Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/28a5f9-9071-4459-9829-55795c26eaca/1/T1JcTLrI19lzMkWHalyr5rNeL-k.mft
File: T1JcTLrI19lzMkWHalyr5rNeL-k.mft (raw, json)
Hash identifier: qyI0fq7j08JiG4wM9dDJADSKxHErKFmEsQOyFFKv7PU=
Subject key identifier: D3:DD:29:82:50:2A:DA:79:BD:8E:B6:64:9B:8A:B9:40:76:EF:71:78
Authority key identifier: 4F:52:5C:4C:BA:C8:D7:D9:73:32:45:87:6A:5C:AB:E6:B3:5E:2F:E9
Certificate issuer: /CN=4f525c4cbac8d7d9733245876a5cabe6b35e2fe9
Certificate serial: 019D386652DF49A69213468E318C6F607192
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T1JcTLrI19lzMkWHalyr5rNeL-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/28a5f9-9071-4459-9829-55795c26eaca/1/T1JcTLrI19lzMkWHalyr5rNeL-k.mft
Manifest number: 1126
Signing time: Sun 29 Mar 2026 07:02:03 +0000
Manifest this update: Sun 29 Mar 2026 07:02:03 +0000
Manifest next update: Mon 30 Mar 2026 07:02:03 +0000
Files and hashes: 1: 0dkxclF1U6vYr5lj_eZjUfz7Azc.roa (hash: YJxaOvLCg9PJXa43CpA/uzG5+07fOluR8wxwPEngEDw=)
2: T1JcTLrI19lzMkWHalyr5rNeL-k.crl (hash: 2IeGCVk+zr9SJzpOvmk1zSbXz9fl28GafLVXy315QJg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/28a5f9-9071-4459-9829-55795c26eaca/1/T1JcTLrI19lzMkWHalyr5rNeL-k.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/28a5f9-9071-4459-9829-55795c26eaca/1/T1JcTLrI19lzMkWHalyr5rNeL-k.mft
rsync://rpki.ripe.net/repository/DEFAULT/T1JcTLrI19lzMkWHalyr5rNeL-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:52:df:49:a6:92:13:46:8e:31:8c:6f:60:71:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f525c4cbac8d7d9733245876a5cabe6b35e2fe9
Validity
Not Before: Mar 29 07:02:03 2026 GMT
Not After : Mar 30 07:02:03 2026 GMT
Subject: CN=d3dd2982502ada79bd8eb6649b8ab94076ef7178
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:8a:2f:4e:22:56:32:9c:4c:47:2b:77:25:bd:
40:4a:b5:7e:88:7b:2f:53:62:41:ea:4c:2f:69:20:
c6:5d:3f:7e:12:f4:e1:a7:4d:6d:ec:dd:b0:33:c2:
c4:97:4d:34:82:91:94:d1:4d:43:a4:27:3d:48:77:
34:c5:0b:56:2c:0a:15:9e:91:df:e8:70:1d:8c:97:
be:d0:b2:73:a7:7f:62:3f:d8:10:d1:a9:9b:38:cf:
e2:39:fe:e1:ed:dc:59:9f:9f:95:80:a3:dd:52:f2:
4e:80:52:75:a2:61:14:86:8d:b3:ca:fc:d5:e0:69:
3d:d9:b6:34:da:92:af:ad:fe:da:4e:8a:56:55:90:
9f:10:4e:fd:b0:ac:b7:e2:f5:5c:26:cf:ee:d7:6f:
42:c2:90:3b:f8:a9:ad:65:18:dd:33:c0:f2:c8:7f:
44:10:f5:d9:fb:76:c9:7e:b1:dc:5e:d8:a7:c5:e3:
82:b6:54:46:6d:ef:fe:02:2f:e9:f8:9b:69:e6:da:
dd:4b:3e:9d:94:f5:18:8a:1d:e1:5b:ca:6d:69:18:
5f:97:20:cd:73:31:9d:a2:40:55:ee:ad:20:af:86:
23:3c:01:49:70:d5:36:36:60:a7:20:b2:3d:e7:b5:
c5:96:95:9b:6a:97:43:64:29:c2:fb:7c:5a:1e:dd:
7f:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:DD:29:82:50:2A:DA:79:BD:8E:B6:64:9B:8A:B9:40:76:EF:71:78
X509v3 Authority Key Identifier:
keyid:4F:52:5C:4C:BA:C8:D7:D9:73:32:45:87:6A:5C:AB:E6:B3:5E:2F:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T1JcTLrI19lzMkWHalyr5rNeL-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/28a5f9-9071-4459-9829-55795c26eaca/1/T1JcTLrI19lzMkWHalyr5rNeL-k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/28a5f9-9071-4459-9829-55795c26eaca/1/T1JcTLrI19lzMkWHalyr5rNeL-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:68:0c:c9:3f:86:31:85:ec:82:d6:3c:30:4a:13:b4:18:f8:
1d:44:5e:91:97:a1:ba:11:ba:c7:43:d4:f8:12:e0:a2:3c:99:
04:6e:10:f3:91:50:96:24:63:e7:e3:75:db:70:3c:93:65:bf:
75:82:bd:7a:04:e6:78:0a:10:43:7f:98:d3:ae:97:69:43:b9:
b6:67:c6:ed:91:4e:94:df:ed:b0:71:5b:96:e2:55:e2:1e:95:
eb:e7:b6:c4:2c:d6:59:d0:d4:35:bc:b0:05:8a:7b:df:24:1a:
b2:ba:89:02:1f:1a:b3:69:fe:0e:d6:44:e4:31:5f:ee:f1:c8:
43:bb:ee:8b:5a:c4:76:e0:73:98:e7:02:9c:2c:bd:c2:41:34:
54:3e:25:ef:34:d7:12:0b:9a:d7:23:23:39:59:19:55:81:fa:
a8:f2:a2:aa:77:38:07:d6:24:9e:80:fe:3c:74:c6:57:40:9f:
39:33:97:18:03:1b:01:a2:d5:84:37:ab:91:e2:39:09:9b:92:
fd:04:47:38:96:cf:93:be:18:b2:77:14:2b:43:87:b2:8d:23:
29:13:78:dc:f6:60:51:72:ad:88:52:8f:77:08:a3:8a:9a:fe:
d5:b6:c5:02:6a:cd:4e:da:d2:9b:bf:3b:65:52:31:2d:e5:00:
15:12:c3:b3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04ZlLfSaaSE0aOMYxvYHGSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmNTI1YzRjYmFjOGQ3ZDk3MzMyNDU4NzZhNWNhYmU2YjM1
ZTJmZTkwHhcNMjYwMzI5MDcwMjAzWhcNMjYwMzMwMDcwMjAzWjAzMTEwLwYDVQQD
EyhkM2RkMjk4MjUwMmFkYTc5YmQ4ZWI2NjQ5YjhhYjk0MDc2ZWY3MTc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1YovTiJWMpxMRyt3Jb1ASrV+iHsv
U2JB6kwvaSDGXT9+EvThp01t7N2wM8LEl000gpGU0U1DpCc9SHc0xQtWLAoVnpHf
6HAdjJe+0LJzp39iP9gQ0ambOM/iOf7h7dxZn5+VgKPdUvJOgFJ1omEUho2zyvzV
4Gk92bY02pKvrf7aTopWVZCfEE79sKy34vVcJs/u129CwpA7+KmtZRjdM8DyyH9E
EPXZ+3bJfrHcXtinxeOCtlRGbe/+Ai/p+Jtp5trdSz6dlPUYih3hW8ptaRhflyDN
czGdokBV7q0gr4YjPAFJcNU2NmCnILI957XFlpWbapdDZCnC+3xaHt1/7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNPdKYJQKtp5vY62ZJuKuUB273F4MB8GA1UdIwQY
MBaAFE9SXEy6yNfZczJFh2pcq+azXi/pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDFKY1RMckkxOWx6TWtXSGFseXI1ck5lTC1rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS8yOGE1ZjktOTA3MS00NDU5LTk4Mjkt
NTU3OTVjMjZlYWNhLzEvVDFKY1RMckkxOWx6TWtXSGFseXI1ck5lTC1rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNS8yOGE1ZjktOTA3MS00NDU5LTk4MjktNTU3OTVjMjZlYWNh
LzEvVDFKY1RMckkxOWx6TWtXSGFseXI1ck5lTC1rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATmgMyT+G
MYXsgtY8MEoTtBj4HURekZehuhG6x0PU+BLgojyZBG4Q85FQliRj5+N123A8k2W/
dYK9egTmeAoQQ3+Y066XaUO5tmfG7ZFOlN/tsHFbluJV4h6V6+e2xCzWWdDUNbyw
BYp73yQasrqJAh8as2n+DtZE5DFf7vHIQ7vui1rEduBzmOcCnCy9wkE0VD4l7zTX
Egua1yMjOVkZVYH6qPKiqnc4B9YknoD+PHTGV0CfOTOXGAMbAaLVhDerkeI5CZuS
/QRHOJbPk74YsncUK0OHso0jKRN43PZgUXKtiFKPdwijipr+1bbFAmrNTtrSm787
ZVIxLeUAFRLDsw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:56:09 2026 by rpki-client