Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/343892-780c-432a-882f-1e0d7c42da76/1/TLkyvGDp_RGG-Ppr1xPCBymuc-4.mft
File: TLkyvGDp_RGG-Ppr1xPCBymuc-4.mft (raw, json)
Hash identifier: D/gd9TV3evG/in5s75RDNNS35tZHBDSdrxjW1ZUJTBk=
Subject key identifier: AD:3C:06:AC:15:C0:F5:50:D1:AF:FD:F4:05:AA:43:77:68:4A:04:0E
Authority key identifier: 4C:B9:32:BC:60:E9:FD:11:86:F8:FA:6B:D7:13:C2:07:29:AE:73:EE
Certificate issuer: /CN=4cb932bc60e9fd1186f8fa6bd713c20729ae73ee
Certificate serial: 019D39E541E4988159734CE7233BB0EAB7F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TLkyvGDp_RGG-Ppr1xPCBymuc-4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/343892-780c-432a-882f-1e0d7c42da76/1/TLkyvGDp_RGG-Ppr1xPCBymuc-4.mft
Manifest number: 1445
Signing time: Sun 29 Mar 2026 14:00:18 +0000
Manifest this update: Sun 29 Mar 2026 14:00:18 +0000
Manifest next update: Mon 30 Mar 2026 14:00:18 +0000
Files and hashes: 1: HMo_pRRnRqJZqr644LvLDKbEvF0.roa (hash: iH4M3snvNj6PFU+GFjuRkofzdO0jGEo8rVExACKxHtk=)
2: TLkyvGDp_RGG-Ppr1xPCBymuc-4.crl (hash: 5oxab6fdFn+wI8IYn3CCgaVaMWLfhaQc10xa8x5ummE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/343892-780c-432a-882f-1e0d7c42da76/1/TLkyvGDp_RGG-Ppr1xPCBymuc-4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/343892-780c-432a-882f-1e0d7c42da76/1/TLkyvGDp_RGG-Ppr1xPCBymuc-4.mft
rsync://rpki.ripe.net/repository/DEFAULT/TLkyvGDp_RGG-Ppr1xPCBymuc-4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 14:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:e5:41:e4:98:81:59:73:4c:e7:23:3b:b0:ea:b7:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cb932bc60e9fd1186f8fa6bd713c20729ae73ee
Validity
Not Before: Mar 29 14:00:18 2026 GMT
Not After : Mar 30 14:00:18 2026 GMT
Subject: CN=ad3c06ac15c0f550d1affdf405aa4377684a040e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:8b:5e:c5:00:f9:25:17:c6:bc:76:db:71:97:
cf:f6:12:f3:66:b6:b5:78:de:b8:f4:4a:06:bb:13:
a0:fb:13:41:f7:d5:8c:7c:cb:de:b6:d7:9c:8f:cc:
7b:ea:08:ed:4e:8c:6e:28:f9:e9:12:f8:01:04:cb:
ac:76:bf:cf:cc:d4:30:f7:2a:b9:ec:c1:c5:23:c6:
f5:f1:d2:bd:b6:5b:e5:09:59:0a:4a:a3:15:8f:cc:
58:7f:3e:4d:48:6c:99:f5:85:6f:b4:02:04:0a:f6:
22:44:e5:36:d7:19:8d:8a:c4:1e:cf:0f:c1:bf:72:
a9:fa:99:2b:5a:88:31:cc:cb:ea:fe:92:62:fd:bc:
ce:a4:b4:c8:33:61:ed:7b:37:17:be:cc:41:77:0c:
46:47:2e:c5:95:2a:d2:22:cd:43:c2:45:35:58:aa:
9a:e7:b2:41:e7:3c:3d:e0:a4:24:a9:35:ea:de:48:
41:80:9f:3a:2d:44:bb:ab:e7:ed:43:8b:2a:20:9f:
7f:8e:08:a3:17:4b:fb:64:7b:fb:c5:b1:99:d6:28:
5c:f8:85:46:b8:4d:de:6a:8e:29:a8:a4:3f:00:fe:
54:4b:18:b1:cf:64:d0:31:75:4f:da:72:72:93:67:
35:61:36:a3:03:b3:0b:cb:ae:dc:f6:b0:ef:8b:9e:
6f:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:3C:06:AC:15:C0:F5:50:D1:AF:FD:F4:05:AA:43:77:68:4A:04:0E
X509v3 Authority Key Identifier:
keyid:4C:B9:32:BC:60:E9:FD:11:86:F8:FA:6B:D7:13:C2:07:29:AE:73:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TLkyvGDp_RGG-Ppr1xPCBymuc-4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/343892-780c-432a-882f-1e0d7c42da76/1/TLkyvGDp_RGG-Ppr1xPCBymuc-4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/343892-780c-432a-882f-1e0d7c42da76/1/TLkyvGDp_RGG-Ppr1xPCBymuc-4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:52:e9:1e:9b:95:e0:77:40:c1:d4:d6:67:43:d5:86:ad:30:
16:db:79:fd:36:b2:96:c1:77:76:fd:d7:9c:69:6d:cd:8f:12:
85:7d:0d:dd:9c:ed:33:1a:80:d5:74:88:0e:04:f3:f4:be:50:
2a:a2:3f:e4:f0:01:7f:7c:d1:ec:87:33:c2:21:94:68:b7:33:
e9:ae:5b:c7:80:ea:f9:5e:18:39:e3:36:87:15:b2:83:5b:9c:
49:17:ad:bc:e8:c9:85:a0:89:9c:c2:0b:b3:f5:d8:2d:5d:56:
5d:0a:ce:9a:48:a0:b9:34:f8:b2:13:10:4d:38:97:e4:68:af:
ff:17:4f:96:f4:9e:8d:1a:2a:a0:85:a2:b7:23:d0:27:7d:be:
48:0c:24:9f:d2:b1:f2:8e:a5:47:68:de:b2:72:6e:27:b1:d7:
22:91:5e:45:fe:df:12:7d:d4:1c:b9:68:0c:f7:75:a6:54:5d:
c6:3b:5d:ed:ac:0c:fb:5e:36:c7:e9:2f:eb:0f:56:89:d7:36:
3a:d2:97:a4:37:4d:49:af:02:97:88:09:92:96:29:bd:5c:bb:
40:7e:9d:e2:39:38:09:ad:13:a6:4f:66:25:7b:eb:b0:f6:ff:
27:ab:34:d3:74:55:1e:67:ac:9e:c7:80:7b:fe:f0:66:27:1e:
2b:a3:b9:c5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ055UHkmIFZc0znIzuw6rf3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjYjkzMmJjNjBlOWZkMTE4NmY4ZmE2YmQ3MTNjMjA3Mjlh
ZTczZWUwHhcNMjYwMzI5MTQwMDE4WhcNMjYwMzMwMTQwMDE4WjAzMTEwLwYDVQQD
EyhhZDNjMDZhYzE1YzBmNTUwZDFhZmZkZjQwNWFhNDM3NzY4NGEwNDBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkotexQD5JRfGvHbbcZfP9hLzZra1
eN649EoGuxOg+xNB99WMfMvettecj8x76gjtToxuKPnpEvgBBMusdr/PzNQw9yq5
7MHFI8b18dK9tlvlCVkKSqMVj8xYfz5NSGyZ9YVvtAIECvYiROU21xmNisQezw/B
v3Kp+pkrWogxzMvq/pJi/bzOpLTIM2HtezcXvsxBdwxGRy7FlSrSIs1DwkU1WKqa
57JB5zw94KQkqTXq3khBgJ86LUS7q+ftQ4sqIJ9/jgijF0v7ZHv7xbGZ1ihc+IVG
uE3eao4pqKQ/AP5USxixz2TQMXVP2nJyk2c1YTajA7MLy67c9rDvi55vmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK08BqwVwPVQ0a/99AWqQ3doSgQOMB8GA1UdIwQY
MBaAFEy5Mrxg6f0Rhvj6a9cTwgcprnPuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVExreXZHRHBfUkdHLVBwcjF4UENCeW11Yy00LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy8zNDM4OTItNzgwYy00MzJhLTg4MmYt
MWUwZDdjNDJkYTc2LzEvVExreXZHRHBfUkdHLVBwcjF4UENCeW11Yy00Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy8zNDM4OTItNzgwYy00MzJhLTg4MmYtMWUwZDdjNDJkYTc2
LzEvVExreXZHRHBfUkdHLVBwcjF4UENCeW11Yy00LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASVLpHpuV
4HdAwdTWZ0PVhq0wFtt5/TaylsF3dv3XnGltzY8ShX0N3ZztMxqA1XSIDgTz9L5Q
KqI/5PABf3zR7IczwiGUaLcz6a5bx4Dq+V4YOeM2hxWyg1ucSRetvOjJhaCJnMIL
s/XYLV1WXQrOmkiguTT4shMQTTiX5Giv/xdPlvSejRoqoIWityPQJ32+SAwkn9Kx
8o6lR2jesnJuJ7HXIpFeRf7fEn3UHLloDPd1plRdxjtd7awM+142x+kv6w9Widc2
OtKXpDdNSa8Cl4gJkpYpvVy7QH6d4jk4Ca0Tpk9mJXvrsPb/J6s003RVHmesnseA
e/7wZiceK6O5xQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 19:20:53 2026 by rpki-client