Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/35a75a-fa28-455c-a9d7-42538495a253/1/TVgfMWpFEM1xjwXN_aR_YLUkDfs.mft
File: TVgfMWpFEM1xjwXN_aR_YLUkDfs.mft (raw, json)
Hash identifier: pvRe/DDe/kbf4nmBJHLChgC97hN9sIGUwsKtC8lN/XA=
Subject key identifier: 6F:0A:5A:D6:C6:10:71:CF:69:B0:76:14:34:31:30:A0:4B:98:D2:07
Authority key identifier: 4D:58:1F:31:6A:45:10:CD:71:8F:05:CD:FD:A4:7F:60:B5:24:0D:FB
Certificate issuer: /CN=4d581f316a4510cd718f05cdfda47f60b5240dfb
Certificate serial: 019D33ACF49337BAB956F30A4C74EBDC1636
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TVgfMWpFEM1xjwXN_aR_YLUkDfs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/35a75a-fa28-455c-a9d7-42538495a253/1/TVgfMWpFEM1xjwXN_aR_YLUkDfs.mft
Manifest number: 66
Signing time: Sat 28 Mar 2026 09:01:05 +0000
Manifest this update: Sat 28 Mar 2026 09:01:05 +0000
Manifest next update: Sun 29 Mar 2026 09:01:05 +0000
Files and hashes: 1: TVgfMWpFEM1xjwXN_aR_YLUkDfs.crl (hash: 1NIre4P1+lO8gT6eZ1QKzDPS5YjE8MvJ41hYgQvIyhc=)
2: mQhTuTKEwu8zhwzyt5PaOFOOFgo.roa (hash: f0RTXa3+LdAMLeM1vR+W1zWxntSZGi5bAcnStMVW9ME=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/35a75a-fa28-455c-a9d7-42538495a253/1/TVgfMWpFEM1xjwXN_aR_YLUkDfs.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/35a75a-fa28-455c-a9d7-42538495a253/1/TVgfMWpFEM1xjwXN_aR_YLUkDfs.mft
rsync://rpki.ripe.net/repository/DEFAULT/TVgfMWpFEM1xjwXN_aR_YLUkDfs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:33:ac:f4:93:37:ba:b9:56:f3:0a:4c:74:eb:dc:16:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d581f316a4510cd718f05cdfda47f60b5240dfb
Validity
Not Before: Mar 28 09:01:05 2026 GMT
Not After : Mar 29 09:01:05 2026 GMT
Subject: CN=6f0a5ad6c61071cf69b07614343130a04b98d207
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:f8:90:b6:a9:c3:b4:81:ff:d6:e3:0a:38:49:
08:6b:cf:f2:e4:5f:c4:b9:19:68:47:3c:5e:c0:15:
df:13:b1:86:ab:01:df:99:99:4f:e4:96:85:9b:0e:
fd:d8:6f:15:2f:ca:be:28:09:6e:e9:35:66:2a:a4:
57:81:a8:84:d7:c3:84:e6:a6:52:31:49:8e:3c:66:
aa:01:69:d7:72:a0:dd:e3:ba:51:46:5f:1a:c8:f3:
a1:e6:00:32:60:c9:f2:4c:4f:36:da:e8:cf:d8:80:
e4:f0:df:2f:b4:ab:f3:8e:cc:4b:f2:04:49:a5:05:
a4:78:01:3a:be:b7:19:24:1a:3f:ba:7e:ed:cc:f6:
c8:01:02:99:d0:9f:5a:9e:a8:44:ed:3e:fa:89:1f:
de:9b:a2:00:4f:a5:78:56:b8:72:d6:78:2c:e6:10:
3d:6d:d9:2d:eb:3f:7a:d2:db:51:20:f5:6d:cb:0c:
cd:00:b0:e9:0f:98:65:52:d2:e9:0d:5b:02:a3:86:
0c:2e:9e:80:c9:b4:29:24:59:8a:0a:d2:58:7e:72:
71:3a:f3:8d:ee:40:51:76:3f:cf:53:72:8f:96:69:
35:c7:12:45:5a:9f:7d:93:46:1d:1d:3f:60:81:1e:
3a:bf:18:af:62:cc:2a:91:aa:65:2f:41:cc:78:b8:
e6:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:0A:5A:D6:C6:10:71:CF:69:B0:76:14:34:31:30:A0:4B:98:D2:07
X509v3 Authority Key Identifier:
keyid:4D:58:1F:31:6A:45:10:CD:71:8F:05:CD:FD:A4:7F:60:B5:24:0D:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TVgfMWpFEM1xjwXN_aR_YLUkDfs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/35a75a-fa28-455c-a9d7-42538495a253/1/TVgfMWpFEM1xjwXN_aR_YLUkDfs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/35a75a-fa28-455c-a9d7-42538495a253/1/TVgfMWpFEM1xjwXN_aR_YLUkDfs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:02:28:9d:12:b8:2c:75:7a:8c:48:e6:fd:d3:77:85:af:77:
d6:61:95:22:39:7d:ff:83:28:26:67:a6:5a:c4:9c:81:f3:4c:
95:89:28:6d:d0:c1:87:56:5a:f1:ca:67:19:90:56:04:eb:00:
31:4a:27:43:cd:b9:5a:53:64:91:98:ee:8f:75:e3:7e:76:f1:
d1:db:1d:74:60:6c:2d:90:05:8a:93:55:59:c7:97:36:f8:7a:
fb:71:5f:65:5c:c0:15:fb:8f:0d:99:8e:3b:61:9e:93:8d:10:
58:eb:92:e7:2b:48:4b:7f:21:ad:5f:e8:9c:72:7d:6a:e0:9e:
db:7f:80:0c:06:33:bb:0c:8d:2c:63:18:01:7a:88:54:39:02:
78:cd:89:47:0e:72:35:e4:60:55:f9:cd:7e:45:56:51:a3:6f:
64:73:ad:40:3e:58:87:04:cd:e1:36:df:84:0b:4a:4c:83:4a:
11:4b:f8:56:a2:b0:78:3b:b2:3d:4c:da:46:51:eb:8f:ac:4d:
b8:7d:6f:7f:aa:e1:f6:37:a6:0a:86:7c:4d:24:23:21:d9:4a:
63:f7:22:85:30:ee:de:43:0b:8e:51:5f:53:8c:da:67:41:c0:
f9:03:d4:19:87:d4:e5:13:73:70:eb:b6:aa:95:72:04:5c:10:
c4:5e:57:ec
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0zrPSTN7q5VvMKTHTr3BY2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRkNTgxZjMxNmE0NTEwY2Q3MThmMDVjZGZkYTQ3ZjYwYjUy
NDBkZmIwHhcNMjYwMzI4MDkwMTA1WhcNMjYwMzI5MDkwMTA1WjAzMTEwLwYDVQQD
Eyg2ZjBhNWFkNmM2MTA3MWNmNjliMDc2MTQzNDMxMzBhMDRiOThkMjA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApviQtqnDtIH/1uMKOEkIa8/y5F/E
uRloRzxewBXfE7GGqwHfmZlP5JaFmw792G8VL8q+KAlu6TVmKqRXgaiE18OE5qZS
MUmOPGaqAWnXcqDd47pRRl8ayPOh5gAyYMnyTE822ujP2IDk8N8vtKvzjsxL8gRJ
pQWkeAE6vrcZJBo/un7tzPbIAQKZ0J9anqhE7T76iR/em6IAT6V4Vrhy1ngs5hA9
bdkt6z960ttRIPVtywzNALDpD5hlUtLpDVsCo4YMLp6AybQpJFmKCtJYfnJxOvON
7kBRdj/PU3KPlmk1xxJFWp99k0YdHT9ggR46vxivYswqkaplL0HMeLjm4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG8KWtbGEHHPabB2FDQxMKBLmNIHMB8GA1UdIwQY
MBaAFE1YHzFqRRDNcY8Fzf2kf2C1JA37MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVFZnZk1XcEZFTTF4andYTl9hUl9ZTFVrRGZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS8zNWE3NWEtZmEyOC00NTVjLWE5ZDct
NDI1Mzg0OTVhMjUzLzEvVFZnZk1XcEZFTTF4andYTl9hUl9ZTFVrRGZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOS8zNWE3NWEtZmEyOC00NTVjLWE5ZDctNDI1Mzg0OTVhMjUz
LzEvVFZnZk1XcEZFTTF4andYTl9hUl9ZTFVrRGZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACAIonRK4
LHV6jEjm/dN3ha931mGVIjl9/4MoJmemWsScgfNMlYkobdDBh1Za8cpnGZBWBOsA
MUonQ825WlNkkZjuj3Xjfnbx0dsddGBsLZAFipNVWceXNvh6+3FfZVzAFfuPDZmO
O2Gek40QWOuS5ytIS38hrV/onHJ9auCe23+ADAYzuwyNLGMYAXqIVDkCeM2JRw5y
NeRgVfnNfkVWUaNvZHOtQD5YhwTN4TbfhAtKTINKEUv4VqKweDuyPUzaRlHrj6xN
uH1vf6rh9jemCoZ8TSQjIdlKY/cihTDu3kMLjlFfU4zaZ0HA+QPUGYfU5RNzcOu2
qpVyBFwQxF5X7A==
-----END CERTIFICATE-----
Generated at Sat Mar 28 11:46:33 2026 by rpki-client