Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/67d57e-f3de-4d10-bd9d-87a10bc68a37/1/tBErtZsGJ9ojr5DA8FhLcbUPd48.mft
File: tBErtZsGJ9ojr5DA8FhLcbUPd48.mft (raw, json)
Hash identifier: 18Aba5m89j7gu+Fz7zRe9O1kb9Zm2UCeg/paH+OehEc=
Subject key identifier: 41:94:14:CF:93:91:95:73:F1:DB:3E:1B:C1:48:E3:98:9D:70:7C:48
Authority key identifier: B4:11:2B:B5:9B:06:27:DA:23:AF:90:C0:F0:58:4B:71:B5:0F:77:8F
Certificate issuer: /CN=b4112bb59b0627da23af90c0f0584b71b50f778f
Certificate serial: 019D29296FF22293C61FA69D1067E4516AE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tBErtZsGJ9ojr5DA8FhLcbUPd48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/67d57e-f3de-4d10-bd9d-87a10bc68a37/1/tBErtZsGJ9ojr5DA8FhLcbUPd48.mft
Manifest number: 1819
Signing time: Thu 26 Mar 2026 08:01:14 +0000
Manifest this update: Thu 26 Mar 2026 08:01:14 +0000
Manifest next update: Fri 27 Mar 2026 08:01:14 +0000
Files and hashes: 1: LYGy5EllLjLC7TGMDgwkX0_QvDU.roa (hash: xMfq4e5OlYkNcnNj+cpAE6tuZxSVsEy28YruLrqthqE=)
2: tBErtZsGJ9ojr5DA8FhLcbUPd48.crl (hash: 5/l713riQ4kk08l24MjHxWE5Z88TtdU4i8p6LAPkcZQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/67d57e-f3de-4d10-bd9d-87a10bc68a37/1/tBErtZsGJ9ojr5DA8FhLcbUPd48.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/67d57e-f3de-4d10-bd9d-87a10bc68a37/1/tBErtZsGJ9ojr5DA8FhLcbUPd48.mft
rsync://rpki.ripe.net/repository/DEFAULT/tBErtZsGJ9ojr5DA8FhLcbUPd48.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:29:6f:f2:22:93:c6:1f:a6:9d:10:67:e4:51:6a:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4112bb59b0627da23af90c0f0584b71b50f778f
Validity
Not Before: Mar 26 08:01:14 2026 GMT
Not After : Mar 27 08:01:14 2026 GMT
Subject: CN=419414cf93919573f1db3e1bc148e3989d707c48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:8a:ab:2c:30:a3:ce:b4:96:5c:53:77:f9:78:
91:c3:7a:c9:f2:ea:ba:b9:33:3a:10:e0:24:8a:12:
43:ed:1a:2d:4a:51:be:47:c6:a6:95:ec:96:9c:c3:
04:e3:0c:ab:77:eb:b5:2a:7b:27:89:6c:b1:eb:21:
62:77:16:5f:17:43:c3:1c:ef:00:2c:59:bc:47:21:
1e:75:b3:18:e1:d9:94:bb:d9:42:a0:10:65:08:89:
bc:98:8b:90:8d:b4:48:1c:17:d5:59:41:19:f2:32:
61:f0:3d:ee:7b:74:16:be:37:62:b3:48:6e:16:f8:
9f:81:59:21:92:f2:84:3b:b4:58:bd:cb:ed:67:34:
fc:f1:cc:92:d0:15:5f:0f:da:ee:93:bf:ab:9e:c7:
02:b9:83:98:f6:9a:5b:4e:55:df:24:07:2c:ad:68:
de:f2:88:12:f3:3a:b2:23:82:ac:83:16:95:32:a5:
53:30:76:cf:ab:b6:a0:06:90:2a:65:69:f8:cc:0c:
90:9a:62:8b:26:98:50:4a:a7:50:51:5d:98:ca:68:
35:62:ba:fb:80:6d:49:24:bc:4e:da:89:63:bc:d6:
29:46:90:98:06:50:23:4f:88:7d:ff:2c:37:a3:a3:
a6:c6:b6:9d:44:e1:d7:cb:91:c0:3d:d9:aa:77:d8:
e5:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:94:14:CF:93:91:95:73:F1:DB:3E:1B:C1:48:E3:98:9D:70:7C:48
X509v3 Authority Key Identifier:
keyid:B4:11:2B:B5:9B:06:27:DA:23:AF:90:C0:F0:58:4B:71:B5:0F:77:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tBErtZsGJ9ojr5DA8FhLcbUPd48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/67d57e-f3de-4d10-bd9d-87a10bc68a37/1/tBErtZsGJ9ojr5DA8FhLcbUPd48.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/67d57e-f3de-4d10-bd9d-87a10bc68a37/1/tBErtZsGJ9ojr5DA8FhLcbUPd48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:67:ee:ef:d5:df:e3:e5:7e:a0:34:9c:b2:8a:cf:39:1d:f3:
0d:57:ed:94:98:fe:d8:f1:d3:2b:e9:c8:aa:7d:1a:1d:43:22:
26:60:ab:27:58:87:2c:12:2a:3c:61:45:ae:f0:42:36:29:b3:
ce:a8:87:88:db:42:89:e3:b9:67:6d:7d:54:90:e0:af:0a:f2:
e2:e9:c0:2a:a8:02:b9:16:84:09:f8:cb:af:87:5f:a5:fa:3d:
a3:44:69:c4:9a:f7:9c:d9:4f:85:d1:be:6b:4a:ae:af:04:0c:
4a:1f:95:72:7c:bc:ed:d1:58:9a:05:e4:bc:05:19:f3:67:0a:
7d:93:10:2a:70:18:2d:83:06:f4:42:3d:bd:01:5b:ee:c1:f5:
8a:3f:de:39:16:27:2f:be:7a:53:68:a0:b6:cd:7e:d3:d2:1d:
e8:34:f4:6f:ce:27:a7:48:77:0f:1c:17:a1:1c:21:f8:ae:3b:
b6:79:58:a0:2a:00:26:15:f2:98:ef:e2:7c:77:38:26:a4:6b:
7b:ba:0f:c9:71:6a:af:4d:5c:96:81:99:19:e6:5a:c2:49:81:
f1:d3:94:59:e6:29:cf:1b:28:14:48:77:58:d4:a6:67:52:1c:
e3:85:ac:80:24:78:72:c0:f3:bc:2f:e3:23:00:33:d2:9b:40:
a2:29:c3:0f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0pKW/yIpPGH6adEGfkUWrkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0MTEyYmI1OWIwNjI3ZGEyM2FmOTBjMGYwNTg0YjcxYjUw
Zjc3OGYwHhcNMjYwMzI2MDgwMTE0WhcNMjYwMzI3MDgwMTE0WjAzMTEwLwYDVQQD
Eyg0MTk0MTRjZjkzOTE5NTczZjFkYjNlMWJjMTQ4ZTM5ODlkNzA3YzQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlYqrLDCjzrSWXFN3+XiRw3rJ8uq6
uTM6EOAkihJD7RotSlG+R8amleyWnMME4wyrd+u1KnsniWyx6yFidxZfF0PDHO8A
LFm8RyEedbMY4dmUu9lCoBBlCIm8mIuQjbRIHBfVWUEZ8jJh8D3ue3QWvjdis0hu
FvifgVkhkvKEO7RYvcvtZzT88cyS0BVfD9ruk7+rnscCuYOY9ppbTlXfJAcsrWje
8ogS8zqyI4KsgxaVMqVTMHbPq7agBpAqZWn4zAyQmmKLJphQSqdQUV2Yymg1Yrr7
gG1JJLxO2oljvNYpRpCYBlAjT4h9/yw3o6OmxradROHXy5HAPdmqd9jl5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEGUFM+TkZVz8ds+G8FI45idcHxIMB8GA1UdIwQY
MBaAFLQRK7WbBifaI6+QwPBYS3G1D3ePMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdEJFcnRac0dKOW9qcjVEQThGaExjYlVQZDQ4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy82N2Q1N2UtZjNkZS00ZDEwLWJkOWQt
ODdhMTBiYzY4YTM3LzEvdEJFcnRac0dKOW9qcjVEQThGaExjYlVQZDQ4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy82N2Q1N2UtZjNkZS00ZDEwLWJkOWQtODdhMTBiYzY4YTM3
LzEvdEJFcnRac0dKOW9qcjVEQThGaExjYlVQZDQ4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACmfu79Xf
4+V+oDScsorPOR3zDVftlJj+2PHTK+nIqn0aHUMiJmCrJ1iHLBIqPGFFrvBCNimz
zqiHiNtCieO5Z219VJDgrwry4unAKqgCuRaECfjLr4dfpfo9o0RpxJr3nNlPhdG+
a0qurwQMSh+Vcny87dFYmgXkvAUZ82cKfZMQKnAYLYMG9EI9vQFb7sH1ij/eORYn
L756U2igts1+09Id6DT0b84np0h3DxwXoRwh+K47tnlYoCoAJhXymO/ifHc4JqRr
e7oPyXFqr01cloGZGeZawkmB8dOUWeYpzxsoFEh3WNSmZ1Ic44WsgCR4csDzvC/j
IwAz0ptAoinDDw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 11:39:11 2026 by rpki-client