Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/5a993d-b92f-4ec0-b300-d55f5e0ff43f/1/1tcoXpK3QC6V29onv773Go4ifNQ.mft
File: 1tcoXpK3QC6V29onv773Go4ifNQ.mft (raw, json)
Hash identifier: m058r8MtBY35z5i8L8mIA2e5JQggAcCvdWjlfzHFrbA=
Subject key identifier: 13:82:ED:82:7A:31:C3:91:61:B3:68:AA:53:D4:D5:EC:56:17:E1:6C
Authority key identifier: D6:D7:28:5E:92:B7:40:2E:95:DB:DA:27:BF:BE:F7:1A:8E:22:7C:D4
Certificate issuer: /CN=d6d7285e92b7402e95dbda27bfbef71a8e227cd4
Certificate serial: 019D378959E2B52E345C70A809D535BEE17E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1tcoXpK3QC6V29onv773Go4ifNQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/5a993d-b92f-4ec0-b300-d55f5e0ff43f/1/1tcoXpK3QC6V29onv773Go4ifNQ.mft
Manifest number: 0145
Signing time: Sun 29 Mar 2026 03:00:41 +0000
Manifest this update: Sun 29 Mar 2026 03:00:41 +0000
Manifest next update: Mon 30 Mar 2026 03:00:41 +0000
Files and hashes: 1: 1tcoXpK3QC6V29onv773Go4ifNQ.crl (hash: 9Uzf+7TgoS/LRmGg349huFHoegSLsaRNxvZ8XR7b1ho=)
2: vWSFnkCnudPRUzfioP_sQ99MW24.roa (hash: fa/7H1d1MQOMBd0ZSP/HYbqe7w6JGnLpzf7w6NJUnOE=)
3: xE1mwTKzQDbk79YJ7PIMthkjSqo.asa (hash: YyhspqR7mOuHCVepylY/A74k3bsEO/zYUAHhZJuP0qE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/5a993d-b92f-4ec0-b300-d55f5e0ff43f/1/1tcoXpK3QC6V29onv773Go4ifNQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/5a993d-b92f-4ec0-b300-d55f5e0ff43f/1/1tcoXpK3QC6V29onv773Go4ifNQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1tcoXpK3QC6V29onv773Go4ifNQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:59:e2:b5:2e:34:5c:70:a8:09:d5:35:be:e1:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6d7285e92b7402e95dbda27bfbef71a8e227cd4
Validity
Not Before: Mar 29 03:00:41 2026 GMT
Not After : Mar 30 03:00:41 2026 GMT
Subject: CN=1382ed827a31c39161b368aa53d4d5ec5617e16c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:41:68:45:9f:f8:f4:c9:73:ec:b0:b1:55:ee:
e5:de:00:ef:04:4c:99:29:18:50:b9:a7:3a:be:09:
3b:8a:9d:54:7f:62:22:14:6c:92:fc:ce:20:d5:55:
42:77:3b:55:a5:28:15:95:1b:59:68:95:60:98:80:
d6:e7:81:2a:8b:7f:9b:1b:c5:93:43:c9:44:68:a0:
f8:8b:02:32:33:8e:58:36:1b:a2:f0:29:bd:ef:c6:
bf:bb:7f:d1:c0:a6:63:13:ec:6c:9b:c7:89:37:5d:
4b:d6:37:c7:ee:2e:ef:10:46:df:3f:65:5d:50:68:
6f:8d:27:c1:f9:f2:4c:5b:fe:10:90:1f:d8:44:d6:
d0:79:81:87:1a:87:c0:6e:c3:2a:7d:ea:21:f6:7a:
e3:c8:a1:4b:41:fe:5e:56:49:d4:ac:d0:22:8c:52:
01:63:d2:c2:08:72:88:0d:f0:73:be:d6:8e:40:05:
d0:d9:68:81:73:15:46:65:83:43:5b:96:45:23:d9:
9e:d1:ad:53:f9:30:e0:04:c2:76:b7:88:3a:53:43:
5b:54:66:4c:b4:2d:0e:5f:33:b9:9a:21:35:f9:a2:
34:a6:48:34:2f:4c:93:90:05:eb:cd:43:68:22:e1:
39:37:79:13:94:18:af:62:0e:9d:10:67:77:6c:c3:
6f:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:82:ED:82:7A:31:C3:91:61:B3:68:AA:53:D4:D5:EC:56:17:E1:6C
X509v3 Authority Key Identifier:
keyid:D6:D7:28:5E:92:B7:40:2E:95:DB:DA:27:BF:BE:F7:1A:8E:22:7C:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1tcoXpK3QC6V29onv773Go4ifNQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a993d-b92f-4ec0-b300-d55f5e0ff43f/1/1tcoXpK3QC6V29onv773Go4ifNQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a993d-b92f-4ec0-b300-d55f5e0ff43f/1/1tcoXpK3QC6V29onv773Go4ifNQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:9e:45:68:5a:0a:90:85:5e:96:11:d2:c9:90:0b:67:e7:20:
7b:b2:0f:cd:33:2c:93:c2:d6:54:12:08:8e:ce:7b:c0:82:62:
46:07:60:7d:e6:b1:d6:18:4c:f8:4f:60:66:a4:1d:0a:c0:ac:
d4:ac:87:ff:7a:a5:cc:37:c7:ca:c7:98:a9:a0:af:4c:85:21:
23:e6:5b:19:f1:0f:77:94:a4:26:25:75:c0:e5:01:eb:18:60:
47:b3:e3:e0:b1:c6:4a:4d:28:03:b1:24:46:7b:13:d9:b3:c5:
07:0f:84:31:0d:5e:56:e5:8a:ea:f8:d3:9f:1b:d2:c9:5a:c8:
29:54:c6:81:52:40:72:b6:b1:21:4d:47:9b:eb:cf:19:b8:96:
05:ea:a6:ee:10:4c:c6:36:c2:56:fd:c2:b0:85:a1:3e:69:2c:
7f:19:18:54:18:6b:74:6f:56:02:91:02:f6:b3:23:ea:53:c2:
f4:d6:bc:6d:5d:34:37:9f:74:79:82:55:20:42:55:95:b6:18:
d4:dc:d6:08:6e:e0:c9:cc:cb:9a:13:bf:e5:fc:37:85:90:9e:
d9:92:be:44:7c:6b:99:f7:a4:16:e5:d9:ad:ac:70:a8:7d:5b:
83:84:ac:df:57:c4:c8:ca:cb:40:24:1c:6a:68:41:8c:52:d8:
19:3d:b5:24
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03iVnitS40XHCoCdU1vuF+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2ZDcyODVlOTJiNzQwMmU5NWRiZGEyN2JmYmVmNzFhOGUy
MjdjZDQwHhcNMjYwMzI5MDMwMDQxWhcNMjYwMzMwMDMwMDQxWjAzMTEwLwYDVQQD
EygxMzgyZWQ4MjdhMzFjMzkxNjFiMzY4YWE1M2Q0ZDVlYzU2MTdlMTZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz0FoRZ/49Mlz7LCxVe7l3gDvBEyZ
KRhQuac6vgk7ip1Uf2IiFGyS/M4g1VVCdztVpSgVlRtZaJVgmIDW54Eqi3+bG8WT
Q8lEaKD4iwIyM45YNhui8Cm978a/u3/RwKZjE+xsm8eJN11L1jfH7i7vEEbfP2Vd
UGhvjSfB+fJMW/4QkB/YRNbQeYGHGofAbsMqfeoh9nrjyKFLQf5eVknUrNAijFIB
Y9LCCHKIDfBzvtaOQAXQ2WiBcxVGZYNDW5ZFI9me0a1T+TDgBMJ2t4g6U0NbVGZM
tC0OXzO5miE1+aI0pkg0L0yTkAXrzUNoIuE5N3kTlBivYg6dEGd3bMNvBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBOC7YJ6McORYbNoqlPU1exWF+FsMB8GA1UdIwQY
MBaAFNbXKF6St0AuldvaJ7++9xqOInzUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMXRjb1hwSzNRQzZWMjlvbnY3NzNHbzRpZk5RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC81YTk5M2QtYjkyZi00ZWMwLWIzMDAt
ZDU1ZjVlMGZmNDNmLzEvMXRjb1hwSzNRQzZWMjlvbnY3NzNHbzRpZk5RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC81YTk5M2QtYjkyZi00ZWMwLWIzMDAtZDU1ZjVlMGZmNDNm
LzEvMXRjb1hwSzNRQzZWMjlvbnY3NzNHbzRpZk5RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMp5FaFoK
kIVelhHSyZALZ+cge7IPzTMsk8LWVBIIjs57wIJiRgdgfeax1hhM+E9gZqQdCsCs
1KyH/3qlzDfHyseYqaCvTIUhI+ZbGfEPd5SkJiV1wOUB6xhgR7Pj4LHGSk0oA7Ek
RnsT2bPFBw+EMQ1eVuWK6vjTnxvSyVrIKVTGgVJAcraxIU1Hm+vPGbiWBeqm7hBM
xjbCVv3CsIWhPmksfxkYVBhrdG9WApEC9rMj6lPC9Na8bV00N590eYJVIEJVlbYY
1NzWCG7gyczLmhO/5fw3hZCe2ZK+RHxrmfekFuXZraxwqH1bg4Ss31fEyMrLQCQc
amhBjFLYGT21JA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 14:03:36 2026 by rpki-client