Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/262f40-48c7-43c6-9d83-1548ac1356be/1/tDqirb6dQEE3M58g_VhiPIo58TA.mft
File: tDqirb6dQEE3M58g_VhiPIo58TA.mft (raw, json)
Hash identifier: HqJAd/s0wdD2cy++rxSy4Juqvp1o9m6X2arAT1rBajg=
Subject key identifier: E6:F5:E0:50:3C:58:EB:59:4B:A9:C1:D8:6E:D1:DB:96:62:6D:5A:BA
Authority key identifier: B4:3A:A2:AD:BE:9D:40:41:37:33:9F:20:FD:58:62:3C:8A:39:F1:30
Certificate issuer: /CN=b43aa2adbe9d404137339f20fd58623c8a39f130
Certificate serial: 019D28F246F3B159A888E3C8815156866286
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDqirb6dQEE3M58g_VhiPIo58TA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/262f40-48c7-43c6-9d83-1548ac1356be/1/tDqirb6dQEE3M58g_VhiPIo58TA.mft
Manifest number: 0834
Signing time: Thu 26 Mar 2026 07:00:59 +0000
Manifest this update: Thu 26 Mar 2026 07:00:59 +0000
Manifest next update: Fri 27 Mar 2026 07:00:59 +0000
Files and hashes: 1: 09I350KEMMvsvPe6M8I1cJsDKeU.roa (hash: BIa6ZOdxabUdYmm/UU6G7QFOkGcLnbK9+FcHW7ZlUbs=)
2: tDqirb6dQEE3M58g_VhiPIo58TA.crl (hash: 0wdOIQN1L/fy/YFcvYeUYYr+ruQ6y6WgCp4QJ1aeJBc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/262f40-48c7-43c6-9d83-1548ac1356be/1/tDqirb6dQEE3M58g_VhiPIo58TA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/262f40-48c7-43c6-9d83-1548ac1356be/1/tDqirb6dQEE3M58g_VhiPIo58TA.mft
rsync://rpki.ripe.net/repository/DEFAULT/tDqirb6dQEE3M58g_VhiPIo58TA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 07:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:46:f3:b1:59:a8:88:e3:c8:81:51:56:86:62:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b43aa2adbe9d404137339f20fd58623c8a39f130
Validity
Not Before: Mar 26 07:00:59 2026 GMT
Not After : Mar 27 07:00:59 2026 GMT
Subject: CN=e6f5e0503c58eb594ba9c1d86ed1db96626d5aba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:f2:51:06:3f:2f:2e:d0:b8:8b:b8:02:f6:6a:
8c:81:7f:c5:f1:85:da:8d:9c:0e:a2:c7:33:fc:21:
fd:ab:66:fc:b2:f3:4c:ea:7e:76:00:62:98:3f:9d:
27:0b:ce:28:3b:41:31:58:52:ec:d0:15:fe:9e:02:
80:5c:12:f3:a2:c1:a7:34:46:51:2d:1a:da:a6:fb:
a7:a8:b6:ad:0d:9a:6e:1c:72:9b:95:f1:d8:5b:4e:
5a:bc:fa:00:ef:09:94:cd:b7:13:9b:ec:7c:b5:e2:
32:a8:d0:7d:7e:ab:bc:49:e4:f6:17:e1:3c:19:29:
76:67:cf:3f:dc:ab:37:82:4e:f7:f5:f4:bb:68:83:
50:4c:85:fc:37:7b:31:82:3e:45:81:48:19:89:ef:
58:9a:da:c9:50:46:c2:5d:c4:4b:7b:f0:22:d0:1f:
f4:cd:2e:05:18:05:d2:2c:ed:f9:3b:9e:4c:bc:55:
34:61:25:25:9a:60:40:e2:c5:76:8a:57:ce:a5:c9:
c2:42:2c:fc:24:b8:d9:09:1e:4e:73:e3:99:9d:7a:
3b:ad:3a:c9:df:9b:74:24:a6:dc:fc:4b:42:f3:1d:
3c:8c:29:ba:7b:04:b7:0b:60:d8:cc:25:2f:65:34:
39:e5:3d:59:41:b1:9c:58:00:a2:ae:88:72:17:5d:
6c:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:F5:E0:50:3C:58:EB:59:4B:A9:C1:D8:6E:D1:DB:96:62:6D:5A:BA
X509v3 Authority Key Identifier:
keyid:B4:3A:A2:AD:BE:9D:40:41:37:33:9F:20:FD:58:62:3C:8A:39:F1:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDqirb6dQEE3M58g_VhiPIo58TA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/262f40-48c7-43c6-9d83-1548ac1356be/1/tDqirb6dQEE3M58g_VhiPIo58TA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/262f40-48c7-43c6-9d83-1548ac1356be/1/tDqirb6dQEE3M58g_VhiPIo58TA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:d9:cc:8f:43:24:d8:f1:3a:4f:af:44:df:10:fa:ff:2a:d7:
13:28:c2:d0:b7:17:9d:b1:14:16:db:4e:22:b5:2a:97:98:44:
66:03:cd:6d:f9:d9:6a:09:7c:b0:b2:39:8f:c2:a2:14:05:41:
7d:f0:b9:b2:18:86:92:a0:ac:44:c2:49:c9:12:b0:3e:5f:e7:
e7:f5:d9:7f:78:d5:04:dd:9a:30:39:14:6c:ec:a4:90:81:40:
dc:4e:50:3f:5b:e9:81:3c:90:b2:59:68:9a:7c:93:65:2e:84:
6c:cd:8b:eb:1c:44:c7:da:a1:74:4c:65:ef:19:52:d7:63:ac:
56:a3:7e:74:36:9e:b9:7a:67:d6:47:f8:f8:d2:1a:6c:a1:39:
27:d2:07:85:db:1e:32:a1:af:7a:6b:36:d2:2a:57:32:07:ce:
3a:2c:1c:63:d3:97:db:3d:f3:c5:b0:e7:e8:94:a0:95:38:b7:
93:38:4d:42:dd:4a:3b:80:0e:59:f8:64:e2:ff:5f:00:20:98:
a5:f0:5a:6e:82:03:73:03:6d:ba:d6:89:a7:6d:ac:33:7d:c9:
16:e8:2c:a3:19:a6:b1:cd:02:fc:55:ae:e0:a0:75:87:64:09:
ae:1a:06:91:6b:ee:c8:9c:59:ce:77:9f:48:9a:a8:61:0b:de:
f4:43:f7:92
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0o8kbzsVmoiOPIgVFWhmKGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0M2FhMmFkYmU5ZDQwNDEzNzMzOWYyMGZkNTg2MjNjOGEz
OWYxMzAwHhcNMjYwMzI2MDcwMDU5WhcNMjYwMzI3MDcwMDU5WjAzMTEwLwYDVQQD
EyhlNmY1ZTA1MDNjNThlYjU5NGJhOWMxZDg2ZWQxZGI5NjYyNmQ1YWJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqfJRBj8vLtC4i7gC9mqMgX/F8YXa
jZwOoscz/CH9q2b8svNM6n52AGKYP50nC84oO0ExWFLs0BX+ngKAXBLzosGnNEZR
LRrapvunqLatDZpuHHKblfHYW05avPoA7wmUzbcTm+x8teIyqNB9fqu8SeT2F+E8
GSl2Z88/3Ks3gk739fS7aINQTIX8N3sxgj5FgUgZie9YmtrJUEbCXcRLe/Ai0B/0
zS4FGAXSLO35O55MvFU0YSUlmmBA4sV2ilfOpcnCQiz8JLjZCR5Oc+OZnXo7rTrJ
35t0JKbc/EtC8x08jCm6ewS3C2DYzCUvZTQ55T1ZQbGcWACirohyF11sSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOb14FA8WOtZS6nB2G7R25ZibVq6MB8GA1UdIwQY
MBaAFLQ6oq2+nUBBNzOfIP1YYjyKOfEwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdERxaXJiNmRRRUUzTTU4Z19WaGlQSW81OFRBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy8yNjJmNDAtNDhjNy00M2M2LTlkODMt
MTU0OGFjMTM1NmJlLzEvdERxaXJiNmRRRUUzTTU4Z19WaGlQSW81OFRBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy8yNjJmNDAtNDhjNy00M2M2LTlkODMtMTU0OGFjMTM1NmJl
LzEvdERxaXJiNmRRRUUzTTU4Z19WaGlQSW81OFRBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ9nMj0Mk
2PE6T69E3xD6/yrXEyjC0LcXnbEUFttOIrUql5hEZgPNbfnZagl8sLI5j8KiFAVB
ffC5shiGkqCsRMJJyRKwPl/n5/XZf3jVBN2aMDkUbOykkIFA3E5QP1vpgTyQsllo
mnyTZS6EbM2L6xxEx9qhdExl7xlS12OsVqN+dDaeuXpn1kf4+NIabKE5J9IHhdse
MqGvems20ipXMgfOOiwcY9OX2z3zxbDn6JSglTi3kzhNQt1KO4AOWfhk4v9fACCY
pfBaboIDcwNtutaJp22sM33JFugsoxmmsc0C/FWu4KB1h2QJrhoGkWvuyJxZznef
SJqoYQve9EP3kg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 13:57:57 2026 by rpki-client