Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/6b66b4-064c-42ee-a5ee-1a65b91bee58/1/TDxmXlHMTLXK8FuClIQ-JzOhPe4.mft
File: TDxmXlHMTLXK8FuClIQ-JzOhPe4.mft (raw, json)
Hash identifier: nwjnXKeyTdODlpju6TgBVqHxwBcctFWWmOn/VprD/r8=
Subject key identifier: E1:BF:C2:88:9C:6F:69:3B:A6:7E:20:32:05:D6:50:6B:F2:0B:8B:77
Authority key identifier: 4C:3C:66:5E:51:CC:4C:B5:CA:F0:5B:82:94:84:3E:27:33:A1:3D:EE
Certificate issuer: /CN=4c3c665e51cc4cb5caf05b8294843e2733a13dee
Certificate serial: 019D27A8E39C0B37D436B4B7142D7BFDF0F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TDxmXlHMTLXK8FuClIQ-JzOhPe4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/6b66b4-064c-42ee-a5ee-1a65b91bee58/1/TDxmXlHMTLXK8FuClIQ-JzOhPe4.mft
Manifest number: 02CF
Signing time: Thu 26 Mar 2026 01:01:12 +0000
Manifest this update: Thu 26 Mar 2026 01:01:12 +0000
Manifest next update: Fri 27 Mar 2026 01:01:12 +0000
Files and hashes: 1: TDxmXlHMTLXK8FuClIQ-JzOhPe4.crl (hash: 8fceqpb49YeFmwCm/R1inVa//3MyA1ZWfitjCaV5/cM=)
2: an0UggxMVOLMbfkQRZg-oFGpksM.roa (hash: RrOytt0pmrmZwpnV5VgzGRGQLeTwpMRDbcMRpSijJI4=)
3: frya0jA5P_fi8uygo2aIO2RW1ZQ.roa (hash: V1yhc9udgYV2uaOOmzTxwzsxFa2raTN+Q6jBXM4XvRY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/6b66b4-064c-42ee-a5ee-1a65b91bee58/1/TDxmXlHMTLXK8FuClIQ-JzOhPe4.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/6b66b4-064c-42ee-a5ee-1a65b91bee58/1/TDxmXlHMTLXK8FuClIQ-JzOhPe4.mft
rsync://rpki.ripe.net/repository/DEFAULT/TDxmXlHMTLXK8FuClIQ-JzOhPe4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:e3:9c:0b:37:d4:36:b4:b7:14:2d:7b:fd:f0:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c3c665e51cc4cb5caf05b8294843e2733a13dee
Validity
Not Before: Mar 26 01:01:12 2026 GMT
Not After : Mar 27 01:01:12 2026 GMT
Subject: CN=e1bfc2889c6f693ba67e203205d6506bf20b8b77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:c1:3c:e2:84:4c:53:97:a9:02:d1:6b:f3:df:
51:70:a4:30:d6:f5:41:17:c9:85:7d:89:70:2d:3f:
96:94:ad:23:1e:12:30:7b:af:44:00:5e:ae:c3:db:
7f:68:f7:3c:3d:87:ce:7c:7b:c9:a8:d4:b4:19:54:
1d:43:82:42:9b:cc:05:90:0c:68:50:df:dc:ab:7a:
40:4c:d4:e6:72:7a:e2:c1:bd:9e:2e:fd:b6:b7:a6:
05:19:db:8e:d8:5f:18:f3:f6:d0:eb:a7:ea:18:2e:
4c:6b:ba:e7:e6:ac:38:75:d7:d4:9e:39:63:b9:36:
8b:12:43:dc:26:b0:72:c2:88:f4:87:46:0b:fc:56:
b5:fb:25:fe:43:fc:92:17:53:07:b0:64:1a:70:66:
d4:7b:9d:f8:78:03:c7:87:b0:64:65:f9:46:52:76:
7f:7b:50:ab:92:e1:17:f0:19:40:f4:04:c2:5c:03:
f9:62:35:dc:63:17:45:c3:03:9f:21:49:ed:16:60:
1f:90:de:d0:73:b2:76:ca:42:5f:ab:e7:b4:11:6c:
dc:30:4c:e4:44:1e:46:58:49:10:7d:17:5b:a3:82:
82:88:e0:70:77:b1:76:a8:86:6a:fb:39:d0:c6:25:
90:14:da:e0:de:a3:8c:d7:17:19:31:ae:ca:c8:53:
9b:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:BF:C2:88:9C:6F:69:3B:A6:7E:20:32:05:D6:50:6B:F2:0B:8B:77
X509v3 Authority Key Identifier:
keyid:4C:3C:66:5E:51:CC:4C:B5:CA:F0:5B:82:94:84:3E:27:33:A1:3D:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TDxmXlHMTLXK8FuClIQ-JzOhPe4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/6b66b4-064c-42ee-a5ee-1a65b91bee58/1/TDxmXlHMTLXK8FuClIQ-JzOhPe4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/6b66b4-064c-42ee-a5ee-1a65b91bee58/1/TDxmXlHMTLXK8FuClIQ-JzOhPe4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:57:29:12:cc:1a:88:42:b0:69:b5:34:c7:89:2a:fb:39:de:
6c:40:99:88:92:50:f0:41:e8:03:a3:10:60:aa:ac:b9:10:d3:
68:ab:85:63:3e:f6:40:13:53:a3:5b:b3:7b:0e:1a:4c:03:f9:
34:38:29:48:c6:ea:27:9e:88:89:1f:54:b1:80:04:d8:df:f1:
a8:cc:6f:27:79:60:8b:b0:37:e5:2b:ea:b4:5e:c8:29:1a:66:
db:61:08:0d:38:ab:00:60:f3:2a:7a:32:29:36:c1:ad:ef:da:
63:3a:0e:ed:f9:22:2f:8a:f2:8c:81:f8:df:90:ee:d2:2c:a3:
5a:01:8d:85:df:fd:d4:29:ca:9f:33:f0:f8:d7:6f:ca:a6:0e:
e2:53:fe:ed:94:a7:23:1d:26:bd:49:02:c8:59:d4:83:e4:52:
ac:15:a9:5b:4c:32:ee:f2:de:80:a0:04:b9:62:61:49:f2:2a:
93:83:2a:ea:33:59:ef:ee:41:23:e0:88:00:0d:6a:ae:1f:03:
38:37:c7:9f:f1:49:f9:3b:d5:f8:9a:ce:e5:19:74:09:47:e3:
27:c1:61:68:95:78:8d:9b:bc:0e:84:93:a1:8e:55:0e:2c:d1:
14:ee:ba:5f:dd:7a:25:5f:f9:5a:7c:01:25:ea:ae:83:4f:55:
a7:3e:c2:77
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nqOOcCzfUNrS3FC17/fD1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjM2M2NjVlNTFjYzRjYjVjYWYwNWI4Mjk0ODQzZTI3MzNh
MTNkZWUwHhcNMjYwMzI2MDEwMTEyWhcNMjYwMzI3MDEwMTEyWjAzMTEwLwYDVQQD
EyhlMWJmYzI4ODljNmY2OTNiYTY3ZTIwMzIwNWQ2NTA2YmYyMGI4Yjc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtcE84oRMU5epAtFr899RcKQw1vVB
F8mFfYlwLT+WlK0jHhIwe69EAF6uw9t/aPc8PYfOfHvJqNS0GVQdQ4JCm8wFkAxo
UN/cq3pATNTmcnriwb2eLv22t6YFGduO2F8Y8/bQ66fqGC5Ma7rn5qw4ddfUnjlj
uTaLEkPcJrBywoj0h0YL/Fa1+yX+Q/ySF1MHsGQacGbUe534eAPHh7BkZflGUnZ/
e1CrkuEX8BlA9ATCXAP5YjXcYxdFwwOfIUntFmAfkN7Qc7J2ykJfq+e0EWzcMEzk
RB5GWEkQfRdbo4KCiOBwd7F2qIZq+znQxiWQFNrg3qOM1xcZMa7KyFObwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOG/woicb2k7pn4gMgXWUGvyC4t3MB8GA1UdIwQY
MBaAFEw8Zl5RzEy1yvBbgpSEPiczoT3uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVER4bVhsSE1UTFhLOEZ1Q2xJUS1Kek9oUGU0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS82YjY2YjQtMDY0Yy00MmVlLWE1ZWUt
MWE2NWI5MWJlZTU4LzEvVER4bVhsSE1UTFhLOEZ1Q2xJUS1Kek9oUGU0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS82YjY2YjQtMDY0Yy00MmVlLWE1ZWUtMWE2NWI5MWJlZTU4
LzEvVER4bVhsSE1UTFhLOEZ1Q2xJUS1Kek9oUGU0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZFcpEswa
iEKwabU0x4kq+znebECZiJJQ8EHoA6MQYKqsuRDTaKuFYz72QBNTo1uzew4aTAP5
NDgpSMbqJ56IiR9UsYAE2N/xqMxvJ3lgi7A35SvqtF7IKRpm22EIDTirAGDzKnoy
KTbBre/aYzoO7fkiL4ryjIH435Du0iyjWgGNhd/91CnKnzPw+NdvyqYO4lP+7ZSn
Ix0mvUkCyFnUg+RSrBWpW0wy7vLegKAEuWJhSfIqk4Mq6jNZ7+5BI+CIAA1qrh8D
ODfHn/FJ+TvV+JrO5Rl0CUfjJ8FhaJV4jZu8DoSToY5VDizRFO66X916JV/5WnwB
Jequg09Vpz7Cdw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 11:18:40 2026 by rpki-client