Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/1d2788-da40-431a-97d0-fbd46d9ca372/1/Tb4xtr7cUfKqLsCmRT8uQ16Aj7U.mft
File: Tb4xtr7cUfKqLsCmRT8uQ16Aj7U.mft (raw, json)
Hash identifier: SFas2BsRf6BfOT/Ie8Mw9mDAgm6oPtgJeSo2p8vzt28=
Subject key identifier: DE:BB:F2:0E:C9:3B:DD:12:61:34:E5:3B:36:35:CF:3F:A1:32:7E:14
Authority key identifier: 4D:BE:31:B6:BE:DC:51:F2:AA:2E:C0:A6:45:3F:2E:43:5E:80:8F:B5
Certificate issuer: /CN=4dbe31b6bedc51f2aa2ec0a6453f2e435e808fb5
Certificate serial: 019D25F1006B93E9EC9F4429A8A9521FB733
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tb4xtr7cUfKqLsCmRT8uQ16Aj7U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/1d2788-da40-431a-97d0-fbd46d9ca372/1/Tb4xtr7cUfKqLsCmRT8uQ16Aj7U.mft
Manifest number: 0F6C
Signing time: Wed 25 Mar 2026 17:00:44 +0000
Manifest this update: Wed 25 Mar 2026 17:00:44 +0000
Manifest next update: Thu 26 Mar 2026 17:00:44 +0000
Files and hashes: 1: Mw_jlWOX47w8ZEpuvWB3HZ4VYvQ.roa (hash: sfhBIh2mCq2mgYz96ptYyTEOfSgYQ6EGFDmjhxXGLyI=)
2: Tb4xtr7cUfKqLsCmRT8uQ16Aj7U.crl (hash: H6qG8Kt83Rvmy3BzTd8vaJ2j1qo5NmG1VKmnydwqh+s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/1d2788-da40-431a-97d0-fbd46d9ca372/1/Tb4xtr7cUfKqLsCmRT8uQ16Aj7U.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/1d2788-da40-431a-97d0-fbd46d9ca372/1/Tb4xtr7cUfKqLsCmRT8uQ16Aj7U.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tb4xtr7cUfKqLsCmRT8uQ16Aj7U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 17:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:00:6b:93:e9:ec:9f:44:29:a8:a9:52:1f:b7:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4dbe31b6bedc51f2aa2ec0a6453f2e435e808fb5
Validity
Not Before: Mar 25 17:00:44 2026 GMT
Not After : Mar 26 17:00:44 2026 GMT
Subject: CN=debbf20ec93bdd126134e53b3635cf3fa1327e14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:e8:c0:dc:16:00:73:59:36:06:ac:6f:e3:9d:
ef:4e:b3:1f:88:c3:fc:d9:c0:dc:ac:9b:8c:64:42:
f6:21:28:bb:37:9c:99:3a:45:df:d4:64:16:92:5e:
e4:87:c1:9e:d1:51:a7:c4:ff:92:e1:8e:5b:25:2d:
e1:0e:3d:01:9d:ac:d1:e7:d2:b1:c7:47:af:6c:21:
dc:76:9e:c0:a5:32:7d:11:90:ff:49:27:db:da:62:
0b:01:d5:42:35:9c:46:31:c8:29:eb:e6:77:b6:4a:
a2:8b:cc:83:3b:20:c7:76:68:a3:a4:bb:b3:7d:b5:
81:ad:66:51:9e:1d:b1:13:51:72:50:4c:db:46:3e:
11:d0:16:52:5b:07:27:4b:58:01:9e:a3:49:b5:0f:
68:7a:06:5f:16:05:2f:6f:99:d3:6d:28:d4:bb:d1:
cb:34:a3:67:5e:f4:69:cb:02:d2:83:53:35:55:51:
4e:25:b9:98:dd:f0:65:74:f9:89:61:01:4b:f8:a2:
e6:95:8c:dd:2e:19:ff:e4:dc:57:60:94:2f:bd:8b:
92:06:79:ba:2b:06:c9:18:41:82:48:a2:ad:a5:e4:
60:ed:17:14:c4:73:77:e3:a4:5c:69:e4:0c:38:21:
2b:d0:1a:b8:c2:21:bd:15:c7:10:a5:a0:38:23:dc:
f9:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:BB:F2:0E:C9:3B:DD:12:61:34:E5:3B:36:35:CF:3F:A1:32:7E:14
X509v3 Authority Key Identifier:
keyid:4D:BE:31:B6:BE:DC:51:F2:AA:2E:C0:A6:45:3F:2E:43:5E:80:8F:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tb4xtr7cUfKqLsCmRT8uQ16Aj7U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/1d2788-da40-431a-97d0-fbd46d9ca372/1/Tb4xtr7cUfKqLsCmRT8uQ16Aj7U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/1d2788-da40-431a-97d0-fbd46d9ca372/1/Tb4xtr7cUfKqLsCmRT8uQ16Aj7U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:b5:ff:9c:3e:fe:b4:21:b5:0c:b8:4f:9f:77:70:e0:10:24:
03:5b:00:86:70:52:52:2d:ba:bf:b5:04:b2:30:32:79:aa:4a:
fa:28:da:c3:f5:83:fc:c9:ca:c7:b4:f3:82:e4:60:8d:bc:4b:
55:69:a9:a2:f7:e1:fd:ff:c8:80:51:d0:51:c4:7e:f9:dc:fe:
9f:3c:72:f2:86:fc:68:0c:62:61:5a:8c:5e:3d:e2:9e:73:a7:
7e:42:98:b4:bf:69:56:23:f1:f4:0e:53:ed:1a:81:f0:e1:d4:
00:b2:03:c0:3d:f7:1c:a1:e6:5b:f2:78:74:ea:eb:90:25:55:
52:23:81:68:d9:cd:de:c2:b5:f4:9b:a7:d5:87:21:72:10:23:
53:ea:a9:7a:d0:bc:4b:23:73:05:e8:07:b5:ed:53:dc:28:df:
29:f4:7d:32:89:a1:f4:b3:34:6a:fd:c0:0b:8b:e3:92:df:d4:
6a:85:9b:05:00:52:2f:49:af:08:c2:a7:16:ab:08:82:18:8c:
ed:88:36:3a:41:2a:97:11:f4:ae:dd:15:9f:5f:e9:1c:8f:59:
7e:5a:4a:34:82:05:f1:bb:57:bb:32:b0:42:04:7e:cc:9a:22:
43:45:a9:26:1c:9f:d1:27:e4:46:79:b0:6a:d8:ce:60:0b:cc:
cf:55:95:a2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0l8QBrk+nsn0QpqKlSH7czMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRkYmUzMWI2YmVkYzUxZjJhYTJlYzBhNjQ1M2YyZTQzNWU4
MDhmYjUwHhcNMjYwMzI1MTcwMDQ0WhcNMjYwMzI2MTcwMDQ0WjAzMTEwLwYDVQQD
EyhkZWJiZjIwZWM5M2JkZDEyNjEzNGU1M2IzNjM1Y2YzZmExMzI3ZTE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnejA3BYAc1k2Bqxv453vTrMfiMP8
2cDcrJuMZEL2ISi7N5yZOkXf1GQWkl7kh8Ge0VGnxP+S4Y5bJS3hDj0BnazR59Kx
x0evbCHcdp7ApTJ9EZD/SSfb2mILAdVCNZxGMcgp6+Z3tkqii8yDOyDHdmijpLuz
fbWBrWZRnh2xE1FyUEzbRj4R0BZSWwcnS1gBnqNJtQ9oegZfFgUvb5nTbSjUu9HL
NKNnXvRpywLSg1M1VVFOJbmY3fBldPmJYQFL+KLmlYzdLhn/5NxXYJQvvYuSBnm6
KwbJGEGCSKKtpeRg7RcUxHN346RcaeQMOCEr0Bq4wiG9FccQpaA4I9z52QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN678g7JO90SYTTlOzY1zz+hMn4UMB8GA1UdIwQY
MBaAFE2+Mba+3FHyqi7ApkU/LkNegI+1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVGI0eHRyN2NVZktxTHNDbVJUOHVRMTZBajdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS8xZDI3ODgtZGE0MC00MzFhLTk3ZDAt
ZmJkNDZkOWNhMzcyLzEvVGI0eHRyN2NVZktxTHNDbVJUOHVRMTZBajdVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS8xZDI3ODgtZGE0MC00MzFhLTk3ZDAtZmJkNDZkOWNhMzcy
LzEvVGI0eHRyN2NVZktxTHNDbVJUOHVRMTZBajdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASbX/nD7+
tCG1DLhPn3dw4BAkA1sAhnBSUi26v7UEsjAyeapK+ijaw/WD/MnKx7TzguRgjbxL
VWmpovfh/f/IgFHQUcR++dz+nzxy8ob8aAxiYVqMXj3innOnfkKYtL9pViPx9A5T
7RqB8OHUALIDwD33HKHmW/J4dOrrkCVVUiOBaNnN3sK19Jun1YchchAjU+qpetC8
SyNzBegHte1T3CjfKfR9Momh9LM0av3AC4vjkt/UaoWbBQBSL0mvCMKnFqsIghiM
7Yg2OkEqlxH0rt0Vn1/pHI9ZflpKNIIF8btXuzKwQgR+zJoiQ0WpJhyf0SfkRnmw
atjOYAvMz1WVog==
-----END CERTIFICATE-----
Generated at Thu Mar 26 03:41:15 2026 by rpki-client