Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d3df26-3db5-4539-8030-f2ce77e3191e/1/TiopnxgqH9UdSwNimXr3qq4Na-k.mft
File: TiopnxgqH9UdSwNimXr3qq4Na-k.mft (raw, json)
Hash identifier: nHGP3HDw4aQqJZBpucp4EhFwkl9hNlueOu59+typ5uY=
Subject key identifier: 2C:1E:BF:CA:E7:FD:56:B6:E7:0A:59:EE:2F:50:94:50:FD:BB:1E:96
Authority key identifier: 4E:2A:29:9F:18:2A:1F:D5:1D:4B:03:62:99:7A:F7:AA:AE:0D:6B:E9
Certificate issuer: /CN=4e2a299f182a1fd51d4b0362997af7aaae0d6be9
Certificate serial: 019D273AD676E6D545F5916509AEA9BFC71B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TiopnxgqH9UdSwNimXr3qq4Na-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d3df26-3db5-4539-8030-f2ce77e3191e/1/TiopnxgqH9UdSwNimXr3qq4Na-k.mft
Manifest number: 1889
Signing time: Wed 25 Mar 2026 23:01:00 +0000
Manifest this update: Wed 25 Mar 2026 23:01:00 +0000
Manifest next update: Thu 26 Mar 2026 23:01:00 +0000
Files and hashes: 1: 2k317uytVg1LgjGnM4csFnuL6uw.roa (hash: X5Q8tV/hqbcuK15v8loayY7mcbXwTofvZ2nrjL9ZwFs=)
2: RQBMarFkU3OrDTBkZypKiOwxqg8.roa (hash: WhhYg2h0zkcqk2yaFPJERRYww67tY59hAk64ZXv/RAg=)
3: TiopnxgqH9UdSwNimXr3qq4Na-k.crl (hash: oarwBd8yNmXr3rcSI+v+ZIBa8YXW5A++AIgHoyjzM60=)
4: v9i47anpnbrdLEZ-n1nwTrZVjyg.roa (hash: z6aINaroQHvMvD3JovJtp4EHLXzys7G2ZYIjVrJrEgw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/d3df26-3db5-4539-8030-f2ce77e3191e/1/TiopnxgqH9UdSwNimXr3qq4Na-k.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/d3df26-3db5-4539-8030-f2ce77e3191e/1/TiopnxgqH9UdSwNimXr3qq4Na-k.mft
rsync://rpki.ripe.net/repository/DEFAULT/TiopnxgqH9UdSwNimXr3qq4Na-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:d6:76:e6:d5:45:f5:91:65:09:ae:a9:bf:c7:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e2a299f182a1fd51d4b0362997af7aaae0d6be9
Validity
Not Before: Mar 25 23:01:00 2026 GMT
Not After : Mar 26 23:01:00 2026 GMT
Subject: CN=2c1ebfcae7fd56b6e70a59ee2f509450fdbb1e96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:60:6e:5b:85:ff:4d:2b:44:11:c4:b3:b0:83:
ae:1a:1c:ee:3e:23:02:f4:de:37:1b:af:25:4b:7c:
1d:24:d6:d7:31:5a:7a:85:32:58:d6:7e:62:66:34:
85:11:22:32:ba:a4:b7:f0:be:0e:aa:46:11:e8:20:
81:41:0e:2e:41:d8:99:15:fd:d7:17:74:87:33:a5:
a3:68:6a:09:02:ad:9e:27:ab:64:a7:69:58:da:60:
59:41:8d:1d:a3:cf:43:4b:f7:e3:ef:1d:13:ba:7a:
04:60:c5:5a:52:ff:7d:e8:05:87:03:ad:c7:af:8f:
f5:c8:6e:7a:45:17:d4:b2:f8:70:cc:b8:58:eb:a8:
a6:07:1e:b2:7a:c7:c3:8e:af:73:d5:f0:a6:30:18:
86:d2:60:05:40:93:ff:5e:3f:b9:ee:eb:a4:4e:6b:
98:dc:65:0c:2b:a9:da:c4:c7:76:55:e0:76:fe:93:
95:ae:e1:ba:00:58:b7:40:f6:4d:0b:7f:9c:c8:cc:
bd:c1:da:cc:09:7d:4e:67:de:79:1d:79:cc:4f:e4:
15:de:bf:72:88:a6:c9:86:b4:99:cf:65:05:21:fa:
f3:3e:26:e8:d0:7f:34:ca:c8:05:dc:f2:10:cd:42:
12:d2:11:6f:bc:cf:5c:1e:bb:d5:28:d4:a1:1e:84:
2e:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:1E:BF:CA:E7:FD:56:B6:E7:0A:59:EE:2F:50:94:50:FD:BB:1E:96
X509v3 Authority Key Identifier:
keyid:4E:2A:29:9F:18:2A:1F:D5:1D:4B:03:62:99:7A:F7:AA:AE:0D:6B:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TiopnxgqH9UdSwNimXr3qq4Na-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d3df26-3db5-4539-8030-f2ce77e3191e/1/TiopnxgqH9UdSwNimXr3qq4Na-k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d3df26-3db5-4539-8030-f2ce77e3191e/1/TiopnxgqH9UdSwNimXr3qq4Na-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:fa:88:3f:4c:bb:1a:01:2e:f0:b2:ad:e0:6e:6a:7c:19:26:
c7:ba:5f:5f:32:05:3a:15:e5:4e:d2:6e:61:f4:32:6d:56:ba:
14:a2:f8:9b:d3:40:ae:55:77:99:d9:dc:e0:02:90:83:04:22:
04:21:16:5e:84:f6:18:6f:60:7b:fc:5c:16:eb:e0:06:26:d6:
da:27:84:18:eb:f7:c4:62:18:a3:42:02:34:49:ef:74:92:91:
78:25:d0:c2:a2:ed:72:6d:00:c0:6e:7d:aa:a3:d0:7c:60:29:
2b:20:f6:28:81:d1:7a:c0:29:79:e5:f1:5b:cb:8c:1a:0f:d8:
f4:a3:21:47:11:db:c8:6d:f6:48:b4:47:81:ac:12:e2:51:82:
bb:eb:40:36:19:53:af:8e:5b:42:1d:f7:7e:5a:a2:2f:f5:93:
be:a4:be:23:45:d2:8b:a1:28:e0:03:72:51:68:41:29:33:56:
9f:ee:48:df:8d:d6:58:17:05:01:cc:1f:18:1a:ea:63:9d:21:
a9:4a:74:6d:16:00:42:7f:a1:09:94:de:8f:c1:1a:98:91:cc:
70:34:60:70:4e:d3:a5:a2:e1:94:e2:f2:24:74:74:4a:f2:18:
69:38:f9:b6:55:1b:51:a9:dd:63:67:1f:d7:a7:f1:2c:4d:84:
35:ae:20:ee
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nOtZ25tVF9ZFlCa6pv8cbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRlMmEyOTlmMTgyYTFmZDUxZDRiMDM2Mjk5N2FmN2FhYWUw
ZDZiZTkwHhcNMjYwMzI1MjMwMTAwWhcNMjYwMzI2MjMwMTAwWjAzMTEwLwYDVQQD
EygyYzFlYmZjYWU3ZmQ1NmI2ZTcwYTU5ZWUyZjUwOTQ1MGZkYmIxZTk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA02BuW4X/TStEEcSzsIOuGhzuPiMC
9N43G68lS3wdJNbXMVp6hTJY1n5iZjSFESIyuqS38L4OqkYR6CCBQQ4uQdiZFf3X
F3SHM6WjaGoJAq2eJ6tkp2lY2mBZQY0do89DS/fj7x0TunoEYMVaUv996AWHA63H
r4/1yG56RRfUsvhwzLhY66imBx6yesfDjq9z1fCmMBiG0mAFQJP/Xj+57uukTmuY
3GUMK6naxMd2VeB2/pOVruG6AFi3QPZNC3+cyMy9wdrMCX1OZ955HXnMT+QV3r9y
iKbJhrSZz2UFIfrzPibo0H80ysgF3PIQzUIS0hFvvM9cHrvVKNShHoQuRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCwev8rn/Va25wpZ7i9QlFD9ux6WMB8GA1UdIwQY
MBaAFE4qKZ8YKh/VHUsDYpl696quDWvpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVGlvcG54Z3FIOVVkU3dOaW1YcjNxcTROYS1rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9kM2RmMjYtM2RiNS00NTM5LTgwMzAt
ZjJjZTc3ZTMxOTFlLzEvVGlvcG54Z3FIOVVkU3dOaW1YcjNxcTROYS1rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC9kM2RmMjYtM2RiNS00NTM5LTgwMzAtZjJjZTc3ZTMxOTFl
LzEvVGlvcG54Z3FIOVVkU3dOaW1YcjNxcTROYS1rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAevqIP0y7
GgEu8LKt4G5qfBkmx7pfXzIFOhXlTtJuYfQybVa6FKL4m9NArlV3mdnc4AKQgwQi
BCEWXoT2GG9ge/xcFuvgBibW2ieEGOv3xGIYo0ICNEnvdJKReCXQwqLtcm0AwG59
qqPQfGApKyD2KIHResApeeXxW8uMGg/Y9KMhRxHbyG32SLRHgawS4lGCu+tANhlT
r45bQh33flqiL/WTvqS+I0XSi6Eo4ANyUWhBKTNWn+5I343WWBcFAcwfGBrqY50h
qUp0bRYAQn+hCZTej8EamJHMcDRgcE7TpaLhlOLyJHR0SvIYaTj5tlUbUandY2cf
16fxLE2ENa4g7g==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:21:51 2026 by rpki-client