Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/649a98-339a-4f4b-8750-6e9d3b732b08/1/tWyxebPbXGs2zTMINAgB_tsrfRk.mft
File: tWyxebPbXGs2zTMINAgB_tsrfRk.mft (raw, json)
Hash identifier: CHdKxGg6TkQntZD73gw835SwS8bEG79IcHmb81ZO34c=
Subject key identifier: 3B:B6:82:EF:FB:20:03:FC:B6:E3:26:83:1B:68:2E:DC:F1:41:0B:9D
Authority key identifier: B5:6C:B1:79:B3:DB:5C:6B:36:CD:33:08:34:08:01:FE:DB:2B:7D:19
Certificate issuer: /CN=b56cb179b3db5c6b36cd3308340801fedb2b7d19
Certificate serial: 019D088C3CC19FDE9C2772690C38B488E09C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tWyxebPbXGs2zTMINAgB_tsrfRk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/649a98-339a-4f4b-8750-6e9d3b732b08/1/tWyxebPbXGs2zTMINAgB_tsrfRk.mft
Manifest number: 1879
Signing time: Fri 20 Mar 2026 00:01:41 +0000
Manifest this update: Fri 20 Mar 2026 00:01:41 +0000
Manifest next update: Sat 21 Mar 2026 00:01:41 +0000
Files and hashes: 1: Su31KPktHrFLkChT839zTFn3AuI.roa (hash: GbFfc/EFmP9DxZo0ut8vt6TPNx0g+x1F1pn5dExPpXM=)
2: tWyxebPbXGs2zTMINAgB_tsrfRk.crl (hash: YxcQ+k3Grxd7aqoUYuVW8JYGfzqdLkPri/ccfbyCs9A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/649a98-339a-4f4b-8750-6e9d3b732b08/1/tWyxebPbXGs2zTMINAgB_tsrfRk.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/649a98-339a-4f4b-8750-6e9d3b732b08/1/tWyxebPbXGs2zTMINAgB_tsrfRk.mft
rsync://rpki.ripe.net/repository/DEFAULT/tWyxebPbXGs2zTMINAgB_tsrfRk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Mar 2026 17:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:08:8c:3c:c1:9f:de:9c:27:72:69:0c:38:b4:88:e0:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b56cb179b3db5c6b36cd3308340801fedb2b7d19
Validity
Not Before: Mar 20 00:01:41 2026 GMT
Not After : Mar 21 00:01:41 2026 GMT
Subject: CN=3bb682effb2003fcb6e326831b682edcf1410b9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:c3:e8:99:c9:74:5c:a8:5d:d8:0b:e0:09:89:
a9:13:7b:e7:11:b6:40:99:f5:6e:7d:74:5d:78:d4:
3f:9e:1d:cd:7e:97:d6:59:8b:23:01:57:2d:70:10:
63:31:a3:c4:81:fd:0b:14:df:a1:51:98:fc:39:d8:
85:72:50:2a:2d:13:09:4d:11:a1:c2:77:e4:db:69:
6e:a0:ba:61:1a:e8:4f:f7:c3:bf:2b:41:04:cc:e5:
bc:f1:0d:24:c7:d9:e4:d3:98:2a:b3:aa:01:a5:9a:
63:54:23:c5:22:3b:d7:c6:09:c3:78:95:c3:7a:4a:
88:95:ca:6c:78:a2:da:85:95:72:e7:c0:45:48:77:
1f:7b:2a:ae:31:2f:88:56:2a:a6:e5:cc:39:ce:a2:
8b:3a:d5:33:db:3f:3c:1f:f7:35:2f:9a:98:a3:64:
e3:71:9f:43:c1:13:c5:40:30:1e:e8:a1:5c:df:66:
26:64:6f:cd:e8:65:56:cc:43:10:ac:0f:ab:f4:e3:
38:ba:41:f4:04:a5:5c:09:18:bc:07:9b:21:68:28:
b5:28:d7:71:43:8d:71:7a:07:73:40:b1:3a:d1:bb:
2e:27:87:d8:48:ff:a5:9e:a1:61:f7:77:a7:e2:a2:
39:09:a8:36:6a:5c:0a:83:34:3c:2b:5b:2b:92:5e:
d3:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:B6:82:EF:FB:20:03:FC:B6:E3:26:83:1B:68:2E:DC:F1:41:0B:9D
X509v3 Authority Key Identifier:
keyid:B5:6C:B1:79:B3:DB:5C:6B:36:CD:33:08:34:08:01:FE:DB:2B:7D:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tWyxebPbXGs2zTMINAgB_tsrfRk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/649a98-339a-4f4b-8750-6e9d3b732b08/1/tWyxebPbXGs2zTMINAgB_tsrfRk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/649a98-339a-4f4b-8750-6e9d3b732b08/1/tWyxebPbXGs2zTMINAgB_tsrfRk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:c3:73:38:0f:ce:b1:ea:c1:67:25:c0:cf:75:f6:a3:78:f7:
e7:96:92:40:64:73:ef:6f:43:34:82:3b:40:05:12:6d:c8:f2:
ab:ff:35:98:02:a8:1f:61:fb:bd:8b:65:1c:74:b1:d6:54:76:
2b:6a:6a:1a:f9:2a:21:ac:80:b6:bf:4f:6f:f3:ca:fe:a7:10:
1f:fa:ac:2c:c8:9a:b2:3c:f2:dc:44:34:ef:23:6e:06:82:8a:
1f:64:65:bc:2a:7d:d9:be:1a:c3:cf:dd:06:90:b6:28:44:11:
de:51:53:90:7f:dc:a1:48:28:e6:c9:ae:f4:02:ae:fa:04:6a:
4a:f4:c9:27:33:31:aa:51:33:80:d7:b1:c1:26:de:89:38:16:
36:a6:78:31:9f:8b:ba:c6:b8:6a:2b:94:fc:5b:0c:b7:66:d5:
e0:5f:c1:60:68:36:67:5f:19:5d:8b:c7:70:50:2a:44:1a:75:
a3:33:83:aa:21:02:10:df:74:65:e4:7b:46:93:ea:27:f6:6c:
b3:f1:6a:76:70:ba:dc:e9:91:53:4a:40:ae:69:5f:ad:e1:a4:
07:69:d2:f5:a9:a6:21:21:7c:51:9c:3e:02:3e:b5:55:bc:96:
67:10:ab:76:94:ce:c0:1d:9a:6d:8e:ee:26:05:09:4a:9e:1e:
97:df:cc:a4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0IjDzBn96cJ3JpDDi0iOCcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1NmNiMTc5YjNkYjVjNmIzNmNkMzMwODM0MDgwMWZlZGIy
YjdkMTkwHhcNMjYwMzIwMDAwMTQxWhcNMjYwMzIxMDAwMTQxWjAzMTEwLwYDVQQD
EygzYmI2ODJlZmZiMjAwM2ZjYjZlMzI2ODMxYjY4MmVkY2YxNDEwYjlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsMPomcl0XKhd2AvgCYmpE3vnEbZA
mfVufXRdeNQ/nh3NfpfWWYsjAVctcBBjMaPEgf0LFN+hUZj8OdiFclAqLRMJTRGh
wnfk22luoLphGuhP98O/K0EEzOW88Q0kx9nk05gqs6oBpZpjVCPFIjvXxgnDeJXD
ekqIlcpseKLahZVy58BFSHcfeyquMS+IViqm5cw5zqKLOtUz2z88H/c1L5qYo2Tj
cZ9DwRPFQDAe6KFc32YmZG/N6GVWzEMQrA+r9OM4ukH0BKVcCRi8B5shaCi1KNdx
Q41xegdzQLE60bsuJ4fYSP+lnqFh93en4qI5Cag2alwKgzQ8K1srkl7T5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDu2gu/7IAP8tuMmgxtoLtzxQQudMB8GA1UdIwQY
MBaAFLVssXmz21xrNs0zCDQIAf7bK30ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFd5eGViUGJYR3MyelRNSU5BZ0JfdHNyZlJrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy82NDlhOTgtMzM5YS00ZjRiLTg3NTAt
NmU5ZDNiNzMyYjA4LzEvdFd5eGViUGJYR3MyelRNSU5BZ0JfdHNyZlJrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yy82NDlhOTgtMzM5YS00ZjRiLTg3NTAtNmU5ZDNiNzMyYjA4
LzEvdFd5eGViUGJYR3MyelRNSU5BZ0JfdHNyZlJrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd8NzOA/O
serBZyXAz3X2o3j355aSQGRz729DNII7QAUSbcjyq/81mAKoH2H7vYtlHHSx1lR2
K2pqGvkqIayAtr9Pb/PK/qcQH/qsLMiasjzy3EQ07yNuBoKKH2RlvCp92b4aw8/d
BpC2KEQR3lFTkH/coUgo5smu9AKu+gRqSvTJJzMxqlEzgNexwSbeiTgWNqZ4MZ+L
usa4aiuU/FsMt2bV4F/BYGg2Z18ZXYvHcFAqRBp1ozODqiECEN90ZeR7RpPqJ/Zs
s/FqdnC63OmRU0pArmlfreGkB2nS9ammISF8UZw+Aj61VbyWZxCrdpTOwB2abY7u
JgUJSp4el9/MpA==
-----END CERTIFICATE-----
Generated at Fri Mar 20 02:35:20 2026 by rpki-client