
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/7434e1-7413-4f6a-a29c-cdc81db77531/1/tIvY7E4wHJ57CkO-8PPd06RTFVo.mft
File: tIvY7E4wHJ57CkO-8PPd06RTFVo.mft (raw, json)
Hash identifier: 6ZCNJCWSzWNfhhP931+NppgGu53SeEQ8kDQw71LMc7Y=
Subject key identifier: E3:C9:82:77:74:BF:83:5C:2B:F5:82:A8:79:6B:72:85:A4:11:36:34
Authority key identifier: B4:8B:D8:EC:4E:30:1C:9E:7B:0A:43:BE:F0:F3:DD:D3:A4:53:15:5A
Certificate issuer: /CN=b48bd8ec4e301c9e7b0a43bef0f3ddd3a453155a
Certificate serial: 019D25F0F0543E456B5AE010E47ACE339766
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tIvY7E4wHJ57CkO-8PPd06RTFVo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/7434e1-7413-4f6a-a29c-cdc81db77531/1/tIvY7E4wHJ57CkO-8PPd06RTFVo.mft
Manifest number: 0547
Signing time: Wed 25 Mar 2026 17:00:40 +0000
Manifest this update: Wed 25 Mar 2026 17:00:40 +0000
Manifest next update: Thu 26 Mar 2026 17:00:40 +0000
Files and hashes: 1: Rlz6gCewQxlK_6mdm3r5wcJWGug.roa (hash: xyUcAmIySIN4cusVT6aDXyeoMypfFm7A4QhLU41m4OE=)
2: tIvY7E4wHJ57CkO-8PPd06RTFVo.crl (hash: M7Hw6oDrt/k0OdugU8Sq1cpW9PRpkeEKPZVA5oUJKKg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/7434e1-7413-4f6a-a29c-cdc81db77531/1/tIvY7E4wHJ57CkO-8PPd06RTFVo.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/7434e1-7413-4f6a-a29c-cdc81db77531/1/tIvY7E4wHJ57CkO-8PPd06RTFVo.mft
rsync://rpki.ripe.net/repository/DEFAULT/tIvY7E4wHJ57CkO-8PPd06RTFVo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f0:f0:54:3e:45:6b:5a:e0:10:e4:7a:ce:33:97:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b48bd8ec4e301c9e7b0a43bef0f3ddd3a453155a
Validity
Not Before: Mar 25 17:00:40 2026 GMT
Not After : Mar 26 17:00:40 2026 GMT
Subject: CN=e3c9827774bf835c2bf582a8796b7285a4113634
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:97:10:54:ca:e9:62:89:8d:71:39:f5:04:1a:
b5:42:b0:af:f5:28:76:e4:9b:44:71:4f:55:ba:0b:
67:d1:e7:15:d6:ea:af:a4:4d:dd:53:5c:5a:e4:6d:
5b:a9:0c:91:a6:f1:71:13:4c:f3:c8:b8:90:a1:5a:
ad:a7:35:65:aa:a8:d1:b4:40:fa:42:18:41:a6:6a:
61:7e:65:a6:5d:b5:72:90:95:14:d7:14:87:13:c1:
17:df:9e:1c:bb:d9:fd:eb:27:1c:2b:f7:6d:53:af:
37:97:c1:11:2a:9d:58:24:29:0c:14:f4:f2:87:67:
eb:ff:bc:d7:15:52:7f:a6:6e:cf:01:99:89:7f:59:
69:e9:86:db:6a:b0:eb:fa:31:50:a2:7f:fc:c8:3b:
03:ce:b7:35:b6:30:89:18:66:59:78:9f:62:79:ba:
5a:06:c2:74:82:1b:f0:e8:4a:e4:40:bc:29:51:45:
62:3e:0c:29:f9:31:5b:e7:aa:ac:07:b5:f0:77:b6:
f5:c9:34:01:02:be:35:42:77:a2:54:12:9d:d1:25:
59:f1:08:99:d9:2e:b1:ec:21:51:b3:68:db:22:c5:
6a:be:7b:bf:4a:38:36:3b:fa:c2:42:63:2d:37:5b:
e4:23:66:e5:6a:9c:86:a9:56:ff:32:88:bf:ed:06:
b8:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:C9:82:77:74:BF:83:5C:2B:F5:82:A8:79:6B:72:85:A4:11:36:34
X509v3 Authority Key Identifier:
keyid:B4:8B:D8:EC:4E:30:1C:9E:7B:0A:43:BE:F0:F3:DD:D3:A4:53:15:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tIvY7E4wHJ57CkO-8PPd06RTFVo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/7434e1-7413-4f6a-a29c-cdc81db77531/1/tIvY7E4wHJ57CkO-8PPd06RTFVo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/7434e1-7413-4f6a-a29c-cdc81db77531/1/tIvY7E4wHJ57CkO-8PPd06RTFVo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:c0:9b:68:14:8c:2b:b6:42:98:83:68:7a:e5:c4:8b:d6:57:
7c:33:68:44:45:83:de:89:ed:21:2c:43:81:5a:a8:18:b0:c8:
82:f0:b6:90:fa:1a:45:40:36:af:20:73:73:fa:3f:0f:be:76:
78:96:8b:b8:d3:4e:da:57:a6:3d:39:97:43:17:13:0f:9c:42:
17:31:47:fc:db:a2:9c:e3:fd:56:13:35:d9:46:da:b4:f9:40:
fa:e6:43:8f:6a:ff:eb:a9:9a:60:82:08:f8:71:d1:66:f9:43:
17:b4:ea:77:f8:e7:75:0b:c1:15:51:24:a1:00:22:b4:34:4f:
b3:a3:24:c0:2e:62:9d:6c:f6:a6:71:2a:81:e2:76:83:14:03:
d5:da:8a:8a:d7:59:0d:ca:bd:f7:ad:ef:0b:e3:bd:ff:09:c5:
bc:ad:a5:87:26:8c:43:6e:bf:95:e2:57:f4:86:b7:df:d2:2f:
cb:71:9a:89:8e:10:f5:e7:6b:36:19:df:e0:e6:71:c1:1b:de:
6a:33:86:99:e1:0c:d6:ad:46:a8:69:07:d1:5b:58:49:74:55:
83:05:d5:5f:e1:b5:f3:bd:11:13:3b:44:ca:66:5c:80:4a:c9:
d7:ec:f4:a4:f8:28:03:21:62:72:a4:d7:f1:8e:17:4a:36:f9:
7e:cf:1a:49
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0l8PBUPkVrWuAQ5HrOM5dmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0OGJkOGVjNGUzMDFjOWU3YjBhNDNiZWYwZjNkZGQzYTQ1
MzE1NWEwHhcNMjYwMzI1MTcwMDQwWhcNMjYwMzI2MTcwMDQwWjAzMTEwLwYDVQQD
EyhlM2M5ODI3Nzc0YmY4MzVjMmJmNTgyYTg3OTZiNzI4NWE0MTEzNjM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtJcQVMrpYomNcTn1BBq1QrCv9Sh2
5JtEcU9Vugtn0ecV1uqvpE3dU1xa5G1bqQyRpvFxE0zzyLiQoVqtpzVlqqjRtED6
QhhBpmphfmWmXbVykJUU1xSHE8EX354cu9n96yccK/dtU683l8ERKp1YJCkMFPTy
h2fr/7zXFVJ/pm7PAZmJf1lp6YbbarDr+jFQon/8yDsDzrc1tjCJGGZZeJ9iebpa
BsJ0ghvw6ErkQLwpUUViPgwp+TFb56qsB7Xwd7b1yTQBAr41QneiVBKd0SVZ8QiZ
2S6x7CFRs2jbIsVqvnu/Sjg2O/rCQmMtN1vkI2blapyGqVb/Moi/7Qa48wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOPJgnd0v4NcK/WCqHlrcoWkETY0MB8GA1UdIwQY
MBaAFLSL2OxOMByeewpDvvDz3dOkUxVaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdEl2WTdFNHdISjU3Q2tPLThQUGQwNlJURlZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC83NDM0ZTEtNzQxMy00ZjZhLWEyOWMt
Y2RjODFkYjc3NTMxLzEvdEl2WTdFNHdISjU3Q2tPLThQUGQwNlJURlZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNC83NDM0ZTEtNzQxMy00ZjZhLWEyOWMtY2RjODFkYjc3NTMx
LzEvdEl2WTdFNHdISjU3Q2tPLThQUGQwNlJURlZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd8CbaBSM
K7ZCmINoeuXEi9ZXfDNoREWD3ontISxDgVqoGLDIgvC2kPoaRUA2ryBzc/o/D752
eJaLuNNO2lemPTmXQxcTD5xCFzFH/NuinOP9VhM12UbatPlA+uZDj2r/66maYIII
+HHRZvlDF7Tqd/jndQvBFVEkoQAitDRPs6MkwC5inWz2pnEqgeJ2gxQD1dqKitdZ
Dcq9963vC+O9/wnFvK2lhyaMQ26/leJX9Ia339Ivy3GaiY4Q9edrNhnf4OZxwRve
ajOGmeEM1q1GqGkH0VtYSXRVgwXVX+G1870REztEymZcgErJ1+z0pPgoAyFicqTX
8Y4XSjb5fs8aSQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:22:22 2026 by rpki-client