Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/ba1be3-796e-45c8-8b76-c700ea03c227/1/tXq3GLSss6Z5xduPzucpTta-K9A.mft
File: tXq3GLSss6Z5xduPzucpTta-K9A.mft (raw, json)
Hash identifier: 14pGj0/B1ec3uQOaq2d6fG1kh9WDVYIeNAVDiXCb8QA=
Subject key identifier: 4B:F3:60:66:D3:F3:1E:4F:58:B5:2E:4C:05:19:D6:C0:A3:B1:2B:CB
Authority key identifier: B5:7A:B7:18:B4:AC:B3:A6:79:C5:DB:8F:CE:E7:29:4E:D6:BE:2B:D0
Certificate issuer: /CN=b57ab718b4acb3a679c5db8fcee7294ed6be2bd0
Certificate serial: 019D389C027249270F867FCDDE811B26DEA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tXq3GLSss6Z5xduPzucpTta-K9A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/ba1be3-796e-45c8-8b76-c700ea03c227/1/tXq3GLSss6Z5xduPzucpTta-K9A.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 08:00:41 +0000
Manifest this update: Sun 29 Mar 2026 08:00:41 +0000
Manifest next update: Mon 30 Mar 2026 08:00:41 +0000
Files and hashes: 1: 1-XW1Sz2PaZ2CH23FH35lEDI1Dvg.roa (hash: OwzM/XrJoESuDpIjRWGFQ9kHnBpSBVpQxsgx+bma9vw=)
2: t8HbGCUUFDZ79HOoIDzniW_5CjE.roa (hash: bURUeHYTHQjo9pWgWM8FHgpTvl8hZ3bV5mZnZQ6g4Cs=)
3: tXq3GLSss6Z5xduPzucpTta-K9A.crl (hash: tTqNM1JTayqzQ5dMhdx6cRxuJlGwO+NAqT3sI1p1/1k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/ba1be3-796e-45c8-8b76-c700ea03c227/1/tXq3GLSss6Z5xduPzucpTta-K9A.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/ba1be3-796e-45c8-8b76-c700ea03c227/1/tXq3GLSss6Z5xduPzucpTta-K9A.mft
rsync://rpki.ripe.net/repository/DEFAULT/tXq3GLSss6Z5xduPzucpTta-K9A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:02:72:49:27:0f:86:7f:cd:de:81:1b:26:de:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b57ab718b4acb3a679c5db8fcee7294ed6be2bd0
Validity
Not Before: Mar 29 08:00:41 2026 GMT
Not After : Mar 30 08:00:41 2026 GMT
Subject: CN=4bf36066d3f31e4f58b52e4c0519d6c0a3b12bcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:9a:18:01:6b:14:15:04:3c:e6:c0:60:6d:44:
7e:2b:a4:21:4b:9e:4a:10:00:58:03:3c:75:43:c1:
2e:91:8c:c1:f3:6c:99:d4:9b:3c:df:c9:20:55:fd:
8b:96:f7:b0:8f:74:98:39:49:c4:4f:8d:dd:8e:e7:
e1:22:de:e6:64:95:8f:74:a3:e2:21:59:6b:ac:f8:
72:d4:8d:b7:dd:b8:94:fa:99:35:27:4c:dd:12:fa:
31:63:50:32:6d:9f:46:8f:0c:28:80:c3:32:67:6e:
fc:1b:ba:53:a3:dd:d4:ab:8e:52:b4:08:f4:48:47:
fe:21:a5:13:c3:ae:b7:a3:cf:3b:c3:a1:8b:3d:f7:
dd:c5:f1:9b:0a:1f:1b:2f:7d:e3:aa:b2:6a:93:72:
bb:aa:0c:d7:17:6a:36:ab:da:d3:f6:a3:fc:ff:b1:
b3:f0:13:e2:fc:7f:3c:e0:e2:0b:fe:7d:8f:de:f6:
42:11:d1:ff:bc:bd:f4:eb:af:58:a2:d8:74:8a:15:
eb:b1:6a:19:62:3f:fe:e8:f1:80:bd:c3:eb:d4:e3:
e8:7a:0e:d0:f0:e2:d2:0d:09:c9:62:38:40:b9:af:
93:ac:e6:56:ef:05:f3:22:e7:8c:08:60:76:26:4c:
60:8a:c6:9a:6b:7d:47:4b:a8:d8:05:5c:c8:77:e8:
c4:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:F3:60:66:D3:F3:1E:4F:58:B5:2E:4C:05:19:D6:C0:A3:B1:2B:CB
X509v3 Authority Key Identifier:
keyid:B5:7A:B7:18:B4:AC:B3:A6:79:C5:DB:8F:CE:E7:29:4E:D6:BE:2B:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tXq3GLSss6Z5xduPzucpTta-K9A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/ba1be3-796e-45c8-8b76-c700ea03c227/1/tXq3GLSss6Z5xduPzucpTta-K9A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/ba1be3-796e-45c8-8b76-c700ea03c227/1/tXq3GLSss6Z5xduPzucpTta-K9A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:63:98:60:1c:e2:a7:bc:b1:3c:91:9d:9e:74:60:9c:87:87:
bc:fd:de:6c:a5:e7:09:06:95:7f:89:32:2a:61:af:cc:54:60:
75:df:07:84:eb:37:31:8b:11:eb:e6:a6:2b:bf:15:67:5f:98:
3c:06:15:e0:49:79:f0:28:29:5d:3b:e5:31:aa:a7:74:27:e0:
5d:e0:e1:49:58:ce:7f:a6:dd:0f:97:66:d3:73:24:24:6b:6e:
db:12:c0:3d:c1:dc:ae:9e:51:75:9c:3b:d8:e1:43:ac:c1:46:
3f:47:d6:35:4e:77:f1:51:99:3f:4c:f3:44:4d:0a:78:b9:46:
42:bb:d6:aa:1c:e3:0d:29:23:1f:51:77:35:dd:ee:af:ae:98:
75:af:8a:cb:82:8e:7b:a7:6c:29:f4:df:9a:55:1d:e7:b9:67:
6b:a3:0a:26:37:f8:09:f3:a5:94:4e:c4:52:86:b3:93:ce:51:
4f:6d:0a:c1:19:f1:e5:7d:c6:21:17:3f:6a:55:36:bd:ef:f7:
75:46:2d:22:ad:e6:94:12:18:0e:bb:50:f5:25:c6:cb:b1:03:
f3:bd:72:3a:79:31:0d:5e:0f:da:45:2f:d5:33:ea:31:65:29:
d3:5b:ac:7c:a2:f3:7a:2d:aa:6f:f9:6c:5b:c4:a2:9e:56:0a:
d7:cd:d0:59
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04nAJySScPhn/N3oEbJt6lMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1N2FiNzE4YjRhY2IzYTY3OWM1ZGI4ZmNlZTcyOTRlZDZi
ZTJiZDAwHhcNMjYwMzI5MDgwMDQxWhcNMjYwMzMwMDgwMDQxWjAzMTEwLwYDVQQD
Eyg0YmYzNjA2NmQzZjMxZTRmNThiNTJlNGMwNTE5ZDZjMGEzYjEyYmNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzZoYAWsUFQQ85sBgbUR+K6QhS55K
EABYAzx1Q8EukYzB82yZ1Js838kgVf2Llvewj3SYOUnET43djufhIt7mZJWPdKPi
IVlrrPhy1I233biU+pk1J0zdEvoxY1AybZ9GjwwogMMyZ278G7pTo93Uq45StAj0
SEf+IaUTw663o887w6GLPffdxfGbCh8bL33jqrJqk3K7qgzXF2o2q9rT9qP8/7Gz
8BPi/H884OIL/n2P3vZCEdH/vL30669Yoth0ihXrsWoZYj/+6PGAvcPr1OPoeg7Q
8OLSDQnJYjhAua+TrOZW7wXzIueMCGB2Jkxgisaaa31HS6jYBVzId+jEawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEvzYGbT8x5PWLUuTAUZ1sCjsSvLMB8GA1UdIwQY
MBaAFLV6txi0rLOmecXbj87nKU7WvivQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFhxM0dMU3NzNlo1eGR1UHp1Y3BUdGEtSzlBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy9iYTFiZTMtNzk2ZS00NWM4LThiNzYt
YzcwMGVhMDNjMjI3LzEvdFhxM0dMU3NzNlo1eGR1UHp1Y3BUdGEtSzlBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy9iYTFiZTMtNzk2ZS00NWM4LThiNzYtYzcwMGVhMDNjMjI3
LzEvdFhxM0dMU3NzNlo1eGR1UHp1Y3BUdGEtSzlBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbWOYYBzi
p7yxPJGdnnRgnIeHvP3ebKXnCQaVf4kyKmGvzFRgdd8HhOs3MYsR6+amK78VZ1+Y
PAYV4El58CgpXTvlMaqndCfgXeDhSVjOf6bdD5dm03MkJGtu2xLAPcHcrp5RdZw7
2OFDrMFGP0fWNU538VGZP0zzRE0KeLlGQrvWqhzjDSkjH1F3Nd3ur66Yda+Ky4KO
e6dsKfTfmlUd57lna6MKJjf4CfOllE7EUoazk85RT20KwRnx5X3GIRc/alU2ve/3
dUYtIq3mlBIYDrtQ9SXGy7ED871yOnkxDV4P2kUv1TPqMWUp01usfKLzei2qb/ls
W8SinlYK183QWQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:35:19 2026 by rpki-client