Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/65a4c2-34b3-4205-afd1-c5481db3718d/1/TSkoLUc3P5QvCti5HtlAk7Zuo68.mft
File: TSkoLUc3P5QvCti5HtlAk7Zuo68.mft (raw, json)
Hash identifier: e95LSI/y6Sm83fXDGb8UEjkGnFASKCD9VKuyyClB3RI=
Subject key identifier: 57:C6:D9:B0:2C:D0:D7:8A:42:0A:12:B0:10:F2:F9:30:EB:BB:AB:3A
Authority key identifier: 4D:29:28:2D:47:37:3F:94:2F:0A:D8:B9:1E:D9:40:93:B6:6E:A3:AF
Certificate issuer: /CN=4d29282d47373f942f0ad8b91ed94093b66ea3af
Certificate serial: 019D389C48974714CDA9323E9D1FE44A1603
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TSkoLUc3P5QvCti5HtlAk7Zuo68.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/65a4c2-34b3-4205-afd1-c5481db3718d/1/TSkoLUc3P5QvCti5HtlAk7Zuo68.mft
Manifest number: 1818
Signing time: Sun 29 Mar 2026 08:00:59 +0000
Manifest this update: Sun 29 Mar 2026 08:00:59 +0000
Manifest next update: Mon 30 Mar 2026 08:00:59 +0000
Files and hashes: 1: PNfIBENqPn1C2ky1c3Y7NiG7Ymw.roa (hash: DgC7dqgRapp52CiQQUrzN9ZAbunqBU0/xi2SXO7kKV0=)
2: TSkoLUc3P5QvCti5HtlAk7Zuo68.crl (hash: zfNZ6EBo50J4uODVIpSV3lp1HM6WUCzVqjF5sYCCG0A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/65a4c2-34b3-4205-afd1-c5481db3718d/1/TSkoLUc3P5QvCti5HtlAk7Zuo68.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/65a4c2-34b3-4205-afd1-c5481db3718d/1/TSkoLUc3P5QvCti5HtlAk7Zuo68.mft
rsync://rpki.ripe.net/repository/DEFAULT/TSkoLUc3P5QvCti5HtlAk7Zuo68.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:48:97:47:14:cd:a9:32:3e:9d:1f:e4:4a:16:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d29282d47373f942f0ad8b91ed94093b66ea3af
Validity
Not Before: Mar 29 08:00:59 2026 GMT
Not After : Mar 30 08:00:59 2026 GMT
Subject: CN=57c6d9b02cd0d78a420a12b010f2f930ebbbab3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:8d:9c:1d:43:a5:9b:24:ee:4a:9b:aa:d0:ff:
42:39:36:89:a2:22:20:14:1f:01:59:10:b8:84:12:
00:bd:83:27:f0:ff:c8:89:87:61:0b:f3:d5:ea:5d:
45:ad:35:cb:3f:8a:12:f3:1c:2a:d7:75:ce:40:3d:
9d:4f:3a:43:bf:f9:b4:12:60:e2:00:44:3a:e7:ea:
a7:d5:b6:0f:4d:79:e3:2a:58:18:ee:f3:4a:4e:1d:
c1:cc:ef:6e:b6:11:bf:1a:f1:e9:42:88:e7:b9:3d:
7a:7e:53:b4:15:f2:68:a1:af:de:33:1f:27:28:0a:
7d:2f:d7:3b:8a:56:9f:5d:d7:b5:de:58:7f:6a:8b:
a8:79:c2:df:e4:3d:e3:79:77:6e:75:1d:74:a6:c3:
d5:a6:76:c8:21:76:26:41:0e:03:cc:5c:31:03:78:
8f:88:17:5b:25:1d:cd:c9:e4:f3:b4:f2:e6:23:de:
13:0b:f3:7b:2a:1e:d5:50:4a:24:f9:2e:ef:da:29:
b2:22:5f:3a:f2:62:38:58:b0:8a:e8:5a:af:d5:03:
ce:47:bd:c6:72:7c:e5:e4:eb:4a:2f:55:dc:33:a5:
c2:0d:c5:ea:47:08:4a:53:6f:68:89:d4:f7:bd:38:
3d:d5:fe:2f:fd:b3:5d:c0:ed:3e:3b:0c:4b:1a:ce:
b5:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:C6:D9:B0:2C:D0:D7:8A:42:0A:12:B0:10:F2:F9:30:EB:BB:AB:3A
X509v3 Authority Key Identifier:
keyid:4D:29:28:2D:47:37:3F:94:2F:0A:D8:B9:1E:D9:40:93:B6:6E:A3:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TSkoLUc3P5QvCti5HtlAk7Zuo68.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/65a4c2-34b3-4205-afd1-c5481db3718d/1/TSkoLUc3P5QvCti5HtlAk7Zuo68.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/65a4c2-34b3-4205-afd1-c5481db3718d/1/TSkoLUc3P5QvCti5HtlAk7Zuo68.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:01:6e:66:65:e3:81:19:a8:65:52:53:7f:df:fd:02:76:27:
51:e9:17:16:ed:fd:84:77:75:49:61:e3:d8:fc:fd:79:77:8e:
7b:64:ec:1c:f1:af:ed:ad:b7:d5:ef:90:b2:8e:51:ce:98:82:
b3:3b:4a:60:74:99:f8:99:6d:a3:e6:0a:cd:a3:46:26:58:c8:
89:b1:b6:2a:ed:d6:66:15:a3:7b:22:f8:35:6f:23:c2:53:0c:
1a:d0:d0:f9:89:0a:dd:23:f2:f9:c4:ec:09:b7:00:5c:cd:fd:
b6:e4:fe:a7:90:26:23:2e:4b:05:09:49:9f:0c:8c:e7:4e:7c:
98:45:04:55:6d:4a:5a:c6:fd:11:0c:08:90:8c:f2:9f:f8:5d:
9a:d9:c9:5e:26:5a:9a:b5:a7:2e:29:34:bb:95:19:69:cf:b2:
0d:e7:43:e5:bf:3e:e0:32:6e:bb:6c:53:ac:7d:53:44:44:f2:
6e:98:f4:dd:c4:fe:2f:5c:d3:19:8b:04:0f:6c:2b:26:89:b4:
14:4e:0b:40:f8:7b:8f:b7:94:5c:28:c2:70:9f:3d:7b:e9:22:
e9:94:51:b9:74:ac:62:cf:5a:76:69:0c:8c:7b:d9:ea:5c:a6:
d0:29:7a:6e:4f:d7:ae:72:fc:16:df:bf:18:e7:51:eb:ce:74:
32:c3:0c:cf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04nEiXRxTNqTI+nR/kShYDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRkMjkyODJkNDczNzNmOTQyZjBhZDhiOTFlZDk0MDkzYjY2
ZWEzYWYwHhcNMjYwMzI5MDgwMDU5WhcNMjYwMzMwMDgwMDU5WjAzMTEwLwYDVQQD
Eyg1N2M2ZDliMDJjZDBkNzhhNDIwYTEyYjAxMGYyZjkzMGViYmJhYjNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlo2cHUOlmyTuSpuq0P9COTaJoiIg
FB8BWRC4hBIAvYMn8P/IiYdhC/PV6l1FrTXLP4oS8xwq13XOQD2dTzpDv/m0EmDi
AEQ65+qn1bYPTXnjKlgY7vNKTh3BzO9uthG/GvHpQojnuT16flO0FfJooa/eMx8n
KAp9L9c7ilafXde13lh/aouoecLf5D3jeXdudR10psPVpnbIIXYmQQ4DzFwxA3iP
iBdbJR3NyeTztPLmI94TC/N7Kh7VUEok+S7v2imyIl868mI4WLCK6Fqv1QPOR73G
cnzl5OtKL1XcM6XCDcXqRwhKU29oidT3vTg91f4v/bNdwO0+OwxLGs61YQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFfG2bAs0NeKQgoSsBDy+TDru6s6MB8GA1UdIwQY
MBaAFE0pKC1HNz+ULwrYuR7ZQJO2bqOvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVFNrb0xVYzNQNVF2Q3RpNUh0bEFrN1p1bzY4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC82NWE0YzItMzRiMy00MjA1LWFmZDEt
YzU0ODFkYjM3MThkLzEvVFNrb0xVYzNQNVF2Q3RpNUh0bEFrN1p1bzY4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC82NWE0YzItMzRiMy00MjA1LWFmZDEtYzU0ODFkYjM3MThk
LzEvVFNrb0xVYzNQNVF2Q3RpNUh0bEFrN1p1bzY4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbAFuZmXj
gRmoZVJTf9/9AnYnUekXFu39hHd1SWHj2Pz9eXeOe2TsHPGv7a231e+Qso5RzpiC
sztKYHSZ+Jlto+YKzaNGJljIibG2Ku3WZhWjeyL4NW8jwlMMGtDQ+YkK3SPy+cTs
CbcAXM39tuT+p5AmIy5LBQlJnwyM5058mEUEVW1KWsb9EQwIkIzyn/hdmtnJXiZa
mrWnLik0u5UZac+yDedD5b8+4DJuu2xTrH1TRETybpj03cT+L1zTGYsED2wrJom0
FE4LQPh7j7eUXCjCcJ89e+ki6ZRRuXSsYs9admkMjHvZ6lym0Cl6bk/XrnL8Ft+/
GOdR6850MsMMzw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 17:47:57 2026 by rpki-client