
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/1f3117-f2a1-4322-b63d-f7edb2688652/1/t4CzueCWIhYp_kfhAqxSLaA5ecQ.mft
File: t4CzueCWIhYp_kfhAqxSLaA5ecQ.mft (raw, json)
Hash identifier: VcTQl+8XJYnxt6bdMnXyKt5Lj6t3pClTTSxvn6cdTC8=
Subject key identifier: BB:D2:D5:71:E7:90:94:3B:2C:34:14:42:F2:34:4E:E1:CA:75:13:00
Authority key identifier: B7:80:B3:B9:E0:96:22:16:29:FE:47:E1:02:AC:52:2D:A0:39:79:C4
Certificate issuer: /CN=b780b3b9e096221629fe47e102ac522da03979c4
Certificate serial: 019D29CEC87A43CE3AD237E37A4347688200
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t4CzueCWIhYp_kfhAqxSLaA5ecQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/1f3117-f2a1-4322-b63d-f7edb2688652/1/t4CzueCWIhYp_kfhAqxSLaA5ecQ.mft
Manifest number: 1886
Signing time: Thu 26 Mar 2026 11:01:50 +0000
Manifest this update: Thu 26 Mar 2026 11:01:50 +0000
Manifest next update: Fri 27 Mar 2026 11:01:50 +0000
Files and hashes: 1: mXR1vwAsCEfZCQ6KKfou_FufsHg.roa (hash: MguOaTrNnHUp4FVql5i5MlGMRxd61G72ChYyyrskpls=)
2: t4CzueCWIhYp_kfhAqxSLaA5ecQ.crl (hash: 3/EnhI1Jc9fedsqLHByW4/y8nhngNfUnIRN73pcIdM4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/1f3117-f2a1-4322-b63d-f7edb2688652/1/t4CzueCWIhYp_kfhAqxSLaA5ecQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/1f3117-f2a1-4322-b63d-f7edb2688652/1/t4CzueCWIhYp_kfhAqxSLaA5ecQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/t4CzueCWIhYp_kfhAqxSLaA5ecQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:ce:c8:7a:43:ce:3a:d2:37:e3:7a:43:47:68:82:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b780b3b9e096221629fe47e102ac522da03979c4
Validity
Not Before: Mar 26 11:01:50 2026 GMT
Not After : Mar 27 11:01:50 2026 GMT
Subject: CN=bbd2d571e790943b2c341442f2344ee1ca751300
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:01:63:fd:3f:bb:40:81:2c:9c:31:3d:71:65:
62:00:c0:bc:96:50:e2:f3:c4:48:43:45:72:e5:a8:
47:7e:d9:08:ec:c5:15:bb:bc:f5:2c:c3:3a:5a:c4:
fe:db:30:5b:d2:61:a1:b6:4f:0f:8d:b6:53:36:d7:
f4:2e:e5:ab:19:38:0a:03:c7:6f:9d:7d:19:91:d3:
41:ba:b6:62:d8:c1:73:6e:42:d2:1b:19:c5:03:92:
17:c1:dd:3a:14:03:b4:c0:24:7b:e1:68:a7:06:f4:
66:ee:c8:6c:c9:8a:b9:cc:c9:ac:e7:5c:71:1f:d1:
a9:ba:c0:47:86:89:1b:ef:e7:f8:dd:b6:f1:09:9b:
26:72:e5:17:38:14:8a:bd:a7:f4:2a:24:d6:94:f6:
27:ee:18:b7:48:29:ce:e8:a0:38:80:a8:b6:12:52:
c1:01:cb:a6:be:fb:0e:23:c6:b3:39:66:59:02:a6:
d7:19:c6:a5:7d:61:94:60:02:65:7a:3b:b4:54:0e:
37:01:7e:cc:4f:17:64:aa:ca:a8:56:a3:49:2f:ef:
60:57:2a:35:5a:99:1e:55:f9:72:38:55:31:6d:88:
4e:d1:aa:10:56:3e:30:12:ca:48:4e:8e:01:c5:45:
03:18:29:4d:58:c5:9f:cc:80:5e:08:2b:a2:fe:48:
49:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:D2:D5:71:E7:90:94:3B:2C:34:14:42:F2:34:4E:E1:CA:75:13:00
X509v3 Authority Key Identifier:
keyid:B7:80:B3:B9:E0:96:22:16:29:FE:47:E1:02:AC:52:2D:A0:39:79:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t4CzueCWIhYp_kfhAqxSLaA5ecQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/1f3117-f2a1-4322-b63d-f7edb2688652/1/t4CzueCWIhYp_kfhAqxSLaA5ecQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/1f3117-f2a1-4322-b63d-f7edb2688652/1/t4CzueCWIhYp_kfhAqxSLaA5ecQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:26:c0:6f:d8:76:b2:fc:b6:c5:bf:32:76:91:91:64:a4:b2:
23:d2:d6:51:92:7a:a3:9b:36:c5:fb:71:bf:30:b1:15:9d:fb:
03:7a:71:69:49:32:75:da:d0:c4:0c:2e:52:44:02:e6:e8:65:
c4:be:45:52:fd:53:39:aa:7c:0b:1f:0c:d9:8a:ce:ce:bc:97:
ff:43:6c:c3:f4:d7:e6:69:73:1d:e7:38:59:b7:23:e0:ae:00:
94:7b:8d:01:76:18:db:a6:41:95:66:f5:3a:f8:47:e7:14:48:
02:d5:c2:cb:4a:f7:29:66:d3:e7:cb:b8:6c:48:f9:9f:2d:f1:
12:4a:c3:59:42:4b:93:19:5e:86:36:d5:93:a6:8e:84:a9:24:
d5:b9:86:cb:a4:74:32:e5:f8:c9:05:77:31:85:de:d2:ca:a2:
c7:22:df:44:c4:1a:0e:e2:da:3f:f6:41:67:e6:d1:e2:81:82:
d7:29:53:a9:1e:5e:14:96:72:1c:45:a3:1f:ab:64:fa:da:7c:
a3:de:d3:47:7f:c5:b4:27:6e:b5:e8:ff:a5:20:b4:df:6e:72:
89:0c:b0:f8:c4:7f:50:b5:a7:6d:54:16:ff:7f:c5:2d:8e:d8:
66:82:32:99:c8:f6:86:6f:ef:f0:21:3d:4f:1e:0f:bc:de:09:
ab:16:dc:89
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0pzsh6Q8460jfjekNHaIIAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3ODBiM2I5ZTA5NjIyMTYyOWZlNDdlMTAyYWM1MjJkYTAz
OTc5YzQwHhcNMjYwMzI2MTEwMTUwWhcNMjYwMzI3MTEwMTUwWjAzMTEwLwYDVQQD
EyhiYmQyZDU3MWU3OTA5NDNiMmMzNDE0NDJmMjM0NGVlMWNhNzUxMzAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0gFj/T+7QIEsnDE9cWViAMC8llDi
88RIQ0Vy5ahHftkI7MUVu7z1LMM6WsT+2zBb0mGhtk8PjbZTNtf0LuWrGTgKA8dv
nX0ZkdNBurZi2MFzbkLSGxnFA5IXwd06FAO0wCR74WinBvRm7shsyYq5zMms51xx
H9GpusBHhokb7+f43bbxCZsmcuUXOBSKvaf0KiTWlPYn7hi3SCnO6KA4gKi2ElLB
AcumvvsOI8azOWZZAqbXGcalfWGUYAJleju0VA43AX7MTxdkqsqoVqNJL+9gVyo1
WpkeVflyOFUxbYhO0aoQVj4wEspITo4BxUUDGClNWMWfzIBeCCui/khJGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLvS1XHnkJQ7LDQUQvI0TuHKdRMAMB8GA1UdIwQY
MBaAFLeAs7ngliIWKf5H4QKsUi2gOXnEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdDRDenVlQ1dJaFlwX2tmaEFxeFNMYUE1ZWNRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi8xZjMxMTctZjJhMS00MzIyLWI2M2Qt
ZjdlZGIyNjg4NjUyLzEvdDRDenVlQ1dJaFlwX2tmaEFxeFNMYUE1ZWNRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi8xZjMxMTctZjJhMS00MzIyLWI2M2QtZjdlZGIyNjg4NjUy
LzEvdDRDenVlQ1dJaFlwX2tmaEFxeFNMYUE1ZWNRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAICbAb9h2
svy2xb8ydpGRZKSyI9LWUZJ6o5s2xftxvzCxFZ37A3pxaUkyddrQxAwuUkQC5uhl
xL5FUv1TOap8Cx8M2YrOzryX/0Nsw/TX5mlzHec4Wbcj4K4AlHuNAXYY26ZBlWb1
OvhH5xRIAtXCy0r3KWbT58u4bEj5ny3xEkrDWUJLkxlehjbVk6aOhKkk1bmGy6R0
MuX4yQV3MYXe0sqixyLfRMQaDuLaP/ZBZ+bR4oGC1ylTqR5eFJZyHEWjH6tk+tp8
o97TR3/FtCdutej/pSC0325yiQyw+MR/ULWnbVQW/3/FLY7YZoIymcj2hm/v8CE9
Tx4PvN4JqxbciQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 17:55:24 2026 by rpki-client