Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/a35f7f-2194-46d3-91bd-cc0f50bda159/1/TN1pc0k84MOEm4uRm3UCul-gE9c.mft
File: TN1pc0k84MOEm4uRm3UCul-gE9c.mft (raw, json)
Hash identifier: Iq9gNJk1QgyIV3ASZvjwm/WxcHyJnL70fCMHjaKFsjs=
Subject key identifier: 29:93:23:3F:AD:B9:FC:62:89:3C:A0:50:38:35:70:83:F7:92:AE:6B
Authority key identifier: 4C:DD:69:73:49:3C:E0:C3:84:9B:8B:91:9B:75:02:BA:5F:A0:13:D7
Certificate issuer: /CN=4cdd6973493ce0c3849b8b919b7502ba5fa013d7
Certificate serial: 019CC786FA3C303B398200E058B055084DF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TN1pc0k84MOEm4uRm3UCul-gE9c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/a35f7f-2194-46d3-91bd-cc0f50bda159/1/TN1pc0k84MOEm4uRm3UCul-gE9c.mft
Manifest number: 04DD
Signing time: Sat 07 Mar 2026 09:00:37 +0000
Manifest this update: Sat 07 Mar 2026 09:00:37 +0000
Manifest next update: Sun 08 Mar 2026 09:00:37 +0000
Files and hashes: 1: 8xG2LUgGMoQo1E0oFZXCsLklpt8.roa (hash: P+5MDoFv+VPER4lMcHzaG5Ao7rqloC0fCfPVJFO8gkg=)
2: NNU8m-ZbGaDewKa80bazCk_gHuc.roa (hash: jNBremlwULSnHvNbBnehGqtceTysa0l4mhsoPRNxZdE=)
3: TN1pc0k84MOEm4uRm3UCul-gE9c.crl (hash: AwG63dcafJ11geI71ccMhlHpA99BYHATurPgVLIXFes=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/a35f7f-2194-46d3-91bd-cc0f50bda159/1/TN1pc0k84MOEm4uRm3UCul-gE9c.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/a35f7f-2194-46d3-91bd-cc0f50bda159/1/TN1pc0k84MOEm4uRm3UCul-gE9c.mft
rsync://rpki.ripe.net/repository/DEFAULT/TN1pc0k84MOEm4uRm3UCul-gE9c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Mar 2026 04:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:c7:86:fa:3c:30:3b:39:82:00:e0:58:b0:55:08:4d:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cdd6973493ce0c3849b8b919b7502ba5fa013d7
Validity
Not Before: Mar 7 09:00:37 2026 GMT
Not After : Mar 8 09:00:37 2026 GMT
Subject: CN=2993233fadb9fc62893ca05038357083f792ae6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:62:a6:18:06:8f:63:5d:10:52:50:ff:6d:9f:
21:37:ca:51:c3:3a:a8:40:13:a1:b7:ed:fb:2a:76:
e9:6c:36:1d:84:34:1b:65:39:25:69:e7:14:d9:be:
3e:1a:0c:69:08:fa:b0:33:d7:e4:17:8d:ae:18:be:
33:73:50:cc:c2:59:9e:c4:94:7c:8c:92:46:e5:dc:
b8:46:2c:c0:38:a1:3b:ce:11:2f:fc:c9:b3:fd:57:
ed:5a:7b:a0:6c:09:a4:8b:61:1b:a8:ff:6e:09:8a:
db:ba:cd:72:77:98:fd:24:72:79:15:cb:11:71:d8:
19:cc:d1:1a:81:d6:70:0a:af:04:ac:1a:3a:38:bd:
e9:f4:10:8e:7f:14:98:27:d8:ca:8f:54:96:35:91:
44:f8:d5:57:94:7b:a9:41:e6:ea:d5:47:04:47:b2:
5e:b9:13:c9:1d:ae:bb:96:79:48:65:4d:03:a0:39:
fd:86:db:d2:ad:4b:e6:d9:ba:bf:8b:30:7f:47:e7:
2a:4d:50:74:88:36:29:80:5e:07:87:0d:09:f4:1b:
10:14:38:6d:69:18:bb:b6:b3:3a:f2:f6:43:5e:65:
9e:d9:be:05:50:94:a8:33:59:8c:c1:17:04:6f:40:
bb:d2:21:35:7e:f6:c8:05:79:b5:be:a2:9c:bf:a9:
3e:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:93:23:3F:AD:B9:FC:62:89:3C:A0:50:38:35:70:83:F7:92:AE:6B
X509v3 Authority Key Identifier:
keyid:4C:DD:69:73:49:3C:E0:C3:84:9B:8B:91:9B:75:02:BA:5F:A0:13:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TN1pc0k84MOEm4uRm3UCul-gE9c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/a35f7f-2194-46d3-91bd-cc0f50bda159/1/TN1pc0k84MOEm4uRm3UCul-gE9c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/a35f7f-2194-46d3-91bd-cc0f50bda159/1/TN1pc0k84MOEm4uRm3UCul-gE9c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:99:b5:81:41:84:d5:fe:f5:69:2e:4b:5f:25:27:62:2b:18:
52:5b:81:d8:32:fa:e8:aa:1d:c3:f0:d4:20:1f:e3:5d:57:5b:
2c:00:c8:aa:d4:16:7a:af:aa:cd:e3:ae:eb:61:2f:a6:89:10:
ef:e3:e1:d4:10:14:f6:64:a5:f0:2f:ff:0f:c6:56:be:97:9d:
f6:14:ab:75:3c:2e:59:66:b3:6e:69:67:49:e1:4d:c3:b1:a8:
51:ca:28:f7:d3:4d:74:6e:c4:a6:fc:19:1c:e8:4d:e3:28:ea:
bf:77:26:d4:14:cc:b5:40:eb:1d:9c:f5:bd:bd:e2:0f:34:84:
2b:3c:45:e6:ed:07:b8:5d:54:88:42:00:25:c5:8a:a4:9b:9b:
7f:0b:74:ca:e9:8e:25:e2:a1:a5:2a:a7:33:3d:f2:80:88:df:
95:a6:38:3b:32:cb:e2:5e:93:b5:f7:e2:87:cc:32:3c:77:13:
b4:f5:60:9a:5c:00:6a:bb:0b:20:ae:94:26:ca:ae:0d:28:0f:
28:59:1c:84:a1:0d:03:31:21:7b:aa:76:71:96:64:79:6c:fb:
7d:a6:b8:e8:8b:1b:65:69:bf:c3:56:32:5d:87:88:46:c2:fb:
db:7d:2c:5a:98:80:80:a2:83:9e:90:4b:b5:29:da:fc:0b:8d:
be:87:97:75
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZzHhvo8MDs5ggDgWLBVCE33MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjZGQ2OTczNDkzY2UwYzM4NDliOGI5MTliNzUwMmJhNWZh
MDEzZDcwHhcNMjYwMzA3MDkwMDM3WhcNMjYwMzA4MDkwMDM3WjAzMTEwLwYDVQQD
EygyOTkzMjMzZmFkYjlmYzYyODkzY2EwNTAzODM1NzA4M2Y3OTJhZTZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy2KmGAaPY10QUlD/bZ8hN8pRwzqo
QBOht+37KnbpbDYdhDQbZTklaecU2b4+GgxpCPqwM9fkF42uGL4zc1DMwlmexJR8
jJJG5dy4RizAOKE7zhEv/Mmz/VftWnugbAmki2EbqP9uCYrbus1yd5j9JHJ5FcsR
cdgZzNEagdZwCq8ErBo6OL3p9BCOfxSYJ9jKj1SWNZFE+NVXlHupQebq1UcER7Je
uRPJHa67lnlIZU0DoDn9htvSrUvm2bq/izB/R+cqTVB0iDYpgF4Hhw0J9BsQFDht
aRi7trM68vZDXmWe2b4FUJSoM1mMwRcEb0C70iE1fvbIBXm1vqKcv6k+PQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCmTIz+tufxiiTygUDg1cIP3kq5rMB8GA1UdIwQY
MBaAFEzdaXNJPODDhJuLkZt1ArpfoBPXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVE4xcGMwazg0TU9FbTR1Um0zVUN1bC1nRTljLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS9hMzVmN2YtMjE5NC00NmQzLTkxYmQt
Y2MwZjUwYmRhMTU5LzEvVE4xcGMwazg0TU9FbTR1Um0zVUN1bC1nRTljLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMS9hMzVmN2YtMjE5NC00NmQzLTkxYmQtY2MwZjUwYmRhMTU5
LzEvVE4xcGMwazg0TU9FbTR1Um0zVUN1bC1nRTljLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeZm1gUGE
1f71aS5LXyUnYisYUluB2DL66Kodw/DUIB/jXVdbLADIqtQWeq+qzeOu62EvpokQ
7+Ph1BAU9mSl8C//D8ZWvped9hSrdTwuWWazbmlnSeFNw7GoUcoo99NNdG7EpvwZ
HOhN4yjqv3cm1BTMtUDrHZz1vb3iDzSEKzxF5u0HuF1UiEIAJcWKpJubfwt0yumO
JeKhpSqnMz3ygIjflaY4OzLL4l6Ttffih8wyPHcTtPVgmlwAarsLIK6UJsquDSgP
KFkchKENAzEhe6p2cZZkeWz7faa46IsbZWm/w1YyXYeIRsL7230sWpiAgKKDnpBL
tSna/AuNvoeXdQ==
-----END CERTIFICATE-----
Generated at Sat Mar 7 12:44:26 2026 by rpki-client