Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/55d584-19a1-47c0-95a6-bc8e0b69ac12/1/tEjWJqkg5C2s0OlI6Wal5LzDwRw.mft
File: tEjWJqkg5C2s0OlI6Wal5LzDwRw.mft (raw, json)
Hash identifier: z7xl4+MdAVqFX9t6W1zkxQpfEYyeuMM+mrTZKE4uGcI=
Subject key identifier: 72:1C:CE:CD:D1:CC:1C:E2:99:95:F4:51:35:E7:92:E1:94:42:61:E3
Authority key identifier: B4:48:D6:26:A9:20:E4:2D:AC:D0:E9:48:E9:66:A5:E4:BC:C3:C1:1C
Certificate issuer: /CN=b448d626a920e42dacd0e948e966a5e4bcc3c11c
Certificate serial: 019CABD9E70F9D9B9FB8AF4771AAB168CF24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tEjWJqkg5C2s0OlI6Wal5LzDwRw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/55d584-19a1-47c0-95a6-bc8e0b69ac12/1/tEjWJqkg5C2s0OlI6Wal5LzDwRw.mft
Manifest number: 12A6
Signing time: Mon 02 Mar 2026 00:01:50 +0000
Manifest this update: Mon 02 Mar 2026 00:01:50 +0000
Manifest next update: Tue 03 Mar 2026 00:01:50 +0000
Files and hashes: 1: Ts1c5R1pfarxRE69RZTUbL8j2wI.roa (hash: ZcQpB70U2YO+2we7XC8myVB/BAIh03F9aXKEn9a2hG4=)
2: tEjWJqkg5C2s0OlI6Wal5LzDwRw.crl (hash: PCTqcWCzzAj+LYJTKaSw/R42s562GShAHkYJySRPbq8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/55d584-19a1-47c0-95a6-bc8e0b69ac12/1/tEjWJqkg5C2s0OlI6Wal5LzDwRw.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/55d584-19a1-47c0-95a6-bc8e0b69ac12/1/tEjWJqkg5C2s0OlI6Wal5LzDwRw.mft
rsync://rpki.ripe.net/repository/DEFAULT/tEjWJqkg5C2s0OlI6Wal5LzDwRw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:e7:0f:9d:9b:9f:b8:af:47:71:aa:b1:68:cf:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b448d626a920e42dacd0e948e966a5e4bcc3c11c
Validity
Not Before: Mar 2 00:01:50 2026 GMT
Not After : Mar 3 00:01:50 2026 GMT
Subject: CN=721ccecdd1cc1ce29995f45135e792e1944261e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:99:90:3d:bf:be:8d:c7:cf:d4:36:cb:92:82:
61:c9:6d:2e:60:cd:70:da:78:38:26:7d:b5:ad:a8:
2b:b6:07:ea:3c:df:7b:02:3d:20:d6:6a:cd:48:ea:
2d:53:38:f9:05:15:7d:d1:9b:9b:df:90:e4:bd:b2:
47:25:66:29:e8:ec:5f:37:3e:b6:4e:b1:c3:ac:21:
d5:5a:54:8f:e3:a3:5d:c4:33:58:f8:a7:06:83:77:
09:65:aa:8d:7f:fd:e7:a0:de:99:ec:8b:47:69:cf:
d2:fc:db:0c:9c:18:f9:0f:7d:9f:5c:a3:16:cc:21:
b5:8b:49:0f:e4:78:03:9f:8d:50:a1:63:50:f9:cc:
68:c8:ea:6d:0c:f9:4e:b0:5f:53:24:21:ff:7e:6c:
5e:de:12:24:d9:08:37:c5:20:29:19:a2:d6:31:4c:
eb:e5:41:03:25:f4:40:90:3e:6d:a2:09:3c:c1:08:
07:48:1c:31:fa:05:5e:6e:f4:54:be:18:19:23:a1:
cb:d4:cd:b4:10:e1:ce:08:13:bf:32:05:17:81:2a:
7a:80:39:80:a1:b4:2c:e1:3d:75:c7:c5:cb:b2:d7:
8b:11:2f:7d:9a:c2:a1:91:5e:bb:81:cf:4d:b4:fc:
04:d0:ec:6e:f3:d4:ba:9e:37:e8:7a:bb:ce:e1:d0:
c4:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:1C:CE:CD:D1:CC:1C:E2:99:95:F4:51:35:E7:92:E1:94:42:61:E3
X509v3 Authority Key Identifier:
keyid:B4:48:D6:26:A9:20:E4:2D:AC:D0:E9:48:E9:66:A5:E4:BC:C3:C1:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tEjWJqkg5C2s0OlI6Wal5LzDwRw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/55d584-19a1-47c0-95a6-bc8e0b69ac12/1/tEjWJqkg5C2s0OlI6Wal5LzDwRw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/55d584-19a1-47c0-95a6-bc8e0b69ac12/1/tEjWJqkg5C2s0OlI6Wal5LzDwRw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:60:ac:5c:b4:8f:21:92:38:17:7a:51:10:38:b6:ad:4e:7f:
75:a3:f3:47:4a:b3:e9:8d:1a:d9:cf:5b:a8:7e:c6:6f:d2:9b:
3b:51:e7:7a:42:f7:fb:e8:64:fb:7b:f6:23:c5:04:b8:38:be:
12:3d:47:3c:49:10:7d:34:c7:a5:78:2f:b4:f3:8f:09:2a:59:
d0:98:88:ef:7b:d6:3c:e8:4e:f5:89:91:bf:e2:86:d2:e6:31:
7b:5c:e0:1b:2a:a7:17:f8:78:48:b3:d5:75:4f:64:4b:47:50:
18:12:f5:8b:15:d1:ef:dc:bb:64:cf:c6:4d:96:b1:61:a2:1f:
13:6e:c7:c0:4d:59:2e:f6:a2:13:be:70:66:cd:37:be:eb:57:
df:e1:7f:44:bb:14:0f:d7:03:7f:59:34:92:74:a1:fc:8e:6e:
f7:05:ea:01:b7:13:6d:67:5c:46:65:a8:11:5a:13:48:de:b4:
3f:c5:1f:18:e1:99:ce:df:91:05:41:8c:36:49:00:3a:2f:b8:
a6:70:42:de:70:d1:4b:83:83:66:a0:b9:52:96:77:81:d4:7c:
ad:ea:d2:45:ea:b5:7b:0c:ed:65:9e:97:cd:da:69:a5:72:02:
88:07:d0:6c:72:74:2d:d0:ce:51:8b:80:bb:66:74:ed:0d:e0:
9c:69:c1:62
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyr2ecPnZufuK9HcaqxaM8kMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0NDhkNjI2YTkyMGU0MmRhY2QwZTk0OGU5NjZhNWU0YmNj
M2MxMWMwHhcNMjYwMzAyMDAwMTUwWhcNMjYwMzAzMDAwMTUwWjAzMTEwLwYDVQQD
Eyg3MjFjY2VjZGQxY2MxY2UyOTk5NWY0NTEzNWU3OTJlMTk0NDI2MWUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyZmQPb++jcfP1DbLkoJhyW0uYM1w
2ng4Jn21ragrtgfqPN97Aj0g1mrNSOotUzj5BRV90Zub35DkvbJHJWYp6OxfNz62
TrHDrCHVWlSP46NdxDNY+KcGg3cJZaqNf/3noN6Z7ItHac/S/NsMnBj5D32fXKMW
zCG1i0kP5HgDn41QoWNQ+cxoyOptDPlOsF9TJCH/fmxe3hIk2Qg3xSApGaLWMUzr
5UEDJfRAkD5togk8wQgHSBwx+gVebvRUvhgZI6HL1M20EOHOCBO/MgUXgSp6gDmA
obQs4T11x8XLsteLES99msKhkV67gc9NtPwE0Oxu89S6njfoervO4dDEKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHIczs3RzBzimZX0UTXnkuGUQmHjMB8GA1UdIwQY
MBaAFLRI1iapIOQtrNDpSOlmpeS8w8EcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdEVqV0pxa2c1QzJzME9sSTZXYWw1THpEd1J3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy81NWQ1ODQtMTlhMS00N2MwLTk1YTYt
YmM4ZTBiNjlhYzEyLzEvdEVqV0pxa2c1QzJzME9sSTZXYWw1THpEd1J3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy81NWQ1ODQtMTlhMS00N2MwLTk1YTYtYmM4ZTBiNjlhYzEy
LzEvdEVqV0pxa2c1QzJzME9sSTZXYWw1THpEd1J3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADmCsXLSP
IZI4F3pREDi2rU5/daPzR0qz6Y0a2c9bqH7Gb9KbO1HnekL3++hk+3v2I8UEuDi+
Ej1HPEkQfTTHpXgvtPOPCSpZ0JiI73vWPOhO9YmRv+KG0uYxe1zgGyqnF/h4SLPV
dU9kS0dQGBL1ixXR79y7ZM/GTZaxYaIfE27HwE1ZLvaiE75wZs03vutX3+F/RLsU
D9cDf1k0knSh/I5u9wXqAbcTbWdcRmWoEVoTSN60P8UfGOGZzt+RBUGMNkkAOi+4
pnBC3nDRS4ODZqC5UpZ3gdR8rerSReq1ewztZZ6XzdpppXICiAfQbHJ0LdDOUYuA
u2Z07Q3gnGnBYg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 11:45:27 2026 by rpki-client