Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/d46a81-3735-42c6-9bbb-1d1799b59c99/1/tLB5uhPORqvsf1vD893Ni7hnWQU.mft
File: tLB5uhPORqvsf1vD893Ni7hnWQU.mft (raw, json)
Hash identifier: R94vI8WKcCKy4jRb3GPKr18IFrGkM1u1654L1tZ844s=
Subject key identifier: CA:70:F4:48:73:A9:8D:2E:01:B2:4D:6D:BF:29:D3:14:11:F3:0B:D8
Authority key identifier: B4:B0:79:BA:13:CE:46:AB:EC:7F:5B:C3:F3:DD:CD:8B:B8:67:59:05
Certificate issuer: /CN=b4b079ba13ce46abec7f5bc3f3ddcd8bb8675905
Certificate serial: 019D26CD3044D8FADBC03EA8E6091C8048F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tLB5uhPORqvsf1vD893Ni7hnWQU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/d46a81-3735-42c6-9bbb-1d1799b59c99/1/tLB5uhPORqvsf1vD893Ni7hnWQU.mft
Manifest number: 1884
Signing time: Wed 25 Mar 2026 21:01:14 +0000
Manifest this update: Wed 25 Mar 2026 21:01:14 +0000
Manifest next update: Thu 26 Mar 2026 21:01:14 +0000
Files and hashes: 1: FAhxwnmDeAJMVVhI5YlXylnLsiM.roa (hash: FA8nAzwRcBfl5+/Pllgr5NzeDPdob+YcG9oEGJZ3NXk=)
2: tLB5uhPORqvsf1vD893Ni7hnWQU.crl (hash: ABI8YwgiyI81qpPcu5hxZhNS7eoRMQGodxBkx7agLDo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/d46a81-3735-42c6-9bbb-1d1799b59c99/1/tLB5uhPORqvsf1vD893Ni7hnWQU.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/d46a81-3735-42c6-9bbb-1d1799b59c99/1/tLB5uhPORqvsf1vD893Ni7hnWQU.mft
rsync://rpki.ripe.net/repository/DEFAULT/tLB5uhPORqvsf1vD893Ni7hnWQU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:30:44:d8:fa:db:c0:3e:a8:e6:09:1c:80:48:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4b079ba13ce46abec7f5bc3f3ddcd8bb8675905
Validity
Not Before: Mar 25 21:01:14 2026 GMT
Not After : Mar 26 21:01:14 2026 GMT
Subject: CN=ca70f44873a98d2e01b24d6dbf29d31411f30bd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:82:d3:05:41:57:0a:4b:7f:8d:13:09:7d:1c:
38:04:39:49:9f:11:9d:d4:c3:0c:52:b7:6c:75:85:
50:ce:1f:25:24:c8:9b:2c:4f:f5:23:81:d0:65:58:
fe:5c:4d:45:aa:39:22:3f:f5:cd:2c:b3:47:1e:51:
46:db:47:18:1f:d8:a6:72:42:d0:11:85:d1:a9:b6:
65:ad:07:83:14:d6:ad:49:9b:89:0f:87:14:68:6e:
cb:fa:b1:cc:7d:42:ed:ed:7c:7b:99:05:24:8c:19:
8e:be:58:92:64:c2:55:2d:c7:a3:33:cd:54:fc:35:
ec:bd:23:41:37:48:f0:96:1b:43:39:2f:7e:8a:89:
3a:9d:56:65:29:af:e4:59:6d:ef:5d:56:b0:35:04:
d0:b7:5d:ef:dd:8b:78:8f:48:80:1c:de:a0:49:8e:
4e:23:dc:1d:02:50:39:3c:d9:62:a4:87:b7:15:e1:
69:af:63:28:2a:7d:01:c9:22:0e:42:b8:4b:90:76:
c1:02:b6:4a:7f:bc:96:48:d4:80:d5:3e:4d:01:e4:
ea:42:93:85:14:78:95:74:5d:53:00:dd:6a:16:1f:
98:a7:4a:4a:16:5a:2b:eb:40:3d:5a:56:c5:8d:94:
96:39:b2:95:c7:21:91:f3:63:db:24:39:9d:68:0e:
3c:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:70:F4:48:73:A9:8D:2E:01:B2:4D:6D:BF:29:D3:14:11:F3:0B:D8
X509v3 Authority Key Identifier:
keyid:B4:B0:79:BA:13:CE:46:AB:EC:7F:5B:C3:F3:DD:CD:8B:B8:67:59:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tLB5uhPORqvsf1vD893Ni7hnWQU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/d46a81-3735-42c6-9bbb-1d1799b59c99/1/tLB5uhPORqvsf1vD893Ni7hnWQU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/d46a81-3735-42c6-9bbb-1d1799b59c99/1/tLB5uhPORqvsf1vD893Ni7hnWQU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:d9:e0:a4:47:35:45:08:13:6a:42:d7:1a:26:9a:8e:ce:d6:
e6:59:19:7f:bc:07:11:56:e7:73:33:a1:a7:6c:9a:97:06:84:
bc:0d:88:13:f0:73:9e:3a:d0:81:90:33:e1:79:07:ac:34:b7:
ac:69:25:6e:e1:ed:8f:c8:41:38:b6:07:3f:94:4b:1d:a6:47:
2d:b6:b4:9e:cc:6f:d9:cc:ca:a3:60:1a:22:de:13:b0:cb:15:
d5:80:d2:7d:82:e5:20:56:cf:43:34:a6:05:51:ea:c2:0c:84:
1e:17:87:ba:5e:e2:49:46:78:1a:be:c1:9b:da:3f:72:e0:c7:
b7:1e:24:2a:8c:d1:8b:6e:fe:f6:ca:43:7c:8d:84:4e:73:93:
cb:8b:fd:47:96:97:33:10:aa:c7:e1:12:5e:8b:1c:f1:6f:69:
fd:55:ef:3d:51:80:91:f6:3d:a0:02:8a:a5:e7:d1:40:6e:e6:
d5:aa:ee:60:50:36:65:2c:bc:7a:32:b3:b0:a8:1a:ff:83:c9:
64:9e:c3:0f:07:2a:68:7f:62:da:c5:f2:66:a2:4f:2c:1b:b4:
98:cc:e7:7b:92:3a:aa:76:49:f3:3c:fd:89:46:15:18:48:8e:
33:4d:d1:d9:b6:7d:3f:11:04:03:bf:37:1e:ab:9e:31:23:19:
82:29:44:04
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mzTBE2PrbwD6o5gkcgEjyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0YjA3OWJhMTNjZTQ2YWJlYzdmNWJjM2YzZGRjZDhiYjg2
NzU5MDUwHhcNMjYwMzI1MjEwMTE0WhcNMjYwMzI2MjEwMTE0WjAzMTEwLwYDVQQD
EyhjYTcwZjQ0ODczYTk4ZDJlMDFiMjRkNmRiZjI5ZDMxNDExZjMwYmQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApoLTBUFXCkt/jRMJfRw4BDlJnxGd
1MMMUrdsdYVQzh8lJMibLE/1I4HQZVj+XE1FqjkiP/XNLLNHHlFG20cYH9imckLQ
EYXRqbZlrQeDFNatSZuJD4cUaG7L+rHMfULt7Xx7mQUkjBmOvliSZMJVLcejM81U
/DXsvSNBN0jwlhtDOS9+iok6nVZlKa/kWW3vXVawNQTQt13v3Yt4j0iAHN6gSY5O
I9wdAlA5PNlipIe3FeFpr2MoKn0BySIOQrhLkHbBArZKf7yWSNSA1T5NAeTqQpOF
FHiVdF1TAN1qFh+Yp0pKFlor60A9WlbFjZSWObKVxyGR82PbJDmdaA48ywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMpw9EhzqY0uAbJNbb8p0xQR8wvYMB8GA1UdIwQY
MBaAFLSweboTzkar7H9bw/PdzYu4Z1kFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdExCNXVoUE9ScXZzZjF2RDg5M05pN2huV1FVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC9kNDZhODEtMzczNS00MmM2LTliYmIt
MWQxNzk5YjU5Yzk5LzEvdExCNXVoUE9ScXZzZjF2RDg5M05pN2huV1FVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC9kNDZhODEtMzczNS00MmM2LTliYmItMWQxNzk5YjU5Yzk5
LzEvdExCNXVoUE9ScXZzZjF2RDg5M05pN2huV1FVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYtngpEc1
RQgTakLXGiaajs7W5lkZf7wHEVbnczOhp2yalwaEvA2IE/BznjrQgZAz4XkHrDS3
rGklbuHtj8hBOLYHP5RLHaZHLba0nsxv2czKo2AaIt4TsMsV1YDSfYLlIFbPQzSm
BVHqwgyEHheHul7iSUZ4Gr7Bm9o/cuDHtx4kKozRi27+9spDfI2ETnOTy4v9R5aX
MxCqx+ESXosc8W9p/VXvPVGAkfY9oAKKpefRQG7m1aruYFA2ZSy8ejKzsKga/4PJ
ZJ7DDwcqaH9i2sXyZqJPLBu0mMzne5I6qnZJ8zz9iUYVGEiOM03R2bZ9PxEEA783
HqueMSMZgilEBA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 00:36:32 2026 by rpki-client