Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/608fdb-a406-4b85-b14a-d2441e8f6c7a/1/tPgsjv3jS9meROrwcxtsUltFShk.mft
File: tPgsjv3jS9meROrwcxtsUltFShk.mft (raw, json)
Hash identifier: 5IOh9uTGy+KfVwk9Ysvmsn11xo8hXqa/uJU2fYtOdWs=
Subject key identifier: 6B:A5:6F:0A:55:51:7E:CB:F5:06:32:E2:02:AD:78:82:B8:07:AE:75
Authority key identifier: B4:F8:2C:8E:FD:E3:4B:D9:9E:44:EA:F0:73:1B:6C:52:5B:45:4A:19
Certificate issuer: /CN=b4f82c8efde34bd99e44eaf0731b6c525b454a19
Certificate serial: 019D2816A63C1E369E8AD1B8887E7351DD55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPgsjv3jS9meROrwcxtsUltFShk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/608fdb-a406-4b85-b14a-d2441e8f6c7a/1/tPgsjv3jS9meROrwcxtsUltFShk.mft
Manifest number: 1886
Signing time: Thu 26 Mar 2026 03:01:06 +0000
Manifest this update: Thu 26 Mar 2026 03:01:06 +0000
Manifest next update: Fri 27 Mar 2026 03:01:06 +0000
Files and hashes: 1: ny4NdP1dzVwPNWBOTK06eWCj9ac.roa (hash: kKntqqKczGjvuxQUkXngXz6ktNgL1Vp59wjcfYKrynM=)
2: tPgsjv3jS9meROrwcxtsUltFShk.crl (hash: s7EAEX6ElP9EE5jWqs1Sjmsx6Cy87G3hmql5COjJrZQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/608fdb-a406-4b85-b14a-d2441e8f6c7a/1/tPgsjv3jS9meROrwcxtsUltFShk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/608fdb-a406-4b85-b14a-d2441e8f6c7a/1/tPgsjv3jS9meROrwcxtsUltFShk.mft
rsync://rpki.ripe.net/repository/DEFAULT/tPgsjv3jS9meROrwcxtsUltFShk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:a6:3c:1e:36:9e:8a:d1:b8:88:7e:73:51:dd:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f82c8efde34bd99e44eaf0731b6c525b454a19
Validity
Not Before: Mar 26 03:01:06 2026 GMT
Not After : Mar 27 03:01:06 2026 GMT
Subject: CN=6ba56f0a55517ecbf50632e202ad7882b807ae75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:90:2a:e1:39:87:b0:83:f9:98:aa:86:38:9a:
f4:46:02:07:f1:4e:de:bf:1a:fc:93:b3:5f:2f:d2:
b7:08:17:40:ac:ba:2a:32:cc:3f:17:32:6b:49:3c:
ae:1f:b8:28:7c:66:22:4f:02:47:90:f7:5e:a4:90:
2a:3f:4c:87:13:6d:51:98:b4:f9:4d:b5:c5:25:b7:
8d:f9:18:90:ae:82:08:b4:9a:01:c7:51:16:13:26:
d7:96:a0:bf:fc:6d:d1:3a:42:8a:2e:12:56:eb:20:
73:c0:f9:83:1c:63:80:10:e9:e0:f8:21:35:bf:88:
cb:e5:55:7e:d7:e4:36:27:48:82:e7:ae:eb:e3:dd:
17:77:7b:e4:2d:66:96:0d:e5:a7:20:73:db:49:32:
de:a0:5f:31:2a:0e:c9:8a:1c:21:0f:e4:39:a8:36:
37:8a:e6:8a:41:b8:7a:57:2c:b3:a1:a7:08:6b:ae:
e5:84:f3:cd:40:ce:5d:f5:72:50:f6:f0:ec:e0:e7:
f3:bd:78:23:f0:2a:21:04:f5:92:80:b9:cf:af:24:
ba:6f:2e:2e:3b:d2:0f:4e:26:77:ab:ef:ee:5d:c7:
be:9c:cc:4c:d7:f7:0b:16:90:1a:c3:e7:d8:0f:cb:
a7:e6:e2:89:97:62:eb:d8:f7:48:6f:b0:42:cb:e4:
38:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:A5:6F:0A:55:51:7E:CB:F5:06:32:E2:02:AD:78:82:B8:07:AE:75
X509v3 Authority Key Identifier:
keyid:B4:F8:2C:8E:FD:E3:4B:D9:9E:44:EA:F0:73:1B:6C:52:5B:45:4A:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPgsjv3jS9meROrwcxtsUltFShk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/608fdb-a406-4b85-b14a-d2441e8f6c7a/1/tPgsjv3jS9meROrwcxtsUltFShk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/608fdb-a406-4b85-b14a-d2441e8f6c7a/1/tPgsjv3jS9meROrwcxtsUltFShk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:00:cb:0f:16:9c:3b:2a:23:65:f4:0b:30:07:cd:ad:c9:95:
79:0a:87:7b:0c:6e:b0:d4:f1:9a:80:75:e0:6b:04:2c:a1:4f:
63:b0:85:c3:8f:93:f8:65:cd:bd:42:a0:c0:6b:fb:e9:d9:69:
ed:7b:ce:be:2d:29:9e:e5:55:d9:05:7b:45:ed:01:7f:32:43:
86:cd:43:43:a0:99:a0:39:cf:db:48:0a:4b:88:db:72:1c:3d:
05:3f:45:69:bf:42:89:07:8d:53:f5:58:9c:40:75:02:7f:05:
ff:04:f6:ed:f3:a3:6d:e9:d4:94:c6:57:a0:10:67:63:fb:9b:
7e:22:f3:25:78:3a:2b:b9:3a:b2:28:b8:4a:51:ba:4e:a6:4a:
db:4e:33:5d:58:0f:6a:dd:e8:de:d1:45:73:69:b2:e9:73:3c:
1a:84:68:d9:b2:df:10:09:17:a1:42:05:41:ff:c7:f2:92:d8:
24:db:26:52:74:25:6f:64:a3:89:a5:08:5a:3b:3c:65:00:5e:
81:7c:e5:b5:a2:62:be:71:38:b1:a2:4a:ef:44:80:8b:9e:2d:
74:9a:ec:98:4d:ed:b6:5b:c6:38:ad:71:c4:8a:00:e1:70:93:
26:49:cf:fe:0a:30:9f:9a:cc:ce:7f:9b:af:f4:dd:76:2a:9b:
40:af:df:8b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0oFqY8HjaeitG4iH5zUd1VMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0ZjgyYzhlZmRlMzRiZDk5ZTQ0ZWFmMDczMWI2YzUyNWI0
NTRhMTkwHhcNMjYwMzI2MDMwMTA2WhcNMjYwMzI3MDMwMTA2WjAzMTEwLwYDVQQD
Eyg2YmE1NmYwYTU1NTE3ZWNiZjUwNjMyZTIwMmFkNzg4MmI4MDdhZTc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA85Aq4TmHsIP5mKqGOJr0RgIH8U7e
vxr8k7NfL9K3CBdArLoqMsw/FzJrSTyuH7gofGYiTwJHkPdepJAqP0yHE21RmLT5
TbXFJbeN+RiQroIItJoBx1EWEybXlqC//G3ROkKKLhJW6yBzwPmDHGOAEOng+CE1
v4jL5VV+1+Q2J0iC567r490Xd3vkLWaWDeWnIHPbSTLeoF8xKg7JihwhD+Q5qDY3
iuaKQbh6VyyzoacIa67lhPPNQM5d9XJQ9vDs4OfzvXgj8CohBPWSgLnPryS6by4u
O9IPTiZ3q+/uXce+nMxM1/cLFpAaw+fYD8un5uKJl2Lr2PdIb7BCy+Q48QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGulbwpVUX7L9QYy4gKteIK4B651MB8GA1UdIwQY
MBaAFLT4LI7940vZnkTq8HMbbFJbRUoZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFBnc2p2M2pTOW1lUk9yd2N4dHNVbHRGU2hrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy82MDhmZGItYTQwNi00Yjg1LWIxNGEt
ZDI0NDFlOGY2YzdhLzEvdFBnc2p2M2pTOW1lUk9yd2N4dHNVbHRGU2hrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy82MDhmZGItYTQwNi00Yjg1LWIxNGEtZDI0NDFlOGY2Yzdh
LzEvdFBnc2p2M2pTOW1lUk9yd2N4dHNVbHRGU2hrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABADLDxac
OyojZfQLMAfNrcmVeQqHewxusNTxmoB14GsELKFPY7CFw4+T+GXNvUKgwGv76dlp
7XvOvi0pnuVV2QV7Re0BfzJDhs1DQ6CZoDnP20gKS4jbchw9BT9Fab9CiQeNU/VY
nEB1An8F/wT27fOjbenUlMZXoBBnY/ubfiLzJXg6K7k6sii4SlG6TqZK204zXVgP
at3o3tFFc2my6XM8GoRo2bLfEAkXoUIFQf/H8pLYJNsmUnQlb2SjiaUIWjs8ZQBe
gXzltaJivnE4saJK70SAi54tdJrsmE3ttlvGOK1xxIoA4XCTJknP/gown5rMzn+b
r/TddiqbQK/fiw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 11:11:52 2026 by rpki-client