Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/81e9aa-85ed-4850-b46b-6885aa87c4fd/1/t2lbmOCKN4vw3JRNLxpgofaVSYE.mft
File: t2lbmOCKN4vw3JRNLxpgofaVSYE.mft (raw, json)
Hash identifier: sYlrXnXE++VHR3GpSkeXZ9Oq8da9hrX41/cexpkjNvU=
Subject key identifier: 23:EF:D5:72:88:19:5E:07:68:AE:3F:F2:0C:67:71:7E:C3:A8:9D:7F
Authority key identifier: B7:69:5B:98:E0:8A:37:8B:F0:DC:94:4D:2F:1A:60:A1:F6:95:49:81
Certificate issuer: /CN=b7695b98e08a378bf0dc944d2f1a60a1f6954981
Certificate serial: 019D3940756ADBEE77743A222C56AA53B113
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t2lbmOCKN4vw3JRNLxpgofaVSYE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/81e9aa-85ed-4850-b46b-6885aa87c4fd/1/t2lbmOCKN4vw3JRNLxpgofaVSYE.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 11:00:18 +0000
Manifest this update: Sun 29 Mar 2026 11:00:18 +0000
Manifest next update: Mon 30 Mar 2026 11:00:18 +0000
Files and hashes: 1: 6fkc9vbG8GlJ-ztun97m-zUYfg4.roa (hash: zRY0m0UC6TjY6n8pP6oxYqs0avAat2u0qcFHm3tj6MI=)
2: t2lbmOCKN4vw3JRNLxpgofaVSYE.crl (hash: gGXwik3jkVUfyy7EXJs0esgt4e2nemM3uaS+hRwX6zg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/81e9aa-85ed-4850-b46b-6885aa87c4fd/1/t2lbmOCKN4vw3JRNLxpgofaVSYE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/81e9aa-85ed-4850-b46b-6885aa87c4fd/1/t2lbmOCKN4vw3JRNLxpgofaVSYE.mft
rsync://rpki.ripe.net/repository/DEFAULT/t2lbmOCKN4vw3JRNLxpgofaVSYE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 11:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:75:6a:db:ee:77:74:3a:22:2c:56:aa:53:b1:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7695b98e08a378bf0dc944d2f1a60a1f6954981
Validity
Not Before: Mar 29 11:00:18 2026 GMT
Not After : Mar 30 11:00:18 2026 GMT
Subject: CN=23efd57288195e0768ae3ff20c67717ec3a89d7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:52:6d:1d:2b:21:f9:99:12:b5:ed:da:aa:3c:
18:79:78:a6:07:a0:b2:5f:3c:df:59:b7:74:eb:d2:
cf:4f:a3:fd:39:ad:f3:d5:ac:39:d7:2d:2b:74:ed:
7c:e7:f1:70:29:4c:e8:d5:be:46:bb:24:34:fa:7e:
91:d4:70:d6:64:92:fb:e6:cd:06:01:22:02:5f:ea:
23:62:bc:b4:c4:a7:16:1f:e0:9e:27:21:54:e4:1f:
05:99:f5:23:4a:cf:59:1b:03:a2:45:f1:1d:34:75:
b9:e4:84:cb:76:8c:52:61:bb:fb:b3:a4:dd:9a:68:
ad:69:47:89:33:3b:05:cf:dd:93:f9:68:32:27:28:
d4:dd:cf:7e:42:f9:a8:81:95:e1:61:19:35:99:32:
e4:6a:1e:19:03:74:b0:be:8a:4d:26:e7:f8:85:84:
b4:7f:5c:73:3d:10:96:83:fd:4e:b6:0b:bd:04:0d:
7e:c3:df:d1:bb:63:98:39:2f:98:22:58:34:54:78:
06:63:da:60:55:7b:8b:c1:8d:02:54:5e:cb:4f:8e:
73:ee:bb:2c:8a:e0:91:d4:e8:a0:17:5f:ec:ff:77:
8c:46:73:22:cc:1b:96:55:77:1c:1d:32:ec:86:cd:
da:5b:fc:7a:bb:b0:f1:e4:f9:ea:34:0f:f6:e4:bc:
cd:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:EF:D5:72:88:19:5E:07:68:AE:3F:F2:0C:67:71:7E:C3:A8:9D:7F
X509v3 Authority Key Identifier:
keyid:B7:69:5B:98:E0:8A:37:8B:F0:DC:94:4D:2F:1A:60:A1:F6:95:49:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t2lbmOCKN4vw3JRNLxpgofaVSYE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/81e9aa-85ed-4850-b46b-6885aa87c4fd/1/t2lbmOCKN4vw3JRNLxpgofaVSYE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/81e9aa-85ed-4850-b46b-6885aa87c4fd/1/t2lbmOCKN4vw3JRNLxpgofaVSYE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:67:f4:91:27:cf:cd:50:84:b3:e6:e7:06:00:49:01:65:9f:
67:fd:ab:a8:58:ab:dc:1d:f8:c3:21:51:b3:3a:85:c8:a4:8e:
df:da:d2:2e:09:23:8d:3b:89:4f:8d:06:9b:dc:dd:c0:f8:13:
29:c9:1f:25:30:7c:3f:84:9a:a8:95:9b:50:7a:29:79:37:c7:
b5:6d:67:25:60:7d:f4:f0:a6:6b:cd:74:87:b2:f5:fa:f6:b3:
d6:dc:22:75:d3:06:87:a8:c3:7b:10:18:56:7f:83:22:23:29:
89:8d:df:2c:99:f3:fd:74:87:97:93:ec:09:1e:9c:73:e7:34:
f2:a2:43:b9:43:f1:20:9d:2b:b6:22:ed:a0:ef:dc:56:67:8c:
aa:8c:56:65:20:b3:d0:92:a2:05:85:c9:6d:bd:87:0d:93:83:
13:f2:a9:25:47:22:36:97:33:81:26:39:b5:60:df:58:85:e9:
d1:8e:10:32:3a:17:cb:62:23:98:33:bd:53:1e:27:d3:f6:7c:
37:39:2f:46:4f:a5:81:84:7f:4c:55:a3:69:55:08:14:e7:fa:
c5:1f:e0:f0:dc:05:49:7a:5a:0c:71:ac:8b:cc:97:2d:28:75:
30:af:c3:42:59:e6:0f:01:57:04:d2:74:16:5f:d4:81:cd:43:
eb:9a:2d:b3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05QHVq2+53dDoiLFaqU7ETMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3Njk1Yjk4ZTA4YTM3OGJmMGRjOTQ0ZDJmMWE2MGExZjY5
NTQ5ODEwHhcNMjYwMzI5MTEwMDE4WhcNMjYwMzMwMTEwMDE4WjAzMTEwLwYDVQQD
EygyM2VmZDU3Mjg4MTk1ZTA3NjhhZTNmZjIwYzY3NzE3ZWMzYTg5ZDdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqVJtHSsh+ZkSte3aqjwYeXimB6Cy
XzzfWbd069LPT6P9Oa3z1aw51y0rdO185/FwKUzo1b5GuyQ0+n6R1HDWZJL75s0G
ASICX+ojYry0xKcWH+CeJyFU5B8FmfUjSs9ZGwOiRfEdNHW55ITLdoxSYbv7s6Td
mmitaUeJMzsFz92T+WgyJyjU3c9+QvmogZXhYRk1mTLkah4ZA3SwvopNJuf4hYS0
f1xzPRCWg/1Otgu9BA1+w9/Ru2OYOS+YIlg0VHgGY9pgVXuLwY0CVF7LT45z7rss
iuCR1OigF1/s/3eMRnMizBuWVXccHTLshs3aW/x6u7Dx5PnqNA/25LzNpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCPv1XKIGV4HaK4/8gxncX7DqJ1/MB8GA1UdIwQY
MBaAFLdpW5jgijeL8NyUTS8aYKH2lUmBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdDJsYm1PQ0tONHZ3M0pSTkx4cGdvZmFWU1lFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC84MWU5YWEtODVlZC00ODUwLWI0NmIt
Njg4NWFhODdjNGZkLzEvdDJsYm1PQ0tONHZ3M0pSTkx4cGdvZmFWU1lFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC84MWU5YWEtODVlZC00ODUwLWI0NmItNjg4NWFhODdjNGZk
LzEvdDJsYm1PQ0tONHZ3M0pSTkx4cGdvZmFWU1lFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjWf0kSfP
zVCEs+bnBgBJAWWfZ/2rqFir3B34wyFRszqFyKSO39rSLgkjjTuJT40Gm9zdwPgT
KckfJTB8P4SaqJWbUHopeTfHtW1nJWB99PCma810h7L1+vaz1twiddMGh6jDexAY
Vn+DIiMpiY3fLJnz/XSHl5PsCR6cc+c08qJDuUPxIJ0rtiLtoO/cVmeMqoxWZSCz
0JKiBYXJbb2HDZODE/KpJUciNpczgSY5tWDfWIXp0Y4QMjoXy2IjmDO9Ux4n0/Z8
NzkvRk+lgYR/TFWjaVUIFOf6xR/g8NwFSXpaDHGsi8yXLSh1MK/DQlnmDwFXBNJ0
Fl/Ugc1D65otsw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 19:50:21 2026 by rpki-client