Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/ff2a1c-18af-4ba5-a49f-ecad3b714938/1/Tl7P7J9U5Ow5wgBe9OY-cLUfrtQ.mft
File: Tl7P7J9U5Ow5wgBe9OY-cLUfrtQ.mft (raw, json)
Hash identifier: jRYJYGOWZcu3rHwNnWXKHR8aJ3FeoR+IrvGG+t/IpXc=
Subject key identifier: EF:D9:E4:B8:D6:33:73:D7:28:0E:D0:7E:2A:90:BC:34:DB:C9:53:7A
Authority key identifier: 4E:5E:CF:EC:9F:54:E4:EC:39:C2:00:5E:F4:E6:3E:70:B5:1F:AE:D4
Certificate issuer: /CN=4e5ecfec9f54e4ec39c2005ef4e63e70b51faed4
Certificate serial: 019D39408D49E6FFCC73C0F947FB8FECDA8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tl7P7J9U5Ow5wgBe9OY-cLUfrtQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/ff2a1c-18af-4ba5-a49f-ecad3b714938/1/Tl7P7J9U5Ow5wgBe9OY-cLUfrtQ.mft
Manifest number: 1892
Signing time: Sun 29 Mar 2026 11:00:24 +0000
Manifest this update: Sun 29 Mar 2026 11:00:24 +0000
Manifest next update: Mon 30 Mar 2026 11:00:24 +0000
Files and hashes: 1: HJM8ar8o7Ms178YqtLEfQB0QhN4.roa (hash: zeFiOMksTar7c+X+HOnRK9Kyf2IXPD5S69TV2amNtAY=)
2: Tl7P7J9U5Ow5wgBe9OY-cLUfrtQ.crl (hash: L1EMZ9eoZbl/Zd2vd5La0chb5TcLYV6lNfaIt3+/Plk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/ff2a1c-18af-4ba5-a49f-ecad3b714938/1/Tl7P7J9U5Ow5wgBe9OY-cLUfrtQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/ff2a1c-18af-4ba5-a49f-ecad3b714938/1/Tl7P7J9U5Ow5wgBe9OY-cLUfrtQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tl7P7J9U5Ow5wgBe9OY-cLUfrtQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:8d:49:e6:ff:cc:73:c0:f9:47:fb:8f:ec:da:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e5ecfec9f54e4ec39c2005ef4e63e70b51faed4
Validity
Not Before: Mar 29 11:00:24 2026 GMT
Not After : Mar 30 11:00:24 2026 GMT
Subject: CN=efd9e4b8d63373d7280ed07e2a90bc34dbc9537a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:35:59:b2:62:28:ba:33:d4:c1:92:ba:e2:4b:
bc:0d:33:40:ed:98:66:35:3f:79:9a:f3:0b:1c:43:
14:92:9d:eb:e7:c6:b7:55:b7:a4:1b:9d:43:53:2a:
95:2a:84:65:22:1e:91:aa:6f:e5:37:09:5e:8a:d2:
1b:b3:c8:42:d1:9b:ca:74:39:82:13:5d:12:a0:11:
09:83:cf:92:eb:b9:c2:44:d9:cc:9a:d0:a7:01:10:
2b:b1:94:86:e8:2e:16:0a:33:8c:5c:21:be:83:9b:
9c:cf:12:28:3d:92:ee:32:cb:20:ea:47:54:32:77:
84:38:2a:e6:6b:34:dd:e0:a7:d5:0e:40:5b:3e:4c:
60:99:e5:bd:5e:e7:9c:53:c0:1a:0b:82:f7:a6:92:
92:52:e7:18:d6:44:4a:57:e4:23:b0:e2:7f:92:53:
bb:fa:63:9c:10:b1:0e:7a:fa:12:87:b3:8a:ca:90:
04:7a:41:0e:a9:32:87:84:5c:12:07:bf:62:3e:5e:
a4:db:bf:51:a1:56:38:7c:2b:39:0f:b6:bd:8e:7a:
fc:9c:4c:a0:bc:60:2f:58:c7:48:5c:f7:ae:6c:6e:
d4:2c:d3:45:51:8a:13:7b:a8:48:aa:fd:57:fc:e4:
9c:46:a9:ab:88:ae:6d:8b:a8:e3:7b:42:02:7b:cf:
eb:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:D9:E4:B8:D6:33:73:D7:28:0E:D0:7E:2A:90:BC:34:DB:C9:53:7A
X509v3 Authority Key Identifier:
keyid:4E:5E:CF:EC:9F:54:E4:EC:39:C2:00:5E:F4:E6:3E:70:B5:1F:AE:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tl7P7J9U5Ow5wgBe9OY-cLUfrtQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/ff2a1c-18af-4ba5-a49f-ecad3b714938/1/Tl7P7J9U5Ow5wgBe9OY-cLUfrtQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/ff2a1c-18af-4ba5-a49f-ecad3b714938/1/Tl7P7J9U5Ow5wgBe9OY-cLUfrtQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:70:96:18:dd:db:1a:b1:83:71:92:05:da:dd:6e:20:e9:03:
39:b8:86:a0:8c:17:b2:67:19:10:96:e7:81:27:a0:cf:44:54:
53:ec:6d:21:ec:d9:71:37:0e:64:f8:af:4d:0a:27:8b:70:b9:
22:e8:cd:b1:94:8c:9e:29:40:f2:93:cc:fb:42:91:1b:e4:54:
36:d9:d0:28:dc:1f:11:1b:e7:c1:68:67:8f:fa:c2:29:50:5d:
39:b4:34:41:e2:6e:d8:17:24:6f:cb:44:b1:f4:ec:e5:e4:15:
f1:cf:ea:b7:0a:31:79:f4:a5:69:41:1d:49:9f:25:e6:21:01:
ab:ff:df:65:d3:4c:67:8f:44:c2:92:91:1e:de:8b:f3:f4:2d:
76:75:43:fd:62:4b:21:ef:65:d9:5a:0c:ef:c5:26:e2:32:d2:
b9:f4:14:bd:af:4b:5d:58:51:c4:05:39:99:28:d8:9c:0e:b0:
e0:42:1c:60:06:52:51:56:76:3d:09:22:77:d1:a0:3d:2e:f4:
97:7e:75:db:eb:59:66:86:43:93:50:f5:ee:85:04:b4:a6:d9:
1e:6c:3d:93:cf:9e:06:96:34:77:90:e0:a1:47:00:1b:6b:a2:
ba:e0:aa:12:ef:0d:b3:7d:ef:d6:18:eb:84:17:80:db:5c:86:
8a:b4:1a:53
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05QI1J5v/Mc8D5R/uP7NqKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRlNWVjZmVjOWY1NGU0ZWMzOWMyMDA1ZWY0ZTYzZTcwYjUx
ZmFlZDQwHhcNMjYwMzI5MTEwMDI0WhcNMjYwMzMwMTEwMDI0WjAzMTEwLwYDVQQD
EyhlZmQ5ZTRiOGQ2MzM3M2Q3MjgwZWQwN2UyYTkwYmMzNGRiYzk1MzdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0zVZsmIoujPUwZK64ku8DTNA7Zhm
NT95mvMLHEMUkp3r58a3VbekG51DUyqVKoRlIh6Rqm/lNwleitIbs8hC0ZvKdDmC
E10SoBEJg8+S67nCRNnMmtCnARArsZSG6C4WCjOMXCG+g5uczxIoPZLuMssg6kdU
MneEOCrmazTd4KfVDkBbPkxgmeW9XuecU8AaC4L3ppKSUucY1kRKV+QjsOJ/klO7
+mOcELEOevoSh7OKypAEekEOqTKHhFwSB79iPl6k279RoVY4fCs5D7a9jnr8nEyg
vGAvWMdIXPeubG7ULNNFUYoTe6hIqv1X/OScRqmriK5ti6jje0ICe8/rdwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO/Z5LjWM3PXKA7QfiqQvDTbyVN6MB8GA1UdIwQY
MBaAFE5ez+yfVOTsOcIAXvTmPnC1H67UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVGw3UDdKOVU1T3c1d2dCZTlPWS1jTFVmcnRRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC9mZjJhMWMtMThhZi00YmE1LWE0OWYt
ZWNhZDNiNzE0OTM4LzEvVGw3UDdKOVU1T3c1d2dCZTlPWS1jTFVmcnRRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC9mZjJhMWMtMThhZi00YmE1LWE0OWYtZWNhZDNiNzE0OTM4
LzEvVGw3UDdKOVU1T3c1d2dCZTlPWS1jTFVmcnRRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJHCWGN3b
GrGDcZIF2t1uIOkDObiGoIwXsmcZEJbngSegz0RUU+xtIezZcTcOZPivTQoni3C5
IujNsZSMnilA8pPM+0KRG+RUNtnQKNwfERvnwWhnj/rCKVBdObQ0QeJu2Bckb8tE
sfTs5eQV8c/qtwoxefSlaUEdSZ8l5iEBq//fZdNMZ49EwpKRHt6L8/QtdnVD/WJL
Ie9l2VoM78Um4jLSufQUva9LXVhRxAU5mSjYnA6w4EIcYAZSUVZ2PQkid9GgPS70
l3512+tZZoZDk1D17oUEtKbZHmw9k8+eBpY0d5DgoUcAG2uiuuCqEu8Ns33v1hjr
hBeA21yGirQaUw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 13:45:44 2026 by rpki-client