Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/0cfe3e-729f-4418-9cf4-863daecfc2e8/1/tPpNCBs2iH8-XKZTf3Rp7uIdca4.mft
File: tPpNCBs2iH8-XKZTf3Rp7uIdca4.mft (raw, json)
Hash identifier: X7mCVqEes/Tkv0DYjZ/dUEgVZIkjLBVToaOH8QKDXWY=
Subject key identifier: 31:37:A3:CA:BE:DD:9E:C8:55:23:34:B8:21:CE:6C:89:DF:FC:C1:F6
Authority key identifier: B4:FA:4D:08:1B:36:88:7F:3E:5C:A6:53:7F:74:69:EE:E2:1D:71:AE
Certificate issuer: /CN=b4fa4d081b36887f3e5ca6537f7469eee21d71ae
Certificate serial: 019D39416D9127A9A3511E9171343F75C18A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPpNCBs2iH8-XKZTf3Rp7uIdca4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/0cfe3e-729f-4418-9cf4-863daecfc2e8/1/tPpNCBs2iH8-XKZTf3Rp7uIdca4.mft
Manifest number: 1892
Signing time: Sun 29 Mar 2026 11:01:22 +0000
Manifest this update: Sun 29 Mar 2026 11:01:22 +0000
Manifest next update: Mon 30 Mar 2026 11:01:22 +0000
Files and hashes: 1: jl1Gy7ca20_j2KWNsOiG_HyzyKw.roa (hash: ErKY/69zjGb+XdFCBodBK2CXOv9JRDcTgwXpmXZI5JY=)
2: tPpNCBs2iH8-XKZTf3Rp7uIdca4.crl (hash: xW1rHmpgx4NXv3RKRQ+TO4Zb/pbumXMLYqlF/+ZB5gw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/0cfe3e-729f-4418-9cf4-863daecfc2e8/1/tPpNCBs2iH8-XKZTf3Rp7uIdca4.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/0cfe3e-729f-4418-9cf4-863daecfc2e8/1/tPpNCBs2iH8-XKZTf3Rp7uIdca4.mft
rsync://rpki.ripe.net/repository/DEFAULT/tPpNCBs2iH8-XKZTf3Rp7uIdca4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:6d:91:27:a9:a3:51:1e:91:71:34:3f:75:c1:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4fa4d081b36887f3e5ca6537f7469eee21d71ae
Validity
Not Before: Mar 29 11:01:22 2026 GMT
Not After : Mar 30 11:01:22 2026 GMT
Subject: CN=3137a3cabedd9ec8552334b821ce6c89dffcc1f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:21:df:cc:31:69:38:53:a0:5e:07:96:9a:ee:
fe:86:a0:c6:8d:b9:02:e0:ab:a6:6d:5c:65:67:a0:
96:60:68:c4:2c:3f:84:ad:e5:dd:1c:4e:85:d0:5f:
7f:71:43:3e:b8:03:f3:84:2c:6a:12:46:9e:31:38:
dc:34:50:b6:61:a4:d4:79:13:27:a7:e1:8b:fd:86:
4f:c7:76:cd:fc:87:bc:4d:bc:ba:6e:5f:1d:d2:f3:
2a:e9:8c:7a:ff:da:5a:44:c4:3d:e2:72:1f:43:42:
21:bf:06:9b:aa:e7:fc:ee:d7:41:33:36:95:29:86:
f3:e5:57:87:58:ba:36:cf:aa:60:c2:86:4c:51:a3:
a6:ed:3f:67:14:44:fc:c2:f8:5c:e6:23:fc:28:6f:
f4:af:d2:5b:3c:a0:70:a7:77:69:e8:a4:55:7b:df:
05:b1:fa:26:67:10:7b:4d:fa:8e:40:9b:49:6a:71:
ef:cf:d9:fb:c1:65:ed:50:f6:dd:c5:83:4b:cd:23:
50:79:37:7f:9f:08:11:c1:14:13:31:7b:03:0d:a7:
43:bf:88:b1:20:5c:c0:b8:e9:3e:e2:cf:18:11:8a:
06:c6:82:00:1e:2a:c3:98:b5:22:7e:b5:86:6b:21:
d4:74:a8:7e:95:c9:73:02:05:e0:41:46:75:0a:dc:
50:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:37:A3:CA:BE:DD:9E:C8:55:23:34:B8:21:CE:6C:89:DF:FC:C1:F6
X509v3 Authority Key Identifier:
keyid:B4:FA:4D:08:1B:36:88:7F:3E:5C:A6:53:7F:74:69:EE:E2:1D:71:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPpNCBs2iH8-XKZTf3Rp7uIdca4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/0cfe3e-729f-4418-9cf4-863daecfc2e8/1/tPpNCBs2iH8-XKZTf3Rp7uIdca4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/0cfe3e-729f-4418-9cf4-863daecfc2e8/1/tPpNCBs2iH8-XKZTf3Rp7uIdca4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:23:c2:d3:7f:fb:4c:7b:78:04:72:b0:8f:74:d6:70:8c:12:
5f:92:02:72:b0:ac:6a:21:68:32:7c:b1:37:27:7b:89:30:8b:
5c:2f:ed:14:41:33:9f:93:54:e9:a4:0e:41:3d:88:22:d2:aa:
72:96:90:35:7d:2d:56:18:0f:03:48:74:48:75:df:6b:e5:64:
9e:cf:ee:34:51:be:0b:4e:66:41:62:4a:1a:dc:3e:81:01:99:
43:ba:c7:72:88:fb:74:d1:8f:20:77:10:06:47:76:8f:df:4d:
82:36:4d:aa:a8:cb:eb:d4:52:eb:1e:ad:9f:7c:c1:93:32:aa:
03:e6:e4:58:85:2b:c0:b9:a3:dd:d4:78:82:ad:24:d3:f7:8c:
8c:7f:29:47:c0:26:68:da:49:f4:8c:f8:3b:dd:7a:18:b4:a0:
cb:ca:ca:7e:f5:0c:e5:27:e7:d3:17:bd:65:fb:2a:eb:0d:5f:
d5:49:6b:6c:8d:94:4a:38:59:65:93:6a:9e:54:3e:bb:64:81:
2f:eb:5b:e8:e7:93:b1:f6:e6:9b:a8:3d:c1:77:ad:e8:58:93:
6e:f7:29:36:f6:c5:bd:77:ce:18:f8:c9:df:c6:eb:69:3d:61:
62:13:7a:8a:b2:6e:59:46:1c:1f:2e:8a:c0:53:11:5f:66:3e:
56:2d:91:56
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05QW2RJ6mjUR6RcTQ/dcGKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0ZmE0ZDA4MWIzNjg4N2YzZTVjYTY1MzdmNzQ2OWVlZTIx
ZDcxYWUwHhcNMjYwMzI5MTEwMTIyWhcNMjYwMzMwMTEwMTIyWjAzMTEwLwYDVQQD
EygzMTM3YTNjYWJlZGQ5ZWM4NTUyMzM0YjgyMWNlNmM4OWRmZmNjMWY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjyHfzDFpOFOgXgeWmu7+hqDGjbkC
4KumbVxlZ6CWYGjELD+EreXdHE6F0F9/cUM+uAPzhCxqEkaeMTjcNFC2YaTUeRMn
p+GL/YZPx3bN/Ie8Tby6bl8d0vMq6Yx6/9paRMQ94nIfQ0Ihvwabquf87tdBMzaV
KYbz5VeHWLo2z6pgwoZMUaOm7T9nFET8wvhc5iP8KG/0r9JbPKBwp3dp6KRVe98F
sfomZxB7TfqOQJtJanHvz9n7wWXtUPbdxYNLzSNQeTd/nwgRwRQTMXsDDadDv4ix
IFzAuOk+4s8YEYoGxoIAHirDmLUifrWGayHUdKh+lclzAgXgQUZ1CtxQRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDE3o8q+3Z7IVSM0uCHObInf/MH2MB8GA1UdIwQY
MBaAFLT6TQgbNoh/PlymU390ae7iHXGuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFBwTkNCczJpSDgtWEtaVGYzUnA3dUlkY2E0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi8wY2ZlM2UtNzI5Zi00NDE4LTljZjQt
ODYzZGFlY2ZjMmU4LzEvdFBwTkNCczJpSDgtWEtaVGYzUnA3dUlkY2E0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZi8wY2ZlM2UtNzI5Zi00NDE4LTljZjQtODYzZGFlY2ZjMmU4
LzEvdFBwTkNCczJpSDgtWEtaVGYzUnA3dUlkY2E0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYyPC03/7
THt4BHKwj3TWcIwSX5ICcrCsaiFoMnyxNyd7iTCLXC/tFEEzn5NU6aQOQT2IItKq
cpaQNX0tVhgPA0h0SHXfa+Vkns/uNFG+C05mQWJKGtw+gQGZQ7rHcoj7dNGPIHcQ
Bkd2j99NgjZNqqjL69RS6x6tn3zBkzKqA+bkWIUrwLmj3dR4gq0k0/eMjH8pR8Am
aNpJ9Iz4O916GLSgy8rKfvUM5Sfn0xe9Zfsq6w1f1UlrbI2USjhZZZNqnlQ+u2SB
L+tb6OeTsfbmm6g9wXet6FiTbvcpNvbFvXfOGPjJ38braT1hYhN6irJuWUYcHy6K
wFMRX2Y+Vi2RVg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 14:01:29 2026 by rpki-client