Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/ca4c34-2704-4f82-bff8-a7ccd0098477/1/TmIrxVBoe20O9geIzq2w_IIKOB8.mft
File: TmIrxVBoe20O9geIzq2w_IIKOB8.mft (raw, json)
Hash identifier: XqJurSbO3xHXG0ojjj/m+qRrNwV1AF51vtWKiGAHvws=
Subject key identifier: 8F:24:1A:69:DF:E2:FD:01:68:89:1E:E1:2D:24:32:6D:4A:C5:D4:35
Authority key identifier: 4E:62:2B:C5:50:68:7B:6D:0E:F6:07:88:CE:AD:B0:FC:82:0A:38:1F
Certificate issuer: /CN=4e622bc550687b6d0ef60788ceadb0fc820a381f
Certificate serial: 019D2816D7AD56AFEDE061472AF332E8177B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TmIrxVBoe20O9geIzq2w_IIKOB8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/ca4c34-2704-4f82-bff8-a7ccd0098477/1/TmIrxVBoe20O9geIzq2w_IIKOB8.mft
Manifest number: 0BCD
Signing time: Thu 26 Mar 2026 03:01:18 +0000
Manifest this update: Thu 26 Mar 2026 03:01:18 +0000
Manifest next update: Fri 27 Mar 2026 03:01:18 +0000
Files and hashes: 1: Oj4ufYEDH_buXhb2Mkfbbooqsvs.roa (hash: 9JNuQjJcdTyhj25S/g29VKqkgUtwlLq3bIBUYpj+fVA=)
2: TmIrxVBoe20O9geIzq2w_IIKOB8.crl (hash: NV16/7XFvs4efe03D4t5GF5YRrdRoZTzyl58O7OpNWA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/ca4c34-2704-4f82-bff8-a7ccd0098477/1/TmIrxVBoe20O9geIzq2w_IIKOB8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/ca4c34-2704-4f82-bff8-a7ccd0098477/1/TmIrxVBoe20O9geIzq2w_IIKOB8.mft
rsync://rpki.ripe.net/repository/DEFAULT/TmIrxVBoe20O9geIzq2w_IIKOB8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:d7:ad:56:af:ed:e0:61:47:2a:f3:32:e8:17:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e622bc550687b6d0ef60788ceadb0fc820a381f
Validity
Not Before: Mar 26 03:01:18 2026 GMT
Not After : Mar 27 03:01:18 2026 GMT
Subject: CN=8f241a69dfe2fd0168891ee12d24326d4ac5d435
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:65:6d:c0:f4:7a:bc:79:77:bd:b3:2f:f9:c9:
76:f3:18:10:e0:b5:11:0d:30:09:7a:8c:d0:d5:bb:
35:de:01:d0:1e:fd:43:aa:7a:f0:a0:8e:bb:b0:e8:
17:7e:a2:f9:56:4f:05:21:7c:c6:ab:38:3f:b0:77:
b0:24:89:11:ce:63:d1:e1:31:e1:b0:60:4c:6e:f8:
bc:1b:75:3f:f9:d0:2a:1a:1c:36:15:8c:3e:a3:e9:
ca:64:b6:bf:2c:76:70:b4:51:a0:75:fe:16:14:7e:
05:c8:4e:ba:de:f0:0b:2e:82:37:e7:0c:5e:39:0e:
dc:66:79:94:27:f9:d9:b6:54:03:0c:96:70:99:5a:
54:80:8f:c8:07:1b:e7:32:96:7b:63:de:0e:df:cf:
e8:89:a7:00:20:8c:46:e1:f4:7e:c7:2c:34:f1:37:
1f:56:df:48:b8:30:0b:36:59:60:be:2e:d1:2e:c9:
4a:e4:de:95:7c:45:4b:9a:4f:44:7c:6a:13:a4:3c:
7f:ce:4e:79:f8:58:2f:3a:4f:f3:db:ec:5b:92:37:
07:50:4b:a0:17:f1:92:d8:9b:23:f6:ea:ae:e3:3f:
da:5c:fd:a9:7d:96:9f:4f:6d:41:25:7f:00:18:89:
db:d5:60:ab:40:0b:d4:79:73:f3:3e:6f:69:cf:a8:
e1:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:24:1A:69:DF:E2:FD:01:68:89:1E:E1:2D:24:32:6D:4A:C5:D4:35
X509v3 Authority Key Identifier:
keyid:4E:62:2B:C5:50:68:7B:6D:0E:F6:07:88:CE:AD:B0:FC:82:0A:38:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TmIrxVBoe20O9geIzq2w_IIKOB8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/ca4c34-2704-4f82-bff8-a7ccd0098477/1/TmIrxVBoe20O9geIzq2w_IIKOB8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/ca4c34-2704-4f82-bff8-a7ccd0098477/1/TmIrxVBoe20O9geIzq2w_IIKOB8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:c6:fc:ac:56:4f:7d:83:5b:b5:35:05:7c:c8:c6:06:f1:12:
89:65:26:24:66:47:57:f2:57:35:8a:d9:67:b9:95:92:6c:12:
95:54:af:bf:df:43:98:0e:7c:5c:33:e9:2c:fc:1e:63:c6:96:
0f:27:02:c4:5d:10:ac:6b:18:2b:46:7a:b1:50:c4:e2:b3:f9:
ed:b1:7c:50:e2:24:6b:60:f2:9e:94:e8:61:1a:ed:09:c7:84:
cf:aa:ef:a5:75:cf:3c:02:68:ff:a0:ee:8c:8f:96:13:78:e2:
49:15:f5:d5:dc:10:8a:72:d2:81:05:e6:c2:2f:6f:7c:a0:75:
54:cb:13:c4:04:aa:3f:a1:f6:ef:a0:25:9f:9c:c1:f7:ef:4e:
c9:f9:02:be:d5:b3:97:5e:c7:bd:fc:3f:29:8b:2e:d8:eb:aa:
e7:f6:95:6d:04:58:17:7f:60:98:43:18:6e:fd:90:4e:9d:37:
77:f1:d4:2b:90:17:0a:cf:a6:3d:7b:e6:7f:58:af:f0:44:05:
46:eb:33:2b:7c:bb:98:c0:2e:cf:b7:5f:8f:76:e3:6c:9e:2b:
b5:08:e2:3d:9e:65:b5:26:87:95:aa:b7:9c:9a:50:a6:1c:8e:
eb:f1:79:8b:14:f7:b0:d6:9a:b9:34:d9:08:9f:3a:77:dc:bd:
49:ba:14:58
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0oFtetVq/t4GFHKvMy6Bd7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRlNjIyYmM1NTA2ODdiNmQwZWY2MDc4OGNlYWRiMGZjODIw
YTM4MWYwHhcNMjYwMzI2MDMwMTE4WhcNMjYwMzI3MDMwMTE4WjAzMTEwLwYDVQQD
Eyg4ZjI0MWE2OWRmZTJmZDAxNjg4OTFlZTEyZDI0MzI2ZDRhYzVkNDM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr2VtwPR6vHl3vbMv+cl28xgQ4LUR
DTAJeozQ1bs13gHQHv1DqnrwoI67sOgXfqL5Vk8FIXzGqzg/sHewJIkRzmPR4THh
sGBMbvi8G3U/+dAqGhw2FYw+o+nKZLa/LHZwtFGgdf4WFH4FyE663vALLoI35wxe
OQ7cZnmUJ/nZtlQDDJZwmVpUgI/IBxvnMpZ7Y94O38/oiacAIIxG4fR+xyw08Tcf
Vt9IuDALNllgvi7RLslK5N6VfEVLmk9EfGoTpDx/zk55+FgvOk/z2+xbkjcHUEug
F/GS2Jsj9uqu4z/aXP2pfZafT21BJX8AGInb1WCrQAvUeXPzPm9pz6jhZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI8kGmnf4v0BaIke4S0kMm1KxdQ1MB8GA1UdIwQY
MBaAFE5iK8VQaHttDvYHiM6tsPyCCjgfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVG1JcnhWQm9lMjBPOWdlSXpxMndfSUlLT0I4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS9jYTRjMzQtMjcwNC00ZjgyLWJmZjgt
YTdjY2QwMDk4NDc3LzEvVG1JcnhWQm9lMjBPOWdlSXpxMndfSUlLT0I4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYS9jYTRjMzQtMjcwNC00ZjgyLWJmZjgtYTdjY2QwMDk4NDc3
LzEvVG1JcnhWQm9lMjBPOWdlSXpxMndfSUlLT0I4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAccb8rFZP
fYNbtTUFfMjGBvESiWUmJGZHV/JXNYrZZ7mVkmwSlVSvv99DmA58XDPpLPweY8aW
DycCxF0QrGsYK0Z6sVDE4rP57bF8UOIka2DynpToYRrtCceEz6rvpXXPPAJo/6Du
jI+WE3jiSRX11dwQinLSgQXmwi9vfKB1VMsTxASqP6H276Aln5zB9+9OyfkCvtWz
l17Hvfw/KYsu2Ouq5/aVbQRYF39gmEMYbv2QTp03d/HUK5AXCs+mPXvmf1iv8EQF
RuszK3y7mMAuz7dfj3bjbJ4rtQjiPZ5ltSaHlaq3nJpQphyO6/F5ixT3sNaauTTZ
CJ86d9y9SboUWA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 06:45:50 2026 by rpki-client