Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/225af9-f3f5-49e4-ba10-f5ea012b84fc/1/tFOob9MIG4A-3BDSO77akdeTICU.mft
File: tFOob9MIG4A-3BDSO77akdeTICU.mft (raw, json)
Hash identifier: mpIAAJ+1+Z5XQb9VzX73O9M9MibxXk9bvkV7i7Ua69E=
Subject key identifier: FE:D0:28:76:12:2E:5C:83:19:8F:36:24:AA:BA:1B:FF:83:8B:F8:1B
Authority key identifier: B4:53:A8:6F:D3:08:1B:80:3E:DC:10:D2:3B:BE:DA:91:D7:93:20:25
Certificate issuer: /CN=b453a86fd3081b803edc10d23bbeda91d7932025
Certificate serial: 019D26CD39561DA9AE7513DDCA6EF899103E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tFOob9MIG4A-3BDSO77akdeTICU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/225af9-f3f5-49e4-ba10-f5ea012b84fc/1/tFOob9MIG4A-3BDSO77akdeTICU.mft
Manifest number: 181A
Signing time: Wed 25 Mar 2026 21:01:16 +0000
Manifest this update: Wed 25 Mar 2026 21:01:16 +0000
Manifest next update: Thu 26 Mar 2026 21:01:16 +0000
Files and hashes: 1: 1-yB-aN02FvvexRrc-rBff7cVXYQ.roa (hash: hfqxjUEwIBgbMLOiBaRuABJ5snVrD/mvftwY9OHnyNU=)
2: tFOob9MIG4A-3BDSO77akdeTICU.crl (hash: RxmJF8IR8dHmPESNaIbvg3WQfuvYXPV98vIqbrrPOD0=)
3: uz3G_zDw5uNl_xC9huZfw-K_ce4.roa (hash: lgXmUNKY9C0bvQMUFuOJnJImq7SU/P/bySj8SdoyC3E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/225af9-f3f5-49e4-ba10-f5ea012b84fc/1/tFOob9MIG4A-3BDSO77akdeTICU.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/225af9-f3f5-49e4-ba10-f5ea012b84fc/1/tFOob9MIG4A-3BDSO77akdeTICU.mft
rsync://rpki.ripe.net/repository/DEFAULT/tFOob9MIG4A-3BDSO77akdeTICU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:39:56:1d:a9:ae:75:13:dd:ca:6e:f8:99:10:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b453a86fd3081b803edc10d23bbeda91d7932025
Validity
Not Before: Mar 25 21:01:16 2026 GMT
Not After : Mar 26 21:01:16 2026 GMT
Subject: CN=fed02876122e5c83198f3624aaba1bff838bf81b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:f8:f7:e4:cf:f5:86:88:0c:e5:a8:07:64:68:
b4:77:1b:41:78:59:40:96:53:82:8a:c6:5c:7c:d9:
7e:87:94:47:c8:7d:53:7b:99:af:ee:a3:72:30:1c:
28:1c:d1:f5:31:4e:84:14:e0:a9:13:06:5b:22:ce:
91:c0:72:71:3f:d2:b2:12:16:2a:02:33:ae:e3:fa:
16:07:fc:78:6e:89:05:f8:b8:bb:90:b0:92:db:8a:
c9:15:80:19:a8:86:2b:18:29:a1:e1:a6:5f:9e:86:
c2:99:dd:85:2d:8b:9e:1d:06:eb:05:52:b9:d5:0b:
c9:ca:1d:25:89:53:25:ac:0e:db:32:40:7d:b0:ea:
32:9c:c2:ab:3a:41:74:a9:2a:e4:26:f8:0b:42:45:
43:8f:33:9b:82:34:01:19:cd:73:37:bc:7a:be:81:
50:3b:a0:95:fc:44:60:31:b0:5f:33:b5:a5:2d:f5:
82:84:69:3c:df:eb:74:68:ae:41:1d:e1:26:1f:cb:
45:4a:b1:aa:0e:ae:52:87:a7:4f:74:12:d9:fc:53:
49:50:7e:bb:ff:e1:3b:3c:c8:91:b1:50:92:97:bd:
7a:39:3f:b0:c5:dd:99:b5:b7:2b:ed:93:02:6a:36:
ce:40:ce:e2:65:46:25:14:47:ab:58:09:12:8f:33:
69:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:D0:28:76:12:2E:5C:83:19:8F:36:24:AA:BA:1B:FF:83:8B:F8:1B
X509v3 Authority Key Identifier:
keyid:B4:53:A8:6F:D3:08:1B:80:3E:DC:10:D2:3B:BE:DA:91:D7:93:20:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tFOob9MIG4A-3BDSO77akdeTICU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/225af9-f3f5-49e4-ba10-f5ea012b84fc/1/tFOob9MIG4A-3BDSO77akdeTICU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/225af9-f3f5-49e4-ba10-f5ea012b84fc/1/tFOob9MIG4A-3BDSO77akdeTICU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:a1:22:4c:eb:64:2d:57:c8:2f:c3:a2:9c:da:ed:27:6b:0a:
7f:a7:ee:2b:00:1d:1b:f8:a3:c4:f6:bc:db:2f:57:28:4a:be:
ff:53:8a:89:bd:6c:40:49:8b:bc:45:9f:3b:bd:36:0e:d1:16:
2f:f5:f2:47:2e:5e:32:12:1a:28:7e:d7:35:f1:5a:f6:86:6c:
3e:79:ca:bc:ac:7f:ef:18:2e:1b:a3:b0:b0:ed:0d:8d:95:f3:
fe:b2:8b:e7:1f:e5:8d:34:a6:d4:0a:cc:34:a0:b0:83:a6:d1:
b4:71:b7:a2:13:b4:28:56:b3:29:a6:28:53:d7:3a:66:ee:00:
6b:af:2c:bd:43:7d:07:aa:1d:a4:8c:f1:ef:bf:5a:b4:e7:40:
c0:4a:0b:db:e7:1a:6e:de:16:e1:f5:1c:3b:c8:39:1d:df:aa:
37:5f:ee:95:a2:8b:f6:db:f0:f3:c0:e8:ed:76:36:e9:15:16:
7f:0a:81:0a:98:ed:6d:2a:70:d0:0c:61:69:d8:b0:26:34:e2:
87:f8:2c:5f:6d:76:85:fe:62:1c:ea:c1:3f:4e:c2:7f:a4:7f:
29:5c:19:d9:44:45:0c:d2:f8:e9:b2:30:ca:7a:01:10:ba:c9:
c3:0d:27:5e:88:31:7a:65:be:24:e0:5f:11:4a:8a:ee:fb:d0:
38:43:c6:fe
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mzTlWHamudRPdym74mRA+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0NTNhODZmZDMwODFiODAzZWRjMTBkMjNiYmVkYTkxZDc5
MzIwMjUwHhcNMjYwMzI1MjEwMTE2WhcNMjYwMzI2MjEwMTE2WjAzMTEwLwYDVQQD
EyhmZWQwMjg3NjEyMmU1YzgzMTk4ZjM2MjRhYWJhMWJmZjgzOGJmODFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Pj35M/1hogM5agHZGi0dxtBeFlA
llOCisZcfNl+h5RHyH1Te5mv7qNyMBwoHNH1MU6EFOCpEwZbIs6RwHJxP9KyEhYq
AjOu4/oWB/x4bokF+Li7kLCS24rJFYAZqIYrGCmh4aZfnobCmd2FLYueHQbrBVK5
1QvJyh0liVMlrA7bMkB9sOoynMKrOkF0qSrkJvgLQkVDjzObgjQBGc1zN7x6voFQ
O6CV/ERgMbBfM7WlLfWChGk83+t0aK5BHeEmH8tFSrGqDq5Sh6dPdBLZ/FNJUH67
/+E7PMiRsVCSl716OT+wxd2Ztbcr7ZMCajbOQM7iZUYlFEerWAkSjzNpXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP7QKHYSLlyDGY82JKq6G/+Di/gbMB8GA1UdIwQY
MBaAFLRTqG/TCBuAPtwQ0ju+2pHXkyAlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdEZPb2I5TUlHNEEtM0JEU083N2FrZGVUSUNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS8yMjVhZjktZjNmNS00OWU0LWJhMTAt
ZjVlYTAxMmI4NGZjLzEvdEZPb2I5TUlHNEEtM0JEU083N2FrZGVUSUNVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83YS8yMjVhZjktZjNmNS00OWU0LWJhMTAtZjVlYTAxMmI4NGZj
LzEvdEZPb2I5TUlHNEEtM0JEU083N2FrZGVUSUNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlaEiTOtk
LVfIL8OinNrtJ2sKf6fuKwAdG/ijxPa82y9XKEq+/1OKib1sQEmLvEWfO702DtEW
L/XyRy5eMhIaKH7XNfFa9oZsPnnKvKx/7xguG6OwsO0NjZXz/rKL5x/ljTSm1ArM
NKCwg6bRtHG3ohO0KFazKaYoU9c6Zu4Aa68svUN9B6odpIzx779atOdAwEoL2+ca
bt4W4fUcO8g5Hd+qN1/ulaKL9tvw88Do7XY26RUWfwqBCpjtbSpw0AxhadiwJjTi
h/gsX212hf5iHOrBP07Cf6R/KVwZ2URFDNL46bIwynoBELrJww0nXogxemW+JOBf
EUqK7vvQOEPG/g==
-----END CERTIFICATE-----
Generated at Thu Mar 26 08:31:02 2026 by rpki-client