Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/ec1721-75c5-40f5-9345-c2fd0f958d4b/1/Tl67mwUa1ex6Npifw_zJTByrzHQ.mft
File: Tl67mwUa1ex6Npifw_zJTByrzHQ.mft (raw, json)
Hash identifier: o/3yB2NGIzsvXTK2CL2OLYp3C8/6rN65wQNFcbrnLtc=
Subject key identifier: FA:29:84:00:E5:FE:C3:8B:EE:75:83:77:7E:D9:27:21:A7:0E:2F:EF
Authority key identifier: 4E:5E:BB:9B:05:1A:D5:EC:7A:36:98:9F:C3:FC:C9:4C:1C:AB:CC:74
Certificate issuer: /CN=4e5ebb9b051ad5ec7a36989fc3fcc94c1cabcc74
Certificate serial: 019D394098A35A6D106C0F7D4828EA43BB87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tl67mwUa1ex6Npifw_zJTByrzHQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/ec1721-75c5-40f5-9345-c2fd0f958d4b/1/Tl67mwUa1ex6Npifw_zJTByrzHQ.mft
Manifest number: 18A9
Signing time: Sun 29 Mar 2026 11:00:27 +0000
Manifest this update: Sun 29 Mar 2026 11:00:27 +0000
Manifest next update: Mon 30 Mar 2026 11:00:27 +0000
Files and hashes: 1: IC3KBofEraY-o2Xt0fXEgJfzG3A.roa (hash: KnhXw815iFAaQmnUWwTQE6WQ0M3tQmAE0zW0o+PJiU8=)
2: L3xiDt_DxrLi4lqDX4KsweyPBfU.roa (hash: mBvswTZSHAsOBHr7dGG73RpsdwizI277vUMRdc8O0TI=)
3: Tl67mwUa1ex6Npifw_zJTByrzHQ.crl (hash: NXmRbw7qMQt8/f9zPFyFqE63rRPfUs1FHlrLJVsdH6Y=)
4: ynXUxqrdFjV2uDjhRAtcxC3THvU.roa (hash: +COHT3b/rqZFicrkLpp20JO0GYnlMEA+hKZxaCTFAkE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/ec1721-75c5-40f5-9345-c2fd0f958d4b/1/Tl67mwUa1ex6Npifw_zJTByrzHQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/ec1721-75c5-40f5-9345-c2fd0f958d4b/1/Tl67mwUa1ex6Npifw_zJTByrzHQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tl67mwUa1ex6Npifw_zJTByrzHQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:98:a3:5a:6d:10:6c:0f:7d:48:28:ea:43:bb:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e5ebb9b051ad5ec7a36989fc3fcc94c1cabcc74
Validity
Not Before: Mar 29 11:00:27 2026 GMT
Not After : Mar 30 11:00:27 2026 GMT
Subject: CN=fa298400e5fec38bee7583777ed92721a70e2fef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:46:52:9b:1b:c0:61:07:be:ec:af:e4:e5:85:
5c:ab:9d:a0:c7:a5:ed:ae:0b:e6:e4:e4:b2:e1:7a:
7e:8b:27:d0:93:48:19:d5:07:8c:12:da:ee:9c:d1:
ce:18:ef:0b:81:0e:3e:43:e0:fe:6f:38:fc:0d:45:
3a:9d:e1:6c:0a:55:cb:03:17:e5:15:15:f3:29:42:
85:d8:3f:91:26:f0:74:92:c4:80:81:f6:cb:6b:d4:
99:75:c2:47:58:6d:5e:e2:3c:7c:80:c6:af:04:89:
1d:93:9e:7f:9a:6a:40:e4:15:e4:2c:e3:11:a5:54:
b6:c3:33:1c:d9:4c:b5:a3:0e:b1:e6:52:cb:cc:f9:
0f:b7:84:95:a2:b0:de:27:07:a1:20:2b:bf:f2:fb:
87:45:fd:58:7a:84:e9:60:f5:34:7b:66:3c:d7:ba:
47:d5:64:cb:70:f8:b3:b0:9e:d0:36:fa:3b:8c:94:
ee:f6:9e:7b:9f:dc:aa:2a:cc:5e:27:a3:03:80:c5:
50:c7:c0:a3:9f:6f:2b:a7:12:ae:8b:fa:3e:f1:de:
a3:38:cd:8f:a2:37:f1:38:c5:d6:ab:85:a0:da:78:
d9:1a:34:62:25:31:6e:7a:5c:8d:85:47:df:20:0b:
30:49:b6:33:0f:e0:2f:af:fa:a0:f4:73:70:76:e6:
94:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:29:84:00:E5:FE:C3:8B:EE:75:83:77:7E:D9:27:21:A7:0E:2F:EF
X509v3 Authority Key Identifier:
keyid:4E:5E:BB:9B:05:1A:D5:EC:7A:36:98:9F:C3:FC:C9:4C:1C:AB:CC:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tl67mwUa1ex6Npifw_zJTByrzHQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/ec1721-75c5-40f5-9345-c2fd0f958d4b/1/Tl67mwUa1ex6Npifw_zJTByrzHQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/ec1721-75c5-40f5-9345-c2fd0f958d4b/1/Tl67mwUa1ex6Npifw_zJTByrzHQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cb:d2:2a:72:f8:77:cc:b1:b3:b7:d3:f5:9a:ea:de:53:d4:6b:
fc:37:7a:48:75:d6:41:a0:32:0f:94:02:6f:31:87:ef:0c:5a:
fb:b6:54:da:d3:ce:7c:e0:bd:d9:43:fb:29:0e:e5:88:8e:ee:
d9:96:d2:2d:12:c9:80:59:12:75:f3:c0:86:82:42:6d:49:e0:
4a:66:00:30:8d:86:a3:dd:5d:91:50:a1:e9:87:38:bf:3e:08:
cd:08:39:84:a2:b0:30:14:4b:91:be:ce:fb:4f:9c:20:cb:2e:
56:bb:be:f6:a7:a0:74:37:f9:4d:46:28:37:a4:ea:75:65:23:
4f:e4:fb:ef:aa:21:10:b0:d7:b0:63:3a:2e:db:5f:8c:78:6e:
13:5a:5f:52:41:80:3c:1d:d9:a4:69:16:6b:31:35:93:e3:11:
5e:90:fd:b1:13:ca:46:81:e1:a1:5d:f8:fb:fd:dd:ed:df:73:
4f:8b:67:35:50:2f:ad:d8:e2:6c:74:23:a9:bb:fd:00:ac:c8:
ae:b3:3d:95:c6:4d:49:e8:5a:4a:05:6a:bd:a5:96:ba:bc:2d:
2b:92:28:e8:46:39:c2:7e:40:79:68:40:19:70:31:9b:fa:a0:
5c:40:bb:5c:04:f1:9b:3c:32:10:1c:4e:8f:38:04:4a:e3:63:
fb:f7:98:40
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05QJijWm0QbA99SCjqQ7uHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRlNWViYjliMDUxYWQ1ZWM3YTM2OTg5ZmMzZmNjOTRjMWNh
YmNjNzQwHhcNMjYwMzI5MTEwMDI3WhcNMjYwMzMwMTEwMDI3WjAzMTEwLwYDVQQD
EyhmYTI5ODQwMGU1ZmVjMzhiZWU3NTgzNzc3ZWQ5MjcyMWE3MGUyZmVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt0ZSmxvAYQe+7K/k5YVcq52gx6Xt
rgvm5OSy4Xp+iyfQk0gZ1QeMEtrunNHOGO8LgQ4+Q+D+bzj8DUU6neFsClXLAxfl
FRXzKUKF2D+RJvB0ksSAgfbLa9SZdcJHWG1e4jx8gMavBIkdk55/mmpA5BXkLOMR
pVS2wzMc2Uy1ow6x5lLLzPkPt4SVorDeJwehICu/8vuHRf1YeoTpYPU0e2Y817pH
1WTLcPizsJ7QNvo7jJTu9p57n9yqKsxeJ6MDgMVQx8Cjn28rpxKui/o+8d6jOM2P
ojfxOMXWq4Wg2njZGjRiJTFuelyNhUffIAswSbYzD+Avr/qg9HNwduaUNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPophADl/sOL7nWDd37ZJyGnDi/vMB8GA1UdIwQY
MBaAFE5eu5sFGtXsejaYn8P8yUwcq8x0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVGw2N213VWExZXg2TnBpZndfekpUQnlyekhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi9lYzE3MjEtNzVjNS00MGY1LTkzNDUt
YzJmZDBmOTU4ZDRiLzEvVGw2N213VWExZXg2TnBpZndfekpUQnlyekhRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMi9lYzE3MjEtNzVjNS00MGY1LTkzNDUtYzJmZDBmOTU4ZDRi
LzEvVGw2N213VWExZXg2TnBpZndfekpUQnlyekhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAy9Iqcvh3
zLGzt9P1mureU9Rr/Dd6SHXWQaAyD5QCbzGH7wxa+7ZU2tPOfOC92UP7KQ7liI7u
2ZbSLRLJgFkSdfPAhoJCbUngSmYAMI2Go91dkVCh6Yc4vz4IzQg5hKKwMBRLkb7O
+0+cIMsuVru+9qegdDf5TUYoN6TqdWUjT+T776ohELDXsGM6LttfjHhuE1pfUkGA
PB3ZpGkWazE1k+MRXpD9sRPKRoHhoV34+/3d7d9zT4tnNVAvrdjibHQjqbv9AKzI
rrM9lcZNSehaSgVqvaWWurwtK5Io6EY5wn5AeWhAGXAxm/qgXEC7XATxmzwyEBxO
jzgESuNj+/eYQA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:47:15 2026 by rpki-client