Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/9ee980-67a2-4d3c-b6ca-fde073588f0f/1/tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.mft
File: tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.mft (raw, json)
Hash identifier: WR3d8/Yyi5GnPiZcwxeQKDd7PCQlIBCCSSFBZd6XrPE=
Subject key identifier: 48:FA:B1:71:66:A9:D3:FE:FB:2E:1F:33:AD:91:2A:3A:92:09:9E:44
Authority key identifier: B5:99:09:ED:17:1B:38:C1:FD:C4:36:22:29:E7:8D:69:85:1D:E1:1C
Certificate issuer: /CN=b59909ed171b38c1fdc4362229e78d69851de11c
Certificate serial: 019E1F1118052E3CF51CB5E9F7475320CB36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/9ee980-67a2-4d3c-b6ca-fde073588f0f/1/tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.mft
Manifest number: 1909
Signing time: Wed 13 May 2026 02:01:14 +0000
Manifest this update: Wed 13 May 2026 02:01:14 +0000
Manifest next update: Thu 14 May 2026 02:01:14 +0000
Files and hashes: 1: MvE_ASHksIA5Hihl4HjNkYFAKXs.roa (hash: R5hIaQTFtxbBLPslX/5K15uRVo3wvIX5E+vyZLpZGOk=)
2: sTa2ruH12AN1447UXDyFG4sK58o.roa (hash: QQfIB8V26GpvkAguN7nqO2FkvauGQGA+m32WWNo/GsE=)
3: tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.crl (hash: LGlyKNlhWVuI8sBOdkfMDvkXgVloFcvcR0xKQI2HKwA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/9ee980-67a2-4d3c-b6ca-fde073588f0f/1/tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/9ee980-67a2-4d3c-b6ca-fde073588f0f/1/tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.mft
rsync://rpki.ripe.net/repository/DEFAULT/tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:11:18:05:2e:3c:f5:1c:b5:e9:f7:47:53:20:cb:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b59909ed171b38c1fdc4362229e78d69851de11c
Validity
Not Before: May 13 02:01:14 2026 GMT
Not After : May 14 02:01:14 2026 GMT
Subject: CN=48fab17166a9d3fefb2e1f33ad912a3a92099e44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:de:ac:f6:28:3e:3a:91:5b:90:fd:d9:56:e7:
46:62:6b:4a:9a:f2:12:e4:85:1d:f4:fc:26:77:a6:
c7:2f:39:36:5c:46:57:c7:8d:0c:d4:11:b8:cb:ed:
7b:75:f3:0e:07:8f:fa:22:00:f8:43:4c:62:e1:3e:
96:97:d5:df:d0:6f:ef:b8:cd:ee:4f:ab:76:04:70:
ac:e6:ae:63:97:b2:8a:7d:f0:70:d5:2a:89:9d:e6:
f8:69:d1:ef:60:6f:9d:40:27:e2:9e:56:30:0f:b4:
5f:3f:3d:b8:1d:82:4c:00:d9:ed:b0:6d:e1:88:bc:
be:a3:4f:0d:c0:6d:91:c2:59:f5:d7:f6:64:a7:53:
d4:ff:16:0e:8f:34:2a:8d:0f:5f:e0:4c:23:02:85:
fc:f6:63:d2:8f:e6:a6:a6:0d:86:55:cd:a7:bf:d8:
39:e2:b0:74:ea:6b:4e:3b:e4:da:fa:b5:b4:c8:ee:
ff:00:3c:ec:e3:7c:69:e0:d5:00:f9:f4:cd:96:0e:
90:cf:b4:27:48:7c:c0:a7:46:74:63:b8:51:b7:49:
59:b3:09:63:64:16:af:0d:27:13:37:27:e4:f7:1f:
25:1a:e7:21:2d:9d:81:5f:5c:e5:cf:7e:28:72:a8:
19:b8:50:f8:d7:48:73:f5:0e:5b:5e:41:6a:60:eb:
7a:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:FA:B1:71:66:A9:D3:FE:FB:2E:1F:33:AD:91:2A:3A:92:09:9E:44
X509v3 Authority Key Identifier:
keyid:B5:99:09:ED:17:1B:38:C1:FD:C4:36:22:29:E7:8D:69:85:1D:E1:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/9ee980-67a2-4d3c-b6ca-fde073588f0f/1/tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/9ee980-67a2-4d3c-b6ca-fde073588f0f/1/tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:a8:db:5d:d2:05:22:10:fe:5f:cd:7d:92:35:81:74:14:91:
3b:68:42:2e:87:7e:28:01:70:c0:dd:5e:7c:5b:45:1d:2f:4d:
d7:0a:04:22:9f:bb:8f:11:74:b9:65:d5:af:61:55:76:f9:c0:
a2:7c:fc:60:b5:f1:fc:45:40:b5:2d:54:cd:1a:cb:48:89:a8:
6e:53:fb:2d:18:9e:96:d9:fb:48:41:79:ca:13:20:19:24:1c:
8f:60:4b:b5:a7:e3:ef:b5:16:8f:c6:39:a9:d6:b1:6e:5e:00:
e9:e4:3c:b0:92:e9:7f:6c:47:17:5e:19:02:e4:14:fc:ab:5c:
c6:8b:43:9a:e0:df:c4:61:d0:6f:a7:86:8c:ba:7d:37:77:4c:
f4:e6:fd:e1:bd:b8:3a:9f:06:87:39:c5:53:c0:54:b8:63:0b:
b6:6f:86:4e:72:1c:47:f9:c4:fc:46:cf:48:68:75:65:51:37:
d1:d5:ec:2c:d5:fe:72:fa:56:f0:b6:54:80:10:a8:a6:5b:0b:
39:6a:87:d1:f6:1e:47:7d:7d:00:6c:5a:7a:a0:e7:fe:9c:5e:
34:2b:fa:1e:6f:06:99:10:83:b1:87:20:8b:32:fe:e0:8d:62:
85:e9:09:50:21:10:81:39:a5:2b:49:40:3d:16:25:4e:f2:ea:
f3:ed:7c:9e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4fERgFLjz1HLXp90dTIMs2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1OTkwOWVkMTcxYjM4YzFmZGM0MzYyMjI5ZTc4ZDY5ODUx
ZGUxMWMwHhcNMjYwNTEzMDIwMTE0WhcNMjYwNTE0MDIwMTE0WjAzMTEwLwYDVQQD
Eyg0OGZhYjE3MTY2YTlkM2ZlZmIyZTFmMzNhZDkxMmEzYTkyMDk5ZTQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9d6s9ig+OpFbkP3ZVudGYmtKmvIS
5IUd9Pwmd6bHLzk2XEZXx40M1BG4y+17dfMOB4/6IgD4Q0xi4T6Wl9Xf0G/vuM3u
T6t2BHCs5q5jl7KKffBw1SqJneb4adHvYG+dQCfinlYwD7RfPz24HYJMANntsG3h
iLy+o08NwG2Rwln11/Zkp1PU/xYOjzQqjQ9f4EwjAoX89mPSj+ampg2GVc2nv9g5
4rB06mtOO+Ta+rW0yO7/ADzs43xp4NUA+fTNlg6Qz7QnSHzAp0Z0Y7hRt0lZswlj
ZBavDScTNyfk9x8lGuchLZ2BX1zlz34ocqgZuFD410hz9Q5bXkFqYOt6CQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEj6sXFmqdP++y4fM62RKjqSCZ5EMB8GA1UdIwQY
MBaAFLWZCe0XGzjB/cQ2IinnjWmFHeEcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFprSjdSY2JPTUg5eERZaUtlZU5hWVVkNFJ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi85ZWU5ODAtNjdhMi00ZDNjLWI2Y2Et
ZmRlMDczNTg4ZjBmLzEvdFprSjdSY2JPTUg5eERZaUtlZU5hWVVkNFJ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNi85ZWU5ODAtNjdhMi00ZDNjLWI2Y2EtZmRlMDczNTg4ZjBm
LzEvdFprSjdSY2JPTUg5eERZaUtlZU5hWVVkNFJ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeKjbXdIF
IhD+X819kjWBdBSRO2hCLod+KAFwwN1efFtFHS9N1woEIp+7jxF0uWXVr2FVdvnA
onz8YLXx/EVAtS1UzRrLSImoblP7LRieltn7SEF5yhMgGSQcj2BLtafj77UWj8Y5
qdaxbl4A6eQ8sJLpf2xHF14ZAuQU/KtcxotDmuDfxGHQb6eGjLp9N3dM9Ob94b24
Op8GhznFU8BUuGMLtm+GTnIcR/nE/EbPSGh1ZVE30dXsLNX+cvpW8LZUgBCoplsL
OWqH0fYeR319AGxaeqDn/pxeNCv6Hm8GmRCDsYcgizL+4I1ihekJUCEQgTmlK0lA
PRYlTvLq8+18ng==
-----END CERTIFICATE-----
Generated at Wed May 13 08:12:43 2026 by rpki-client