Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/c7bb18-df0b-450b-bd11-870828808f88/1/tSF6hPcV6kjlzDeDsTjOjH5wOYw.mft
File: tSF6hPcV6kjlzDeDsTjOjH5wOYw.mft (raw, json)
Hash identifier: MIdJuIv2OvE1CcTGF1SxWtBCjO5D14mdO9IFKlIWqg0=
Subject key identifier: 5A:79:29:34:40:95:2D:30:B2:B7:B9:95:98:07:5A:59:D0:C9:FA:F0
Authority key identifier: B5:21:7A:84:F7:15:EA:48:E5:CC:37:83:B1:38:CE:8C:7E:70:39:8C
Certificate issuer: /CN=b5217a84f715ea48e5cc3783b138ce8c7e70398c
Certificate serial: 019D394179F469F5731C8CD7F33085602D99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tSF6hPcV6kjlzDeDsTjOjH5wOYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/c7bb18-df0b-450b-bd11-870828808f88/1/tSF6hPcV6kjlzDeDsTjOjH5wOYw.mft
Manifest number: 0E55
Signing time: Sun 29 Mar 2026 11:01:25 +0000
Manifest this update: Sun 29 Mar 2026 11:01:25 +0000
Manifest next update: Mon 30 Mar 2026 11:01:25 +0000
Files and hashes: 1: CCbPnsaraqAntkcEPLIKeh2owBA.roa (hash: lDC1/eX7jtqUQJvtcDT0bJoM6udb8V374OopJffpxoU=)
2: tSF6hPcV6kjlzDeDsTjOjH5wOYw.crl (hash: TlAufEcr+CCDmtR595Nt4DOD3hS0TwB95T6EeJ38fpw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/c7bb18-df0b-450b-bd11-870828808f88/1/tSF6hPcV6kjlzDeDsTjOjH5wOYw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/c7bb18-df0b-450b-bd11-870828808f88/1/tSF6hPcV6kjlzDeDsTjOjH5wOYw.mft
rsync://rpki.ripe.net/repository/DEFAULT/tSF6hPcV6kjlzDeDsTjOjH5wOYw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:79:f4:69:f5:73:1c:8c:d7:f3:30:85:60:2d:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5217a84f715ea48e5cc3783b138ce8c7e70398c
Validity
Not Before: Mar 29 11:01:25 2026 GMT
Not After : Mar 30 11:01:25 2026 GMT
Subject: CN=5a79293440952d30b2b7b99598075a59d0c9faf0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:67:06:73:de:f3:ab:10:7b:9b:ed:6f:4b:be:
2e:49:47:ae:0c:c0:bb:82:b4:66:c8:3b:ad:4c:f2:
d7:22:7d:9e:5a:f0:76:ac:1e:a2:12:1b:de:69:b6:
7d:56:e9:16:43:23:9c:29:7b:38:1f:3f:17:19:a4:
a7:5d:7f:f3:af:93:32:33:36:86:92:05:34:8e:21:
06:e6:1a:52:21:75:2b:3f:71:9f:12:65:36:ca:f8:
de:0d:a3:c5:f1:96:92:a3:3c:c7:d7:17:b7:ab:61:
e3:85:16:a7:e0:fd:cb:e7:76:c3:a5:a0:cc:5b:14:
87:b9:4f:40:86:3a:3a:4e:40:0c:ce:0c:59:74:9c:
e3:b4:02:c7:b5:16:76:4a:a5:59:54:14:35:c3:a3:
c6:95:9b:37:37:44:0f:dd:69:9b:79:dc:5c:c1:67:
a8:ae:bc:d6:2a:f9:74:c1:6c:20:41:89:19:aa:33:
2f:88:18:cb:5f:0b:f8:2d:f8:18:b9:5f:77:e1:60:
b7:af:d0:52:33:65:d8:3c:5a:c1:fa:3d:17:96:eb:
aa:f1:66:83:6f:68:97:9d:3e:36:cf:b9:f5:9b:a1:
b7:78:ea:d9:70:45:81:a8:c3:92:ab:01:24:81:3e:
ec:e6:d8:6c:98:5f:71:17:3c:b2:ed:9e:72:4f:15:
3c:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:79:29:34:40:95:2D:30:B2:B7:B9:95:98:07:5A:59:D0:C9:FA:F0
X509v3 Authority Key Identifier:
keyid:B5:21:7A:84:F7:15:EA:48:E5:CC:37:83:B1:38:CE:8C:7E:70:39:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tSF6hPcV6kjlzDeDsTjOjH5wOYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/c7bb18-df0b-450b-bd11-870828808f88/1/tSF6hPcV6kjlzDeDsTjOjH5wOYw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/c7bb18-df0b-450b-bd11-870828808f88/1/tSF6hPcV6kjlzDeDsTjOjH5wOYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:46:0f:b3:28:b8:16:02:d9:9e:69:da:8d:66:82:b9:99:32:
d6:7d:e6:b6:88:01:9f:e2:da:07:06:6c:d9:49:84:64:18:28:
99:9b:a6:a4:df:2e:4b:21:83:c9:01:4b:21:c1:72:5e:bf:3e:
30:fb:d0:7b:7a:6c:b5:da:ac:af:3f:9d:25:ff:36:c1:0b:1e:
f0:09:fd:5a:f4:22:2a:19:0b:3b:28:b7:6b:c2:2b:31:e6:37:
1c:73:ca:4f:9c:1d:75:98:29:41:73:64:11:4c:74:cd:96:a4:
4d:60:ac:60:5c:d6:d8:b0:8e:8c:f7:3d:87:e3:04:05:b8:f4:
8f:6c:52:eb:db:ba:42:d4:1c:5d:77:03:46:6e:a3:31:7b:98:
26:16:46:cf:29:d6:b3:e9:9d:24:37:0f:ae:83:ea:e3:b3:9d:
69:b6:89:c9:17:5f:a0:73:31:41:56:e8:1b:02:a3:03:e2:3f:
6e:51:7e:2d:56:d3:74:11:01:ef:51:51:9c:e8:6b:43:b5:db:
da:4b:50:44:0d:d3:92:39:7a:d5:40:9f:e9:7a:1d:9f:38:a8:
a4:13:74:64:10:f8:7e:cc:cf:1c:01:a7:1f:f7:e0:7f:10:7f:
db:f9:68:7c:43:b1:bd:27:ca:d6:1a:40:d1:42:93:d0:c1:f3:
db:3b:8a:ac
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05QXn0afVzHIzX8zCFYC2ZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1MjE3YTg0ZjcxNWVhNDhlNWNjMzc4M2IxMzhjZThjN2U3
MDM5OGMwHhcNMjYwMzI5MTEwMTI1WhcNMjYwMzMwMTEwMTI1WjAzMTEwLwYDVQQD
Eyg1YTc5MjkzNDQwOTUyZDMwYjJiN2I5OTU5ODA3NWE1OWQwYzlmYWYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAymcGc97zqxB7m+1vS74uSUeuDMC7
grRmyDutTPLXIn2eWvB2rB6iEhveabZ9VukWQyOcKXs4Hz8XGaSnXX/zr5MyMzaG
kgU0jiEG5hpSIXUrP3GfEmU2yvjeDaPF8ZaSozzH1xe3q2HjhRan4P3L53bDpaDM
WxSHuU9Ahjo6TkAMzgxZdJzjtALHtRZ2SqVZVBQ1w6PGlZs3N0QP3WmbedxcwWeo
rrzWKvl0wWwgQYkZqjMviBjLXwv4LfgYuV934WC3r9BSM2XYPFrB+j0Xluuq8WaD
b2iXnT42z7n1m6G3eOrZcEWBqMOSqwEkgT7s5thsmF9xFzyy7Z5yTxU8PQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFp5KTRAlS0wsre5lZgHWlnQyfrwMB8GA1UdIwQY
MBaAFLUheoT3FepI5cw3g7E4zox+cDmMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFNGNmhQY1Y2a2psekRlRHNUak9qSDV3T1l3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9jN2JiMTgtZGYwYi00NTBiLWJkMTEt
ODcwODI4ODA4Zjg4LzEvdFNGNmhQY1Y2a2psekRlRHNUak9qSDV3T1l3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy9jN2JiMTgtZGYwYi00NTBiLWJkMTEtODcwODI4ODA4Zjg4
LzEvdFNGNmhQY1Y2a2psekRlRHNUak9qSDV3T1l3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp0YPsyi4
FgLZnmnajWaCuZky1n3mtogBn+LaBwZs2UmEZBgomZumpN8uSyGDyQFLIcFyXr8+
MPvQe3pstdqsrz+dJf82wQse8An9WvQiKhkLOyi3a8IrMeY3HHPKT5wddZgpQXNk
EUx0zZakTWCsYFzW2LCOjPc9h+MEBbj0j2xS69u6QtQcXXcDRm6jMXuYJhZGzynW
s+mdJDcProPq47OdabaJyRdfoHMxQVboGwKjA+I/blF+LVbTdBEB71FRnOhrQ7Xb
2ktQRA3Tkjl61UCf6XodnziopBN0ZBD4fszPHAGnH/fgfxB/2/lofEOxvSfK1hpA
0UKT0MHz2zuKrA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:51:08 2026 by rpki-client