Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/c4f437-def7-49c7-bf0b-ba06429f42f5/1/tHRnMbQxArluui3l04w9zShLj-Y.mft
File: tHRnMbQxArluui3l04w9zShLj-Y.mft (raw, json)
Hash identifier: iYjteSJ7hm6M/pH5JTcow2FasXxPow8Ml3RT6rbjK0U=
Subject key identifier: 45:7C:D5:E5:A8:CD:D3:09:41:96:77:DA:EB:4F:29:3C:91:18:B2:9E
Authority key identifier: B4:74:67:31:B4:31:02:B9:6E:BA:2D:E5:D3:8C:3D:CD:28:4B:8F:E6
Certificate issuer: /CN=b4746731b43102b96eba2de5d38c3dcd284b8fe6
Certificate serial: 019D273AE683C3213A67CADD19BD61305CD1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tHRnMbQxArluui3l04w9zShLj-Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/c4f437-def7-49c7-bf0b-ba06429f42f5/1/tHRnMbQxArluui3l04w9zShLj-Y.mft
Manifest number: 9E
Signing time: Wed 25 Mar 2026 23:01:04 +0000
Manifest this update: Wed 25 Mar 2026 23:01:04 +0000
Manifest next update: Thu 26 Mar 2026 23:01:04 +0000
Files and hashes: 1: fpHEmukzCf8sEZN1-1ROK3M58Hg.roa (hash: VqNpGMHhla64QbrRVajda2AOnqhRXGh5QpCi8IhSSCc=)
2: tHRnMbQxArluui3l04w9zShLj-Y.crl (hash: 1OKySEUwcv+cIcwMyQwbV5sGkIh9R/BgDwI0E26/qYM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/c4f437-def7-49c7-bf0b-ba06429f42f5/1/tHRnMbQxArluui3l04w9zShLj-Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/c4f437-def7-49c7-bf0b-ba06429f42f5/1/tHRnMbQxArluui3l04w9zShLj-Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/tHRnMbQxArluui3l04w9zShLj-Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:e6:83:c3:21:3a:67:ca:dd:19:bd:61:30:5c:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4746731b43102b96eba2de5d38c3dcd284b8fe6
Validity
Not Before: Mar 25 23:01:04 2026 GMT
Not After : Mar 26 23:01:04 2026 GMT
Subject: CN=457cd5e5a8cdd309419677daeb4f293c9118b29e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:86:dd:e2:dd:e6:b9:35:45:18:e9:06:25:30:
ca:1d:80:f1:6f:b8:74:6b:fb:52:be:4e:aa:d4:f4:
a3:92:5f:24:e8:17:b7:5f:76:d5:e0:f9:87:72:66:
71:90:f7:97:e4:ba:c6:cc:96:e5:e2:76:66:33:49:
b4:e7:f9:c4:d6:e6:ed:52:43:fd:d2:21:38:43:ac:
b0:76:50:af:d3:ee:26:7f:00:b0:9a:26:f4:03:8b:
59:87:36:ff:ae:f0:03:44:43:42:8f:97:d8:f3:d8:
51:38:bd:e3:59:72:94:fd:a3:38:70:13:ff:f5:39:
f9:ba:5c:8c:40:7c:46:51:4e:28:2b:5b:15:73:8d:
81:f9:2d:2b:dc:64:bd:81:56:b3:b5:8b:d5:c5:9c:
f1:20:48:f5:5f:2d:ab:30:70:17:21:50:64:0e:9a:
86:5b:d7:50:fe:f2:ab:10:b1:4f:bb:0e:e6:e2:3e:
48:2d:67:24:10:ef:4d:fb:31:36:b3:dc:bb:3d:52:
36:5e:f3:cd:6c:e1:a9:8a:f1:a8:1e:b5:aa:39:9b:
15:48:a3:d3:82:4c:15:e3:e4:d2:68:e1:07:94:dc:
b0:96:b1:b3:86:3d:35:9d:e5:64:eb:94:26:01:b9:
ea:4d:67:38:17:f1:63:52:d7:69:cc:01:9d:fb:28:
af:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:7C:D5:E5:A8:CD:D3:09:41:96:77:DA:EB:4F:29:3C:91:18:B2:9E
X509v3 Authority Key Identifier:
keyid:B4:74:67:31:B4:31:02:B9:6E:BA:2D:E5:D3:8C:3D:CD:28:4B:8F:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tHRnMbQxArluui3l04w9zShLj-Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/c4f437-def7-49c7-bf0b-ba06429f42f5/1/tHRnMbQxArluui3l04w9zShLj-Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/c4f437-def7-49c7-bf0b-ba06429f42f5/1/tHRnMbQxArluui3l04w9zShLj-Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:36:08:69:f0:85:e7:c1:64:75:34:89:81:d6:bd:a1:94:3a:
b8:6f:7a:93:c1:08:0e:60:1d:35:e8:45:1b:fd:aa:d4:59:c7:
9c:9e:56:24:8a:63:21:a3:2b:e5:3e:41:8b:f8:1b:45:9e:80:
97:8e:dc:f4:7a:f9:b4:53:f3:0a:84:e0:73:1f:96:77:96:0f:
40:a3:4b:5d:7d:cc:7d:37:cc:92:93:1a:bd:75:b1:b9:85:cf:
3e:40:0a:a7:68:21:2b:c2:6d:02:55:cd:70:b7:9e:93:6c:2d:
74:94:5c:2c:12:51:7d:ab:06:f9:a1:2f:b0:59:09:af:ed:bc:
71:68:7f:c1:cd:3d:df:4f:51:1b:0f:d7:30:33:4e:ed:81:23:
4c:ef:a0:14:cb:4f:64:fa:3a:7f:0c:3d:69:b3:34:79:25:2b:
0c:f9:31:36:2d:f8:a5:92:09:c3:06:33:a1:bc:2e:44:e1:17:
95:c0:d5:4d:1b:67:ce:a8:53:ce:c6:0a:16:40:bf:01:61:6a:
20:a0:85:44:80:ee:01:cb:bf:2d:08:16:d4:52:da:fd:d1:d5:
0c:67:45:a3:04:c2:4d:d4:b0:d3:c4:9a:05:68:7d:7e:b0:22:
08:c1:a3:35:81:37:a4:08:82:f1:cf:d2:2b:b8:76:f9:83:e5:
69:4b:54:06
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nOuaDwyE6Z8rdGb1hMFzRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0NzQ2NzMxYjQzMTAyYjk2ZWJhMmRlNWQzOGMzZGNkMjg0
YjhmZTYwHhcNMjYwMzI1MjMwMTA0WhcNMjYwMzI2MjMwMTA0WjAzMTEwLwYDVQQD
Eyg0NTdjZDVlNWE4Y2RkMzA5NDE5Njc3ZGFlYjRmMjkzYzkxMThiMjllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp4bd4t3muTVFGOkGJTDKHYDxb7h0
a/tSvk6q1PSjkl8k6Be3X3bV4PmHcmZxkPeX5LrGzJbl4nZmM0m05/nE1ubtUkP9
0iE4Q6ywdlCv0+4mfwCwmib0A4tZhzb/rvADRENCj5fY89hROL3jWXKU/aM4cBP/
9Tn5ulyMQHxGUU4oK1sVc42B+S0r3GS9gVaztYvVxZzxIEj1Xy2rMHAXIVBkDpqG
W9dQ/vKrELFPuw7m4j5ILWckEO9N+zE2s9y7PVI2XvPNbOGpivGoHrWqOZsVSKPT
gkwV4+TSaOEHlNywlrGzhj01neVk65QmAbnqTWc4F/FjUtdpzAGd+yivSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEV81eWozdMJQZZ32utPKTyRGLKeMB8GA1UdIwQY
MBaAFLR0ZzG0MQK5brot5dOMPc0oS4/mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdEhSbk1iUXhBcmx1dWkzbDA0dzl6U2hMai1ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy9jNGY0MzctZGVmNy00OWM3LWJmMGIt
YmEwNjQyOWY0MmY1LzEvdEhSbk1iUXhBcmx1dWkzbDA0dzl6U2hMai1ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy9jNGY0MzctZGVmNy00OWM3LWJmMGItYmEwNjQyOWY0MmY1
LzEvdEhSbk1iUXhBcmx1dWkzbDA0dzl6U2hMai1ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUDYIafCF
58FkdTSJgda9oZQ6uG96k8EIDmAdNehFG/2q1FnHnJ5WJIpjIaMr5T5Bi/gbRZ6A
l47c9Hr5tFPzCoTgcx+Wd5YPQKNLXX3MfTfMkpMavXWxuYXPPkAKp2ghK8JtAlXN
cLeek2wtdJRcLBJRfasG+aEvsFkJr+28cWh/wc09309RGw/XMDNO7YEjTO+gFMtP
ZPo6fww9abM0eSUrDPkxNi34pZIJwwYzobwuROEXlcDVTRtnzqhTzsYKFkC/AWFq
IKCFRIDuAcu/LQgW1FLa/dHVDGdFowTCTdSw08SaBWh9frAiCMGjNYE3pAiC8c/S
K7h2+YPlaUtUBg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 08:40:28 2026 by rpki-client