Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/4e5049-856d-4c07-8556-e18184e80258/1/tRm7YH6Ot267nMsgIsxkbDzOC2A.mft
File: tRm7YH6Ot267nMsgIsxkbDzOC2A.mft (raw, json)
Hash identifier: rkGwkhg9Fb5WeBGVBlgBicS0UO7t6p4OVGKRNEvjGo8=
Subject key identifier: A4:AE:E4:67:D0:AA:87:03:67:8C:CE:C1:7D:B4:40:E5:37:46:04:6B
Authority key identifier: B5:19:BB:60:7E:8E:B7:6E:BB:9C:CB:20:22:CC:64:6C:3C:CE:0B:60
Certificate issuer: /CN=b519bb607e8eb76ebb9ccb2022cc646c3cce0b60
Certificate serial: 019D38664019CE7379D72BB726326D4D3AEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tRm7YH6Ot267nMsgIsxkbDzOC2A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/4e5049-856d-4c07-8556-e18184e80258/1/tRm7YH6Ot267nMsgIsxkbDzOC2A.mft
Manifest number: 188B
Signing time: Sun 29 Mar 2026 07:01:58 +0000
Manifest this update: Sun 29 Mar 2026 07:01:58 +0000
Manifest next update: Mon 30 Mar 2026 07:01:58 +0000
Files and hashes: 1: tRm7YH6Ot267nMsgIsxkbDzOC2A.crl (hash: hoIawobRX8xlEEcXedXeWzxrwoq1Fgl9Kk/Jfwo+OXM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/4e5049-856d-4c07-8556-e18184e80258/1/tRm7YH6Ot267nMsgIsxkbDzOC2A.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/4e5049-856d-4c07-8556-e18184e80258/1/tRm7YH6Ot267nMsgIsxkbDzOC2A.mft
rsync://rpki.ripe.net/repository/DEFAULT/tRm7YH6Ot267nMsgIsxkbDzOC2A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:40:19:ce:73:79:d7:2b:b7:26:32:6d:4d:3a:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b519bb607e8eb76ebb9ccb2022cc646c3cce0b60
Validity
Not Before: Mar 29 07:01:58 2026 GMT
Not After : Mar 30 07:01:58 2026 GMT
Subject: CN=a4aee467d0aa8703678ccec17db440e53746046b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:0c:5c:18:80:bb:e6:b7:e6:61:07:7e:a2:2d:
f6:60:8f:18:14:df:a6:31:33:74:da:4a:ac:e2:7d:
fd:38:16:8a:02:c0:21:d6:63:f1:03:d8:c8:49:73:
35:a1:c5:9d:09:0e:20:79:54:52:f7:f2:86:a9:0a:
04:ff:12:cc:09:bf:cd:93:f7:9b:f0:74:bb:e6:da:
89:0d:bd:10:41:56:bb:96:33:aa:b9:8a:94:97:d5:
d2:a2:42:a4:da:de:49:1b:7d:27:9c:54:bf:3b:6f:
04:97:87:dd:ac:1c:8b:2e:70:74:c1:6d:99:bc:c9:
4b:d7:ca:93:7b:fd:75:f1:dd:3b:e0:88:2a:f1:f9:
cc:04:19:07:a8:89:ea:71:8e:2e:72:d2:f1:6d:63:
ff:2f:5a:06:81:00:7b:d3:e8:a5:9e:f2:76:5d:ed:
cb:38:74:82:7d:ee:f7:a2:54:5d:93:61:f9:e7:e2:
ca:ce:13:14:78:08:9d:43:21:91:65:c3:a3:90:b6:
14:6e:5f:91:d1:9f:d1:7f:4e:cc:da:34:86:c4:3f:
16:e8:05:e6:17:c1:f5:f5:4c:ba:68:e9:d4:17:95:
17:f7:36:94:56:e4:1d:f8:47:7d:9b:9f:72:09:27:
5d:2a:9b:fc:2b:92:e7:17:1f:4d:65:74:95:fe:11:
03:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:AE:E4:67:D0:AA:87:03:67:8C:CE:C1:7D:B4:40:E5:37:46:04:6B
X509v3 Authority Key Identifier:
keyid:B5:19:BB:60:7E:8E:B7:6E:BB:9C:CB:20:22:CC:64:6C:3C:CE:0B:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tRm7YH6Ot267nMsgIsxkbDzOC2A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4e5049-856d-4c07-8556-e18184e80258/1/tRm7YH6Ot267nMsgIsxkbDzOC2A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4e5049-856d-4c07-8556-e18184e80258/1/tRm7YH6Ot267nMsgIsxkbDzOC2A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:b1:42:b3:91:ac:59:b3:31:7b:e0:e7:ea:cd:78:46:b9:51:
be:83:6a:9d:41:cf:78:a8:7c:7e:c4:43:92:92:c3:26:6d:04:
aa:4c:32:50:a9:b8:e0:1f:f5:ff:d6:64:e6:46:2e:e6:de:e8:
95:38:ba:d6:ea:bb:c2:82:1b:8c:f0:49:06:f5:93:e9:2f:4f:
48:60:0d:1a:cb:2b:49:af:b2:c7:af:82:78:60:45:42:73:c3:
b1:bb:35:c1:64:de:4e:e3:43:be:a3:b6:6d:0e:7c:02:63:cc:
c9:e7:b3:d3:9a:da:0f:6b:a5:a9:94:b3:92:e2:fc:e3:cd:5b:
4b:e4:08:25:0f:80:32:fc:02:34:f6:0c:1b:23:49:53:a3:d3:
59:2b:25:79:1b:bc:a8:79:33:0a:4f:7e:a4:d1:e7:97:b8:37:
e8:81:8e:07:e9:6e:c2:5f:86:ea:e7:46:47:e4:95:dc:03:00:
13:f7:c3:0b:38:7e:51:eb:76:23:89:26:9d:4e:36:ec:dc:f4:
b6:9e:42:5a:60:56:fb:5f:b6:ae:d3:dd:87:19:ed:0c:fe:57:
28:55:8c:dd:a2:8a:be:29:0b:93:89:2d:3f:0a:a8:95:90:3a:
5a:73:62:f9:91:b9:8b:ad:35:3e:78:c8:83:ba:ab:b4:5a:2b:
3b:e5:e5:2f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04ZkAZznN51yu3JjJtTTrrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1MTliYjYwN2U4ZWI3NmViYjljY2IyMDIyY2M2NDZjM2Nj
ZTBiNjAwHhcNMjYwMzI5MDcwMTU4WhcNMjYwMzMwMDcwMTU4WjAzMTEwLwYDVQQD
EyhhNGFlZTQ2N2QwYWE4NzAzNjc4Y2NlYzE3ZGI0NDBlNTM3NDYwNDZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7gxcGIC75rfmYQd+oi32YI8YFN+m
MTN02kqs4n39OBaKAsAh1mPxA9jISXM1ocWdCQ4geVRS9/KGqQoE/xLMCb/Nk/eb
8HS75tqJDb0QQVa7ljOquYqUl9XSokKk2t5JG30nnFS/O28El4fdrByLLnB0wW2Z
vMlL18qTe/118d074Igq8fnMBBkHqInqcY4uctLxbWP/L1oGgQB70+ilnvJ2Xe3L
OHSCfe73olRdk2H55+LKzhMUeAidQyGRZcOjkLYUbl+R0Z/Rf07M2jSGxD8W6AXm
F8H19Uy6aOnUF5UX9zaUVuQd+Ed9m59yCSddKpv8K5LnFx9NZXSV/hEDDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKSu5GfQqocDZ4zOwX20QOU3RgRrMB8GA1UdIwQY
MBaAFLUZu2B+jrduu5zLICLMZGw8zgtgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFJtN1lINk90MjY3bk1zZ0lzeGtiRHpPQzJBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC80ZTUwNDktODU2ZC00YzA3LTg1NTYt
ZTE4MTg0ZTgwMjU4LzEvdFJtN1lINk90MjY3bk1zZ0lzeGtiRHpPQzJBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC80ZTUwNDktODU2ZC00YzA3LTg1NTYtZTE4MTg0ZTgwMjU4
LzEvdFJtN1lINk90MjY3bk1zZ0lzeGtiRHpPQzJBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbrFCs5Gs
WbMxe+Dn6s14RrlRvoNqnUHPeKh8fsRDkpLDJm0EqkwyUKm44B/1/9Zk5kYu5t7o
lTi61uq7woIbjPBJBvWT6S9PSGANGssrSa+yx6+CeGBFQnPDsbs1wWTeTuNDvqO2
bQ58AmPMyeez05raD2ulqZSzkuL8481bS+QIJQ+AMvwCNPYMGyNJU6PTWSsleRu8
qHkzCk9+pNHnl7g36IGOB+luwl+G6udGR+SV3AMAE/fDCzh+Uet2I4kmnU427Nz0
tp5CWmBW+1+2rtPdhxntDP5XKFWM3aKKvikLk4ktPwqolZA6WnNi+ZG5i601PnjI
g7qrtForO+XlLw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 13:42:05 2026 by rpki-client