Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/8631f5-54a2-486f-b9a5-081a1ae6ebd6/1/tvvGPvVhSn75WhBhiOPXh1XGh7k.mft
File: tvvGPvVhSn75WhBhiOPXh1XGh7k.mft (raw, json)
Hash identifier: +KiIFEfVDMPQ/MG/0Fvx8At3Eu9olfVEHOAGC6Ibo+g=
Subject key identifier: CD:CB:A3:12:F8:6D:7A:B8:62:BA:0A:7E:E7:A7:8A:15:7D:1E:DD:8B
Authority key identifier: B6:FB:C6:3E:F5:61:4A:7E:F9:5A:10:61:88:E3:D7:87:55:C6:87:B9
Certificate issuer: /CN=b6fbc63ef5614a7ef95a106188e3d78755c687b9
Certificate serial: 019D341A4DD5334D031443D2B998B20734C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tvvGPvVhSn75WhBhiOPXh1XGh7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/8631f5-54a2-486f-b9a5-081a1ae6ebd6/1/tvvGPvVhSn75WhBhiOPXh1XGh7k.mft
Manifest number: 1891
Signing time: Sat 28 Mar 2026 11:00:32 +0000
Manifest this update: Sat 28 Mar 2026 11:00:32 +0000
Manifest next update: Sun 29 Mar 2026 11:00:32 +0000
Files and hashes: 1: bxb4jsQXnflWYRNxaHtGts6L3fo.roa (hash: hSfRMw5uEppXFydIGGQoR0g6l6WPyrzH4kiqrfSt7O4=)
2: iMImZ1JXlWfmPfxyuu455VKKHUc.roa (hash: 038Ca8EqNUCh1s0mKXCCjtHKnbOn58ESpskQQmfAtRQ=)
3: tvvGPvVhSn75WhBhiOPXh1XGh7k.crl (hash: SxQQCvqtz2RiTsG/vblCCapWNje6QZQytaYv2KaXfAw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/8631f5-54a2-486f-b9a5-081a1ae6ebd6/1/tvvGPvVhSn75WhBhiOPXh1XGh7k.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/8631f5-54a2-486f-b9a5-081a1ae6ebd6/1/tvvGPvVhSn75WhBhiOPXh1XGh7k.mft
rsync://rpki.ripe.net/repository/DEFAULT/tvvGPvVhSn75WhBhiOPXh1XGh7k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:34:1a:4d:d5:33:4d:03:14:43:d2:b9:98:b2:07:34:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6fbc63ef5614a7ef95a106188e3d78755c687b9
Validity
Not Before: Mar 28 11:00:32 2026 GMT
Not After : Mar 29 11:00:32 2026 GMT
Subject: CN=cdcba312f86d7ab862ba0a7ee7a78a157d1edd8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:c5:30:a4:d8:27:c2:50:63:c4:b4:3f:e7:87:
4c:86:e9:ff:84:d0:97:a0:f7:2b:55:0d:f2:02:ff:
3d:b8:f6:93:d7:d9:12:b4:82:e1:d5:a4:61:c0:5f:
d4:4f:06:f9:24:e4:96:b3:f7:44:69:c2:a2:55:d9:
e4:5c:a6:5c:61:5e:53:2c:0a:e5:ee:81:58:c2:1a:
9a:b3:7c:3b:fa:58:dc:a6:86:28:81:4e:65:d2:d2:
84:a6:6a:4c:9d:95:f5:28:a5:3b:d9:99:1b:53:43:
77:a9:b2:6d:e8:db:57:5f:a6:75:1c:4b:5a:bf:55:
87:6f:71:b1:17:e9:11:5a:54:50:dd:15:ce:d3:82:
4f:6c:a1:f7:d4:25:94:28:86:f6:6f:c9:0a:97:5f:
42:ba:b5:0a:f8:84:78:25:04:bb:c1:d0:8f:60:68:
26:b1:73:a8:20:2c:b6:62:37:df:e6:46:02:8b:0a:
f3:0a:bc:19:70:42:bd:90:33:c9:7d:ab:2c:82:66:
27:79:0d:86:38:f7:e2:b4:56:34:10:cb:52:cc:74:
2e:14:df:33:a1:4f:ee:d5:8d:a4:c5:e5:d4:8c:eb:
90:0e:f2:68:da:d1:48:d0:04:d1:3e:13:ed:75:9f:
69:e4:28:58:f9:5a:7a:0a:33:5a:c2:84:23:44:ca:
94:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:CB:A3:12:F8:6D:7A:B8:62:BA:0A:7E:E7:A7:8A:15:7D:1E:DD:8B
X509v3 Authority Key Identifier:
keyid:B6:FB:C6:3E:F5:61:4A:7E:F9:5A:10:61:88:E3:D7:87:55:C6:87:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tvvGPvVhSn75WhBhiOPXh1XGh7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/8631f5-54a2-486f-b9a5-081a1ae6ebd6/1/tvvGPvVhSn75WhBhiOPXh1XGh7k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/8631f5-54a2-486f-b9a5-081a1ae6ebd6/1/tvvGPvVhSn75WhBhiOPXh1XGh7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:8d:58:c3:3b:5b:cb:d1:ed:9c:3d:0b:64:ac:a0:9c:1f:a4:
20:12:8b:a2:a0:e6:a0:57:ee:e0:8a:81:a4:68:92:f5:c6:a6:
8d:ad:f6:66:a4:a3:67:00:47:97:b8:d7:12:9b:71:69:d9:0a:
0c:dd:db:71:3f:69:fe:f8:a9:6f:42:87:f8:6a:36:b6:3e:71:
09:cf:8b:6e:a6:76:70:23:38:9e:c8:74:7c:25:8d:ba:45:ad:
14:7d:af:92:62:aa:0f:3b:a7:ae:ec:7e:de:63:18:4c:6f:31:
77:69:22:2f:6d:cc:cc:b1:00:32:a3:2f:f7:3c:71:11:f7:17:
f5:2b:0b:14:d9:d3:ec:ac:b5:a7:c8:3e:4f:80:cb:85:e8:c6:
76:16:6f:72:13:23:d9:98:6d:3c:cc:0c:87:23:9f:27:b7:43:
29:f9:08:cd:2c:2d:13:6b:b6:c9:25:b9:a5:45:a9:9a:12:37:
dd:51:e6:91:7e:24:57:b7:a8:90:7a:f2:17:ed:b1:60:8a:df:
62:1c:c4:d4:c1:14:e3:ed:4a:6a:a0:3f:b6:21:33:da:53:57:
95:f7:8e:d4:b3:a6:2d:a7:a3:a1:bf:4b:53:71:f5:6e:fc:74:
72:63:f1:7f:b1:cd:f5:c3:c1:f9:b2:3f:13:60:3e:35:c3:a8:
c2:c5:19:49
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ00Gk3VM00DFEPSuZiyBzTDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI2ZmJjNjNlZjU2MTRhN2VmOTVhMTA2MTg4ZTNkNzg3NTVj
Njg3YjkwHhcNMjYwMzI4MTEwMDMyWhcNMjYwMzI5MTEwMDMyWjAzMTEwLwYDVQQD
EyhjZGNiYTMxMmY4NmQ3YWI4NjJiYTBhN2VlN2E3OGExNTdkMWVkZDhiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1MUwpNgnwlBjxLQ/54dMhun/hNCX
oPcrVQ3yAv89uPaT19kStILh1aRhwF/UTwb5JOSWs/dEacKiVdnkXKZcYV5TLArl
7oFYwhqas3w7+ljcpoYogU5l0tKEpmpMnZX1KKU72ZkbU0N3qbJt6NtXX6Z1HEta
v1WHb3GxF+kRWlRQ3RXO04JPbKH31CWUKIb2b8kKl19CurUK+IR4JQS7wdCPYGgm
sXOoICy2Yjff5kYCiwrzCrwZcEK9kDPJfassgmYneQ2GOPfitFY0EMtSzHQuFN8z
oU/u1Y2kxeXUjOuQDvJo2tFI0ATRPhPtdZ9p5ChY+Vp6CjNawoQjRMqUFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM3LoxL4bXq4YroKfuenihV9Ht2LMB8GA1UdIwQY
MBaAFLb7xj71YUp++VoQYYjj14dVxoe5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdHZ2R1B2VmhTbjc1V2hCaGlPUFhoMVhHaDdrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS84NjMxZjUtNTRhMi00ODZmLWI5YTUt
MDgxYTFhZTZlYmQ2LzEvdHZ2R1B2VmhTbjc1V2hCaGlPUFhoMVhHaDdrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOS84NjMxZjUtNTRhMi00ODZmLWI5YTUtMDgxYTFhZTZlYmQ2
LzEvdHZ2R1B2VmhTbjc1V2hCaGlPUFhoMVhHaDdrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbY1Ywztb
y9HtnD0LZKygnB+kIBKLoqDmoFfu4IqBpGiS9camja32ZqSjZwBHl7jXEptxadkK
DN3bcT9p/vipb0KH+Go2tj5xCc+LbqZ2cCM4nsh0fCWNukWtFH2vkmKqDzunrux+
3mMYTG8xd2kiL23MzLEAMqMv9zxxEfcX9SsLFNnT7Ky1p8g+T4DLhejGdhZvchMj
2ZhtPMwMhyOfJ7dDKfkIzSwtE2u2ySW5pUWpmhI33VHmkX4kV7eokHryF+2xYIrf
YhzE1MEU4+1KaqA/tiEz2lNXlfeO1LOmLaejob9LU3H1bvx0cmPxf7HN9cPB+bI/
E2A+NcOowsUZSQ==
-----END CERTIFICATE-----
Generated at Sat Mar 28 15:56:00 2026 by rpki-client