Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/d9d3c9-f194-4b26-8f10-ff6a9cde6335/1/tcR4e4CrSAGrYrG9v7KOBtMM32o.mft
File: tcR4e4CrSAGrYrG9v7KOBtMM32o.mft (raw, json)
Hash identifier: 0FDnDY19WBIpF61HdqxePo5s0ki5w9ayO+ubIvkmm0Y=
Subject key identifier: 5D:E9:5E:8A:E0:A7:F2:99:63:43:C7:B2:A6:F9:A0:B2:FE:8E:1F:CA
Authority key identifier: B5:C4:78:7B:80:AB:48:01:AB:62:B1:BD:BF:B2:8E:06:D3:0C:DF:6A
Certificate issuer: /CN=b5c4787b80ab4801ab62b1bdbfb28e06d30cdf6a
Certificate serial: 019CABA22C53C48A0023CDCED3DB9B84DCB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tcR4e4CrSAGrYrG9v7KOBtMM32o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/d9d3c9-f194-4b26-8f10-ff6a9cde6335/1/tcR4e4CrSAGrYrG9v7KOBtMM32o.mft
Manifest number: 06A2
Signing time: Sun 01 Mar 2026 23:00:57 +0000
Manifest this update: Sun 01 Mar 2026 23:00:57 +0000
Manifest next update: Mon 02 Mar 2026 23:00:57 +0000
Files and hashes: 1: q-r2zDjO2sGmoc9QswQFQyhASW8.roa (hash: RdehwxnZtuAfNN5Ll+yv9MNFac3Y26/8VjA+iUeTNWw=)
2: tcR4e4CrSAGrYrG9v7KOBtMM32o.crl (hash: 3gvV3/7PwgqYL+XKTkX5nSb21Nimu+yZ7tHqMkXunos=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/d9d3c9-f194-4b26-8f10-ff6a9cde6335/1/tcR4e4CrSAGrYrG9v7KOBtMM32o.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/d9d3c9-f194-4b26-8f10-ff6a9cde6335/1/tcR4e4CrSAGrYrG9v7KOBtMM32o.mft
rsync://rpki.ripe.net/repository/DEFAULT/tcR4e4CrSAGrYrG9v7KOBtMM32o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a2:2c:53:c4:8a:00:23:cd:ce:d3:db:9b:84:dc:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5c4787b80ab4801ab62b1bdbfb28e06d30cdf6a
Validity
Not Before: Mar 1 23:00:57 2026 GMT
Not After : Mar 2 23:00:57 2026 GMT
Subject: CN=5de95e8ae0a7f2996343c7b2a6f9a0b2fe8e1fca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:43:f3:f0:ca:52:54:c1:c4:b2:2b:f0:79:cb:
a1:97:fb:fc:82:ae:b3:f1:94:ff:89:59:8d:40:39:
b0:4a:43:a1:8e:03:94:8f:e9:ff:4a:c1:68:61:87:
39:c0:20:4e:68:03:f8:f5:40:3f:3e:13:05:b7:79:
68:7a:49:ea:73:8c:8f:a0:c0:56:d1:41:73:0e:67:
96:7c:a6:cc:f3:87:0c:e3:41:27:a3:42:49:e4:41:
c4:44:3f:b9:d2:be:37:e4:1d:b7:84:91:80:4d:70:
a2:74:e1:0e:7b:4c:ab:75:dd:56:a3:75:dc:42:77:
c9:7a:db:fb:44:3e:2d:a0:f2:5b:bf:d6:00:7b:97:
9e:1b:ec:88:42:7c:e8:cd:a7:f2:8f:9a:3d:ea:d2:
3e:0d:a5:45:f5:44:7d:14:17:04:09:04:f9:4c:c5:
cb:e1:14:2e:77:be:8e:85:df:c6:78:f3:6f:83:a4:
dd:f1:4b:53:dc:76:2b:cf:e6:0a:33:e7:69:89:f8:
16:be:ff:b2:7e:b5:b6:12:3c:de:bc:7e:ed:38:ce:
6c:45:69:df:8a:fd:a0:62:60:d4:f9:cc:91:3a:62:
d5:35:a2:8f:f7:53:c9:cd:10:93:02:0f:59:c8:e8:
7e:a6:f4:47:1a:02:eb:26:f7:0c:bf:ed:76:34:e1:
61:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:E9:5E:8A:E0:A7:F2:99:63:43:C7:B2:A6:F9:A0:B2:FE:8E:1F:CA
X509v3 Authority Key Identifier:
keyid:B5:C4:78:7B:80:AB:48:01:AB:62:B1:BD:BF:B2:8E:06:D3:0C:DF:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tcR4e4CrSAGrYrG9v7KOBtMM32o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/d9d3c9-f194-4b26-8f10-ff6a9cde6335/1/tcR4e4CrSAGrYrG9v7KOBtMM32o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/d9d3c9-f194-4b26-8f10-ff6a9cde6335/1/tcR4e4CrSAGrYrG9v7KOBtMM32o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:ee:62:f3:65:9a:be:8f:9b:46:a1:da:f8:05:b6:da:30:ce:
93:b7:08:0b:c1:08:4c:eb:0d:3e:d9:8d:b3:7c:f1:f0:c2:da:
a1:d4:4a:e8:1d:2e:1d:33:50:69:93:a7:36:15:27:6b:1c:79:
b7:64:d4:b6:93:cd:96:ba:6e:b0:d2:ce:1b:fc:a0:6a:ab:69:
89:6d:21:00:71:1d:76:30:1a:a7:93:ac:50:2b:33:8c:2e:91:
8d:77:6e:3b:3c:4a:37:62:5a:63:2e:54:c2:9c:ba:66:0e:5e:
90:4a:c6:e9:de:b4:de:34:f1:fb:a6:bb:32:80:8a:db:68:75:
79:25:87:d5:50:fb:a9:80:e7:b2:b8:d5:ae:40:cf:c9:3b:8e:
52:70:3d:6f:6e:c2:a1:57:a6:59:db:07:b9:cf:67:73:12:cd:
35:9e:d7:92:77:e9:b1:d2:d0:dc:82:00:e0:f5:f9:85:9a:c7:
63:d1:42:f6:5d:c8:63:83:44:5a:a5:19:8e:65:1a:bd:10:de:
62:d0:f3:9b:b8:9c:ee:de:5f:e6:dd:db:db:b0:e4:e5:d7:9e:
78:dc:cb:7e:0c:45:7e:86:25:e2:a3:0d:f4:f7:4f:80:2c:ed:
8b:ea:1b:36:8d:92:74:c7:ea:8e:09:7a:0a:37:60:81:1c:10:
44:9c:13:0f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyroixTxIoAI83O09ubhNyzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1YzQ3ODdiODBhYjQ4MDFhYjYyYjFiZGJmYjI4ZTA2ZDMw
Y2RmNmEwHhcNMjYwMzAxMjMwMDU3WhcNMjYwMzAyMjMwMDU3WjAzMTEwLwYDVQQD
Eyg1ZGU5NWU4YWUwYTdmMjk5NjM0M2M3YjJhNmY5YTBiMmZlOGUxZmNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzUPz8MpSVMHEsivwecuhl/v8gq6z
8ZT/iVmNQDmwSkOhjgOUj+n/SsFoYYc5wCBOaAP49UA/PhMFt3loeknqc4yPoMBW
0UFzDmeWfKbM84cM40Eno0JJ5EHERD+50r435B23hJGATXCidOEOe0yrdd1Wo3Xc
QnfJetv7RD4toPJbv9YAe5eeG+yIQnzozafyj5o96tI+DaVF9UR9FBcECQT5TMXL
4RQud76Ohd/GePNvg6Td8UtT3HYrz+YKM+dpifgWvv+yfrW2EjzevH7tOM5sRWnf
iv2gYmDU+cyROmLVNaKP91PJzRCTAg9ZyOh+pvRHGgLrJvcMv+12NOFhrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF3pXorgp/KZY0PHsqb5oLL+jh/KMB8GA1UdIwQY
MBaAFLXEeHuAq0gBq2Kxvb+yjgbTDN9qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdGNSNGU0Q3JTQUdyWXJHOXY3S09CdE1NMzJvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy9kOWQzYzktZjE5NC00YjI2LThmMTAt
ZmY2YTljZGU2MzM1LzEvdGNSNGU0Q3JTQUdyWXJHOXY3S09CdE1NMzJvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNy9kOWQzYzktZjE5NC00YjI2LThmMTAtZmY2YTljZGU2MzM1
LzEvdGNSNGU0Q3JTQUdyWXJHOXY3S09CdE1NMzJvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiO5i82Wa
vo+bRqHa+AW22jDOk7cIC8EITOsNPtmNs3zx8MLaodRK6B0uHTNQaZOnNhUnaxx5
t2TUtpPNlrpusNLOG/ygaqtpiW0hAHEddjAap5OsUCszjC6RjXduOzxKN2JaYy5U
wpy6Zg5ekErG6d603jTx+6a7MoCK22h1eSWH1VD7qYDnsrjVrkDPyTuOUnA9b27C
oVemWdsHuc9ncxLNNZ7XknfpsdLQ3IIA4PX5hZrHY9FC9l3IY4NEWqUZjmUavRDe
YtDzm7ic7t5f5t3b27Dk5deeeNzLfgxFfoYl4qMN9PdPgCzti+obNo2SdMfqjgl6
CjdggRwQRJwTDw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:42:16 2026 by rpki-client