Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/b1e0ff-9696-4b61-bd5e-7f6e4930f25a/1/tUK8DYzCj1WGFe0_rlPKzkpu8IE.mft
File: tUK8DYzCj1WGFe0_rlPKzkpu8IE.mft (raw, json)
Hash identifier: HV1xh9VcB2RWWo1vfXzmQnXMD1J3sy1Kp5aGoDvpXcU=
Subject key identifier: ED:AF:63:B7:C6:92:F9:7B:7D:1B:76:7B:C6:92:99:C3:77:00:28:E6
Authority key identifier: B5:42:BC:0D:8C:C2:8F:55:86:15:ED:3F:AE:53:CA:CE:4A:6E:F0:81
Certificate issuer: /CN=b542bc0d8cc28f558615ed3fae53cace4a6ef081
Certificate serial: 019D38D306F1D6B7D875BDB825E83ECBDC9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tUK8DYzCj1WGFe0_rlPKzkpu8IE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/b1e0ff-9696-4b61-bd5e-7f6e4930f25a/1/tUK8DYzCj1WGFe0_rlPKzkpu8IE.mft
Manifest number: 0E7C
Signing time: Sun 29 Mar 2026 09:00:46 +0000
Manifest this update: Sun 29 Mar 2026 09:00:46 +0000
Manifest next update: Mon 30 Mar 2026 09:00:46 +0000
Files and hashes: 1: 5DPQKVh7BOyXWi6HVipGuI-DbKI.roa (hash: 7niXhQfcaYijhdxK0OqWBqiveT28StizLbsME/eXTCM=)
2: tUK8DYzCj1WGFe0_rlPKzkpu8IE.crl (hash: tduveAKm29H80g+hrQ7MrDixaeyUzNT0E7p8tOdIaNg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/b1e0ff-9696-4b61-bd5e-7f6e4930f25a/1/tUK8DYzCj1WGFe0_rlPKzkpu8IE.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/b1e0ff-9696-4b61-bd5e-7f6e4930f25a/1/tUK8DYzCj1WGFe0_rlPKzkpu8IE.mft
rsync://rpki.ripe.net/repository/DEFAULT/tUK8DYzCj1WGFe0_rlPKzkpu8IE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:06:f1:d6:b7:d8:75:bd:b8:25:e8:3e:cb:dc:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b542bc0d8cc28f558615ed3fae53cace4a6ef081
Validity
Not Before: Mar 29 09:00:46 2026 GMT
Not After : Mar 30 09:00:46 2026 GMT
Subject: CN=edaf63b7c692f97b7d1b767bc69299c3770028e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:4f:86:22:ed:3c:39:6c:b7:7c:c3:fe:25:df:
4e:91:a9:06:9c:ee:ec:df:ec:16:df:97:9e:da:b9:
a8:9e:a6:77:54:b3:87:2b:c2:e9:1e:34:8f:37:e4:
db:cf:3d:a8:c7:2b:2a:5b:08:04:ef:f4:ec:55:dc:
94:53:ed:81:cf:a3:e9:c5:d3:85:47:05:c7:6f:2b:
a2:bf:40:6d:1a:b4:62:3a:59:a8:24:73:40:52:d9:
d1:12:25:1b:e9:89:8f:be:99:5a:52:b2:f4:9e:7a:
32:d8:2c:ba:68:31:46:97:75:2f:4b:e8:6f:09:8e:
58:7e:6b:f7:07:cc:8f:2d:c7:80:72:1c:bd:9c:bd:
1c:a0:41:5d:8b:07:73:68:30:fd:af:51:87:8e:b6:
6d:cc:88:31:b9:5d:c1:d7:1f:16:ec:31:35:79:bd:
7f:65:bf:84:2b:ab:bd:de:58:a3:e9:ef:7b:89:df:
3c:2c:12:d5:f3:37:e2:35:37:54:46:c2:dc:c6:84:
dd:0a:6c:9e:6f:e6:b6:2f:ba:d3:a6:04:92:cb:10:
88:73:cb:c9:da:cb:32:ab:1e:54:2e:e7:76:b6:0c:
a1:9e:50:ad:b6:e9:81:32:ab:1a:88:f1:2d:f0:c1:
d6:a1:86:b8:dd:d6:35:89:fb:41:18:c1:06:91:d5:
fc:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:AF:63:B7:C6:92:F9:7B:7D:1B:76:7B:C6:92:99:C3:77:00:28:E6
X509v3 Authority Key Identifier:
keyid:B5:42:BC:0D:8C:C2:8F:55:86:15:ED:3F:AE:53:CA:CE:4A:6E:F0:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tUK8DYzCj1WGFe0_rlPKzkpu8IE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/b1e0ff-9696-4b61-bd5e-7f6e4930f25a/1/tUK8DYzCj1WGFe0_rlPKzkpu8IE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/b1e0ff-9696-4b61-bd5e-7f6e4930f25a/1/tUK8DYzCj1WGFe0_rlPKzkpu8IE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:89:d1:92:a8:c6:e5:af:c5:48:29:6c:8a:e7:c9:21:73:0f:
ae:34:b0:40:39:0e:83:4e:9a:1b:d4:80:e1:c4:85:d9:1b:ef:
47:5c:00:dd:83:bc:e6:ea:f9:76:3a:ee:16:d3:9f:b1:60:0a:
69:62:3e:c0:5c:ca:8b:e5:d1:67:7a:18:5d:66:cc:58:74:29:
33:18:b0:6a:25:dd:29:02:df:78:58:e6:ae:0b:c6:84:21:ac:
b6:d4:b8:02:c8:ca:7c:41:87:5d:f1:3b:c1:50:69:16:19:8f:
d3:42:a5:71:3b:7e:cb:16:17:99:fc:5c:5a:1a:79:92:1b:f3:
90:48:ae:60:50:40:80:82:2c:eb:3b:91:80:43:53:71:08:21:
81:79:10:f7:b7:97:2d:4a:27:0e:eb:0e:20:c3:60:65:79:5d:
49:c0:8f:25:2a:15:7f:a7:be:2b:0f:ec:37:7f:86:6e:7b:32:
ce:b2:c6:5e:50:d5:95:a7:32:31:39:2c:ba:da:61:b9:46:2d:
4e:6d:8f:b2:26:44:58:a9:40:15:4d:74:3f:be:a2:9e:ad:6c:
c8:1b:5b:8b:c6:4a:ce:6a:03:26:da:22:aa:05:fd:5a:e8:96:
54:11:86:78:45:06:57:48:cd:2a:69:6b:59:84:a2:8c:f1:a0:
50:41:3b:a3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ040wbx1rfYdb24Jeg+y9yaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1NDJiYzBkOGNjMjhmNTU4NjE1ZWQzZmFlNTNjYWNlNGE2
ZWYwODEwHhcNMjYwMzI5MDkwMDQ2WhcNMjYwMzMwMDkwMDQ2WjAzMTEwLwYDVQQD
EyhlZGFmNjNiN2M2OTJmOTdiN2QxYjc2N2JjNjkyOTljMzc3MDAyOGU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt0+GIu08OWy3fMP+Jd9OkakGnO7s
3+wW35ee2rmonqZ3VLOHK8LpHjSPN+Tbzz2oxysqWwgE7/TsVdyUU+2Bz6PpxdOF
RwXHbyuiv0BtGrRiOlmoJHNAUtnREiUb6YmPvplaUrL0nnoy2Cy6aDFGl3UvS+hv
CY5Yfmv3B8yPLceAchy9nL0coEFdiwdzaDD9r1GHjrZtzIgxuV3B1x8W7DE1eb1/
Zb+EK6u93lij6e97id88LBLV8zfiNTdURsLcxoTdCmyeb+a2L7rTpgSSyxCIc8vJ
2ssyqx5ULud2tgyhnlCttumBMqsaiPEt8MHWoYa43dY1iftBGMEGkdX8jwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO2vY7fGkvl7fRt2e8aSmcN3ACjmMB8GA1UdIwQY
MBaAFLVCvA2Mwo9VhhXtP65Tys5KbvCBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFVLOERZekNqMVdHRmUwX3JsUEt6a3B1OElFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS9iMWUwZmYtOTY5Ni00YjYxLWJkNWUt
N2Y2ZTQ5MzBmMjVhLzEvdFVLOERZekNqMVdHRmUwX3JsUEt6a3B1OElFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NS9iMWUwZmYtOTY5Ni00YjYxLWJkNWUtN2Y2ZTQ5MzBmMjVh
LzEvdFVLOERZekNqMVdHRmUwX3JsUEt6a3B1OElFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEInRkqjG
5a/FSClsiufJIXMPrjSwQDkOg06aG9SA4cSF2RvvR1wA3YO85ur5djruFtOfsWAK
aWI+wFzKi+XRZ3oYXWbMWHQpMxiwaiXdKQLfeFjmrgvGhCGsttS4AsjKfEGHXfE7
wVBpFhmP00KlcTt+yxYXmfxcWhp5khvzkEiuYFBAgIIs6zuRgENTcQghgXkQ97eX
LUonDusOIMNgZXldScCPJSoVf6e+Kw/sN3+GbnsyzrLGXlDVlacyMTksutphuUYt
Tm2PsiZEWKlAFU10P76inq1syBtbi8ZKzmoDJtoiqgX9WuiWVBGGeEUGV0jNKmlr
WYSijPGgUEE7ow==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:53:19 2026 by rpki-client