7:1c:06:5f:29:f8:74:8c:f8:6d:8b:e8:ec:a3:
67:b7:6c:fb:41:fd:ad:b6:68:de:a1:b9:15:7c:50:
0d:31:0d:ba:10:5c:34:0c:63:3b:0a:85:a4:89:7e:
45:59:31:73:20:45:2d:80:d7:0f:3d:00:a6:76:17:
30:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:8D:45:B6:96:D8:2E:F3:EC:8F:CA:E1:A0:68:43:E0:BA:36:42:31
X509v3 Authority Key Identifier:
keyid:B7:32:76:2A:5E:86:1E:97:6D:E5:3D:14:78:6F:39:E3:A6:69:68:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tzJ2Kl6GHpdt5T0UeG8546ZpaBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/5ac21d-7616-4eef-85d7-63b52aa7f8da/1/tzJ2Kl6GHpdt5T0UeG8546ZpaBs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/5ac21d-7616-4eef-85d7-63b52aa7f8da/1/tzJ2Kl6GHpdt5T0UeG8546ZpaBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d4:a6:67:07:a2:d2:c0:8e:30:9d:76:cb:2e:1f:b8:8e:0b:94:
84:59:9e:8b:8c:01:62:19:dc:7a:63:77:08:c9:24:20:bb:b9:
70:17:a6:67:a9:fa:4b:08:75:47:1f:9b:83:bc:8f:86:36:fa:
25:f6:1a:25:46:96:ef:a7:ce:e5:f1:2d:14:8e:ad:85:08:93:
75:3f:49:1b:b8:69:19:b5:b6:6a:03:17:c2:62:c0:b6:7f:b9:
fa:57:eb:4a:08:29:25:45:a2:75:1d:cb:25:56:47:60:ce:52:
5f:a1:d8:f7:92:c3:00:fd:9c:ab:2b:c6:e0:0f:58:a4:e9:1d:
8d:33:08:69:84:35:0f:6c:85:e1:4d:ab:f5:ec:7b:6d:f6:1b:
3f:89:f6:9b:b3:c0:3a:35:32:05:9c:1a:86:50:f0:5b:f4:91:
d2:1c:d9:39:4d:6a:0f:f5:8b:be:40:20:9c:37:cd:13:39:b6:
06:77:a8:24:f3:c3:d5:74:d5:6a:b3:27:f4:2f:01:ae:35:e7:
96:fd:2b:1a:bb:2a:f8:97:33:13:32:01:8b:a4:cb:7a:3d:90:
92:80:11:d9:2e:bb:65:a8:a8:80:c5:84:72:a5:e7:ca:27:80:
95:39:10:1e:fd:42:34:18:64:83:1f:97:f6:07:1f:b6:f7:39:
9c:e7:b8:90
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05rtdeULSp4JuTVSuHfWM2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3MzI3NjJhNWU4NjFlOTc2ZGU1M2QxNDc4NmYzOWUzYTY2
OTY4MWIwHhcNMjYwMzI5MTMwMDUyWhcNMjYwMzMwMTMwMDUyWjAzMTEwLwYDVQQD
EygyMThkNDViNjk2ZDgyZWYzZWM4ZmNhZTFhMDY4NDNlMGJhMzY0MjMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqjIYhIsT3yTHeaKoUb5ilZbOwO05
4R3AVjxTfENvdOyUrTdoxMe2rl6OOwdzIFCBVRVu5n2JRgYHxTRh8Ix26EFOZ7fv
PPY1Eff/IoQ84pPD/LtQKSrli7+/D18ez3WAvyjRo7PAuCGRqEK/c1+Q0poqthGe
+bhhRnLHiMgdIhLi8/1CxbtOtFuYhV9GEkT6lN1xbFHFDYF3vTpy+bX3GV5Q8ltb
atMLsSiafwvIO4xq+VIgPIENKOpxn7twvzCmPJFYtxwGXyn4dIz4bYvo7KNnt2z7
Qf2ttmjeobkVfFANMQ26EFw0DGM7CoWkiX5FWTFzIEUtgNcPPQCmdhcwEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCGNRbaW2C7z7I/K4aBoQ+C6NkIxMB8GA1UdIwQY
MBaAFLcydipehh6XbeU9FHhvOeOmaWgbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdHpKMktsNkdIcGR0NVQwVWVHODU0NlpwYUJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny81YWMyMWQtNzYxNi00ZWVmLTg1ZDct
NjNiNTJhYTdmOGRhLzEvdHpKMktsNkdIcGR0NVQwVWVHODU0NlpwYUJzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny81YWMyMWQtNzYxNi00ZWVmLTg1ZDctNjNiNTJhYTdmOGRh
LzEvdHpKMktsNkdIcGR0NVQwVWVHODU0NlpwYUJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA1KZnB6LS
wI4wnXbLLh+4jguUhFmei4wBYhncemN3CMkkILu5cBemZ6n6Swh1Rx+bg7yPhjb6
JfYaJUaW76fO5fEtFI6thQiTdT9JG7hpGbW2agMXwmLAtn+5+lfrSggpJUWidR3L
JVZHYM5SX6HY95LDAP2cqyvG4A9YpOkdjTMIaYQ1D2yF4U2r9ex7bfYbP4n2m7PA
OjUyBZwahlDwW/SR0hzZOU1qD/WLvkAgnDfNEzm2BneoJPPD1XTVarMn9C8BrjXn
lv0rGrsq+JczEzIBi6TLej2QkoAR2S67ZaiogMWEcqXnyieAlTkQHv1CNBhkgx+X
9gcftvc5nOe4kA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 22:07:31 2026 by rpki-client