Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/ee54d1-5b15-4f93-897b-0c909bf5be4d/1/tJvYTaF5l8uyhq-QIqsuBboItEI.mft
File: tJvYTaF5l8uyhq-QIqsuBboItEI.mft (raw, json)
Hash identifier: rOpNMxwe84Q2jr2NwxF7MDmM15yr7MpTMEEnJFaGpRo=
Subject key identifier: 6D:3A:25:39:4A:29:F1:7F:AC:E9:F4:E8:DE:52:B9:47:7A:EA:35:63
Authority key identifier: B4:9B:D8:4D:A1:79:97:CB:B2:86:AF:90:22:AB:2E:05:BA:08:B4:42
Certificate issuer: /CN=b49bd84da17997cbb286af9022ab2e05ba08b442
Certificate serial: 019CAD59A2E7D1AEB2BD31D4A51E6DBE6EEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tJvYTaF5l8uyhq-QIqsuBboItEI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/ee54d1-5b15-4f93-897b-0c909bf5be4d/1/tJvYTaF5l8uyhq-QIqsuBboItEI.mft
Manifest number: 13A8
Signing time: Mon 02 Mar 2026 07:00:58 +0000
Manifest this update: Mon 02 Mar 2026 07:00:58 +0000
Manifest next update: Tue 03 Mar 2026 07:00:58 +0000
Files and hashes: 1: PTqqtT4_tP0RAOhqpaeaV7qFsoM.roa (hash: gS+7X+RhiaD/Wpkqye3btlKeUsU6cdg4vX6kC9nPKmY=)
2: Zx8NV8g2SZTn17r6ny-ihGOw0zg.roa (hash: oDKvuRyprpCre1JRHHQFdko0hYMR6EjsyiF9Shy7Ous=)
3: o_4znoNuO2BlgKbgpDwRbvS5e9M.roa (hash: UG/yd3TL4Rh6gQUIGrMAEttNV+zSF20Hc2Z6UKPMWAc=)
4: tJvYTaF5l8uyhq-QIqsuBboItEI.crl (hash: i9LprttKLfnWUnldPLoDS1TO7m6F+WmYjni/lSnJKd0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/ee54d1-5b15-4f93-897b-0c909bf5be4d/1/tJvYTaF5l8uyhq-QIqsuBboItEI.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/ee54d1-5b15-4f93-897b-0c909bf5be4d/1/tJvYTaF5l8uyhq-QIqsuBboItEI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tJvYTaF5l8uyhq-QIqsuBboItEI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 07:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:59:a2:e7:d1:ae:b2:bd:31:d4:a5:1e:6d:be:6e:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b49bd84da17997cbb286af9022ab2e05ba08b442
Validity
Not Before: Mar 2 07:00:58 2026 GMT
Not After : Mar 3 07:00:58 2026 GMT
Subject: CN=6d3a25394a29f17face9f4e8de52b9477aea3563
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:6e:91:f9:6e:1e:2a:8f:12:da:bb:cb:9d:e7:
00:fb:bf:f0:54:c3:b2:e4:00:c5:d0:05:92:f6:12:
db:e7:b4:98:14:54:e4:1f:15:89:bd:be:1a:87:4c:
66:92:c4:94:f5:11:b7:98:01:c0:7b:1a:53:bc:d0:
6f:a0:c0:d9:3f:cc:98:ef:41:30:11:8c:3f:a8:37:
d2:db:0f:c2:b8:6b:53:5f:06:d4:8e:2d:6f:18:74:
11:0c:64:80:d1:29:54:ea:ba:7d:a9:70:a9:4e:8b:
e5:1e:73:55:ea:f5:05:4d:8c:2f:7d:bf:41:58:e5:
d0:e9:6c:ea:78:79:e1:a5:f8:bd:c9:5e:01:de:55:
86:fd:63:39:ee:15:ec:56:f0:39:bc:67:a6:8d:55:
a9:d3:a1:e7:3e:47:a3:f5:b7:87:40:c6:9b:77:9e:
e4:b4:e2:8f:8f:68:43:44:79:d1:72:bb:ec:2a:40:
3d:95:70:d7:89:e8:5f:bb:de:6d:58:ee:7c:ed:9a:
00:6e:fd:e5:29:ea:e9:28:f5:6e:5a:bc:3c:d4:72:
b3:17:4b:7e:22:36:54:c1:ca:f3:41:12:ea:16:ae:
20:8b:c2:64:6b:29:e5:b9:a6:76:74:ec:aa:a4:3b:
87:a2:29:b1:20:20:06:73:fd:3c:85:4c:0a:f3:54:
36:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:3A:25:39:4A:29:F1:7F:AC:E9:F4:E8:DE:52:B9:47:7A:EA:35:63
X509v3 Authority Key Identifier:
keyid:B4:9B:D8:4D:A1:79:97:CB:B2:86:AF:90:22:AB:2E:05:BA:08:B4:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tJvYTaF5l8uyhq-QIqsuBboItEI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/ee54d1-5b15-4f93-897b-0c909bf5be4d/1/tJvYTaF5l8uyhq-QIqsuBboItEI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/ee54d1-5b15-4f93-897b-0c909bf5be4d/1/tJvYTaF5l8uyhq-QIqsuBboItEI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:a0:e5:be:48:b3:f7:3c:0f:6d:4c:eb:05:a5:62:71:f4:81:
a6:5c:fe:85:eb:01:23:f5:f2:d6:61:1a:b9:2a:c4:f4:1e:c6:
95:45:51:eb:d4:95:a0:56:d6:c9:cc:57:a4:e9:73:85:6f:e1:
f7:0c:35:6f:9c:2a:61:04:04:85:f4:10:4c:14:3d:a7:37:02:
9a:9d:b8:fe:34:fb:78:16:51:fe:83:7b:b0:5e:e5:93:bf:10:
3a:52:de:35:75:e6:6d:af:06:35:ec:b2:31:be:d7:a1:9c:93:
23:fd:97:56:6f:f3:51:06:7c:d4:ef:bb:12:3e:37:48:bb:72:
90:6a:aa:1b:54:1f:a5:3b:48:9f:15:f2:d4:22:ac:91:0b:e7:
ee:90:f9:18:5e:29:22:1e:55:19:31:74:1b:54:ba:ed:b6:7b:
74:d0:86:59:ec:17:0b:23:12:50:61:cd:89:c6:66:9e:55:83:
6b:db:88:d6:ca:0d:6d:0f:f9:79:22:bd:31:9e:ed:8e:f7:b4:
db:54:f9:8c:fb:0a:da:10:a8:7f:48:b2:44:50:fb:56:f2:67:
41:b1:19:5e:bb:d6:03:bf:e2:2c:8e:bd:24:6e:1b:89:2d:5a:
80:e4:b3:46:02:75:a4:46:e6:ca:64:53:91:fe:be:11:f0:42:
8a:b1:1c:1f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZytWaLn0a6yvTHUpR5tvm7uMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0OWJkODRkYTE3OTk3Y2JiMjg2YWY5MDIyYWIyZTA1YmEw
OGI0NDIwHhcNMjYwMzAyMDcwMDU4WhcNMjYwMzAzMDcwMDU4WjAzMTEwLwYDVQQD
Eyg2ZDNhMjUzOTRhMjlmMTdmYWNlOWY0ZThkZTUyYjk0NzdhZWEzNTYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzm6R+W4eKo8S2rvLnecA+7/wVMOy
5ADF0AWS9hLb57SYFFTkHxWJvb4ah0xmksSU9RG3mAHAexpTvNBvoMDZP8yY70Ew
EYw/qDfS2w/CuGtTXwbUji1vGHQRDGSA0SlU6rp9qXCpTovlHnNV6vUFTYwvfb9B
WOXQ6WzqeHnhpfi9yV4B3lWG/WM57hXsVvA5vGemjVWp06HnPkej9beHQMabd57k
tOKPj2hDRHnRcrvsKkA9lXDXiehfu95tWO587ZoAbv3lKerpKPVuWrw81HKzF0t+
IjZUwcrzQRLqFq4gi8JkaynluaZ2dOyqpDuHoimxICAGc/08hUwK81Q29wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG06JTlKKfF/rOn06N5SuUd66jVjMB8GA1UdIwQY
MBaAFLSb2E2heZfLsoavkCKrLgW6CLRCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdEp2WVRhRjVsOHV5aHEtUUlxc3VCYm9JdEVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lZTU0ZDEtNWIxNS00ZjkzLTg5N2It
MGM5MDliZjViZTRkLzEvdEp2WVRhRjVsOHV5aHEtUUlxc3VCYm9JdEVJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9lZTU0ZDEtNWIxNS00ZjkzLTg5N2ItMGM5MDliZjViZTRk
LzEvdEp2WVRhRjVsOHV5aHEtUUlxc3VCYm9JdEVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdqDlvkiz
9zwPbUzrBaVicfSBplz+hesBI/Xy1mEauSrE9B7GlUVR69SVoFbWycxXpOlzhW/h
9ww1b5wqYQQEhfQQTBQ9pzcCmp24/jT7eBZR/oN7sF7lk78QOlLeNXXmba8GNeyy
Mb7XoZyTI/2XVm/zUQZ81O+7Ej43SLtykGqqG1QfpTtInxXy1CKskQvn7pD5GF4p
Ih5VGTF0G1S67bZ7dNCGWewXCyMSUGHNicZmnlWDa9uI1soNbQ/5eSK9MZ7tjve0
21T5jPsK2hCof0iyRFD7VvJnQbEZXrvWA7/iLI69JG4biS1agOSzRgJ1pEbmymRT
kf6+EfBCirEcHw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 15:54:41 2026 by rpki-client