Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/800eb6-868b-4a30-b402-4bce424723d9/1/tBSwm-6rkF_0HmgTJWBUsYIpQpc.mft
File: tBSwm-6rkF_0HmgTJWBUsYIpQpc.mft (raw, json)
Hash identifier: 4bkcRdP6NDClhPI0ijnf0ICsgAZjWuIBx2IyfaVzlmo=
Subject key identifier: 3A:70:BE:51:F0:A7:29:FE:D9:2B:4B:EF:F8:50:B5:44:A0:DF:3E:86
Authority key identifier: B4:14:B0:9B:EE:AB:90:5F:F4:1E:68:13:25:60:54:B1:82:29:42:97
Certificate issuer: /CN=b414b09beeab905ff41e6813256054b182294297
Certificate serial: 019D27DFFF3F4F8239BB613EEED8E92702BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tBSwm-6rkF_0HmgTJWBUsYIpQpc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/800eb6-868b-4a30-b402-4bce424723d9/1/tBSwm-6rkF_0HmgTJWBUsYIpQpc.mft
Manifest number: 0DE8
Signing time: Thu 26 Mar 2026 02:01:24 +0000
Manifest this update: Thu 26 Mar 2026 02:01:24 +0000
Manifest next update: Fri 27 Mar 2026 02:01:24 +0000
Files and hashes: 1: PryhJuPWT5nqb9oyXQgOBbIOUUk.roa (hash: cS2lZTx5DGqFrOEx5ExlTcVafDaIZ/DGkeU2FaJuTW0=)
2: UBFh1GOJKwfHfVNROX0pySkrhLg.roa (hash: 9aS+pDbF/kRsEGF17ZAi+LnIZ4KLD6/VT70cttfQen8=)
3: tBSwm-6rkF_0HmgTJWBUsYIpQpc.crl (hash: oRJLsITpi1ReSjxo3BmUlGfvlYjN7Wwnp6fuOynFB7s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/800eb6-868b-4a30-b402-4bce424723d9/1/tBSwm-6rkF_0HmgTJWBUsYIpQpc.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/800eb6-868b-4a30-b402-4bce424723d9/1/tBSwm-6rkF_0HmgTJWBUsYIpQpc.mft
rsync://rpki.ripe.net/repository/DEFAULT/tBSwm-6rkF_0HmgTJWBUsYIpQpc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 02:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:ff:3f:4f:82:39:bb:61:3e:ee:d8:e9:27:02:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b414b09beeab905ff41e6813256054b182294297
Validity
Not Before: Mar 26 02:01:24 2026 GMT
Not After : Mar 27 02:01:24 2026 GMT
Subject: CN=3a70be51f0a729fed92b4beff850b544a0df3e86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:b1:0e:7d:ca:7a:c0:f3:5d:f0:9b:87:39:ca:
b3:62:a1:12:88:c4:fb:eb:9c:d1:5f:92:1b:a9:08:
62:5c:70:71:ef:fd:1c:db:ae:6e:d9:2a:12:75:3e:
6a:7a:20:aa:f4:97:b3:5c:fe:45:f6:48:a7:3c:a5:
c5:d3:30:96:be:36:10:80:8c:39:b9:06:1e:2c:f1:
81:a8:c8:30:9f:16:37:06:33:0d:a0:d9:ba:a6:a0:
5d:a6:df:9a:80:7a:0b:26:47:84:59:60:f9:a2:f6:
6f:4d:61:a7:69:08:ec:3f:bb:e4:b1:9d:bc:38:43:
30:6c:30:cb:e9:3d:70:be:a4:1e:91:a0:1e:ed:b2:
bf:91:e7:3d:9c:f2:5a:20:eb:b7:a5:c7:c9:6c:57:
33:ce:7b:5b:7e:09:f5:dd:e2:47:37:ea:ad:45:9e:
38:1f:07:03:bd:62:46:7f:88:3b:c5:40:68:c7:48:
d5:f2:7e:34:65:d7:6c:2e:f4:30:f2:dc:95:f9:65:
41:82:3c:d3:20:48:33:ed:e5:8a:0c:ca:ec:97:04:
27:8a:c0:31:9e:20:5e:d1:4d:35:8a:a3:59:b2:73:
10:89:c6:09:14:ed:f1:a8:dc:05:ab:c4:36:d8:c6:
28:12:d9:00:71:3e:ab:a5:07:2e:7e:26:d7:d2:c5:
53:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:70:BE:51:F0:A7:29:FE:D9:2B:4B:EF:F8:50:B5:44:A0:DF:3E:86
X509v3 Authority Key Identifier:
keyid:B4:14:B0:9B:EE:AB:90:5F:F4:1E:68:13:25:60:54:B1:82:29:42:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tBSwm-6rkF_0HmgTJWBUsYIpQpc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/800eb6-868b-4a30-b402-4bce424723d9/1/tBSwm-6rkF_0HmgTJWBUsYIpQpc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/800eb6-868b-4a30-b402-4bce424723d9/1/tBSwm-6rkF_0HmgTJWBUsYIpQpc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:82:e0:cc:e2:71:db:f7:c1:54:54:18:4c:dd:9f:62:93:63:
1d:a3:05:6d:eb:5b:9a:b3:6f:56:87:f8:95:95:6c:6b:ab:c3:
c8:cb:78:31:00:b8:81:37:ad:80:a6:92:f3:f1:72:0f:d6:8b:
f7:c3:ff:fd:53:a4:59:05:5e:fc:67:a8:47:6a:fa:98:26:a2:
a8:7f:96:4d:35:2d:37:e5:e1:25:16:f5:17:75:6a:40:26:59:
e0:be:ef:ba:d4:65:ed:70:aa:25:0e:cd:af:48:e0:96:a2:46:
de:f2:a5:74:2e:2f:16:cf:73:62:d9:df:ee:11:d3:fa:85:2b:
40:c9:30:57:0d:51:04:15:d7:b1:3b:99:e8:72:73:57:22:ed:
f6:d1:fd:b9:c0:d4:31:9e:64:84:70:5d:96:73:b0:8f:17:de:
c1:7a:74:10:be:0a:75:a7:10:1e:25:86:e7:6e:d1:31:7b:63:
f7:24:bf:1f:08:19:d2:0e:f5:00:49:ee:24:dc:52:bf:e4:9e:
b9:cf:18:84:0a:21:b9:cd:9e:5e:4b:49:6c:fe:06:f6:2e:f5:
cb:48:4d:a6:aa:f6:15:82:91:f5:03:e6:24:f8:61:fc:5a:85:
62:2e:4a:69:3a:2f:82:38:77:ff:82:ae:f9:02:07:c8:47:4a:
92:db:31:cb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0n3/8/T4I5u2E+7tjpJwK7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0MTRiMDliZWVhYjkwNWZmNDFlNjgxMzI1NjA1NGIxODIy
OTQyOTcwHhcNMjYwMzI2MDIwMTI0WhcNMjYwMzI3MDIwMTI0WjAzMTEwLwYDVQQD
EygzYTcwYmU1MWYwYTcyOWZlZDkyYjRiZWZmODUwYjU0NGEwZGYzZTg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzLEOfcp6wPNd8JuHOcqzYqESiMT7
65zRX5IbqQhiXHBx7/0c265u2SoSdT5qeiCq9JezXP5F9kinPKXF0zCWvjYQgIw5
uQYeLPGBqMgwnxY3BjMNoNm6pqBdpt+agHoLJkeEWWD5ovZvTWGnaQjsP7vksZ28
OEMwbDDL6T1wvqQekaAe7bK/kec9nPJaIOu3pcfJbFczzntbfgn13eJHN+qtRZ44
HwcDvWJGf4g7xUBox0jV8n40ZddsLvQw8tyV+WVBgjzTIEgz7eWKDMrslwQnisAx
niBe0U01iqNZsnMQicYJFO3xqNwFq8Q22MYoEtkAcT6rpQcufibX0sVTRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDpwvlHwpyn+2StL7/hQtUSg3z6GMB8GA1UdIwQY
MBaAFLQUsJvuq5Bf9B5oEyVgVLGCKUKXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdEJTd20tNnJrRl8wSG1nVEpXQlVzWUlwUXBjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS84MDBlYjYtODY4Yi00YTMwLWI0MDIt
NGJjZTQyNDcyM2Q5LzEvdEJTd20tNnJrRl8wSG1nVEpXQlVzWUlwUXBjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS84MDBlYjYtODY4Yi00YTMwLWI0MDItNGJjZTQyNDcyM2Q5
LzEvdEJTd20tNnJrRl8wSG1nVEpXQlVzWUlwUXBjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe4LgzOJx
2/fBVFQYTN2fYpNjHaMFbetbmrNvVof4lZVsa6vDyMt4MQC4gTetgKaS8/FyD9aL
98P//VOkWQVe/GeoR2r6mCaiqH+WTTUtN+XhJRb1F3VqQCZZ4L7vutRl7XCqJQ7N
r0jglqJG3vKldC4vFs9zYtnf7hHT+oUrQMkwVw1RBBXXsTuZ6HJzVyLt9tH9ucDU
MZ5khHBdlnOwjxfewXp0EL4KdacQHiWG527RMXtj9yS/HwgZ0g71AEnuJNxSv+Se
uc8YhAohuc2eXktJbP4G9i71y0hNpqr2FYKR9QPmJPhh/FqFYi5KaTovgjh3/4Ku
+QIHyEdKktsxyw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 12:56:50 2026 by rpki-client