Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/a59ee9-33cd-47df-8403-b9472a2c5b3e/1/T7tj3wbeAMhD2mOXc0lZVHHlGiY.mft
File: T7tj3wbeAMhD2mOXc0lZVHHlGiY.mft (raw, json)
Hash identifier: dKCVk4DOoTfbasxZ6Xa/w2xXnDVoplUZMEh4WIem5iQ=
Subject key identifier: CA:B6:C8:41:97:24:74:8E:15:F1:BB:CD:D2:1E:8E:D5:45:1D:67:69
Authority key identifier: 4F:BB:63:DF:06:DE:00:C8:43:DA:63:97:73:49:59:54:71:E5:1A:26
Certificate issuer: /CN=4fbb63df06de00c843da63977349595471e51a26
Certificate serial: 019D269631E3CE20A2CEADADE49ABED70937
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T7tj3wbeAMhD2mOXc0lZVHHlGiY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/a59ee9-33cd-47df-8403-b9472a2c5b3e/1/T7tj3wbeAMhD2mOXc0lZVHHlGiY.mft
Manifest number: 1886
Signing time: Wed 25 Mar 2026 20:01:10 +0000
Manifest this update: Wed 25 Mar 2026 20:01:10 +0000
Manifest next update: Thu 26 Mar 2026 20:01:10 +0000
Files and hashes: 1: A8xv8vtzPNYcudy_CkqqgALd8rQ.roa (hash: Z6P1U4fiAAFfK/T39wGFzFC2aSrZXB1b41nd+Paxb+Y=)
2: PZ4pye6_7166g23AECIvJy9Vhao.roa (hash: 4jYAbauCnevFtoSRsUY9ZzLogbgVs0jCgKmDbNXpnd8=)
3: T7tj3wbeAMhD2mOXc0lZVHHlGiY.crl (hash: 4r9vtQNaF/SofNCXalYOcPgZ7QYHXwj2tQWGArBj0k8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/a59ee9-33cd-47df-8403-b9472a2c5b3e/1/T7tj3wbeAMhD2mOXc0lZVHHlGiY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/a59ee9-33cd-47df-8403-b9472a2c5b3e/1/T7tj3wbeAMhD2mOXc0lZVHHlGiY.mft
rsync://rpki.ripe.net/repository/DEFAULT/T7tj3wbeAMhD2mOXc0lZVHHlGiY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:96:31:e3:ce:20:a2:ce:ad:ad:e4:9a:be:d7:09:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbb63df06de00c843da63977349595471e51a26
Validity
Not Before: Mar 25 20:01:10 2026 GMT
Not After : Mar 26 20:01:10 2026 GMT
Subject: CN=cab6c8419724748e15f1bbcdd21e8ed5451d6769
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:0a:c0:28:49:ef:45:06:3a:e3:20:b4:8d:85:
36:86:65:d1:9d:f0:e6:b7:50:3d:cc:ee:ac:dc:05:
3c:a5:91:2b:fd:d2:0f:fa:84:d8:c8:e4:59:9e:5b:
95:26:d0:e0:64:0f:8e:d3:b8:b4:02:18:1c:a8:1b:
5c:f7:2b:dc:18:92:8e:08:86:d5:d9:62:0a:c7:77:
58:35:1f:69:ee:da:58:e0:ce:f2:17:5f:ae:c7:9b:
35:72:e8:e1:ef:2d:7c:e6:5b:40:9b:39:0c:e0:08:
28:20:1c:1b:9a:e8:ce:2f:f8:cf:1b:7e:50:46:9b:
4c:88:a2:a5:a5:73:84:10:e7:0e:05:0b:0a:4e:72:
a0:d0:9f:06:12:ef:c5:37:5e:ec:5a:65:73:ab:70:
56:63:77:41:72:59:32:9f:88:cd:de:45:d5:c5:1c:
e9:28:9d:52:75:06:f3:4b:79:a2:c2:f8:e7:3b:64:
a8:9a:7b:a4:65:f8:11:0d:77:d0:de:12:fb:59:de:
b3:be:4d:ec:e0:ed:16:31:83:12:2e:ea:aa:7e:e9:
5b:89:00:67:39:cd:2a:58:e1:de:3d:5e:ec:01:18:
d5:b8:fd:8b:bb:35:b6:14:0b:30:0d:3b:4d:79:f1:
43:45:86:e9:3a:51:3a:e5:d1:6a:bc:6b:f8:6d:ab:
c0:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:B6:C8:41:97:24:74:8E:15:F1:BB:CD:D2:1E:8E:D5:45:1D:67:69
X509v3 Authority Key Identifier:
keyid:4F:BB:63:DF:06:DE:00:C8:43:DA:63:97:73:49:59:54:71:E5:1A:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T7tj3wbeAMhD2mOXc0lZVHHlGiY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/a59ee9-33cd-47df-8403-b9472a2c5b3e/1/T7tj3wbeAMhD2mOXc0lZVHHlGiY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/a59ee9-33cd-47df-8403-b9472a2c5b3e/1/T7tj3wbeAMhD2mOXc0lZVHHlGiY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:bf:b4:cb:9c:ba:c8:70:c0:5a:7d:f3:ff:e6:af:ed:b4:0c:
08:90:6f:3d:04:f9:3a:e6:35:7b:50:ae:d7:4f:f7:09:ab:5a:
7f:4b:4c:91:6c:14:ae:f3:ee:e1:16:bc:d3:75:cc:0e:ac:8a:
24:b5:e0:75:a5:08:90:9d:12:22:bf:67:e0:5e:4c:3e:ff:51:
fb:91:09:2a:21:65:77:80:f2:2c:19:d9:4a:6e:95:b3:e3:18:
d4:b9:b6:6f:49:ec:a7:e2:7e:98:96:f1:31:31:40:40:67:36:
41:19:36:6a:e1:c9:0d:15:97:d8:1e:40:3b:09:50:82:2c:19:
3b:f1:5c:e1:8c:6c:c0:ce:15:cc:f4:01:c9:f3:b7:f2:5a:5d:
31:30:3c:7d:c8:ed:04:05:77:36:8c:9a:b1:73:78:e5:40:b2:
a3:c4:9f:3e:83:f0:a3:64:02:79:6f:24:67:ea:46:22:c2:5d:
6b:6a:1e:9a:5d:bb:eb:e5:fd:42:60:1d:f3:68:46:56:6b:e5:
eb:a4:16:da:49:1c:cd:9a:47:75:9b:e7:c2:51:34:65:36:da:
12:79:74:87:79:c6:f1:e0:3e:f6:d9:54:89:08:64:05:3c:02:
73:4a:66:f3:03:89:4c:a1:c1:30:ff:b1:4b:fe:20:b3:d1:b2:
09:c8:d2:fb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mljHjziCizq2t5Jq+1wk3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmYmI2M2RmMDZkZTAwYzg0M2RhNjM5NzczNDk1OTU0NzFl
NTFhMjYwHhcNMjYwMzI1MjAwMTEwWhcNMjYwMzI2MjAwMTEwWjAzMTEwLwYDVQQD
EyhjYWI2Yzg0MTk3MjQ3NDhlMTVmMWJiY2RkMjFlOGVkNTQ1MWQ2NzY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxQrAKEnvRQY64yC0jYU2hmXRnfDm
t1A9zO6s3AU8pZEr/dIP+oTYyORZnluVJtDgZA+O07i0AhgcqBtc9yvcGJKOCIbV
2WIKx3dYNR9p7tpY4M7yF1+ux5s1cujh7y185ltAmzkM4AgoIBwbmujOL/jPG35Q
RptMiKKlpXOEEOcOBQsKTnKg0J8GEu/FN17sWmVzq3BWY3dBclkyn4jN3kXVxRzp
KJ1SdQbzS3miwvjnO2SomnukZfgRDXfQ3hL7Wd6zvk3s4O0WMYMSLuqqfulbiQBn
Oc0qWOHePV7sARjVuP2LuzW2FAswDTtNefFDRYbpOlE65dFqvGv4bavAKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMq2yEGXJHSOFfG7zdIejtVFHWdpMB8GA1UdIwQY
MBaAFE+7Y98G3gDIQ9pjl3NJWVRx5RomMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDd0ajN3YmVBTWhEMm1PWGMwbFpWSEhsR2lZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS9hNTllZTktMzNjZC00N2RmLTg0MDMt
Yjk0NzJhMmM1YjNlLzEvVDd0ajN3YmVBTWhEMm1PWGMwbFpWSEhsR2lZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZS9hNTllZTktMzNjZC00N2RmLTg0MDMtYjk0NzJhMmM1YjNl
LzEvVDd0ajN3YmVBTWhEMm1PWGMwbFpWSEhsR2lZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA7+0y5y6
yHDAWn3z/+av7bQMCJBvPQT5OuY1e1Cu10/3Cataf0tMkWwUrvPu4Ra803XMDqyK
JLXgdaUIkJ0SIr9n4F5MPv9R+5EJKiFld4DyLBnZSm6Vs+MY1Lm2b0nsp+J+mJbx
MTFAQGc2QRk2auHJDRWX2B5AOwlQgiwZO/Fc4YxswM4VzPQByfO38lpdMTA8fcjt
BAV3NoyasXN45UCyo8SfPoPwo2QCeW8kZ+pGIsJda2oeml276+X9QmAd82hGVmvl
66QW2kkczZpHdZvnwlE0ZTbaEnl0h3nG8eA+9tlUiQhkBTwCc0pm8wOJTKHBMP+x
S/4gs9GyCcjS+w==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:19:46 2026 by rpki-client