Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/2e6613-4332-4c19-addf-dedaf79356ce/1/t4OAtB43tXV9PU4u7N8G2TCnC50.mft
File: t4OAtB43tXV9PU4u7N8G2TCnC50.mft (raw, json)
Hash identifier: 56s7PXUF0d4A5uQX+QnIFFrN2hD4a1nhFZnLm3WmgnY=
Subject key identifier: 8B:C5:1C:84:6D:A5:2B:2A:D3:79:AD:0B:6F:69:57:A2:E4:97:D6:42
Authority key identifier: B7:83:80:B4:1E:37:B5:75:7D:3D:4E:2E:EC:DF:06:D9:30:A7:0B:9D
Certificate issuer: /CN=b78380b41e37b5757d3d4e2eecdf06d930a70b9d
Certificate serial: 019D3866581E7D3009ED3C2F08D8DDEC534F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t4OAtB43tXV9PU4u7N8G2TCnC50.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/2e6613-4332-4c19-addf-dedaf79356ce/1/t4OAtB43tXV9PU4u7N8G2TCnC50.mft
Manifest number: 1896
Signing time: Sun 29 Mar 2026 07:02:04 +0000
Manifest this update: Sun 29 Mar 2026 07:02:04 +0000
Manifest next update: Mon 30 Mar 2026 07:02:04 +0000
Files and hashes: 1: 7AN2y--6BWBDlHsQXRo-Ms_T9_E.roa (hash: 5G/O/em7a1btfI5sEj4BLe5JKY4pGeRIT+C2NR1XoD4=)
2: t4OAtB43tXV9PU4u7N8G2TCnC50.crl (hash: W4suuo/qF55v4wDEtuHGfHNbSsWbZaIRcH6OG0+sMP8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/2e6613-4332-4c19-addf-dedaf79356ce/1/t4OAtB43tXV9PU4u7N8G2TCnC50.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/2e6613-4332-4c19-addf-dedaf79356ce/1/t4OAtB43tXV9PU4u7N8G2TCnC50.mft
rsync://rpki.ripe.net/repository/DEFAULT/t4OAtB43tXV9PU4u7N8G2TCnC50.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:58:1e:7d:30:09:ed:3c:2f:08:d8:dd:ec:53:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b78380b41e37b5757d3d4e2eecdf06d930a70b9d
Validity
Not Before: Mar 29 07:02:04 2026 GMT
Not After : Mar 30 07:02:04 2026 GMT
Subject: CN=8bc51c846da52b2ad379ad0b6f6957a2e497d642
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:24:a0:c6:78:a4:40:0e:d7:85:97:7a:65:a3:
22:56:7f:16:d5:b5:57:25:c4:d8:af:26:f6:ae:c8:
83:e2:d9:3a:c5:5a:38:c3:fd:3a:84:8d:42:c1:b6:
be:23:fc:2e:5b:1a:aa:73:af:c2:42:11:48:35:57:
9d:bd:ed:2c:b5:5a:e7:38:a3:89:42:e7:ae:76:09:
04:c7:a1:14:6d:a0:e3:2c:ce:c2:e8:9c:08:ed:af:
72:0d:b9:e7:1b:94:5f:78:a5:11:09:22:7c:ff:6d:
8b:f5:e6:af:aa:92:88:92:9b:28:cc:e5:c7:62:bc:
52:8a:88:d6:6e:86:f2:ae:ac:dc:13:54:c5:88:de:
29:44:43:dd:d1:aa:ba:b3:69:fe:9f:2f:93:97:90:
55:4c:28:1b:34:b9:eb:d6:b0:de:0f:64:76:52:82:
0d:85:b5:df:f3:c7:43:04:ae:7c:60:74:10:3a:f4:
3c:30:a3:1f:f2:86:0f:78:67:7c:6a:f7:17:80:10:
ba:d0:4c:a2:ac:94:45:fe:14:d1:58:65:73:58:d0:
24:bf:fb:63:b1:fe:ed:33:d3:1f:66:4a:d0:4c:49:
fa:77:6d:21:d9:da:d6:95:31:ee:3d:fb:06:a7:25:
23:d8:7e:27:78:b0:e5:b8:74:e5:0f:95:07:dc:d6:
d5:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:C5:1C:84:6D:A5:2B:2A:D3:79:AD:0B:6F:69:57:A2:E4:97:D6:42
X509v3 Authority Key Identifier:
keyid:B7:83:80:B4:1E:37:B5:75:7D:3D:4E:2E:EC:DF:06:D9:30:A7:0B:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t4OAtB43tXV9PU4u7N8G2TCnC50.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/2e6613-4332-4c19-addf-dedaf79356ce/1/t4OAtB43tXV9PU4u7N8G2TCnC50.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/2e6613-4332-4c19-addf-dedaf79356ce/1/t4OAtB43tXV9PU4u7N8G2TCnC50.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:3b:c6:ff:1c:4a:a7:9a:59:fd:0c:65:74:78:e7:a2:b3:d5:
eb:a1:f3:c7:85:d7:b3:c0:50:a2:63:6c:d1:e1:bc:a8:fb:6f:
9e:6d:34:b2:23:d7:d1:ff:01:c4:06:b9:d6:d4:a2:6a:b6:8c:
a9:2f:a8:fc:95:33:7a:b4:c7:e5:46:a4:f0:f0:f4:af:0a:f2:
55:93:f5:6e:7e:3b:35:c7:e9:60:8b:01:20:f5:56:d2:68:00:
14:94:05:d8:4b:5e:ab:a1:97:3c:b6:ff:37:bc:fe:86:e1:41:
46:e6:ac:8d:c5:42:1c:17:c5:bb:74:ad:8d:41:7b:e9:bb:dc:
3e:b4:94:28:63:88:34:c3:d4:ee:8b:1c:09:1f:3d:ae:5d:5e:
2c:c6:87:4d:22:3c:b4:65:af:0e:66:ff:0d:76:72:f3:10:76:
a0:44:23:37:c8:55:71:a1:f9:8c:c8:bf:34:2f:0e:11:4a:b0:
80:33:1c:2d:37:51:9b:2f:7e:17:65:ea:eb:b6:1b:f2:f3:55:
61:76:3b:1a:8b:da:cf:4b:0f:27:ca:5d:97:ce:44:d0:c1:39:
0d:15:b6:b8:b9:32:a0:fd:b9:24:25:a8:8d:c8:b7:1d:1f:f5:
78:eb:8d:f1:17:2c:3c:fc:a3:a5:d2:90:b7:3e:01:ff:69:ac:
15:e2:35:c7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04ZlgefTAJ7TwvCNjd7FNPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3ODM4MGI0MWUzN2I1NzU3ZDNkNGUyZWVjZGYwNmQ5MzBh
NzBiOWQwHhcNMjYwMzI5MDcwMjA0WhcNMjYwMzMwMDcwMjA0WjAzMTEwLwYDVQQD
Eyg4YmM1MWM4NDZkYTUyYjJhZDM3OWFkMGI2ZjY5NTdhMmU0OTdkNjQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8SSgxnikQA7XhZd6ZaMiVn8W1bVX
JcTYryb2rsiD4tk6xVo4w/06hI1Cwba+I/wuWxqqc6/CQhFINVedve0stVrnOKOJ
QueudgkEx6EUbaDjLM7C6JwI7a9yDbnnG5RfeKURCSJ8/22L9eavqpKIkpsozOXH
YrxSiojWbobyrqzcE1TFiN4pREPd0aq6s2n+ny+Tl5BVTCgbNLnr1rDeD2R2UoIN
hbXf88dDBK58YHQQOvQ8MKMf8oYPeGd8avcXgBC60EyirJRF/hTRWGVzWNAkv/tj
sf7tM9MfZkrQTEn6d20h2drWlTHuPfsGpyUj2H4neLDluHTlD5UH3NbVXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIvFHIRtpSsq03mtC29pV6Lkl9ZCMB8GA1UdIwQY
MBaAFLeDgLQeN7V1fT1OLuzfBtkwpwudMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdDRPQXRCNDN0WFY5UFU0dTdOOEcyVENuQzUwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC8yZTY2MTMtNDMzMi00YzE5LWFkZGYt
ZGVkYWY3OTM1NmNlLzEvdDRPQXRCNDN0WFY5UFU0dTdOOEcyVENuQzUwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC8yZTY2MTMtNDMzMi00YzE5LWFkZGYtZGVkYWY3OTM1NmNl
LzEvdDRPQXRCNDN0WFY5UFU0dTdOOEcyVENuQzUwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnDvG/xxK
p5pZ/QxldHjnorPV66Hzx4XXs8BQomNs0eG8qPtvnm00siPX0f8BxAa51tSiaraM
qS+o/JUzerTH5Uak8PD0rwryVZP1bn47NcfpYIsBIPVW0mgAFJQF2Eteq6GXPLb/
N7z+huFBRuasjcVCHBfFu3StjUF76bvcPrSUKGOINMPU7oscCR89rl1eLMaHTSI8
tGWvDmb/DXZy8xB2oEQjN8hVcaH5jMi/NC8OEUqwgDMcLTdRmy9+F2Xq67Yb8vNV
YXY7Govaz0sPJ8pdl85E0ME5DRW2uLkyoP25JCWojci3HR/1eOuN8RcsPPyjpdKQ
tz4B/2msFeI1xw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 17:48:36 2026 by rpki-client