Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/90a5cf-e484-4bb2-a285-6a49b5a31294/1/tPM_b9KbrwPMTUha9fa3DaawCZ8.mft
File: tPM_b9KbrwPMTUha9fa3DaawCZ8.mft (raw, json)
Hash identifier: ll7uxYnNBfWyKuhg3Chul5+Imk4qqePQLUqP6CkNKfQ=
Subject key identifier: AF:A5:92:39:59:AA:BF:60:E1:C2:0A:DF:86:AC:43:19:41:DC:49:62
Authority key identifier: B4:F3:3F:6F:D2:9B:AF:03:CC:4D:48:5A:F5:F6:B7:0D:A6:B0:09:9F
Certificate issuer: /CN=b4f33f6fd29baf03cc4d485af5f6b70da6b0099f
Certificate serial: 019D389C2E590257A716FBE4F43F5BEB8208
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPM_b9KbrwPMTUha9fa3DaawCZ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/90a5cf-e484-4bb2-a285-6a49b5a31294/1/tPM_b9KbrwPMTUha9fa3DaawCZ8.mft
Manifest number: 1168
Signing time: Sun 29 Mar 2026 08:00:52 +0000
Manifest this update: Sun 29 Mar 2026 08:00:52 +0000
Manifest next update: Mon 30 Mar 2026 08:00:52 +0000
Files and hashes: 1: Fmn_d_Mky7sAyYX6SnAgjbHa1Cc.roa (hash: FmLoKPhtszPmnHtcY6zDJ3BsNEoID8FJ22Wnnvq62SY=)
2: tPM_b9KbrwPMTUha9fa3DaawCZ8.crl (hash: BbgJojGOyvvSdaKUyYGTylRN2/AYaGjDo0/va16Po1Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/90a5cf-e484-4bb2-a285-6a49b5a31294/1/tPM_b9KbrwPMTUha9fa3DaawCZ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/90a5cf-e484-4bb2-a285-6a49b5a31294/1/tPM_b9KbrwPMTUha9fa3DaawCZ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/tPM_b9KbrwPMTUha9fa3DaawCZ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:2e:59:02:57:a7:16:fb:e4:f4:3f:5b:eb:82:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f33f6fd29baf03cc4d485af5f6b70da6b0099f
Validity
Not Before: Mar 29 08:00:52 2026 GMT
Not After : Mar 30 08:00:52 2026 GMT
Subject: CN=afa5923959aabf60e1c20adf86ac431941dc4962
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:a8:95:60:78:fd:94:af:3f:d1:5f:fb:f2:94:
07:b4:62:39:37:3d:bf:99:6f:b3:e9:f3:66:a5:e1:
67:2c:19:bc:02:0f:70:46:a2:fb:e1:14:11:9b:d7:
02:b0:18:75:6d:5a:7e:d3:95:b1:7b:77:1c:98:7d:
2e:89:3f:07:cd:e5:c9:ca:20:5b:4c:af:72:fd:8a:
40:66:2e:79:6f:75:8d:de:67:71:d5:a6:8d:6f:4c:
f9:2c:8e:c9:f4:23:31:38:ac:f1:09:65:1e:0e:45:
ed:9f:04:2d:c5:54:e3:a0:88:a0:59:63:66:ab:d3:
77:bc:e4:88:33:17:52:ce:53:51:da:48:2f:d7:8c:
fd:01:49:7b:e7:ab:99:83:98:21:d5:79:4f:10:78:
f6:b1:4b:dc:36:22:24:4f:f2:13:dc:d1:c6:7f:ce:
aa:63:58:f8:7c:2d:a3:c1:90:df:6b:b4:ea:e5:20:
56:d0:92:22:67:9d:85:65:bc:fa:b1:99:a7:0f:d3:
3d:ea:e0:2a:d6:4b:ef:ae:fe:6d:6e:99:db:e6:e9:
6a:58:ae:2a:e4:ab:00:a4:0d:b7:d9:e0:0c:94:40:
85:db:84:53:71:cf:cf:79:79:ae:1c:b0:66:af:e1:
23:26:a4:6e:83:9b:f0:3b:3c:0d:89:96:74:f3:62:
59:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:A5:92:39:59:AA:BF:60:E1:C2:0A:DF:86:AC:43:19:41:DC:49:62
X509v3 Authority Key Identifier:
keyid:B4:F3:3F:6F:D2:9B:AF:03:CC:4D:48:5A:F5:F6:B7:0D:A6:B0:09:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPM_b9KbrwPMTUha9fa3DaawCZ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/90a5cf-e484-4bb2-a285-6a49b5a31294/1/tPM_b9KbrwPMTUha9fa3DaawCZ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/90a5cf-e484-4bb2-a285-6a49b5a31294/1/tPM_b9KbrwPMTUha9fa3DaawCZ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:22:03:8f:ef:76:49:b9:fa:c1:05:6b:27:41:b2:8d:4d:75:
6b:ea:fb:9c:d6:3d:15:58:c3:7b:08:6e:c0:d5:2c:8d:5b:e1:
f5:45:2a:07:97:82:32:66:a1:34:5e:f1:e9:b0:dd:89:32:b0:
fc:b4:ef:21:36:ed:71:95:05:26:eb:dd:fd:78:40:ac:2a:be:
b3:e2:3e:54:b3:14:f0:1c:58:40:93:42:cc:23:3c:26:3f:79:
7e:84:c4:64:64:b6:70:f5:02:08:42:95:c5:51:fb:0d:3e:ae:
51:80:9c:b0:d1:c9:a5:80:16:8e:40:76:ee:86:57:2d:5c:7a:
d1:c8:a0:1c:f5:a1:66:c3:a8:64:b8:98:6c:b7:02:a9:31:16:
4c:fd:46:01:14:0d:11:32:58:e4:54:9c:a8:10:1b:55:96:bf:
71:2c:68:3e:7f:c3:80:82:65:87:7a:ba:1f:88:8a:8c:2c:d8:
98:ea:41:da:d2:ed:8f:6c:ac:06:70:bc:cb:a1:9b:4a:1f:55:
aa:8f:44:ec:38:d3:1b:f0:c3:7e:13:4e:61:27:38:b6:36:a4:
c7:0b:db:05:4d:47:64:ba:f8:72:9a:36:1c:bc:43:68:22:b5:
6d:59:85:f9:06:e8:1c:02:de:1f:07:f9:68:45:c6:1e:86:02:
10:9f:e2:5b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04nC5ZAlenFvvk9D9b64IIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0ZjMzZjZmZDI5YmFmMDNjYzRkNDg1YWY1ZjZiNzBkYTZi
MDA5OWYwHhcNMjYwMzI5MDgwMDUyWhcNMjYwMzMwMDgwMDUyWjAzMTEwLwYDVQQD
EyhhZmE1OTIzOTU5YWFiZjYwZTFjMjBhZGY4NmFjNDMxOTQxZGM0OTYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqaiVYHj9lK8/0V/78pQHtGI5Nz2/
mW+z6fNmpeFnLBm8Ag9wRqL74RQRm9cCsBh1bVp+05Wxe3ccmH0uiT8HzeXJyiBb
TK9y/YpAZi55b3WN3mdx1aaNb0z5LI7J9CMxOKzxCWUeDkXtnwQtxVTjoIigWWNm
q9N3vOSIMxdSzlNR2kgv14z9AUl756uZg5gh1XlPEHj2sUvcNiIkT/IT3NHGf86q
Y1j4fC2jwZDfa7Tq5SBW0JIiZ52FZbz6sZmnD9M96uAq1kvvrv5tbpnb5ulqWK4q
5KsApA232eAMlECF24RTcc/PeXmuHLBmr+EjJqRug5vwOzwNiZZ082JZEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK+lkjlZqr9g4cIK34asQxlB3EliMB8GA1UdIwQY
MBaAFLTzP2/Sm68DzE1IWvX2tw2msAmfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFBNX2I5S2Jyd1BNVFVoYTlmYTNEYWF3Q1o4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC85MGE1Y2YtZTQ4NC00YmIyLWEyODUt
NmE0OWI1YTMxMjk0LzEvdFBNX2I5S2Jyd1BNVFVoYTlmYTNEYWF3Q1o4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC85MGE1Y2YtZTQ4NC00YmIyLWEyODUtNmE0OWI1YTMxMjk0
LzEvdFBNX2I5S2Jyd1BNVFVoYTlmYTNEYWF3Q1o4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgSIDj+92
Sbn6wQVrJ0GyjU11a+r7nNY9FVjDewhuwNUsjVvh9UUqB5eCMmahNF7x6bDdiTKw
/LTvITbtcZUFJuvd/XhArCq+s+I+VLMU8BxYQJNCzCM8Jj95foTEZGS2cPUCCEKV
xVH7DT6uUYCcsNHJpYAWjkB27oZXLVx60cigHPWhZsOoZLiYbLcCqTEWTP1GARQN
ETJY5FScqBAbVZa/cSxoPn/DgIJlh3q6H4iKjCzYmOpB2tLtj2ysBnC8y6GbSh9V
qo9E7DjTG/DDfhNOYSc4tjakxwvbBU1HZLr4cpo2HLxDaCK1bVmF+QboHALeHwf5
aEXGHoYCEJ/iWw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:13:14 2026 by rpki-client