Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/5268dd-56ee-4b9a-8050-232fbdaf5c1a/1/txDNRHGj-M3NhE0_NmFIlAlStOc.mft
File: txDNRHGj-M3NhE0_NmFIlAlStOc.mft (raw, json)
Hash identifier: LguwWGhQWVfSweC1k4ZUgOkEDryonSampkWZSW2qMso=
Subject key identifier: A2:2E:56:F5:E2:66:2F:3A:3B:BF:98:AE:F4:F4:D3:CC:96:AA:01:71
Authority key identifier: B7:10:CD:44:71:A3:F8:CD:CD:84:4D:3F:36:61:48:94:09:52:B4:E7
Certificate issuer: /CN=b710cd4471a3f8cdcd844d3f366148940952b4e7
Certificate serial: 019D3752A8E87597688BD15EE6C8FF62A25A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/txDNRHGj-M3NhE0_NmFIlAlStOc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/5268dd-56ee-4b9a-8050-232fbdaf5c1a/1/txDNRHGj-M3NhE0_NmFIlAlStOc.mft
Manifest number: 188D
Signing time: Sun 29 Mar 2026 02:00:57 +0000
Manifest this update: Sun 29 Mar 2026 02:00:57 +0000
Manifest next update: Mon 30 Mar 2026 02:00:57 +0000
Files and hashes: 1: Hh4oawFMPhlZWHiv9oVznjVHldw.roa (hash: ZkANeMjzmI2+4mD6XiyteCRytMwKnaF4f4SfTl1h+1g=)
2: txDNRHGj-M3NhE0_NmFIlAlStOc.crl (hash: JZ0HOpLgfbT/ls84KYJq/32Or8GZ1flrNNFQ+rROk7Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/5268dd-56ee-4b9a-8050-232fbdaf5c1a/1/txDNRHGj-M3NhE0_NmFIlAlStOc.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/5268dd-56ee-4b9a-8050-232fbdaf5c1a/1/txDNRHGj-M3NhE0_NmFIlAlStOc.mft
rsync://rpki.ripe.net/repository/DEFAULT/txDNRHGj-M3NhE0_NmFIlAlStOc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:a8:e8:75:97:68:8b:d1:5e:e6:c8:ff:62:a2:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b710cd4471a3f8cdcd844d3f366148940952b4e7
Validity
Not Before: Mar 29 02:00:57 2026 GMT
Not After : Mar 30 02:00:57 2026 GMT
Subject: CN=a22e56f5e2662f3a3bbf98aef4f4d3cc96aa0171
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:61:43:8a:3a:12:12:7d:a0:24:05:80:02:ac:
ee:73:56:a1:f8:80:f7:be:c7:65:26:29:50:47:10:
7d:6f:38:23:8f:52:0b:81:ea:c3:cf:01:b1:22:22:
a6:0e:4f:02:dd:9d:da:fa:82:00:0f:16:be:59:4a:
d0:17:f0:3a:2f:20:d6:80:fe:e4:fe:d5:bb:82:43:
04:ac:68:3f:3e:ff:a9:18:31:ce:2c:8c:d7:0a:27:
18:10:f8:30:a7:75:9c:85:31:85:0b:5a:50:87:d6:
c8:39:3f:25:82:2e:d8:81:ca:e8:6d:56:b4:61:cc:
3e:ca:21:bc:f9:23:10:ab:c7:8a:ad:4f:d9:e5:51:
a0:5b:cb:6c:a7:eb:4e:d7:4c:9b:57:8b:2f:e9:bc:
d7:4c:42:73:d8:c0:5a:c4:62:0f:4c:ee:72:ec:7a:
02:89:67:32:20:cd:15:ed:46:a2:4f:ad:78:1d:32:
d3:4e:ff:1b:bb:86:7a:58:86:c0:e0:76:38:62:24:
93:b2:0a:22:eb:2a:04:08:e7:8b:01:4d:45:c5:61:
b4:a0:73:ac:80:86:f3:c1:94:69:96:c0:52:e8:26:
ec:8c:db:13:37:81:80:44:88:39:8a:65:a0:34:29:
9a:33:18:db:bf:de:0d:42:fc:2a:d0:fb:e6:fd:de:
8a:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:2E:56:F5:E2:66:2F:3A:3B:BF:98:AE:F4:F4:D3:CC:96:AA:01:71
X509v3 Authority Key Identifier:
keyid:B7:10:CD:44:71:A3:F8:CD:CD:84:4D:3F:36:61:48:94:09:52:B4:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/txDNRHGj-M3NhE0_NmFIlAlStOc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/5268dd-56ee-4b9a-8050-232fbdaf5c1a/1/txDNRHGj-M3NhE0_NmFIlAlStOc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/5268dd-56ee-4b9a-8050-232fbdaf5c1a/1/txDNRHGj-M3NhE0_NmFIlAlStOc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:11:ab:25:a3:42:8d:84:81:ef:e5:bb:4f:57:67:e9:9f:59:
bf:99:73:fc:a3:47:f5:5e:a0:b0:f8:37:9c:fe:a9:dd:0a:66:
e6:57:5a:c5:3a:cb:60:e1:fd:ae:6f:53:5b:af:61:00:97:2c:
d0:79:71:40:71:3b:54:00:8f:ca:f9:ae:81:2a:4d:57:51:09:
9d:b8:14:a5:11:88:77:6e:65:76:7e:78:7a:90:1e:f0:3b:ef:
86:20:43:40:4b:c1:14:b6:68:8c:9d:99:b4:2a:b3:83:b8:b2:
69:5f:fd:a0:b7:00:31:51:d1:82:1b:5d:47:a6:a6:61:76:a8:
ec:43:f3:19:3a:74:4d:ea:27:dc:5a:eb:63:a6:53:4b:6c:a2:
a7:45:5d:95:bc:06:3d:1c:f1:ea:23:12:e2:5e:71:71:1c:50:
ac:6e:8a:f6:5f:1d:43:05:c9:28:2a:b5:42:91:f1:4d:17:72:
e1:9f:07:c7:27:f4:b7:ad:d7:d3:b8:d3:34:b9:5c:ee:3d:7e:
6b:a0:5d:b8:46:0d:ad:66:e5:2a:3c:53:43:b5:5c:e8:73:b3:
fb:e2:ac:65:59:40:40:d5:3a:c6:60:09:17:7f:60:13:fa:8b:
12:2e:d2:b5:3d:6d:e1:06:cf:5c:cf:c0:8f:2f:81:12:84:34:
be:dc:ab:7e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03UqjodZdoi9Fe5sj/YqJaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3MTBjZDQ0NzFhM2Y4Y2RjZDg0NGQzZjM2NjE0ODk0MDk1
MmI0ZTcwHhcNMjYwMzI5MDIwMDU3WhcNMjYwMzMwMDIwMDU3WjAzMTEwLwYDVQQD
EyhhMjJlNTZmNWUyNjYyZjNhM2JiZjk4YWVmNGY0ZDNjYzk2YWEwMTcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmmFDijoSEn2gJAWAAqzuc1ah+ID3
vsdlJilQRxB9bzgjj1ILgerDzwGxIiKmDk8C3Z3a+oIADxa+WUrQF/A6LyDWgP7k
/tW7gkMErGg/Pv+pGDHOLIzXCicYEPgwp3WchTGFC1pQh9bIOT8lgi7YgcrobVa0
Ycw+yiG8+SMQq8eKrU/Z5VGgW8tsp+tO10ybV4sv6bzXTEJz2MBaxGIPTO5y7HoC
iWcyIM0V7UaiT614HTLTTv8bu4Z6WIbA4HY4YiSTsgoi6yoECOeLAU1FxWG0oHOs
gIbzwZRplsBS6CbsjNsTN4GARIg5imWgNCmaMxjbv94NQvwq0Pvm/d6KKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKIuVvXiZi86O7+YrvT008yWqgFxMB8GA1UdIwQY
MBaAFLcQzURxo/jNzYRNPzZhSJQJUrTnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdHhETlJIR2otTTNOaEUwX05tRklsQWxTdE9jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy81MjY4ZGQtNTZlZS00YjlhLTgwNTAt
MjMyZmJkYWY1YzFhLzEvdHhETlJIR2otTTNOaEUwX05tRklsQWxTdE9jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy81MjY4ZGQtNTZlZS00YjlhLTgwNTAtMjMyZmJkYWY1YzFh
LzEvdHhETlJIR2otTTNOaEUwX05tRklsQWxTdE9jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADRGrJaNC
jYSB7+W7T1dn6Z9Zv5lz/KNH9V6gsPg3nP6p3Qpm5ldaxTrLYOH9rm9TW69hAJcs
0HlxQHE7VACPyvmugSpNV1EJnbgUpRGId25ldn54epAe8DvvhiBDQEvBFLZojJ2Z
tCqzg7iyaV/9oLcAMVHRghtdR6amYXao7EPzGTp0Teon3FrrY6ZTS2yip0VdlbwG
PRzx6iMS4l5xcRxQrG6K9l8dQwXJKCq1QpHxTRdy4Z8Hxyf0t63X07jTNLlc7j1+
a6BduEYNrWblKjxTQ7Vc6HOz++KsZVlAQNU6xmAJF39gE/qLEi7StT1t4QbPXM/A
jy+BEoQ0vtyrfg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:29:30 2026 by rpki-client