Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/3965b0-fee9-49bf-a54d-a8d838438d8a/1/TkwTiahJ713MuDA3A7iYyR5j0U8.mft
File: TkwTiahJ713MuDA3A7iYyR5j0U8.mft (raw, json)
Hash identifier: G72LRY/1wf3VytYo7KTFtoBtaeiMmACuVCREsGM+q7o=
Subject key identifier: E9:A5:ED:5E:32:02:A0:AA:4C:9F:FA:9B:8D:08:90:2A:76:33:7A:93
Authority key identifier: 4E:4C:13:89:A8:49:EF:5D:CC:B8:30:37:03:B8:98:C9:1E:63:D1:4F
Certificate issuer: /CN=4e4c1389a849ef5dccb8303703b898c91e63d14f
Certificate serial: 019D28F23D6F77367931097A386FAB5B707D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TkwTiahJ713MuDA3A7iYyR5j0U8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/3965b0-fee9-49bf-a54d-a8d838438d8a/1/TkwTiahJ713MuDA3A7iYyR5j0U8.mft
Manifest number: 1183
Signing time: Thu 26 Mar 2026 07:00:56 +0000
Manifest this update: Thu 26 Mar 2026 07:00:56 +0000
Manifest next update: Fri 27 Mar 2026 07:00:56 +0000
Files and hashes: 1: OTmYG5w2zWjBDBJnDDKBYpbFxQE.roa (hash: wOCD2A3JYKhAmA4Jxehzqr2P6WlUUR1QNP5GZ7+5dNU=)
2: TkwTiahJ713MuDA3A7iYyR5j0U8.crl (hash: B/ngoNh2CO09t540EeGwiCcoP6ShUcmz9+F7IwnXd+8=)
3: fPUxVV7UyTZqibxa_fO2Z7Dv9bw.roa (hash: rWKalIAkW6Zh9W6BAPZNwld+hHBcJmoL3lPHNNP3Pi4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/3965b0-fee9-49bf-a54d-a8d838438d8a/1/TkwTiahJ713MuDA3A7iYyR5j0U8.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/3965b0-fee9-49bf-a54d-a8d838438d8a/1/TkwTiahJ713MuDA3A7iYyR5j0U8.mft
rsync://rpki.ripe.net/repository/DEFAULT/TkwTiahJ713MuDA3A7iYyR5j0U8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 07:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:3d:6f:77:36:79:31:09:7a:38:6f:ab:5b:70:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e4c1389a849ef5dccb8303703b898c91e63d14f
Validity
Not Before: Mar 26 07:00:56 2026 GMT
Not After : Mar 27 07:00:56 2026 GMT
Subject: CN=e9a5ed5e3202a0aa4c9ffa9b8d08902a76337a93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:f2:e6:dc:a0:e7:b4:81:21:5e:9b:e2:0e:35:
42:21:bd:3d:b7:99:23:c3:7e:6f:42:39:10:60:29:
1e:7f:13:03:e8:0f:45:0f:98:c1:e5:60:23:54:8b:
e3:4b:52:c6:d7:e3:56:3d:b2:5c:77:04:dd:4b:9d:
16:ac:20:5d:5b:f8:51:ed:40:ba:ac:4c:6d:d8:30:
46:7f:db:19:1e:99:16:bf:15:c8:7f:3d:4f:7a:66:
5b:8c:c3:48:c2:05:8f:40:66:d2:ba:56:16:2f:6c:
f2:a8:75:af:7c:88:40:d2:a5:8d:4a:eb:99:75:e1:
fe:38:f4:1e:65:12:4b:b7:ff:db:9e:ff:4a:6a:5b:
55:36:1d:fa:bb:62:12:a8:36:7c:21:46:10:ce:8b:
fc:8f:b4:c4:1b:f3:27:1c:59:5f:39:55:e9:07:e0:
15:55:2f:04:2a:3f:bf:3a:cd:e8:df:d7:3a:ca:f8:
79:15:2d:e3:3e:1c:dc:53:54:61:27:a3:56:57:51:
b1:0b:a7:16:d0:91:99:a7:6a:46:19:84:5d:44:86:
2d:95:6d:7b:44:a6:42:f0:07:7c:89:ea:e5:9f:1f:
2c:65:ca:a9:0c:0a:19:ca:ee:17:40:c2:b3:6d:0b:
94:b3:6a:e3:6f:8f:0b:55:10:3c:fa:ef:84:12:71:
5f:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:A5:ED:5E:32:02:A0:AA:4C:9F:FA:9B:8D:08:90:2A:76:33:7A:93
X509v3 Authority Key Identifier:
keyid:4E:4C:13:89:A8:49:EF:5D:CC:B8:30:37:03:B8:98:C9:1E:63:D1:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TkwTiahJ713MuDA3A7iYyR5j0U8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/3965b0-fee9-49bf-a54d-a8d838438d8a/1/TkwTiahJ713MuDA3A7iYyR5j0U8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/3965b0-fee9-49bf-a54d-a8d838438d8a/1/TkwTiahJ713MuDA3A7iYyR5j0U8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:08:30:f0:d4:2d:d8:75:6b:dc:bc:c4:33:20:ed:ae:b1:b1:
0d:80:4c:7a:07:d6:46:68:e6:4a:14:33:04:c5:ea:42:91:9d:
92:30:3c:2b:6a:e3:91:d8:0a:99:cf:d7:24:92:85:56:ad:26:
f2:11:2d:83:cd:65:d0:5b:55:8c:38:09:a5:44:32:2a:5a:c2:
8e:61:c2:4c:a3:db:40:ec:7d:5d:a7:8a:ec:72:8e:8d:72:0a:
89:cb:96:c6:ce:a3:e2:ec:e2:e0:79:ae:03:b2:34:9b:1c:f4:
24:89:60:12:ae:a6:f8:31:d1:44:7a:97:ed:16:1d:9d:f4:e5:
74:33:e1:15:ef:40:34:83:b1:c2:45:9e:2e:37:6f:7c:4f:2a:
07:c9:01:9d:61:84:f8:db:a7:10:1f:f0:c9:31:0e:b7:6c:e5:
fa:d6:2e:16:f0:70:f6:0d:3c:dc:7a:d8:2c:ed:67:c4:78:95:
a2:ef:09:af:36:bd:c4:ec:b4:00:80:13:69:b5:0c:81:4f:97:
1d:b8:e4:78:01:80:1c:aa:ee:76:31:ef:99:ad:b6:83:fb:f9:
dd:d9:3e:06:88:88:29:a0:8b:6f:c1:63:77:ef:24:03:c6:a6:
0d:cf:cf:ed:f5:68:80:2d:f2:90:e0:45:b9:79:ad:b2:cf:f6:
f0:f2:cc:b9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0o8j1vdzZ5MQl6OG+rW3B9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRlNGMxMzg5YTg0OWVmNWRjY2I4MzAzNzAzYjg5OGM5MWU2
M2QxNGYwHhcNMjYwMzI2MDcwMDU2WhcNMjYwMzI3MDcwMDU2WjAzMTEwLwYDVQQD
EyhlOWE1ZWQ1ZTMyMDJhMGFhNGM5ZmZhOWI4ZDA4OTAyYTc2MzM3YTkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmfLm3KDntIEhXpviDjVCIb09t5kj
w35vQjkQYCkefxMD6A9FD5jB5WAjVIvjS1LG1+NWPbJcdwTdS50WrCBdW/hR7UC6
rExt2DBGf9sZHpkWvxXIfz1PemZbjMNIwgWPQGbSulYWL2zyqHWvfIhA0qWNSuuZ
deH+OPQeZRJLt//bnv9KaltVNh36u2ISqDZ8IUYQzov8j7TEG/MnHFlfOVXpB+AV
VS8EKj+/Os3o39c6yvh5FS3jPhzcU1RhJ6NWV1GxC6cW0JGZp2pGGYRdRIYtlW17
RKZC8Ad8ierlnx8sZcqpDAoZyu4XQMKzbQuUs2rjb48LVRA8+u+EEnFfRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOml7V4yAqCqTJ/6m40IkCp2M3qTMB8GA1UdIwQY
MBaAFE5ME4moSe9dzLgwNwO4mMkeY9FPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVGt3VGlhaEo3MTNNdURBM0E3aVl5UjVqMFU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi8zOTY1YjAtZmVlOS00OWJmLWE1NGQt
YThkODM4NDM4ZDhhLzEvVGt3VGlhaEo3MTNNdURBM0E3aVl5UjVqMFU4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Zi8zOTY1YjAtZmVlOS00OWJmLWE1NGQtYThkODM4NDM4ZDhh
LzEvVGt3VGlhaEo3MTNNdURBM0E3aVl5UjVqMFU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWwgw8NQt
2HVr3LzEMyDtrrGxDYBMegfWRmjmShQzBMXqQpGdkjA8K2rjkdgKmc/XJJKFVq0m
8hEtg81l0FtVjDgJpUQyKlrCjmHCTKPbQOx9XaeK7HKOjXIKicuWxs6j4uzi4Hmu
A7I0mxz0JIlgEq6m+DHRRHqX7RYdnfTldDPhFe9ANIOxwkWeLjdvfE8qB8kBnWGE
+NunEB/wyTEOt2zl+tYuFvBw9g083HrYLO1nxHiVou8Jrza9xOy0AIATabUMgU+X
HbjkeAGAHKrudjHvma22g/v53dk+BoiIKaCLb8Fjd+8kA8amDc/P7fVogC3ykOBF
uXmtss/28PLMuQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 12:57:26 2026 by rpki-client