Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/ce876c-2c02-4775-8095-78d4a64d22d9/1/Ti0g8t5NV-G8ZFy2KH_4END1pL8.mft
File: Ti0g8t5NV-G8ZFy2KH_4END1pL8.mft (raw, json)
Hash identifier: QRPE7oScI6ZqDtKiwOvPGNzkWakK1kb8pHux0KfamOc=
Subject key identifier: DE:A4:6E:31:BE:47:8A:7B:91:E8:D2:FE:AD:DD:07:9F:A0:21:78:04
Authority key identifier: 4E:2D:20:F2:DE:4D:57:E1:BC:64:5C:B6:28:7F:F8:10:D0:F5:A4:BF
Certificate issuer: /CN=4e2d20f2de4d57e1bc645cb6287ff810d0f5a4bf
Certificate serial: 019D2997200A3C6223B4E36A9DBCC564CF66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ti0g8t5NV-G8ZFy2KH_4END1pL8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/ce876c-2c02-4775-8095-78d4a64d22d9/1/Ti0g8t5NV-G8ZFy2KH_4END1pL8.mft
Manifest number: 073B
Signing time: Thu 26 Mar 2026 10:01:03 +0000
Manifest this update: Thu 26 Mar 2026 10:01:03 +0000
Manifest next update: Fri 27 Mar 2026 10:01:03 +0000
Files and hashes: 1: 1-dWw94LOwYVb6Z8yvlC4x7hkhMc.roa (hash: e7q0PiGn+nkXQe803oPBPZRnyfk/0arkshZocK67CGw=)
2: Ti0g8t5NV-G8ZFy2KH_4END1pL8.crl (hash: uHMYAJsNNjAAKHJcwv7HLafd5ur77LHDhXLPzafqNnA=)
3: V4jhpHULY3kG-luzllvrbKQbZ9c.roa (hash: EMpkHgy+YsqyHIc2Gv/c4Vt6RakehqzKDgK4RNxTwag=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/ce876c-2c02-4775-8095-78d4a64d22d9/1/Ti0g8t5NV-G8ZFy2KH_4END1pL8.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/ce876c-2c02-4775-8095-78d4a64d22d9/1/Ti0g8t5NV-G8ZFy2KH_4END1pL8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ti0g8t5NV-G8ZFy2KH_4END1pL8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:97:20:0a:3c:62:23:b4:e3:6a:9d:bc:c5:64:cf:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e2d20f2de4d57e1bc645cb6287ff810d0f5a4bf
Validity
Not Before: Mar 26 10:01:03 2026 GMT
Not After : Mar 27 10:01:03 2026 GMT
Subject: CN=dea46e31be478a7b91e8d2feaddd079fa0217804
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:4a:c5:6e:5a:ae:61:56:84:b7:76:99:d0:86:
8e:ba:65:94:e4:68:ef:47:ba:7f:8d:9f:34:b1:d9:
ea:31:de:ee:73:ed:7b:d8:79:c3:ce:59:4c:06:41:
a4:27:0b:9b:48:b2:a6:d7:1b:e7:05:49:a0:12:ad:
8b:05:44:fc:a6:81:2d:42:0e:8b:a1:e2:e9:a5:ab:
a5:13:e6:d3:4b:00:c9:47:ae:be:a3:62:6f:d1:a1:
99:05:88:cc:13:2d:48:c3:bb:b1:c7:14:71:86:af:
f7:16:23:bb:37:3a:b7:1b:98:ad:d8:fa:49:aa:d6:
41:3e:13:32:dc:bf:d6:3e:79:3c:1c:d9:7e:d6:3a:
08:32:90:cd:46:ad:07:4e:c7:31:24:c7:c8:65:6d:
74:2f:4f:8e:a6:f4:a3:46:e2:74:4d:f9:cf:5f:2a:
fe:e7:ad:09:67:84:3a:01:75:b5:1b:cf:ef:fc:9c:
42:cc:70:87:97:ac:45:c4:de:55:a7:27:a0:8d:64:
00:92:99:25:7f:20:1a:ff:cc:72:ba:4a:0f:e3:1f:
9a:71:36:ed:d1:97:3d:5f:5a:b4:c9:f3:d7:e1:f4:
cb:ce:17:6b:a7:05:5a:20:85:31:69:62:81:dc:4a:
9f:2d:73:f5:dc:da:7f:ca:5d:8c:2a:69:39:61:d9:
cc:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:A4:6E:31:BE:47:8A:7B:91:E8:D2:FE:AD:DD:07:9F:A0:21:78:04
X509v3 Authority Key Identifier:
keyid:4E:2D:20:F2:DE:4D:57:E1:BC:64:5C:B6:28:7F:F8:10:D0:F5:A4:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ti0g8t5NV-G8ZFy2KH_4END1pL8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/ce876c-2c02-4775-8095-78d4a64d22d9/1/Ti0g8t5NV-G8ZFy2KH_4END1pL8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/ce876c-2c02-4775-8095-78d4a64d22d9/1/Ti0g8t5NV-G8ZFy2KH_4END1pL8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:c5:84:5e:da:34:50:2a:3f:41:3e:86:21:7a:91:fa:7e:25:
9a:ff:1d:51:93:53:f3:51:9b:47:3e:e8:e2:9f:71:90:6d:6f:
3c:48:3d:da:d7:41:9d:36:cb:de:75:ef:77:f0:ce:6c:ab:16:
c0:00:1a:be:7c:4a:a5:8d:9a:c2:5e:12:0d:ae:b4:4a:f7:59:
a0:76:20:c0:3d:47:3a:27:f6:f7:c6:68:bf:be:d4:8d:fb:27:
f7:32:4b:e8:a9:97:27:07:ab:50:2d:e7:c0:e2:88:61:32:aa:
20:9b:75:46:19:75:64:a0:ab:dd:b9:77:17:d8:ec:c5:7e:95:
a0:86:1d:91:aa:7c:4d:b0:3c:c8:b8:3f:21:9e:61:31:69:1b:
3e:93:85:32:b6:82:68:41:7c:3b:2a:a7:f0:a9:08:73:f0:c3:
68:b4:03:92:ff:46:c1:01:8d:9d:76:6b:fc:43:47:f1:83:fc:
2e:4e:59:93:6c:2c:f0:46:d4:0d:1f:67:de:b8:82:11:25:0e:
92:7c:dd:b8:1e:d0:ea:af:9c:fd:2b:88:8b:df:35:90:31:aa:
c5:be:65:64:19:50:b2:73:9f:a2:0c:27:0c:60:f0:5c:a2:30:
ba:9d:0d:90:9d:e8:93:4f:16:09:15:60:11:36:33:08:77:60:
a5:1e:5a:09
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0plyAKPGIjtONqnbzFZM9mMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRlMmQyMGYyZGU0ZDU3ZTFiYzY0NWNiNjI4N2ZmODEwZDBm
NWE0YmYwHhcNMjYwMzI2MTAwMTAzWhcNMjYwMzI3MTAwMTAzWjAzMTEwLwYDVQQD
EyhkZWE0NmUzMWJlNDc4YTdiOTFlOGQyZmVhZGRkMDc5ZmEwMjE3ODA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9UrFblquYVaEt3aZ0IaOumWU5Gjv
R7p/jZ80sdnqMd7uc+172HnDzllMBkGkJwubSLKm1xvnBUmgEq2LBUT8poEtQg6L
oeLppaulE+bTSwDJR66+o2Jv0aGZBYjMEy1Iw7uxxxRxhq/3FiO7Nzq3G5it2PpJ
qtZBPhMy3L/WPnk8HNl+1joIMpDNRq0HTscxJMfIZW10L0+OpvSjRuJ0TfnPXyr+
560JZ4Q6AXW1G8/v/JxCzHCHl6xFxN5VpyegjWQAkpklfyAa/8xyukoP4x+acTbt
0Zc9X1q0yfPX4fTLzhdrpwVaIIUxaWKB3EqfLXP13Np/yl2MKmk5YdnMEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN6kbjG+R4p7kejS/q3dB5+gIXgEMB8GA1UdIwQY
MBaAFE4tIPLeTVfhvGRctih/+BDQ9aS/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVGkwZzh0NU5WLUc4WkZ5MktIXzRFTkQxcEw4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi9jZTg3NmMtMmMwMi00Nzc1LTgwOTUt
NzhkNGE2NGQyMmQ5LzEvVGkwZzh0NU5WLUc4WkZ5MktIXzRFTkQxcEw4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZi9jZTg3NmMtMmMwMi00Nzc1LTgwOTUtNzhkNGE2NGQyMmQ5
LzEvVGkwZzh0NU5WLUc4WkZ5MktIXzRFTkQxcEw4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXsWEXto0
UCo/QT6GIXqR+n4lmv8dUZNT81GbRz7o4p9xkG1vPEg92tdBnTbL3nXvd/DObKsW
wAAavnxKpY2awl4SDa60SvdZoHYgwD1HOif298Zov77Ujfsn9zJL6KmXJwerUC3n
wOKIYTKqIJt1Rhl1ZKCr3bl3F9jsxX6VoIYdkap8TbA8yLg/IZ5hMWkbPpOFMraC
aEF8Oyqn8KkIc/DDaLQDkv9GwQGNnXZr/ENH8YP8Lk5Zk2ws8EbUDR9n3riCESUO
knzduB7Q6q+c/SuIi981kDGqxb5lZBlQsnOfogwnDGDwXKIwup0NkJ3ok08WCRVg
ETYzCHdgpR5aCQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 16:54:14 2026 by rpki-client