Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/3e775d-b117-40dd-ae6a-2d502e956c04/1/TJ1sVb4b6KhK0t_Vp_-lhI9U1Ak.mft
File: TJ1sVb4b6KhK0t_Vp_-lhI9U1Ak.mft (raw, json)
Hash identifier: Lx46NjdDWfmf+M2HTUQkmyDC/R5TRsoNaS/nRrvUTDQ=
Subject key identifier: 11:D9:F1:77:77:D3:B8:A2:DC:88:78:2D:3F:47:71:C1:5A:3B:33:EC
Authority key identifier: 4C:9D:6C:55:BE:1B:E8:A8:4A:D2:DF:D5:A7:FF:A5:84:8F:54:D4:09
Certificate issuer: /CN=4c9d6c55be1be8a84ad2dfd5a7ffa5848f54d409
Certificate serial: 019CAC473D18EBE22F8399FCF913FA097CD1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TJ1sVb4b6KhK0t_Vp_-lhI9U1Ak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/3e775d-b117-40dd-ae6a-2d502e956c04/1/TJ1sVb4b6KhK0t_Vp_-lhI9U1Ak.mft
Manifest number: 1822
Signing time: Mon 02 Mar 2026 02:01:15 +0000
Manifest this update: Mon 02 Mar 2026 02:01:15 +0000
Manifest next update: Tue 03 Mar 2026 02:01:15 +0000
Files and hashes: 1: DZHKsoKn60cOpPXOTjhxEjCZpns.roa (hash: I2eVheSuMQHjrqYiNeoQc5mmnUzluaRJ/Ixu6RKHy+k=)
2: TJ1sVb4b6KhK0t_Vp_-lhI9U1Ak.crl (hash: QcS7x6lwHMVkArlSp0I8ku1WCyvMNWLkJ1lnfY6MVio=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/3e775d-b117-40dd-ae6a-2d502e956c04/1/TJ1sVb4b6KhK0t_Vp_-lhI9U1Ak.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/3e775d-b117-40dd-ae6a-2d502e956c04/1/TJ1sVb4b6KhK0t_Vp_-lhI9U1Ak.mft
rsync://rpki.ripe.net/repository/DEFAULT/TJ1sVb4b6KhK0t_Vp_-lhI9U1Ak.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:47:3d:18:eb:e2:2f:83:99:fc:f9:13:fa:09:7c:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c9d6c55be1be8a84ad2dfd5a7ffa5848f54d409
Validity
Not Before: Mar 2 02:01:15 2026 GMT
Not After : Mar 3 02:01:15 2026 GMT
Subject: CN=11d9f17777d3b8a2dc88782d3f4771c15a3b33ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:21:af:18:81:e9:9f:28:81:8b:9f:44:ad:93:
90:f1:99:bb:19:a7:3e:b8:4c:51:6f:6f:e6:3b:17:
4a:49:2f:b5:aa:46:fd:48:fb:c7:d1:11:f2:d0:87:
cc:43:69:31:d3:b4:32:0e:ad:d7:58:c0:35:d2:7f:
fd:24:f9:13:c7:ad:0a:a9:fc:ab:7c:1c:1a:96:61:
09:4c:d9:06:16:37:cb:cc:08:86:f2:98:c2:51:a4:
ee:f7:f8:23:06:9c:48:52:df:1e:6b:46:ed:8f:eb:
f6:2a:28:64:03:3e:1e:25:03:27:d0:cd:24:8c:45:
77:20:f2:c5:e4:3d:31:4d:06:19:ba:a5:18:d8:11:
69:b6:74:a6:5a:1e:05:06:6d:02:27:fe:98:4f:9f:
d9:04:fe:c7:12:e9:5a:5c:92:ac:8e:65:a5:cc:22:
f5:1b:54:44:a7:53:4a:51:07:26:24:b2:01:cd:b0:
9b:6d:c5:f8:72:24:b3:48:34:a4:cc:9d:63:b2:11:
83:25:2d:9e:85:48:b5:da:16:08:21:d2:19:cd:4e:
de:3a:87:be:0e:51:27:92:33:fc:74:b9:be:ab:24:
e2:ec:d6:09:3d:f7:53:ac:9a:b8:6e:a1:18:69:9a:
a6:81:91:81:f5:0a:1b:e6:ca:31:5d:28:76:e6:03:
09:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:D9:F1:77:77:D3:B8:A2:DC:88:78:2D:3F:47:71:C1:5A:3B:33:EC
X509v3 Authority Key Identifier:
keyid:4C:9D:6C:55:BE:1B:E8:A8:4A:D2:DF:D5:A7:FF:A5:84:8F:54:D4:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TJ1sVb4b6KhK0t_Vp_-lhI9U1Ak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/3e775d-b117-40dd-ae6a-2d502e956c04/1/TJ1sVb4b6KhK0t_Vp_-lhI9U1Ak.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/3e775d-b117-40dd-ae6a-2d502e956c04/1/TJ1sVb4b6KhK0t_Vp_-lhI9U1Ak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:20:4d:45:20:ed:a6:83:4f:46:fc:3f:01:9b:f8:4c:1d:cf:
c5:48:fb:f7:6f:64:bf:38:86:51:e6:73:4f:c1:8f:c2:8c:93:
45:2d:f9:0e:8f:b1:b1:33:61:a7:91:cd:8b:83:b2:9f:6b:df:
6c:dc:2c:6a:64:45:38:17:d0:d2:ad:5b:33:b8:27:20:8e:51:
09:e4:59:66:67:55:7a:60:9a:53:b2:46:aa:58:2e:35:f1:94:
1b:bd:d1:01:8c:19:a2:e0:cf:1a:bb:d2:1b:86:34:e5:81:fa:
d9:f3:d0:d9:48:81:ca:c3:6c:b5:15:0b:8f:1e:64:17:ff:95:
e5:61:44:f8:78:33:90:d9:93:40:f1:e0:08:e2:b2:c6:43:50:
37:67:fb:7a:38:d7:27:c8:e8:aa:81:70:b0:1f:d3:57:58:18:
27:59:76:ed:bf:89:36:50:7c:2c:be:c6:ac:c7:2e:15:6b:cf:
b9:61:8b:3c:3e:c6:3f:f7:f4:09:a5:2f:2b:e8:1c:d7:94:4f:
88:dc:e0:31:7f:42:b6:2f:c6:94:2a:03:7e:d6:da:25:47:3a:
d0:8c:da:a5:81:fa:9d:a9:56:4a:a2:d9:5c:8b:0c:06:b1:36:
8d:7d:c9:04:ef:86:9e:56:60:80:a2:c0:de:1f:d1:57:c3:95:
e2:92:68:48
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZysRz0Y6+Ivg5n8+RP6CXzRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjOWQ2YzU1YmUxYmU4YTg0YWQyZGZkNWE3ZmZhNTg0OGY1
NGQ0MDkwHhcNMjYwMzAyMDIwMTE1WhcNMjYwMzAzMDIwMTE1WjAzMTEwLwYDVQQD
EygxMWQ5ZjE3Nzc3ZDNiOGEyZGM4ODc4MmQzZjQ3NzFjMTVhM2IzM2VjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzSGvGIHpnyiBi59ErZOQ8Zm7Gac+
uExRb2/mOxdKSS+1qkb9SPvH0RHy0IfMQ2kx07QyDq3XWMA10n/9JPkTx60Kqfyr
fBwalmEJTNkGFjfLzAiG8pjCUaTu9/gjBpxIUt8ea0btj+v2KihkAz4eJQMn0M0k
jEV3IPLF5D0xTQYZuqUY2BFptnSmWh4FBm0CJ/6YT5/ZBP7HEulaXJKsjmWlzCL1
G1REp1NKUQcmJLIBzbCbbcX4ciSzSDSkzJ1jshGDJS2ehUi12hYIIdIZzU7eOoe+
DlEnkjP8dLm+qyTi7NYJPfdTrJq4bqEYaZqmgZGB9Qob5soxXSh25gMJHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBHZ8Xd307ii3Ih4LT9HccFaOzPsMB8GA1UdIwQY
MBaAFEydbFW+G+ioStLf1af/pYSPVNQJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVEoxc1ZiNGI2S2hLMHRfVnBfLWxoSTlVMUFrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy8zZTc3NWQtYjExNy00MGRkLWFlNmEt
MmQ1MDJlOTU2YzA0LzEvVEoxc1ZiNGI2S2hLMHRfVnBfLWxoSTlVMUFrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYy8zZTc3NWQtYjExNy00MGRkLWFlNmEtMmQ1MDJlOTU2YzA0
LzEvVEoxc1ZiNGI2S2hLMHRfVnBfLWxoSTlVMUFrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADSBNRSDt
poNPRvw/AZv4TB3PxUj7929kvziGUeZzT8GPwoyTRS35Do+xsTNhp5HNi4Oyn2vf
bNwsamRFOBfQ0q1bM7gnII5RCeRZZmdVemCaU7JGqlguNfGUG73RAYwZouDPGrvS
G4Y05YH62fPQ2UiBysNstRULjx5kF/+V5WFE+HgzkNmTQPHgCOKyxkNQN2f7ejjX
J8joqoFwsB/TV1gYJ1l27b+JNlB8LL7GrMcuFWvPuWGLPD7GP/f0CaUvK+gc15RP
iNzgMX9Cti/GlCoDftbaJUc60IzapYH6nalWSqLZXIsMBrE2jX3JBO+GnlZggKLA
3h/RV8OV4pJoSA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 06:06:29 2026 by rpki-client