Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/40ea14-dc50-4aa0-aa85-28d010603529/1/tL3DdqFZ0F4q-XF2o-uoNg5g0XY.mft
File: tL3DdqFZ0F4q-XF2o-uoNg5g0XY.mft (raw, json)
Hash identifier: SfJJQNYqa0Gq/0sh9E2qBwLzpGspk4Pu9G+qCCC7Ilc=
Subject key identifier: 45:A4:D9:02:4F:B4:6D:53:EE:D5:29:9A:AD:79:20:24:54:8C:1C:00
Authority key identifier: B4:BD:C3:76:A1:59:D0:5E:2A:F9:71:76:A3:EB:A8:36:0E:60:D1:76
Certificate issuer: /CN=b4bdc376a159d05e2af97176a3eba8360e60d176
Certificate serial: 019D3753197D1FBC8037DD951E4A84760553
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tL3DdqFZ0F4q-XF2o-uoNg5g0XY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/40ea14-dc50-4aa0-aa85-28d010603529/1/tL3DdqFZ0F4q-XF2o-uoNg5g0XY.mft
Manifest number: 1896
Signing time: Sun 29 Mar 2026 02:01:26 +0000
Manifest this update: Sun 29 Mar 2026 02:01:26 +0000
Manifest next update: Mon 30 Mar 2026 02:01:26 +0000
Files and hashes: 1: jSg-FBkeg1R-PLxCirXbhqCALA8.roa (hash: lF16qfXyhlcBonE6Swph7S7GMbK5m+Lvc5sCLsaOquY=)
2: tL3DdqFZ0F4q-XF2o-uoNg5g0XY.crl (hash: wOZyzBBnSAvN6PKtHBW6ztp7Qij1sI51owcPvP1npvo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/40ea14-dc50-4aa0-aa85-28d010603529/1/tL3DdqFZ0F4q-XF2o-uoNg5g0XY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/40ea14-dc50-4aa0-aa85-28d010603529/1/tL3DdqFZ0F4q-XF2o-uoNg5g0XY.mft
rsync://rpki.ripe.net/repository/DEFAULT/tL3DdqFZ0F4q-XF2o-uoNg5g0XY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:53:19:7d:1f:bc:80:37:dd:95:1e:4a:84:76:05:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4bdc376a159d05e2af97176a3eba8360e60d176
Validity
Not Before: Mar 29 02:01:26 2026 GMT
Not After : Mar 30 02:01:26 2026 GMT
Subject: CN=45a4d9024fb46d53eed5299aad792024548c1c00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:16:33:b9:e6:a5:1c:1a:e5:86:c5:86:a3:58:
3d:28:b2:ab:18:43:a6:e3:38:06:03:36:36:54:9b:
ae:2a:8a:cb:e9:5a:ab:ab:7c:d8:dd:74:0f:07:04:
e0:7d:d2:9b:e1:29:68:f8:6b:7a:41:0c:48:93:bf:
c8:55:7c:6a:26:5f:bb:62:75:94:c9:08:f3:ad:14:
2b:7e:cc:03:12:e0:8f:06:5e:fe:56:09:f1:b5:79:
6e:78:50:4d:72:22:c0:3d:77:f8:92:fd:2c:21:cf:
ab:7e:91:9b:b7:33:5c:b8:5e:e3:a1:a8:aa:7c:6f:
4f:c1:f3:b5:b6:10:ab:55:3b:39:52:16:c5:26:9a:
2d:bc:a6:4c:6a:a6:a6:8c:6c:42:1b:0a:bf:da:17:
05:71:29:94:57:74:fc:b3:44:90:f7:6e:6b:88:8f:
94:1a:c7:0e:e9:4d:e5:b1:83:3e:73:d3:ea:93:95:
d9:4c:69:e4:6f:16:9d:d7:1f:c5:55:6e:fb:06:b6:
2f:63:08:94:6d:0d:e2:d2:f9:64:00:ed:ce:46:a6:
62:ab:41:09:15:54:0e:6a:5d:f7:40:16:61:cd:64:
c6:0a:a3:96:6c:46:4d:36:e3:5c:69:f6:ab:7d:55:
bc:ea:fc:32:10:7b:a8:07:3c:8b:0c:6f:9e:fe:cd:
f2:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:A4:D9:02:4F:B4:6D:53:EE:D5:29:9A:AD:79:20:24:54:8C:1C:00
X509v3 Authority Key Identifier:
keyid:B4:BD:C3:76:A1:59:D0:5E:2A:F9:71:76:A3:EB:A8:36:0E:60:D1:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tL3DdqFZ0F4q-XF2o-uoNg5g0XY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/40ea14-dc50-4aa0-aa85-28d010603529/1/tL3DdqFZ0F4q-XF2o-uoNg5g0XY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/40ea14-dc50-4aa0-aa85-28d010603529/1/tL3DdqFZ0F4q-XF2o-uoNg5g0XY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:30:59:22:76:c7:22:c5:64:3e:0e:51:2a:f6:c5:f5:50:84:
5a:53:f4:ae:5e:4c:61:ac:9c:bb:63:9b:c9:bb:15:78:c3:bb:
39:fe:cb:1d:6e:10:de:8c:49:a1:85:df:f4:26:a4:b2:ee:77:
7c:73:b9:13:ff:b8:60:ed:3e:97:a3:d1:cb:d4:c0:d5:b9:d2:
71:1e:4d:69:b3:d3:18:9f:1d:5f:43:0a:e8:21:60:c5:82:79:
a2:5a:ab:cf:74:f3:22:8e:45:b9:4a:31:f0:4d:fe:e6:17:05:
c2:24:c7:9d:48:ae:8d:79:9c:a4:2b:9b:3b:b0:7d:9d:92:d4:
54:d8:2e:84:bc:c5:22:a3:a7:40:00:c1:cc:f2:aa:c2:84:93:
f6:ef:05:c2:57:73:79:00:f5:cb:da:7d:3b:84:d0:94:45:e3:
3e:56:42:10:d5:59:a3:c4:d1:9a:8b:19:0e:ab:ed:9a:68:cf:
27:7e:1b:fd:54:ef:32:35:3e:c2:7a:13:c6:0e:58:b5:6b:43:
ad:7a:27:d8:36:f2:14:b6:7e:85:32:79:d7:8f:e2:35:34:3f:
b7:24:85:53:b7:ef:3e:7c:7a:72:48:e2:20:64:dd:58:2d:63:
b7:bf:4a:0c:a2:f2:7a:03:f5:3a:57:25:95:18:fd:8c:c2:44:
76:13:2d:72
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03Uxl9H7yAN92VHkqEdgVTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0YmRjMzc2YTE1OWQwNWUyYWY5NzE3NmEzZWJhODM2MGU2
MGQxNzYwHhcNMjYwMzI5MDIwMTI2WhcNMjYwMzMwMDIwMTI2WjAzMTEwLwYDVQQD
Eyg0NWE0ZDkwMjRmYjQ2ZDUzZWVkNTI5OWFhZDc5MjAyNDU0OGMxYzAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzhYzuealHBrlhsWGo1g9KLKrGEOm
4zgGAzY2VJuuKorL6Vqrq3zY3XQPBwTgfdKb4Slo+Gt6QQxIk7/IVXxqJl+7YnWU
yQjzrRQrfswDEuCPBl7+VgnxtXlueFBNciLAPXf4kv0sIc+rfpGbtzNcuF7joaiq
fG9PwfO1thCrVTs5UhbFJpotvKZMaqamjGxCGwq/2hcFcSmUV3T8s0SQ925riI+U
GscO6U3lsYM+c9Pqk5XZTGnkbxad1x/FVW77BrYvYwiUbQ3i0vlkAO3ORqZiq0EJ
FVQOal33QBZhzWTGCqOWbEZNNuNcafarfVW86vwyEHuoBzyLDG+e/s3ySQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEWk2QJPtG1T7tUpmq15ICRUjBwAMB8GA1UdIwQY
MBaAFLS9w3ahWdBeKvlxdqPrqDYOYNF2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdEwzRGRxRlowRjRxLVhGMm8tdW9OZzVnMFhZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy80MGVhMTQtZGM1MC00YWEwLWFhODUt
MjhkMDEwNjAzNTI5LzEvdEwzRGRxRlowRjRxLVhGMm8tdW9OZzVnMFhZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMy80MGVhMTQtZGM1MC00YWEwLWFhODUtMjhkMDEwNjAzNTI5
LzEvdEwzRGRxRlowRjRxLVhGMm8tdW9OZzVnMFhZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYDBZInbH
IsVkPg5RKvbF9VCEWlP0rl5MYaycu2ObybsVeMO7Of7LHW4Q3oxJoYXf9Caksu53
fHO5E/+4YO0+l6PRy9TA1bnScR5NabPTGJ8dX0MK6CFgxYJ5olqrz3TzIo5FuUox
8E3+5hcFwiTHnUiujXmcpCubO7B9nZLUVNguhLzFIqOnQADBzPKqwoST9u8Fwldz
eQD1y9p9O4TQlEXjPlZCENVZo8TRmosZDqvtmmjPJ34b/VTvMjU+wnoTxg5YtWtD
rXon2DbyFLZ+hTJ514/iNTQ/tySFU7fvPnx6ckjiIGTdWC1jt79KDKLyegP1Olcl
lRj9jMJEdhMtcg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:29:28 2026 by rpki-client