Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/90a5cf-e484-4bb2-a285-6a49b5a31294/1/tPM_b9KbrwPMTUha9fa3DaawCZ8.mft
File: tPM_b9KbrwPMTUha9fa3DaawCZ8.mft (raw, json)
Hash identifier: prMA+IyClMKqjWAkMqGXUqrLF/dVZZ2oaFkSSUb3zEY=
Subject key identifier: B1:7D:52:0D:23:11:47:FE:66:01:DF:8D:BD:E8:C8:8A:9D:13:E1:F5
Authority key identifier: B4:F3:3F:6F:D2:9B:AF:03:CC:4D:48:5A:F5:F6:B7:0D:A6:B0:09:9F
Certificate issuer: /CN=b4f33f6fd29baf03cc4d485af5f6b70da6b0099f
Certificate serial: 019D254CB7816701901152CF5AC6392346DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPM_b9KbrwPMTUha9fa3DaawCZ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/90a5cf-e484-4bb2-a285-6a49b5a31294/1/tPM_b9KbrwPMTUha9fa3DaawCZ8.mft
Manifest number: 115E
Signing time: Wed 25 Mar 2026 14:01:17 +0000
Manifest this update: Wed 25 Mar 2026 14:01:17 +0000
Manifest next update: Thu 26 Mar 2026 14:01:17 +0000
Files and hashes: 1: Fmn_d_Mky7sAyYX6SnAgjbHa1Cc.roa (hash: FmLoKPhtszPmnHtcY6zDJ3BsNEoID8FJ22Wnnvq62SY=)
2: tPM_b9KbrwPMTUha9fa3DaawCZ8.crl (hash: +JDAOrYcT5sUA1yaSlWf8H2MZnE8Obm9uD37nnEs8Cw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/90a5cf-e484-4bb2-a285-6a49b5a31294/1/tPM_b9KbrwPMTUha9fa3DaawCZ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/90a5cf-e484-4bb2-a285-6a49b5a31294/1/tPM_b9KbrwPMTUha9fa3DaawCZ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/tPM_b9KbrwPMTUha9fa3DaawCZ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 14:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:4c:b7:81:67:01:90:11:52:cf:5a:c6:39:23:46:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f33f6fd29baf03cc4d485af5f6b70da6b0099f
Validity
Not Before: Mar 25 14:01:17 2026 GMT
Not After : Mar 26 14:01:17 2026 GMT
Subject: CN=b17d520d231147fe6601df8dbde8c88a9d13e1f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:af:48:5a:af:14:e4:ae:b4:2a:97:4e:43:2a:
4e:f4:7e:b5:89:3a:bb:34:d1:ef:3a:16:17:62:bf:
5e:f8:e2:ac:cd:4c:cf:b8:1e:2d:5c:25:bd:25:8e:
02:02:45:b9:f5:e8:c0:34:0d:bf:35:aa:0d:2a:e9:
57:87:8a:ca:81:0a:0b:ba:43:a5:7b:42:50:e6:dd:
3e:fd:b1:dc:af:63:89:1f:71:e0:ba:6f:d6:5f:f1:
06:0d:97:3e:b7:ed:42:88:93:b6:7f:21:ed:85:5a:
61:5c:73:ed:66:35:47:8d:3b:a3:f9:92:67:9f:47:
16:4c:5b:80:ef:36:cb:74:6a:dc:66:55:14:5a:b2:
a1:0a:be:73:46:45:a6:da:04:44:9a:0f:60:8a:e7:
8b:5c:ae:9c:9d:9d:9c:af:79:1c:ab:d2:e9:df:fb:
27:d2:8f:a4:5d:1f:13:0f:9c:a2:14:7f:13:8a:df:
e9:7b:45:02:8f:46:4f:aa:7f:3b:e7:2a:cc:f0:72:
e3:a2:e4:7f:4e:aa:0a:0c:fc:fa:e1:51:1d:60:ae:
84:ba:14:3f:1d:f0:9d:84:a5:f5:b8:32:e8:57:c8:
00:23:62:f7:b7:7d:84:51:a7:a7:f4:dd:4d:5c:7b:
19:b2:c7:96:0d:9e:15:df:c3:ab:73:73:ad:2e:09:
44:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:7D:52:0D:23:11:47:FE:66:01:DF:8D:BD:E8:C8:8A:9D:13:E1:F5
X509v3 Authority Key Identifier:
keyid:B4:F3:3F:6F:D2:9B:AF:03:CC:4D:48:5A:F5:F6:B7:0D:A6:B0:09:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPM_b9KbrwPMTUha9fa3DaawCZ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/90a5cf-e484-4bb2-a285-6a49b5a31294/1/tPM_b9KbrwPMTUha9fa3DaawCZ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/90a5cf-e484-4bb2-a285-6a49b5a31294/1/tPM_b9KbrwPMTUha9fa3DaawCZ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:e5:b4:26:7d:fa:9a:10:03:53:ce:ab:4b:1d:b4:18:32:85:
b0:d3:97:50:a8:40:45:01:a0:3f:d0:3c:c1:eb:6f:52:48:e0:
08:56:3f:05:3a:4c:60:b3:30:f8:e3:80:20:40:1d:95:e5:4a:
85:36:68:1c:68:cb:78:af:a1:fc:9a:36:56:d3:68:0e:33:a1:
96:1c:9a:8e:b2:3d:b6:9a:f1:13:f5:1e:ee:17:4a:e3:fb:a9:
bd:95:7f:82:97:74:75:47:cb:5b:cd:69:7f:95:26:30:82:07:
f7:09:30:5f:48:4f:c9:0b:63:c3:14:0a:ad:a5:ba:52:17:ca:
48:32:38:44:9d:ca:fd:c6:9c:4d:c2:5e:4d:22:fd:78:58:da:
0b:de:01:16:fc:8a:ce:32:65:f1:b4:e7:7c:60:3a:9f:7d:44:
4d:65:33:1c:55:c3:81:28:5c:95:75:16:a4:d1:e1:d8:87:cd:
8b:88:d4:9b:fd:59:01:c6:cb:b7:71:13:12:fa:3a:86:6c:d4:
24:12:b2:a2:a2:19:e6:62:cb:08:a8:c8:5c:09:d6:05:d7:66:
11:79:68:f6:a8:0b:6e:5b:49:a2:1d:d1:a3:d6:28:f9:bc:d9:
e1:aa:8d:b9:10:c9:0d:58:87:bc:8d:85:e3:62:60:7d:8a:6f:
00:01:9e:84
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0lTLeBZwGQEVLPWsY5I0bdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0ZjMzZjZmZDI5YmFmMDNjYzRkNDg1YWY1ZjZiNzBkYTZi
MDA5OWYwHhcNMjYwMzI1MTQwMTE3WhcNMjYwMzI2MTQwMTE3WjAzMTEwLwYDVQQD
EyhiMTdkNTIwZDIzMTE0N2ZlNjYwMWRmOGRiZGU4Yzg4YTlkMTNlMWY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtq9IWq8U5K60KpdOQypO9H61iTq7
NNHvOhYXYr9e+OKszUzPuB4tXCW9JY4CAkW59ejANA2/NaoNKulXh4rKgQoLukOl
e0JQ5t0+/bHcr2OJH3Hgum/WX/EGDZc+t+1CiJO2fyHthVphXHPtZjVHjTuj+ZJn
n0cWTFuA7zbLdGrcZlUUWrKhCr5zRkWm2gREmg9giueLXK6cnZ2cr3kcq9Lp3/sn
0o+kXR8TD5yiFH8Tit/pe0UCj0ZPqn875yrM8HLjouR/TqoKDPz64VEdYK6EuhQ/
HfCdhKX1uDLoV8gAI2L3t32EUaen9N1NXHsZsseWDZ4V38Orc3OtLglEswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLF9Ug0jEUf+ZgHfjb3oyIqdE+H1MB8GA1UdIwQY
MBaAFLTzP2/Sm68DzE1IWvX2tw2msAmfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFBNX2I5S2Jyd1BNVFVoYTlmYTNEYWF3Q1o4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC85MGE1Y2YtZTQ4NC00YmIyLWEyODUt
NmE0OWI1YTMxMjk0LzEvdFBNX2I5S2Jyd1BNVFVoYTlmYTNEYWF3Q1o4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC85MGE1Y2YtZTQ4NC00YmIyLWEyODUtNmE0OWI1YTMxMjk0
LzEvdFBNX2I5S2Jyd1BNVFVoYTlmYTNEYWF3Q1o4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOOW0Jn36
mhADU86rSx20GDKFsNOXUKhARQGgP9A8wetvUkjgCFY/BTpMYLMw+OOAIEAdleVK
hTZoHGjLeK+h/Jo2VtNoDjOhlhyajrI9tprxE/Ue7hdK4/upvZV/gpd0dUfLW81p
f5UmMIIH9wkwX0hPyQtjwxQKraW6UhfKSDI4RJ3K/cacTcJeTSL9eFjaC94BFvyK
zjJl8bTnfGA6n31ETWUzHFXDgShclXUWpNHh2IfNi4jUm/1ZAcbLt3ETEvo6hmzU
JBKyoqIZ5mLLCKjIXAnWBddmEXlo9qgLbltJoh3Ro9Yo+bzZ4aqNuRDJDViHvI2F
42JgfYpvAAGehA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 00:34:20 2026 by rpki-client