Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/a59ee9-33cd-47df-8403-b9472a2c5b3e/1/T7tj3wbeAMhD2mOXc0lZVHHlGiY.mft
File: T7tj3wbeAMhD2mOXc0lZVHHlGiY.mft (raw, json)
Hash identifier: JF4GQNTlEejVzSf6Cm60VTacCYnovdZ4MxpmUlaI+Pk=
Subject key identifier: 95:9E:1A:4E:F2:32:8D:7F:57:49:A5:92:6C:4C:38:DE:71:77:0E:1E
Authority key identifier: 4F:BB:63:DF:06:DE:00:C8:43:DA:63:97:73:49:59:54:71:E5:1A:26
Certificate issuer: /CN=4fbb63df06de00c843da63977349595471e51a26
Certificate serial: 019D37F75D8BA866E13D1DAAB1CE95FD867C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T7tj3wbeAMhD2mOXc0lZVHHlGiY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/a59ee9-33cd-47df-8403-b9472a2c5b3e/1/T7tj3wbeAMhD2mOXc0lZVHHlGiY.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 05:00:51 +0000
Manifest this update: Sun 29 Mar 2026 05:00:51 +0000
Manifest next update: Mon 30 Mar 2026 05:00:51 +0000
Files and hashes: 1: A8xv8vtzPNYcudy_CkqqgALd8rQ.roa (hash: Z6P1U4fiAAFfK/T39wGFzFC2aSrZXB1b41nd+Paxb+Y=)
2: PZ4pye6_7166g23AECIvJy9Vhao.roa (hash: 4jYAbauCnevFtoSRsUY9ZzLogbgVs0jCgKmDbNXpnd8=)
3: T7tj3wbeAMhD2mOXc0lZVHHlGiY.crl (hash: 7i45Gg5bpIogYXCThDe8MttIJ1wWGXjNNd1UIURAJ94=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/a59ee9-33cd-47df-8403-b9472a2c5b3e/1/T7tj3wbeAMhD2mOXc0lZVHHlGiY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/a59ee9-33cd-47df-8403-b9472a2c5b3e/1/T7tj3wbeAMhD2mOXc0lZVHHlGiY.mft
rsync://rpki.ripe.net/repository/DEFAULT/T7tj3wbeAMhD2mOXc0lZVHHlGiY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:5d:8b:a8:66:e1:3d:1d:aa:b1:ce:95:fd:86:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbb63df06de00c843da63977349595471e51a26
Validity
Not Before: Mar 29 05:00:51 2026 GMT
Not After : Mar 30 05:00:51 2026 GMT
Subject: CN=959e1a4ef2328d7f5749a5926c4c38de71770e1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:aa:f6:d4:33:c2:d1:73:82:a1:99:5b:8d:52:
81:56:68:4e:12:90:1e:58:3c:50:88:b8:07:08:41:
78:be:06:5d:bb:0f:05:67:94:42:2e:f7:62:0f:8b:
0e:9d:e7:d2:bc:97:c4:f5:4a:ac:9b:15:d3:c3:8d:
15:7c:23:91:21:2d:97:9b:76:13:84:17:3d:7f:83:
5a:17:37:2f:31:2b:7f:10:20:08:13:d7:e5:a0:3b:
74:ae:ea:c1:8d:73:ee:61:04:41:ff:06:4f:54:9e:
a8:09:bf:0b:87:28:16:14:47:92:b2:e4:08:0a:51:
4d:e2:9d:8f:4b:11:02:ab:78:d0:db:d1:30:ff:29:
8e:a4:5f:89:4c:2e:ee:1a:62:5d:ff:19:d9:bf:e2:
3f:fe:61:93:53:e0:18:5c:f2:93:70:10:80:e0:6b:
57:15:f2:82:84:33:d6:c6:96:8b:f0:9e:91:76:f6:
a1:f4:f9:66:70:e7:ae:cb:16:fb:79:99:ff:10:77:
d7:7e:f6:59:cd:a4:11:ca:f1:33:56:4c:d2:b8:e2:
1b:a2:d4:2b:a1:c3:44:9a:55:c6:a6:25:b9:40:85:
f8:11:ad:e3:98:f9:d4:04:52:9c:49:96:40:ce:47:
ac:9a:73:49:9b:c2:85:f3:87:1c:ce:be:e9:32:f1:
ae:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:9E:1A:4E:F2:32:8D:7F:57:49:A5:92:6C:4C:38:DE:71:77:0E:1E
X509v3 Authority Key Identifier:
keyid:4F:BB:63:DF:06:DE:00:C8:43:DA:63:97:73:49:59:54:71:E5:1A:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T7tj3wbeAMhD2mOXc0lZVHHlGiY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/a59ee9-33cd-47df-8403-b9472a2c5b3e/1/T7tj3wbeAMhD2mOXc0lZVHHlGiY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/a59ee9-33cd-47df-8403-b9472a2c5b3e/1/T7tj3wbeAMhD2mOXc0lZVHHlGiY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:f1:57:fe:31:de:be:59:6d:e6:b8:20:aa:6d:e6:f0:4c:49:
b0:21:41:d5:46:c5:c1:d1:fb:39:7e:22:2e:be:4f:0d:5d:8a:
24:f4:7b:a1:6f:f6:37:0b:c7:d0:12:bc:22:42:fb:1f:ed:95:
24:24:78:2d:d3:82:89:86:af:65:47:2a:14:dd:f0:d0:38:9e:
14:b7:93:37:64:be:13:2d:42:13:cb:71:7e:e2:65:69:18:d1:
a2:c5:e3:fc:c9:7e:fe:a8:d3:6e:14:f5:23:52:43:29:18:0b:
92:a5:1f:55:9b:96:7b:38:03:1a:48:80:5a:8e:f3:f8:ba:6c:
03:a6:2f:01:52:0c:9a:ff:44:4e:fe:98:83:24:d2:32:2d:15:
f4:4e:f8:0c:20:b1:5b:82:f5:d9:68:6c:3f:33:14:51:f1:fb:
55:6e:00:d2:b8:66:09:d5:8f:85:f2:d8:63:34:90:2b:52:0c:
07:66:c5:a8:3f:61:e0:85:4a:27:58:8a:2b:28:a6:04:c0:57:
1b:26:6a:73:21:5b:e8:82:30:ee:a3:63:d2:86:a1:b4:b5:54:
3f:50:79:e8:36:08:2b:79:42:6d:a1:ec:a3:90:90:12:69:49:
f8:c8:c0:b6:f1:85:a2:70:aa:1d:89:f7:29:d0:48:27:96:80:
b2:51:64:c2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03912LqGbhPR2qsc6V/YZ8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmYmI2M2RmMDZkZTAwYzg0M2RhNjM5NzczNDk1OTU0NzFl
NTFhMjYwHhcNMjYwMzI5MDUwMDUxWhcNMjYwMzMwMDUwMDUxWjAzMTEwLwYDVQQD
Eyg5NTllMWE0ZWYyMzI4ZDdmNTc0OWE1OTI2YzRjMzhkZTcxNzcwZTFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApKr21DPC0XOCoZlbjVKBVmhOEpAe
WDxQiLgHCEF4vgZduw8FZ5RCLvdiD4sOnefSvJfE9UqsmxXTw40VfCORIS2Xm3YT
hBc9f4NaFzcvMSt/ECAIE9floDt0rurBjXPuYQRB/wZPVJ6oCb8LhygWFEeSsuQI
ClFN4p2PSxECq3jQ29Ew/ymOpF+JTC7uGmJd/xnZv+I//mGTU+AYXPKTcBCA4GtX
FfKChDPWxpaL8J6Rdvah9PlmcOeuyxb7eZn/EHfXfvZZzaQRyvEzVkzSuOIbotQr
ocNEmlXGpiW5QIX4Ea3jmPnUBFKcSZZAzkesmnNJm8KF84cczr7pMvGutwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJWeGk7yMo1/V0mlkmxMON5xdw4eMB8GA1UdIwQY
MBaAFE+7Y98G3gDIQ9pjl3NJWVRx5RomMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDd0ajN3YmVBTWhEMm1PWGMwbFpWSEhsR2lZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS9hNTllZTktMzNjZC00N2RmLTg0MDMt
Yjk0NzJhMmM1YjNlLzEvVDd0ajN3YmVBTWhEMm1PWGMwbFpWSEhsR2lZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZS9hNTllZTktMzNjZC00N2RmLTg0MDMtYjk0NzJhMmM1YjNl
LzEvVDd0ajN3YmVBTWhEMm1PWGMwbFpWSEhsR2lZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjvFX/jHe
vllt5rggqm3m8ExJsCFB1UbFwdH7OX4iLr5PDV2KJPR7oW/2NwvH0BK8IkL7H+2V
JCR4LdOCiYavZUcqFN3w0DieFLeTN2S+Ey1CE8txfuJlaRjRosXj/Ml+/qjTbhT1
I1JDKRgLkqUfVZuWezgDGkiAWo7z+LpsA6YvAVIMmv9ETv6YgyTSMi0V9E74DCCx
W4L12WhsPzMUUfH7VW4A0rhmCdWPhfLYYzSQK1IMB2bFqD9h4IVKJ1iKKyimBMBX
GyZqcyFb6IIw7qNj0oahtLVUP1B56DYIK3lCbaHso5CQEmlJ+MjAtvGFonCqHYn3
KdBIJ5aAslFkwg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 14:54:51 2026 by rpki-client