Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/7358bd-c72f-4d9b-bb0d-0b4f717aa363/1/TVg7b1bPCSco3lk62VKuoZzjGIY.mft
File: TVg7b1bPCSco3lk62VKuoZzjGIY.mft (raw, json)
Hash identifier: IBYb5BgeG98FmK9pQ4MHDPPbNF4Zn0M6ZABGALibaok=
Subject key identifier: 34:F6:B5:E3:F0:2A:E9:5E:FC:03:00:B6:67:08:BC:B2:6A:B0:F7:DE
Authority key identifier: 4D:58:3B:6F:56:CF:09:27:28:DE:59:3A:D9:52:AE:A1:9C:E3:18:86
Certificate issuer: /CN=4d583b6f56cf092728de593ad952aea19ce31886
Certificate serial: 019D2A053760384FCFE7E7ADA1997C59397D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TVg7b1bPCSco3lk62VKuoZzjGIY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/7358bd-c72f-4d9b-bb0d-0b4f717aa363/1/TVg7b1bPCSco3lk62VKuoZzjGIY.mft
Manifest number: 17DE
Signing time: Thu 26 Mar 2026 12:01:18 +0000
Manifest this update: Thu 26 Mar 2026 12:01:18 +0000
Manifest next update: Fri 27 Mar 2026 12:01:18 +0000
Files and hashes: 1: Js7glNIVHR31KzAH-Y9le6lg8Gc.roa (hash: 7RXrZN2yFu7MFj+qcU08ae6A+XIej9sHLn+Y/9HM9Vs=)
2: NXEJCiLPkkdBY9NTGhgdROtpXxc.roa (hash: UlDG/6GGWJgKzbG+s5oTy9rF68mX0nNsKBfB2sUaPZc=)
3: TVg7b1bPCSco3lk62VKuoZzjGIY.crl (hash: QEqPm27rdf6FKIiMdmlBU/QonzNAfl8JM+MAKRQpJqU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/7358bd-c72f-4d9b-bb0d-0b4f717aa363/1/TVg7b1bPCSco3lk62VKuoZzjGIY.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/7358bd-c72f-4d9b-bb0d-0b4f717aa363/1/TVg7b1bPCSco3lk62VKuoZzjGIY.mft
rsync://rpki.ripe.net/repository/DEFAULT/TVg7b1bPCSco3lk62VKuoZzjGIY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:05:37:60:38:4f:cf:e7:e7:ad:a1:99:7c:59:39:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d583b6f56cf092728de593ad952aea19ce31886
Validity
Not Before: Mar 26 12:01:18 2026 GMT
Not After : Mar 27 12:01:18 2026 GMT
Subject: CN=34f6b5e3f02ae95efc0300b66708bcb26ab0f7de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:b1:7f:be:82:cf:0e:5e:ac:16:48:a3:f3:7d:
79:85:75:6d:d9:1e:0f:cf:7b:55:5e:3d:5e:60:e4:
5a:23:bd:d5:33:e3:47:0e:b0:4b:1c:21:68:63:a8:
aa:f6:0b:c6:a2:f6:23:dd:df:51:7b:5c:fc:54:da:
c7:d0:e3:53:e7:e2:16:fb:6c:bb:ed:e6:56:8a:8a:
3d:c7:72:c4:1c:f6:de:32:f4:b5:cb:5c:4b:e8:e2:
7f:07:4a:a3:b4:84:82:f9:92:59:7c:53:e6:61:cb:
a5:4f:24:0e:23:3d:2f:9d:00:74:96:3e:18:97:ff:
a1:9c:67:14:91:4d:2d:52:13:fb:23:0e:ce:88:dc:
5b:fb:3b:76:6a:4f:2a:26:47:56:aa:66:db:58:92:
39:85:99:17:a5:9d:a2:42:40:32:a4:66:e2:b2:44:
f9:ca:12:c1:b4:76:d5:20:16:f0:75:35:cf:41:06:
2d:69:6b:87:98:3b:07:f4:d5:4c:42:b8:41:2d:c9:
a6:83:d5:3b:91:99:f9:3b:b3:71:2c:bb:31:ae:08:
0b:6e:20:03:0f:ce:bc:43:f9:06:99:7a:ab:b5:b3:
0f:0b:16:02:43:da:ef:3a:77:d8:0d:50:3a:0b:6d:
63:53:ae:ce:87:42:26:d2:75:ba:1f:a4:0d:2d:e7:
06:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:F6:B5:E3:F0:2A:E9:5E:FC:03:00:B6:67:08:BC:B2:6A:B0:F7:DE
X509v3 Authority Key Identifier:
keyid:4D:58:3B:6F:56:CF:09:27:28:DE:59:3A:D9:52:AE:A1:9C:E3:18:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TVg7b1bPCSco3lk62VKuoZzjGIY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/7358bd-c72f-4d9b-bb0d-0b4f717aa363/1/TVg7b1bPCSco3lk62VKuoZzjGIY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/7358bd-c72f-4d9b-bb0d-0b4f717aa363/1/TVg7b1bPCSco3lk62VKuoZzjGIY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:7a:8d:a2:69:3f:7e:91:68:28:c9:d4:cc:bb:16:10:6f:c4:
69:8e:20:f7:7c:5f:e8:3e:0d:ab:8b:3e:68:dd:e3:60:58:eb:
5c:ca:cf:d3:a8:6e:0e:01:48:db:d9:1a:a8:20:e9:c8:a7:87:
c0:82:ca:ed:32:a4:57:67:22:4d:42:93:eb:51:48:95:54:31:
b4:07:19:54:a3:34:4b:65:92:83:a4:b8:2d:11:7f:e7:4b:39:
ba:51:9e:91:58:b2:63:ed:b3:b0:7d:01:4b:b2:82:4b:cc:20:
eb:1f:c5:5e:a5:4d:01:96:5f:db:61:69:57:c9:16:b6:2a:21:
93:20:3e:65:ed:72:45:d3:94:c9:7f:93:31:6a:c1:d6:eb:e3:
0c:19:dd:50:91:cb:d7:d7:96:fa:02:be:80:fc:71:f9:88:76:
bb:b9:ac:1e:a7:12:0d:25:a1:32:27:c4:10:ce:db:b9:02:6f:
7c:91:75:8e:61:41:47:a2:32:a2:98:c7:98:73:43:2c:9b:04:
40:a0:7d:b4:f4:8e:be:e4:bd:b6:3c:23:bc:61:a1:dd:d0:63:
ff:22:12:e7:c1:2a:36:0c:22:d9:54:38:30:a8:fe:8f:ce:03:
75:41:0d:97:3e:ed:93:50:64:ca:49:78:7e:98:9f:ab:53:40:
1c:3b:99:ab
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0qBTdgOE/P5+etoZl8WTl9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRkNTgzYjZmNTZjZjA5MjcyOGRlNTkzYWQ5NTJhZWExOWNl
MzE4ODYwHhcNMjYwMzI2MTIwMTE4WhcNMjYwMzI3MTIwMTE4WjAzMTEwLwYDVQQD
EygzNGY2YjVlM2YwMmFlOTVlZmMwMzAwYjY2NzA4YmNiMjZhYjBmN2RlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy7F/voLPDl6sFkij8315hXVt2R4P
z3tVXj1eYORaI73VM+NHDrBLHCFoY6iq9gvGovYj3d9Re1z8VNrH0ONT5+IW+2y7
7eZWioo9x3LEHPbeMvS1y1xL6OJ/B0qjtISC+ZJZfFPmYculTyQOIz0vnQB0lj4Y
l/+hnGcUkU0tUhP7Iw7OiNxb+zt2ak8qJkdWqmbbWJI5hZkXpZ2iQkAypGbiskT5
yhLBtHbVIBbwdTXPQQYtaWuHmDsH9NVMQrhBLcmmg9U7kZn5O7NxLLsxrggLbiAD
D868Q/kGmXqrtbMPCxYCQ9rvOnfYDVA6C21jU67Oh0Im0nW6H6QNLecGkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDT2tePwKule/AMAtmcIvLJqsPfeMB8GA1UdIwQY
MBaAFE1YO29WzwknKN5ZOtlSrqGc4xiGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVFZnN2IxYlBDU2NvM2xrNjJWS3VvWnpqR0lZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy83MzU4YmQtYzcyZi00ZDliLWJiMGQt
MGI0ZjcxN2FhMzYzLzEvVFZnN2IxYlBDU2NvM2xrNjJWS3VvWnpqR0lZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy83MzU4YmQtYzcyZi00ZDliLWJiMGQtMGI0ZjcxN2FhMzYz
LzEvVFZnN2IxYlBDU2NvM2xrNjJWS3VvWnpqR0lZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnnqNomk/
fpFoKMnUzLsWEG/EaY4g93xf6D4Nq4s+aN3jYFjrXMrP06huDgFI29kaqCDpyKeH
wILK7TKkV2ciTUKT61FIlVQxtAcZVKM0S2WSg6S4LRF/50s5ulGekViyY+2zsH0B
S7KCS8wg6x/FXqVNAZZf22FpV8kWtiohkyA+Ze1yRdOUyX+TMWrB1uvjDBndUJHL
19eW+gK+gPxx+Yh2u7msHqcSDSWhMifEEM7buQJvfJF1jmFBR6IyopjHmHNDLJsE
QKB9tPSOvuS9tjwjvGGh3dBj/yIS58EqNgwi2VQ4MKj+j84DdUENlz7tk1Bkykl4
fpifq1NAHDuZqw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 15:46:10 2026 by rpki-client