Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/61109f-2d19-41ce-ba6e-ddbc0def83e1/1/TnRhR3tZt7wJBvbOYGULs60t7lc.mft
File: TnRhR3tZt7wJBvbOYGULs60t7lc.mft (raw, json)
Hash identifier: TCEsomqpn8X5dU+oxSHHA5LEj17ldiF9za75w9Xheow=
Subject key identifier: 83:EB:9C:B7:4A:69:31:DE:C0:AE:60:28:8B:F4:43:86:8C:D1:76:FE
Authority key identifier: 4E:74:61:47:7B:59:B7:BC:09:06:F6:CE:60:65:0B:B3:AD:2D:EE:57
Certificate issuer: /CN=4e7461477b59b7bc0906f6ce60650bb3ad2dee57
Certificate serial: 019CF805A164F1CF101322093BDAAB43AD60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TnRhR3tZt7wJBvbOYGULs60t7lc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/61109f-2d19-41ce-ba6e-ddbc0def83e1/1/TnRhR3tZt7wJBvbOYGULs60t7lc.mft
Manifest number: 08C3
Signing time: Mon 16 Mar 2026 19:00:44 +0000
Manifest this update: Mon 16 Mar 2026 19:00:44 +0000
Manifest next update: Tue 17 Mar 2026 19:00:44 +0000
Files and hashes: 1: 75HOIa64fDxinyOIx01Blej1elM.roa (hash: EnalwxHiL7Yvbfzav+WqLHXQw4xqRSm24VA6Qft2ERI=)
2: TnRhR3tZt7wJBvbOYGULs60t7lc.crl (hash: QBbnbUI+MeWHeaxz+nP8thGYuQEHEmmiNfcopjJGMwY=)
3: gNIwlQhqrQHrAmcQt_v7U7yPQls.roa (hash: m7SKJRURhbOe8VuRCSBhxT8f7MRPwICOeiYwoIYek9I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/61109f-2d19-41ce-ba6e-ddbc0def83e1/1/TnRhR3tZt7wJBvbOYGULs60t7lc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/61109f-2d19-41ce-ba6e-ddbc0def83e1/1/TnRhR3tZt7wJBvbOYGULs60t7lc.mft
rsync://rpki.ripe.net/repository/DEFAULT/TnRhR3tZt7wJBvbOYGULs60t7lc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Mar 2026 19:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:f8:05:a1:64:f1:cf:10:13:22:09:3b:da:ab:43:ad:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e7461477b59b7bc0906f6ce60650bb3ad2dee57
Validity
Not Before: Mar 16 19:00:44 2026 GMT
Not After : Mar 17 19:00:44 2026 GMT
Subject: CN=83eb9cb74a6931dec0ae60288bf443868cd176fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:c8:63:7d:15:f0:80:a7:59:20:1e:4b:49:a9:
d0:b7:2a:2a:79:ce:74:e0:4b:a1:b4:26:f6:69:e9:
06:2e:77:6a:d9:56:3f:c4:5c:c7:55:c6:c9:09:2d:
a2:f5:ce:c5:28:4e:e5:40:03:bf:7c:03:6a:1d:ba:
6e:e7:b8:b6:dc:df:f6:d8:fd:b1:17:78:eb:96:7b:
46:4d:e3:11:df:a0:cc:85:5c:fb:01:ca:50:72:e1:
03:52:3a:84:5b:30:e3:b6:59:5e:c2:61:66:a3:0e:
1b:e5:53:b5:09:ca:65:ea:c8:81:c7:02:a3:5e:b8:
36:c4:c6:16:81:90:06:fc:3d:cd:d3:fc:cc:89:4c:
26:5c:6d:d2:93:20:d7:28:89:1d:86:44:07:69:b0:
07:4e:fe:4a:d9:e0:8a:0f:11:4f:bf:86:e4:d4:fa:
46:5b:42:4e:44:49:83:95:55:03:19:39:a5:e8:38:
7a:23:18:61:a0:22:72:2a:ba:40:4b:10:6f:8a:46:
a0:e7:6b:c1:d1:e5:05:67:38:db:a4:22:bd:a7:65:
4a:70:f5:9d:3f:9e:26:da:27:c0:65:54:2d:82:28:
2a:04:18:35:7d:d8:9d:3c:df:e9:8a:0f:d1:c1:d8:
83:f4:96:87:42:af:c0:a8:67:89:59:cc:f4:bc:c9:
83:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:EB:9C:B7:4A:69:31:DE:C0:AE:60:28:8B:F4:43:86:8C:D1:76:FE
X509v3 Authority Key Identifier:
keyid:4E:74:61:47:7B:59:B7:BC:09:06:F6:CE:60:65:0B:B3:AD:2D:EE:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TnRhR3tZt7wJBvbOYGULs60t7lc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/61109f-2d19-41ce-ba6e-ddbc0def83e1/1/TnRhR3tZt7wJBvbOYGULs60t7lc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/61109f-2d19-41ce-ba6e-ddbc0def83e1/1/TnRhR3tZt7wJBvbOYGULs60t7lc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:e2:06:8d:f6:36:07:29:48:43:70:d0:e9:1b:9f:c9:67:07:
63:33:12:d0:28:fe:f8:76:2f:1c:04:a2:ef:65:c6:98:13:99:
f8:5a:a7:0e:1f:7a:5e:3d:1a:38:cd:70:4b:cc:d8:5b:ab:15:
cf:de:b3:32:d5:06:95:13:3a:0a:ce:56:e8:c1:d9:e0:b8:5b:
8f:c8:a9:73:e8:51:e9:3e:b6:00:ea:7d:8f:5b:5c:25:0f:c1:
24:a1:39:25:88:1c:3b:5a:02:44:97:2f:21:d1:af:5c:03:99:
cc:c1:12:a3:05:23:0d:a6:81:3d:77:72:b2:c4:d5:b2:ad:a0:
96:3f:7f:4f:43:93:6c:0a:4b:98:76:5c:8a:98:80:9f:30:9c:
89:2c:a8:33:8e:7b:f9:f4:06:4e:47:e9:b9:f1:57:a2:8f:81:
99:ec:01:21:95:ab:c3:3c:c7:9c:1f:9a:79:4d:52:0a:6a:31:
77:ed:2b:e7:22:0b:d7:5b:e1:ad:92:e7:14:b4:1c:9d:c0:c1:
af:79:95:5a:b5:31:6a:fb:ec:2b:6c:99:d0:e9:2b:fa:cf:77:
e7:ab:43:1d:e9:ec:e7:f1:bd:b6:5c:0c:44:10:ff:a7:9e:44:
7b:68:3b:fd:24:e3:e4:31:83:b7:8c:e7:c1:5c:aa:c5:d0:6f:
27:cc:93:ce
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZz4BaFk8c8QEyIJO9qrQ61gMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRlNzQ2MTQ3N2I1OWI3YmMwOTA2ZjZjZTYwNjUwYmIzYWQy
ZGVlNTcwHhcNMjYwMzE2MTkwMDQ0WhcNMjYwMzE3MTkwMDQ0WjAzMTEwLwYDVQQD
Eyg4M2ViOWNiNzRhNjkzMWRlYzBhZTYwMjg4YmY0NDM4NjhjZDE3NmZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqshjfRXwgKdZIB5LSanQtyoqec50
4EuhtCb2aekGLndq2VY/xFzHVcbJCS2i9c7FKE7lQAO/fANqHbpu57i23N/22P2x
F3jrlntGTeMR36DMhVz7AcpQcuEDUjqEWzDjtllewmFmow4b5VO1Ccpl6siBxwKj
Xrg2xMYWgZAG/D3N0/zMiUwmXG3SkyDXKIkdhkQHabAHTv5K2eCKDxFPv4bk1PpG
W0JOREmDlVUDGTml6Dh6IxhhoCJyKrpASxBvikag52vB0eUFZzjbpCK9p2VKcPWd
P54m2ifAZVQtgigqBBg1fdidPN/pig/RwdiD9JaHQq/AqGeJWcz0vMmDoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIPrnLdKaTHewK5gKIv0Q4aM0Xb+MB8GA1UdIwQY
MBaAFE50YUd7Wbe8CQb2zmBlC7OtLe5XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVG5SaFIzdFp0N3dKQnZiT1lHVUxzNjB0N2xjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy82MTEwOWYtMmQxOS00MWNlLWJhNmUt
ZGRiYzBkZWY4M2UxLzEvVG5SaFIzdFp0N3dKQnZiT1lHVUxzNjB0N2xjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy82MTEwOWYtMmQxOS00MWNlLWJhNmUtZGRiYzBkZWY4M2Ux
LzEvVG5SaFIzdFp0N3dKQnZiT1lHVUxzNjB0N2xjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAueIGjfY2
BylIQ3DQ6RufyWcHYzMS0Cj++HYvHASi72XGmBOZ+FqnDh96Xj0aOM1wS8zYW6sV
z96zMtUGlRM6Cs5W6MHZ4Lhbj8ipc+hR6T62AOp9j1tcJQ/BJKE5JYgcO1oCRJcv
IdGvXAOZzMESowUjDaaBPXdyssTVsq2glj9/T0OTbApLmHZcipiAnzCciSyoM457
+fQGTkfpufFXoo+BmewBIZWrwzzHnB+aeU1SCmoxd+0r5yIL11vhrZLnFLQcncDB
r3mVWrUxavvsK2yZ0Okr+s9356tDHens5/G9tlwMRBD/p55Ee2g7/STj5DGDt4zn
wVyqxdBvJ8yTzg==
-----END CERTIFICATE-----
Generated at Tue Mar 17 02:14:55 2026 by rpki-client