Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/8c02ff-a9c5-4788-ae8b-18b9a8510539/1/tXwPr6ZQ3ZSjtVgXOfY9iO-kFPM.mft
File: tXwPr6ZQ3ZSjtVgXOfY9iO-kFPM.mft (raw, json)
Hash identifier: LC7BEXXO8MghVq4XPp4e/0YoHqch/VrhAjnj89Ntjys=
Subject key identifier: A2:3C:47:9E:AC:3B:14:4A:48:86:33:B4:BF:39:B0:BE:9D:14:6B:49
Authority key identifier: B5:7C:0F:AF:A6:50:DD:94:A3:B5:58:17:39:F6:3D:88:EF:A4:14:F3
Certificate issuer: /CN=b57c0fafa650dd94a3b5581739f63d88efa414f3
Certificate serial: 019D37891DB64CF23ECEA0B2D7B8D2560010
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tXwPr6ZQ3ZSjtVgXOfY9iO-kFPM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/8c02ff-a9c5-4788-ae8b-18b9a8510539/1/tXwPr6ZQ3ZSjtVgXOfY9iO-kFPM.mft
Manifest number: 0FAD
Signing time: Sun 29 Mar 2026 03:00:26 +0000
Manifest this update: Sun 29 Mar 2026 03:00:26 +0000
Manifest next update: Mon 30 Mar 2026 03:00:26 +0000
Files and hashes: 1: C97_7VGyt3z51YWbg6YIKKzKTkE.roa (hash: iks5W0aWtIawzxWfA5TI8oBeO4XFNLqMOBRmY+MnMEw=)
2: tXwPr6ZQ3ZSjtVgXOfY9iO-kFPM.crl (hash: gTu+7d1yC6cg1EzcP3Z1AUXtZJV8swe0zcAGVpvUneE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/8c02ff-a9c5-4788-ae8b-18b9a8510539/1/tXwPr6ZQ3ZSjtVgXOfY9iO-kFPM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/8c02ff-a9c5-4788-ae8b-18b9a8510539/1/tXwPr6ZQ3ZSjtVgXOfY9iO-kFPM.mft
rsync://rpki.ripe.net/repository/DEFAULT/tXwPr6ZQ3ZSjtVgXOfY9iO-kFPM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:1d:b6:4c:f2:3e:ce:a0:b2:d7:b8:d2:56:00:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b57c0fafa650dd94a3b5581739f63d88efa414f3
Validity
Not Before: Mar 29 03:00:26 2026 GMT
Not After : Mar 30 03:00:26 2026 GMT
Subject: CN=a23c479eac3b144a488633b4bf39b0be9d146b49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:17:13:41:27:33:d4:93:bc:89:e8:79:69:13:
b0:6b:7e:95:66:ad:a1:f8:e4:fc:48:99:00:c1:ce:
77:ee:47:62:7e:23:03:cc:22:ca:ce:23:25:e3:97:
7f:b4:76:61:0d:eb:c4:41:cc:2b:67:aa:26:53:7c:
3b:2d:d4:26:f0:24:32:3c:11:68:79:72:5b:f1:61:
86:28:fd:7e:37:fe:08:f7:7a:46:fe:af:d6:55:79:
04:2f:43:40:16:42:84:55:45:75:a8:90:2c:f7:46:
31:7a:ad:ee:a0:5c:4c:0e:f0:6a:84:de:13:fe:00:
7c:5d:c3:1c:25:88:70:98:51:8c:fa:5b:cf:8f:2b:
76:e6:4a:0b:81:54:29:6c:0b:82:68:d6:f5:b4:33:
ec:3f:d4:e1:58:66:94:d9:00:fc:54:05:c3:f9:9c:
28:86:ea:05:67:43:56:5f:41:d0:b7:7d:63:67:ab:
50:12:39:d0:e7:92:31:73:a7:ce:87:70:c3:99:94:
94:fe:1b:95:a2:47:09:a1:4c:84:a7:a7:6b:a7:8c:
c0:fd:33:f1:2b:ae:02:fa:78:5e:ca:37:9e:26:ce:
0b:a5:3e:ed:95:87:ef:27:72:25:35:33:29:9d:75:
40:5e:06:a4:47:99:6a:dd:ea:21:03:5a:b6:72:8a:
b9:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:3C:47:9E:AC:3B:14:4A:48:86:33:B4:BF:39:B0:BE:9D:14:6B:49
X509v3 Authority Key Identifier:
keyid:B5:7C:0F:AF:A6:50:DD:94:A3:B5:58:17:39:F6:3D:88:EF:A4:14:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tXwPr6ZQ3ZSjtVgXOfY9iO-kFPM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/8c02ff-a9c5-4788-ae8b-18b9a8510539/1/tXwPr6ZQ3ZSjtVgXOfY9iO-kFPM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/8c02ff-a9c5-4788-ae8b-18b9a8510539/1/tXwPr6ZQ3ZSjtVgXOfY9iO-kFPM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:6a:6e:d2:7d:fe:23:a5:17:7f:b5:14:b1:d1:fb:84:7e:81:
38:f0:41:fc:11:7d:fc:ab:eb:24:39:8b:8c:b6:86:b3:b0:26:
b5:fd:16:fc:6a:d1:74:1d:25:fc:b2:15:68:62:5a:b7:73:eb:
d0:c0:51:ec:93:82:ed:16:6e:80:94:c6:97:02:fa:f5:6e:cf:
5c:4a:4a:10:02:0e:b4:11:e7:61:5c:2a:87:da:cc:bc:de:e9:
d6:66:28:2e:2d:95:00:03:a2:e9:45:8b:40:da:bb:55:02:b1:
af:bb:c3:d6:eb:ac:b4:39:5a:bd:89:81:44:3e:88:57:48:b1:
2c:fa:fd:d1:79:f2:d3:aa:48:8a:9e:be:95:23:01:27:15:78:
da:db:dc:7c:06:2e:43:02:5a:9f:34:f0:51:44:74:be:4b:b9:
f4:61:6c:2e:f2:fd:60:59:40:65:c2:b4:35:2b:31:e4:58:e4:
c8:13:f2:2c:b1:3e:a5:ee:1c:82:6a:a3:08:45:da:31:67:c0:
0d:4a:7a:0e:f2:2b:2f:1f:45:23:da:b5:90:bb:83:a1:24:10:
cc:0e:a5:da:ac:b5:64:20:7c:c8:df:74:83:5b:ff:02:65:22:
cd:d1:83:b1:17:57:91:df:c6:26:cf:60:17:d9:7c:d3:36:6c:
57:62:3d:69
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03iR22TPI+zqCy17jSVgAQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1N2MwZmFmYTY1MGRkOTRhM2I1NTgxNzM5ZjYzZDg4ZWZh
NDE0ZjMwHhcNMjYwMzI5MDMwMDI2WhcNMjYwMzMwMDMwMDI2WjAzMTEwLwYDVQQD
EyhhMjNjNDc5ZWFjM2IxNDRhNDg4NjMzYjRiZjM5YjBiZTlkMTQ2YjQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnhcTQScz1JO8ieh5aROwa36VZq2h
+OT8SJkAwc537kdifiMDzCLKziMl45d/tHZhDevEQcwrZ6omU3w7LdQm8CQyPBFo
eXJb8WGGKP1+N/4I93pG/q/WVXkEL0NAFkKEVUV1qJAs90Yxeq3uoFxMDvBqhN4T
/gB8XcMcJYhwmFGM+lvPjyt25koLgVQpbAuCaNb1tDPsP9ThWGaU2QD8VAXD+Zwo
huoFZ0NWX0HQt31jZ6tQEjnQ55Ixc6fOh3DDmZSU/huVokcJoUyEp6drp4zA/TPx
K64C+nheyjeeJs4LpT7tlYfvJ3IlNTMpnXVAXgakR5lq3eohA1q2coq5lwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKI8R56sOxRKSIYztL85sL6dFGtJMB8GA1UdIwQY
MBaAFLV8D6+mUN2Uo7VYFzn2PYjvpBTzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFh3UHI2WlEzWlNqdFZnWE9mWTlpTy1rRlBNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS84YzAyZmYtYTljNS00Nzg4LWFlOGIt
MThiOWE4NTEwNTM5LzEvdFh3UHI2WlEzWlNqdFZnWE9mWTlpTy1rRlBNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS84YzAyZmYtYTljNS00Nzg4LWFlOGItMThiOWE4NTEwNTM5
LzEvdFh3UHI2WlEzWlNqdFZnWE9mWTlpTy1rRlBNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmWpu0n3+
I6UXf7UUsdH7hH6BOPBB/BF9/KvrJDmLjLaGs7Amtf0W/GrRdB0l/LIVaGJat3Pr
0MBR7JOC7RZugJTGlwL69W7PXEpKEAIOtBHnYVwqh9rMvN7p1mYoLi2VAAOi6UWL
QNq7VQKxr7vD1uustDlavYmBRD6IV0ixLPr90Xny06pIip6+lSMBJxV42tvcfAYu
QwJanzTwUUR0vku59GFsLvL9YFlAZcK0NSsx5FjkyBPyLLE+pe4cgmqjCEXaMWfA
DUp6DvIrLx9FI9q1kLuDoSQQzA6l2qy1ZCB8yN90g1v/AmUizdGDsRdXkd/GJs9g
F9l80zZsV2I9aQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:46:19 2026 by rpki-client