Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/133b52-7a66-41ab-aeee-c9b470dc240b/1/tGasCkklUoPNUwZpcc17Pf4qPOg.mft
File: tGasCkklUoPNUwZpcc17Pf4qPOg.mft (raw, json)
Hash identifier: t9M6tR9tm60OjlH3zjkAFlNdInOTb8frMRqqsMJQSH8=
Subject key identifier: 70:63:6A:AA:C8:11:86:6E:7E:54:D2:2B:DA:5F:D1:64:63:D7:9F:50
Authority key identifier: B4:66:AC:0A:49:25:52:83:CD:53:06:69:71:CD:7B:3D:FE:2A:3C:E8
Certificate issuer: /CN=b466ac0a49255283cd53066971cd7b3dfe2a3ce8
Certificate serial: 019D284D7F129E454BE274403E7CE6742F19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tGasCkklUoPNUwZpcc17Pf4qPOg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/133b52-7a66-41ab-aeee-c9b470dc240b/1/tGasCkklUoPNUwZpcc17Pf4qPOg.mft
Manifest number: 17D2
Signing time: Thu 26 Mar 2026 04:01:00 +0000
Manifest this update: Thu 26 Mar 2026 04:01:00 +0000
Manifest next update: Fri 27 Mar 2026 04:01:00 +0000
Files and hashes: 1: tGasCkklUoPNUwZpcc17Pf4qPOg.crl (hash: GHXh1VDujP/iJcPaykb4I4uvtKXe8Fm1zz1U1ltknow=)
2: wb6Alx2jI_wyy2l0j2ScP2iF5LA.roa (hash: ARjWpiCOD9NdvmXB4t9x9aVktqPhjrZ66+Av5qsEbOA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/133b52-7a66-41ab-aeee-c9b470dc240b/1/tGasCkklUoPNUwZpcc17Pf4qPOg.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/133b52-7a66-41ab-aeee-c9b470dc240b/1/tGasCkklUoPNUwZpcc17Pf4qPOg.mft
rsync://rpki.ripe.net/repository/DEFAULT/tGasCkklUoPNUwZpcc17Pf4qPOg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:7f:12:9e:45:4b:e2:74:40:3e:7c:e6:74:2f:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b466ac0a49255283cd53066971cd7b3dfe2a3ce8
Validity
Not Before: Mar 26 04:01:00 2026 GMT
Not After : Mar 27 04:01:00 2026 GMT
Subject: CN=70636aaac811866e7e54d22bda5fd16463d79f50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:9b:97:87:8c:12:35:7a:a1:46:31:3a:03:64:
1e:de:13:c3:5b:4e:26:7b:6c:37:3e:d9:fe:9f:9a:
77:48:94:02:c2:32:3c:87:12:31:7e:c1:94:b1:dc:
c1:7e:71:a9:25:9d:c1:71:c0:60:3e:c0:a4:2f:34:
8c:0e:c1:47:b1:5c:a7:b6:0b:e1:c4:d3:30:da:7b:
9f:fd:5a:8d:21:b6:15:d2:b6:36:38:72:eb:04:82:
11:aa:eb:19:15:db:97:ee:8a:5d:8e:7f:1e:74:a2:
e9:44:6d:f5:98:8e:50:ae:8d:78:94:43:88:7a:74:
f2:56:4b:fa:c6:43:ab:b9:bd:d9:95:b6:d6:48:08:
84:ea:bc:c2:77:cc:4b:cb:c7:07:ee:e5:9d:02:ad:
19:39:a7:62:3a:ca:cb:f8:0e:32:9f:d6:5c:af:89:
81:0f:d1:88:f1:ee:da:2e:b3:1a:f7:8e:35:07:be:
e2:65:be:59:83:5c:1e:c6:96:f1:6d:a4:73:0e:28:
d7:89:d1:d7:06:00:ff:df:8c:64:8c:71:5a:1d:81:
d1:e9:c2:8d:0d:cf:a3:86:d3:20:98:6d:d0:bc:b1:
cc:95:b1:07:bb:a6:53:31:d5:41:26:fa:bf:30:79:
ec:d1:5e:e2:2d:ac:13:68:98:71:a1:39:a8:ef:79:
72:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:63:6A:AA:C8:11:86:6E:7E:54:D2:2B:DA:5F:D1:64:63:D7:9F:50
X509v3 Authority Key Identifier:
keyid:B4:66:AC:0A:49:25:52:83:CD:53:06:69:71:CD:7B:3D:FE:2A:3C:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tGasCkklUoPNUwZpcc17Pf4qPOg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/133b52-7a66-41ab-aeee-c9b470dc240b/1/tGasCkklUoPNUwZpcc17Pf4qPOg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/133b52-7a66-41ab-aeee-c9b470dc240b/1/tGasCkklUoPNUwZpcc17Pf4qPOg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:84:09:fb:7d:99:4c:b8:26:a8:a8:04:91:52:db:08:1f:cc:
e9:12:c6:77:f4:5b:8e:bb:c6:13:43:48:d0:52:a0:e2:1b:1d:
d6:c4:56:b6:51:9b:dd:11:77:cb:0a:bf:80:f3:7f:b6:2e:e3:
ec:21:1d:48:fc:4d:13:27:6e:da:33:a0:e9:35:5a:59:e6:af:
61:b8:6b:ab:94:57:09:cb:85:f4:f9:9b:a7:ed:ca:45:db:80:
7e:e7:ae:0e:22:f6:07:d9:08:3d:92:4f:90:8b:7d:26:eb:ad:
b6:98:ca:4f:8e:fe:09:09:4e:f7:74:4a:3f:84:83:db:3e:55:
f5:bd:39:d2:9f:d0:02:37:e7:7e:82:3c:2f:9b:7a:90:2c:a6:
45:d9:d4:a8:b9:6c:ec:b5:f9:fe:ac:da:e7:bb:7b:2a:8a:42:
e0:06:2e:72:38:d4:84:c1:fd:e7:14:21:d2:6f:52:10:b9:f5:
64:0e:52:37:8e:b9:d8:46:df:c3:b0:f8:71:ad:df:67:4a:c4:
5f:7f:cd:f1:40:49:e9:be:79:1c:ff:59:c5:7f:3c:81:71:57:
f5:a7:85:66:31:29:06:49:bc:05:2f:7a:6a:98:da:8c:52:e4:
a1:04:9f:f0:4f:ac:f6:02:de:98:19:c3:3c:e1:c1:60:99:ab:
1a:b7:8e:f5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0oTX8SnkVL4nRAPnzmdC8ZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0NjZhYzBhNDkyNTUyODNjZDUzMDY2OTcxY2Q3YjNkZmUy
YTNjZTgwHhcNMjYwMzI2MDQwMTAwWhcNMjYwMzI3MDQwMTAwWjAzMTEwLwYDVQQD
Eyg3MDYzNmFhYWM4MTE4NjZlN2U1NGQyMmJkYTVmZDE2NDYzZDc5ZjUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr5uXh4wSNXqhRjE6A2Qe3hPDW04m
e2w3Ptn+n5p3SJQCwjI8hxIxfsGUsdzBfnGpJZ3BccBgPsCkLzSMDsFHsVyntgvh
xNMw2nuf/VqNIbYV0rY2OHLrBIIRqusZFduX7opdjn8edKLpRG31mI5Qro14lEOI
enTyVkv6xkOrub3ZlbbWSAiE6rzCd8xLy8cH7uWdAq0ZOadiOsrL+A4yn9Zcr4mB
D9GI8e7aLrMa9441B77iZb5Zg1wexpbxbaRzDijXidHXBgD/34xkjHFaHYHR6cKN
Dc+jhtMgmG3QvLHMlbEHu6ZTMdVBJvq/MHns0V7iLawTaJhxoTmo73lyEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHBjaqrIEYZuflTSK9pf0WRj159QMB8GA1UdIwQY
MBaAFLRmrApJJVKDzVMGaXHNez3+KjzoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdEdhc0Nra2xVb1BOVXdacGNjMTdQZjRxUE9nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy8xMzNiNTItN2E2Ni00MWFiLWFlZWUt
YzliNDcwZGMyNDBiLzEvdEdhc0Nra2xVb1BOVXdacGNjMTdQZjRxUE9nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yy8xMzNiNTItN2E2Ni00MWFiLWFlZWUtYzliNDcwZGMyNDBi
LzEvdEdhc0Nra2xVb1BOVXdacGNjMTdQZjRxUE9nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjoQJ+32Z
TLgmqKgEkVLbCB/M6RLGd/RbjrvGE0NI0FKg4hsd1sRWtlGb3RF3ywq/gPN/ti7j
7CEdSPxNEydu2jOg6TVaWeavYbhrq5RXCcuF9Pmbp+3KRduAfueuDiL2B9kIPZJP
kIt9JuuttpjKT47+CQlO93RKP4SD2z5V9b050p/QAjfnfoI8L5t6kCymRdnUqLls
7LX5/qza57t7KopC4AYucjjUhMH95xQh0m9SELn1ZA5SN4652Ebfw7D4ca3fZ0rE
X3/N8UBJ6b55HP9ZxX88gXFX9aeFZjEpBkm8BS96apjajFLkoQSf8E+s9gLemBnD
POHBYJmrGreO9Q==
-----END CERTIFICATE-----
Generated at Thu Mar 26 10:21:53 2026 by rpki-client