Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/151705-0b0c-48bf-a40e-b7ca1fe6c184/1/tXZXfSAIXEwi_IARyNGpP2MhHA8.mft
File: tXZXfSAIXEwi_IARyNGpP2MhHA8.mft (raw, json)
Hash identifier: 3IfBu845qNmKWDnuDJQ+dMRdYnQ/O4dRFfrX10FvJTI=
Subject key identifier: 66:36:3B:93:6F:42:6E:D0:71:7E:A1:5F:88:E5:6A:35:01:3B:99:47
Authority key identifier: B5:76:57:7D:20:08:5C:4C:22:FC:80:11:C8:D1:A9:3F:63:21:1C:0F
Certificate issuer: /CN=b576577d20085c4c22fc8011c8d1a93f63211c0f
Certificate serial: 019E1DC7462C5290221267D29617E99B9F7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tXZXfSAIXEwi_IARyNGpP2MhHA8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/151705-0b0c-48bf-a40e-b7ca1fe6c184/1/tXZXfSAIXEwi_IARyNGpP2MhHA8.mft
Manifest number: 042C
Signing time: Tue 12 May 2026 20:00:59 +0000
Manifest this update: Tue 12 May 2026 20:00:59 +0000
Manifest next update: Wed 13 May 2026 20:00:59 +0000
Files and hashes: 1: BrEn8Ll6xu0ChcaE3vSi9IymY14.roa (hash: NNxrHTmgvweqwRH2WYDaRBvMbTQvhCqzhXCgDcQp9hU=)
2: dJzuUQdUvbJK7ApuLpV6Tk_tQMQ.roa (hash: xDU3oB6soulsXEg0wveHXPe21+ZwGXL0i23r4rN7i40=)
3: tXZXfSAIXEwi_IARyNGpP2MhHA8.crl (hash: 07SriuT/zgD8yzxTLmXTkaoSodJbmIXKcAQ2/Z4DeM8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/151705-0b0c-48bf-a40e-b7ca1fe6c184/1/tXZXfSAIXEwi_IARyNGpP2MhHA8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/151705-0b0c-48bf-a40e-b7ca1fe6c184/1/tXZXfSAIXEwi_IARyNGpP2MhHA8.mft
rsync://rpki.ripe.net/repository/DEFAULT/tXZXfSAIXEwi_IARyNGpP2MhHA8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:c7:46:2c:52:90:22:12:67:d2:96:17:e9:9b:9f:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b576577d20085c4c22fc8011c8d1a93f63211c0f
Validity
Not Before: May 12 20:00:59 2026 GMT
Not After : May 13 20:00:59 2026 GMT
Subject: CN=66363b936f426ed0717ea15f88e56a35013b9947
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:1b:70:73:77:76:bd:47:9d:c7:71:ae:28:5a:
44:69:53:68:0f:16:16:52:95:67:41:8e:49:d7:12:
08:1d:b4:d6:47:df:2b:e7:7f:57:cf:b6:75:eb:27:
28:b8:ab:bc:c3:d6:28:4c:37:a9:59:5d:7f:4b:d5:
67:ea:71:9b:93:b7:91:83:c5:21:aa:20:0c:6d:ea:
62:9b:b9:05:17:31:8d:fd:11:1f:3a:e9:50:fd:0b:
fb:c5:3d:86:5c:aa:0b:53:f3:97:b0:ca:8f:73:c8:
71:29:fe:11:22:94:6d:0e:2e:af:05:c0:d8:53:c1:
95:99:c9:f4:0c:38:bf:f2:da:ca:f2:f3:05:10:b9:
e9:e4:05:4f:62:50:f9:48:78:df:80:06:ed:e9:8f:
91:b5:ec:00:64:6c:e2:ae:97:70:d7:53:73:10:16:
aa:24:40:94:f1:e2:d9:86:43:be:fb:9d:2a:55:23:
27:93:1d:e3:b9:2f:1d:ea:ee:b0:26:56:77:71:63:
55:57:b2:ab:33:ce:26:93:6d:44:47:31:80:55:d8:
84:76:22:bd:82:f7:19:47:be:5f:1c:bd:83:63:1f:
b8:0a:7e:e5:70:b6:fd:ea:72:d4:f3:ea:69:4e:54:
63:32:7a:e8:13:0a:ac:7a:2b:3d:4e:0b:e3:1b:c1:
fc:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:36:3B:93:6F:42:6E:D0:71:7E:A1:5F:88:E5:6A:35:01:3B:99:47
X509v3 Authority Key Identifier:
keyid:B5:76:57:7D:20:08:5C:4C:22:FC:80:11:C8:D1:A9:3F:63:21:1C:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tXZXfSAIXEwi_IARyNGpP2MhHA8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/151705-0b0c-48bf-a40e-b7ca1fe6c184/1/tXZXfSAIXEwi_IARyNGpP2MhHA8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/151705-0b0c-48bf-a40e-b7ca1fe6c184/1/tXZXfSAIXEwi_IARyNGpP2MhHA8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:6b:79:0b:ad:96:0b:39:d0:15:eb:f2:00:cc:dc:17:50:92:
b8:13:b4:92:a7:10:fa:ca:7a:a4:7f:0c:d9:73:ba:8d:71:9a:
f7:5c:74:29:f4:79:4a:09:fb:77:62:11:a2:39:70:7b:75:1d:
dd:59:b5:ac:52:8b:81:06:bc:ba:9e:db:c1:92:b8:a2:ca:c0:
17:46:5c:04:87:8f:c5:08:fd:49:a8:41:f7:f8:36:b9:48:45:
77:d7:68:05:c8:8f:af:cc:63:ab:9d:71:84:33:e1:a5:9d:33:
df:56:00:32:72:a1:c6:8c:a4:e3:02:e7:ba:74:e0:fb:1c:98:
26:d0:91:9d:1e:ca:78:53:8d:1b:e0:69:c4:d8:04:b3:4c:58:
98:06:f5:23:aa:f3:e5:7a:69:f1:b8:7f:b0:7b:d5:8d:d2:1c:
a5:a7:6e:da:76:c5:45:40:cf:cb:cd:7f:9c:28:2b:94:bc:bb:
c4:a0:97:73:5c:7d:9e:4f:55:f2:53:d4:95:b4:4d:d4:79:b1:
72:e3:73:07:8c:e7:4e:57:39:20:89:d9:43:11:b1:f3:f7:66:
ab:b9:1b:c6:8d:7d:25:e6:41:bd:12:ea:27:05:b5:63:94:34:
10:02:fa:cc:aa:ed:a8:ee:96:c2:3c:15:39:95:67:d4:ee:fa:
30:df:21:ef
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4dx0YsUpAiEmfSlhfpm59/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1NzY1NzdkMjAwODVjNGMyMmZjODAxMWM4ZDFhOTNmNjMy
MTFjMGYwHhcNMjYwNTEyMjAwMDU5WhcNMjYwNTEzMjAwMDU5WjAzMTEwLwYDVQQD
Eyg2NjM2M2I5MzZmNDI2ZWQwNzE3ZWExNWY4OGU1NmEzNTAxM2I5OTQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7Btwc3d2vUedx3GuKFpEaVNoDxYW
UpVnQY5J1xIIHbTWR98r539Xz7Z16ycouKu8w9YoTDepWV1/S9Vn6nGbk7eRg8Uh
qiAMbepim7kFFzGN/REfOulQ/Qv7xT2GXKoLU/OXsMqPc8hxKf4RIpRtDi6vBcDY
U8GVmcn0DDi/8trK8vMFELnp5AVPYlD5SHjfgAbt6Y+RtewAZGzirpdw11NzEBaq
JECU8eLZhkO++50qVSMnkx3juS8d6u6wJlZ3cWNVV7KrM84mk21ERzGAVdiEdiK9
gvcZR75fHL2DYx+4Cn7lcLb96nLU8+ppTlRjMnroEwqseis9TgvjG8H8BwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGY2O5NvQm7QcX6hX4jlajUBO5lHMB8GA1UdIwQY
MBaAFLV2V30gCFxMIvyAEcjRqT9jIRwPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFhaWGZTQUlYRXdpX0lBUnlOR3BQMk1oSEE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy8xNTE3MDUtMGIwYy00OGJmLWE0MGUt
YjdjYTFmZTZjMTg0LzEvdFhaWGZTQUlYRXdpX0lBUnlOR3BQMk1oSEE4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy8xNTE3MDUtMGIwYy00OGJmLWE0MGUtYjdjYTFmZTZjMTg0
LzEvdFhaWGZTQUlYRXdpX0lBUnlOR3BQMk1oSEE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKGt5C62W
CznQFevyAMzcF1CSuBO0kqcQ+sp6pH8M2XO6jXGa91x0KfR5Sgn7d2IRojlwe3Ud
3Vm1rFKLgQa8up7bwZK4osrAF0ZcBIePxQj9SahB9/g2uUhFd9doBciPr8xjq51x
hDPhpZ0z31YAMnKhxoyk4wLnunTg+xyYJtCRnR7KeFONG+BpxNgEs0xYmAb1I6rz
5Xpp8bh/sHvVjdIcpadu2nbFRUDPy81/nCgrlLy7xKCXc1x9nk9V8lPUlbRN1Hmx
cuNzB4znTlc5IInZQxGx8/dmq7kbxo19JeZBvRLqJwW1Y5Q0EAL6zKrtqO6WwjwV
OZVn1O76MN8h7w==
-----END CERTIFICATE-----
Generated at Wed May 13 04:50:06 2026 by rpki-client