Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/e72c80-6ad7-4b1f-989a-a6b513c47f85/1/TU0qfS8eqI_7WgMlnLP06o0vVfs.mft
File: TU0qfS8eqI_7WgMlnLP06o0vVfs.mft (raw, json)
Hash identifier: 4FRIsP6E+suOkQIhB+3qXLtItAG3mcOH79foPL8oLP8=
Subject key identifier: 11:B3:FF:EE:88:33:7C:E5:B0:4E:B4:D6:5C:F6:AD:45:6F:75:A9:F3
Authority key identifier: 4D:4D:2A:7D:2F:1E:A8:8F:FB:5A:03:25:9C:B3:F4:EA:8D:2F:55:FB
Certificate issuer: /CN=4d4d2a7d2f1ea88ffb5a03259cb3f4ea8d2f55fb
Certificate serial: 019D2884A585885F1A7BEE9F947F115453D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TU0qfS8eqI_7WgMlnLP06o0vVfs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/e72c80-6ad7-4b1f-989a-a6b513c47f85/1/TU0qfS8eqI_7WgMlnLP06o0vVfs.mft
Manifest number: 0132
Signing time: Thu 26 Mar 2026 05:01:14 +0000
Manifest this update: Thu 26 Mar 2026 05:01:14 +0000
Manifest next update: Fri 27 Mar 2026 05:01:14 +0000
Files and hashes: 1: TU0qfS8eqI_7WgMlnLP06o0vVfs.crl (hash: Nt5i/Rifi8iwFbEJqzGrIZmlre87lmXhZ8Zo3kk7lDk=)
2: vBvA5vR33wucy7osTOJ6Y-TO_T4.roa (hash: Hsl3thlnhp1YmvsEG/KFfQjENR51cw3zlC6FxiWsn90=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/e72c80-6ad7-4b1f-989a-a6b513c47f85/1/TU0qfS8eqI_7WgMlnLP06o0vVfs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/e72c80-6ad7-4b1f-989a-a6b513c47f85/1/TU0qfS8eqI_7WgMlnLP06o0vVfs.mft
rsync://rpki.ripe.net/repository/DEFAULT/TU0qfS8eqI_7WgMlnLP06o0vVfs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:a5:85:88:5f:1a:7b:ee:9f:94:7f:11:54:53:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d4d2a7d2f1ea88ffb5a03259cb3f4ea8d2f55fb
Validity
Not Before: Mar 26 05:01:14 2026 GMT
Not After : Mar 27 05:01:14 2026 GMT
Subject: CN=11b3ffee88337ce5b04eb4d65cf6ad456f75a9f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:1e:bd:d0:89:ba:26:4c:50:44:3e:f3:2b:e3:
89:86:50:8a:d1:3a:e6:20:84:52:60:ca:72:d0:da:
c3:a5:fa:82:53:ce:60:15:f6:6e:8b:78:5e:31:b5:
42:74:38:37:42:d6:2f:86:5b:fe:b8:6a:cc:9b:cb:
73:c6:40:40:07:47:98:28:65:65:d9:89:02:e9:84:
de:9c:08:f4:63:e9:5c:eb:9b:cc:b3:38:40:6d:d7:
06:08:cc:d9:45:31:c6:8b:62:44:42:b7:cb:f5:2a:
e4:70:7b:ea:58:9d:4c:05:34:91:8c:ab:de:d9:86:
e6:b9:d5:07:19:9f:21:d1:18:a2:9f:1c:ce:d7:7c:
08:e1:25:e2:8c:d9:28:33:5b:f6:65:bc:ae:d6:e1:
a7:77:70:89:01:cf:0a:15:9b:02:28:ee:44:b6:4c:
b0:7d:bf:2f:6f:42:c9:d8:b2:56:95:f6:59:1e:12:
22:32:d0:9a:0f:cd:b3:09:39:71:b7:18:bb:8f:a4:
0e:3d:6c:82:e1:8e:bf:65:e0:54:d8:87:bb:46:b5:
42:0f:fe:5b:d3:dc:8b:f0:08:8c:db:cd:26:5d:60:
b8:d9:6b:18:ad:7f:68:4c:0e:e4:1d:15:98:54:55:
22:46:4f:b5:ff:07:8c:a1:13:61:9c:b9:36:03:ee:
9c:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:B3:FF:EE:88:33:7C:E5:B0:4E:B4:D6:5C:F6:AD:45:6F:75:A9:F3
X509v3 Authority Key Identifier:
keyid:4D:4D:2A:7D:2F:1E:A8:8F:FB:5A:03:25:9C:B3:F4:EA:8D:2F:55:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TU0qfS8eqI_7WgMlnLP06o0vVfs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/e72c80-6ad7-4b1f-989a-a6b513c47f85/1/TU0qfS8eqI_7WgMlnLP06o0vVfs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/e72c80-6ad7-4b1f-989a-a6b513c47f85/1/TU0qfS8eqI_7WgMlnLP06o0vVfs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:cf:27:8e:bb:1c:44:e5:8b:65:91:db:29:5c:ab:ab:4b:69:
7b:07:54:39:05:c8:e5:23:d3:4c:42:70:cf:95:14:33:0b:cd:
8c:cb:b1:dc:3c:96:f8:fb:1f:c0:6c:e0:21:48:84:a4:b7:8b:
f4:54:5f:70:9a:f2:87:bf:cf:08:7a:e9:c2:dc:2b:0b:64:cc:
6e:f0:81:c2:4c:d7:75:41:50:98:df:fb:8c:87:73:8b:2e:51:
e0:57:13:c6:e0:53:ca:48:9d:54:5b:96:e7:b9:d6:f8:19:a4:
86:0b:a3:99:6c:47:bb:f9:33:43:f6:4b:b2:d0:87:60:82:7e:
78:db:aa:8d:a3:df:6a:84:4c:b7:9f:c4:5d:bd:c2:4d:c9:02:
6a:6a:b0:66:56:1c:df:b9:e3:b4:12:89:fb:e1:23:00:fb:a2:
91:08:a6:cf:37:57:cd:07:7c:8d:c0:25:fa:8c:ec:94:64:93:
58:8b:7b:70:f2:fb:eb:9c:1d:20:1b:c3:a9:0d:e8:d8:97:5a:
49:c0:e0:2e:dc:21:d1:cd:2a:09:0b:6e:42:ef:16:16:3a:75:
5c:d9:8c:6e:ce:26:67:66:dc:0c:6d:ba:12:6a:57:3a:46:6c:
0d:be:f0:6d:e7:27:38:45:7f:02:81:cb:1a:48:9b:57:50:52:
9d:c0:1c:4f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ohKWFiF8ae+6flH8RVFPUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRkNGQyYTdkMmYxZWE4OGZmYjVhMDMyNTljYjNmNGVhOGQy
ZjU1ZmIwHhcNMjYwMzI2MDUwMTE0WhcNMjYwMzI3MDUwMTE0WjAzMTEwLwYDVQQD
EygxMWIzZmZlZTg4MzM3Y2U1YjA0ZWI0ZDY1Y2Y2YWQ0NTZmNzVhOWYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtR690Im6JkxQRD7zK+OJhlCK0Trm
IIRSYMpy0NrDpfqCU85gFfZui3heMbVCdDg3QtYvhlv+uGrMm8tzxkBAB0eYKGVl
2YkC6YTenAj0Y+lc65vMszhAbdcGCMzZRTHGi2JEQrfL9SrkcHvqWJ1MBTSRjKve
2YbmudUHGZ8h0RiinxzO13wI4SXijNkoM1v2Zbyu1uGnd3CJAc8KFZsCKO5Etkyw
fb8vb0LJ2LJWlfZZHhIiMtCaD82zCTlxtxi7j6QOPWyC4Y6/ZeBU2Ie7RrVCD/5b
09yL8AiM280mXWC42WsYrX9oTA7kHRWYVFUiRk+1/weMoRNhnLk2A+6cLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBGz/+6IM3zlsE601lz2rUVvdanzMB8GA1UdIwQY
MBaAFE1NKn0vHqiP+1oDJZyz9OqNL1X7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVFUwcWZTOGVxSV83V2dNbG5MUDA2bzB2VmZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC9lNzJjODAtNmFkNy00YjFmLTk4OWEt
YTZiNTEzYzQ3Zjg1LzEvVFUwcWZTOGVxSV83V2dNbG5MUDA2bzB2VmZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC9lNzJjODAtNmFkNy00YjFmLTk4OWEtYTZiNTEzYzQ3Zjg1
LzEvVFUwcWZTOGVxSV83V2dNbG5MUDA2bzB2VmZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgs8njrsc
ROWLZZHbKVyrq0tpewdUOQXI5SPTTEJwz5UUMwvNjMux3DyW+PsfwGzgIUiEpLeL
9FRfcJryh7/PCHrpwtwrC2TMbvCBwkzXdUFQmN/7jIdziy5R4FcTxuBTykidVFuW
57nW+BmkhgujmWxHu/kzQ/ZLstCHYIJ+eNuqjaPfaoRMt5/EXb3CTckCamqwZlYc
37njtBKJ++EjAPuikQimzzdXzQd8jcAl+ozslGSTWIt7cPL765wdIBvDqQ3o2Jda
ScDgLtwh0c0qCQtuQu8WFjp1XNmMbs4mZ2bcDG26EmpXOkZsDb7wbecnOEV/AoHL
GkibV1BSncAcTw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 09:57:49 2026 by rpki-client