Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/cce5ba-ff93-4438-a8e3-4a637c6d9938/1/TQ1ZQ8JANzDegY4xubX_HYwcnEc.mft
File: TQ1ZQ8JANzDegY4xubX_HYwcnEc.mft (raw, json)
Hash identifier: sJ0ZtBUjtua5fy6BnKmpTgJ/HPe5WdnV3y/2J4ONAX4=
Subject key identifier: C0:94:F6:5D:22:5D:02:FD:5E:B1:DD:40:8C:00:A6:25:FF:03:4A:72
Authority key identifier: 4D:0D:59:43:C2:40:37:30:DE:81:8E:31:B9:B5:FF:1D:8C:1C:9C:47
Certificate issuer: /CN=4d0d5943c2403730de818e31b9b5ff1d8c1c9c47
Certificate serial: 019D33E39005FD30229F04B44909638EF540
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TQ1ZQ8JANzDegY4xubX_HYwcnEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/cce5ba-ff93-4438-a8e3-4a637c6d9938/1/TQ1ZQ8JANzDegY4xubX_HYwcnEc.mft
Manifest number: 188F
Signing time: Sat 28 Mar 2026 10:00:44 +0000
Manifest this update: Sat 28 Mar 2026 10:00:44 +0000
Manifest next update: Sun 29 Mar 2026 10:00:44 +0000
Files and hashes: 1: LgGfCw5P6EPS02odz9L5gtFB9CY.roa (hash: TMsWFDEHJPQcP7QFpiFpw7haPOsCTPLSZXPOO1J1hGg=)
2: TQ1ZQ8JANzDegY4xubX_HYwcnEc.crl (hash: f9pJ3JI6SGclZKeQMzgl+bf9XuWn1K1qFyVQDyNkk3Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/cce5ba-ff93-4438-a8e3-4a637c6d9938/1/TQ1ZQ8JANzDegY4xubX_HYwcnEc.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/cce5ba-ff93-4438-a8e3-4a637c6d9938/1/TQ1ZQ8JANzDegY4xubX_HYwcnEc.mft
rsync://rpki.ripe.net/repository/DEFAULT/TQ1ZQ8JANzDegY4xubX_HYwcnEc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:33:e3:90:05:fd:30:22:9f:04:b4:49:09:63:8e:f5:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d0d5943c2403730de818e31b9b5ff1d8c1c9c47
Validity
Not Before: Mar 28 10:00:44 2026 GMT
Not After : Mar 29 10:00:44 2026 GMT
Subject: CN=c094f65d225d02fd5eb1dd408c00a625ff034a72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:09:b9:da:84:a9:cd:39:21:07:27:41:5a:6e:
1a:cd:6d:60:c0:f3:34:29:86:47:8e:46:58:ab:f4:
c4:5f:79:0d:e6:c1:58:52:f7:ab:32:fe:4a:70:02:
93:2b:77:23:6d:98:4c:e7:79:33:46:03:ac:29:99:
80:29:34:71:1d:1e:37:4d:27:be:62:3b:52:fb:63:
4f:ba:f0:20:fa:bd:f1:32:85:77:37:64:4d:d9:a4:
28:60:e4:5c:2c:cd:66:43:8b:a7:22:69:22:fa:3e:
db:c5:1c:a6:f3:a5:68:5e:83:b2:8b:43:31:ab:57:
c3:e0:4c:55:d1:7d:98:da:6d:8f:14:b4:2f:fd:e2:
71:f1:a6:bc:19:64:a4:ca:c2:cd:c7:bd:b0:e1:f2:
d9:dd:24:67:9c:e3:46:7c:2d:fa:dc:cd:c4:13:eb:
0d:78:65:07:e1:3a:9e:75:41:42:09:fc:4f:79:25:
04:e0:39:03:49:56:82:f9:0b:96:ad:ba:41:4b:f2:
fd:a7:bf:95:58:76:d8:81:f7:28:0f:16:46:6f:f1:
43:2b:0b:16:bb:24:da:26:1a:d0:29:c3:94:8a:81:
8b:0c:49:71:22:3c:85:85:2c:48:d3:fb:19:70:65:
56:e3:91:81:be:17:ea:0c:4c:00:42:48:70:3a:d5:
db:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:94:F6:5D:22:5D:02:FD:5E:B1:DD:40:8C:00:A6:25:FF:03:4A:72
X509v3 Authority Key Identifier:
keyid:4D:0D:59:43:C2:40:37:30:DE:81:8E:31:B9:B5:FF:1D:8C:1C:9C:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TQ1ZQ8JANzDegY4xubX_HYwcnEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/cce5ba-ff93-4438-a8e3-4a637c6d9938/1/TQ1ZQ8JANzDegY4xubX_HYwcnEc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/cce5ba-ff93-4438-a8e3-4a637c6d9938/1/TQ1ZQ8JANzDegY4xubX_HYwcnEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:b5:44:49:23:6e:d0:21:45:1f:8a:42:2a:01:0c:c0:7f:45:
49:a6:12:b6:34:21:cf:77:d5:47:2e:a8:bc:bb:34:d4:d3:63:
b5:2a:87:d9:37:0b:00:6a:c6:7f:5b:84:e2:96:d9:03:17:ee:
fd:ba:c8:09:35:05:9e:93:b5:ea:99:a8:55:b1:99:26:b6:3d:
ed:f0:10:0f:2a:ac:a3:76:c5:40:b2:81:32:25:6f:c0:e7:d6:
2f:88:a4:3a:48:ad:cf:bc:e0:5a:5a:b0:98:f4:94:41:ac:bb:
5a:a4:3f:47:6c:d1:07:9a:a6:7a:7a:f7:e8:50:76:39:b0:a7:
75:11:cb:09:2c:38:7d:09:f4:50:28:6d:51:68:54:50:cc:18:
c6:e7:32:ab:ab:63:e1:76:55:44:7d:f5:b8:9d:fe:28:3a:5b:
b8:41:bc:a3:70:b0:95:d9:4c:43:23:09:fd:5e:ff:5f:a9:cf:
8e:f3:91:4f:85:02:28:64:ae:6a:8f:8a:93:f3:b1:67:e2:bf:
4a:a3:23:a5:2b:84:fb:4a:3b:86:d9:2a:18:92:a0:44:29:1d:
3c:c8:6e:be:f0:9c:36:47:16:72:3e:20:42:72:f1:bb:fc:52:
eb:f9:90:4c:bc:a1:9e:62:02:e7:a4:8c:0e:62:4a:f1:c8:c9:
e6:6c:0b:cd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0z45AF/TAinwS0SQljjvVAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRkMGQ1OTQzYzI0MDM3MzBkZTgxOGUzMWI5YjVmZjFkOGMx
YzljNDcwHhcNMjYwMzI4MTAwMDQ0WhcNMjYwMzI5MTAwMDQ0WjAzMTEwLwYDVQQD
EyhjMDk0ZjY1ZDIyNWQwMmZkNWViMWRkNDA4YzAwYTYyNWZmMDM0YTcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjwm52oSpzTkhBydBWm4azW1gwPM0
KYZHjkZYq/TEX3kN5sFYUverMv5KcAKTK3cjbZhM53kzRgOsKZmAKTRxHR43TSe+
YjtS+2NPuvAg+r3xMoV3N2RN2aQoYORcLM1mQ4unImki+j7bxRym86VoXoOyi0Mx
q1fD4ExV0X2Y2m2PFLQv/eJx8aa8GWSkysLNx72w4fLZ3SRnnONGfC363M3EE+sN
eGUH4TqedUFCCfxPeSUE4DkDSVaC+QuWrbpBS/L9p7+VWHbYgfcoDxZGb/FDKwsW
uyTaJhrQKcOUioGLDElxIjyFhSxI0/sZcGVW45GBvhfqDEwAQkhwOtXb8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMCU9l0iXQL9XrHdQIwApiX/A0pyMB8GA1UdIwQY
MBaAFE0NWUPCQDcw3oGOMbm1/x2MHJxHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVFExWlE4SkFOekRlZ1k0eHViWF9IWXdjbkVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS9jY2U1YmEtZmY5My00NDM4LWE4ZTMt
NGE2MzdjNmQ5OTM4LzEvVFExWlE4SkFOekRlZ1k0eHViWF9IWXdjbkVjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MS9jY2U1YmEtZmY5My00NDM4LWE4ZTMtNGE2MzdjNmQ5OTM4
LzEvVFExWlE4SkFOekRlZ1k0eHViWF9IWXdjbkVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG7VESSNu
0CFFH4pCKgEMwH9FSaYStjQhz3fVRy6ovLs01NNjtSqH2TcLAGrGf1uE4pbZAxfu
/brICTUFnpO16pmoVbGZJrY97fAQDyqso3bFQLKBMiVvwOfWL4ikOkitz7zgWlqw
mPSUQay7WqQ/R2zRB5qmenr36FB2ObCndRHLCSw4fQn0UChtUWhUUMwYxucyq6tj
4XZVRH31uJ3+KDpbuEG8o3CwldlMQyMJ/V7/X6nPjvORT4UCKGSuao+Kk/OxZ+K/
SqMjpSuE+0o7htkqGJKgRCkdPMhuvvCcNkcWcj4gQnLxu/xS6/mQTLyhnmIC56SM
DmJK8cjJ5mwLzQ==
-----END CERTIFICATE-----
Generated at Sat Mar 28 12:21:09 2026 by rpki-client