Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/86f38d-8647-413f-a4fe-355f26fca128/1/tCQBfG4cj_1jly4CRJCYR33fF98.mft
File: tCQBfG4cj_1jly4CRJCYR33fF98.mft (raw, json)
Hash identifier: zzdgxTRNx3tadMNUUFV83aHpS8ZuKYKNmWKArKuBMo0=
Subject key identifier: C9:E5:C0:FA:17:C3:EA:D6:D6:DF:95:DA:AD:16:C7:58:7C:23:0F:8F
Authority key identifier: B4:24:01:7C:6E:1C:8F:FD:63:97:2E:02:44:90:98:47:7D:DF:17:DF
Certificate issuer: /CN=b424017c6e1c8ffd63972e02449098477ddf17df
Certificate serial: 019CA7C5033E3C8595F0107EF39B39018DA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tCQBfG4cj_1jly4CRJCYR33fF98.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/86f38d-8647-413f-a4fe-355f26fca128/1/tCQBfG4cj_1jly4CRJCYR33fF98.mft
Manifest number: 0F
Signing time: Sun 01 Mar 2026 05:00:32 +0000
Manifest this update: Sun 01 Mar 2026 05:00:32 +0000
Manifest next update: Mon 02 Mar 2026 05:00:32 +0000
Files and hashes: 1: Z9tAGQF9StCthIO0Pjcyl0N2xM4.roa (hash: 6AWanwgFbNvMqkMl3YCOopQDUI07IMGf93/6aV4ujtg=)
2: h2S5SOYfIdtYgW2lzny0MQ8S930.asa (hash: rCu8Reo7yVY7Fv0iiMibroZtuw9DHcD5SnkWO03YCtk=)
3: tCQBfG4cj_1jly4CRJCYR33fF98.crl (hash: JS+xnFjuRDGJap2TGB0cksjMo3YmvFfcoXAgoPtdO/o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/86f38d-8647-413f-a4fe-355f26fca128/1/tCQBfG4cj_1jly4CRJCYR33fF98.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/86f38d-8647-413f-a4fe-355f26fca128/1/tCQBfG4cj_1jly4CRJCYR33fF98.mft
rsync://rpki.ripe.net/repository/DEFAULT/tCQBfG4cj_1jly4CRJCYR33fF98.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 05:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a7:c5:03:3e:3c:85:95:f0:10:7e:f3:9b:39:01:8d:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b424017c6e1c8ffd63972e02449098477ddf17df
Validity
Not Before: Mar 1 05:00:32 2026 GMT
Not After : Mar 2 05:00:32 2026 GMT
Subject: CN=c9e5c0fa17c3ead6d6df95daad16c7587c230f8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:9f:ff:67:64:3b:03:c0:78:65:ee:b7:aa:25:
da:ef:10:c7:8c:47:7d:9a:5c:a1:bd:5d:71:5a:ee:
9b:53:bc:74:00:d2:cb:65:b0:3a:cb:1c:8d:97:74:
ef:ec:3a:da:47:1d:24:e0:2d:53:b1:56:22:17:37:
75:00:ae:4b:d6:cc:7b:f4:6c:53:de:c1:fc:89:37:
59:88:81:88:30:e1:33:34:de:9e:b1:d5:cd:56:ae:
b5:38:12:ef:e8:6e:e4:b7:ac:e1:a6:ec:37:d2:00:
0b:64:00:8f:d6:f8:47:e4:51:08:5f:54:18:cf:5c:
37:89:38:97:ed:f8:63:3b:99:9f:81:70:0e:3b:f5:
bf:0b:a6:9e:02:4b:66:24:b3:5c:a7:1b:9f:33:a8:
aa:61:98:dd:83:af:3a:b8:98:0b:11:7e:e4:7d:a9:
68:10:21:d5:2d:dd:81:5c:4b:76:c2:6a:fe:df:b0:
03:92:ac:bf:dc:ba:48:28:4a:49:b6:d8:34:67:67:
29:f5:eb:6d:91:4b:f7:11:c6:6a:6e:c0:3a:f4:78:
02:4a:be:3d:1f:2e:72:34:ad:05:d7:19:e2:3d:96:
28:3d:b7:0c:cd:b0:18:2a:d6:4e:60:e8:6f:37:32:
3f:71:a1:47:39:57:21:68:e7:a6:e9:59:d9:bf:cc:
c8:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:E5:C0:FA:17:C3:EA:D6:D6:DF:95:DA:AD:16:C7:58:7C:23:0F:8F
X509v3 Authority Key Identifier:
keyid:B4:24:01:7C:6E:1C:8F:FD:63:97:2E:02:44:90:98:47:7D:DF:17:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tCQBfG4cj_1jly4CRJCYR33fF98.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/86f38d-8647-413f-a4fe-355f26fca128/1/tCQBfG4cj_1jly4CRJCYR33fF98.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/86f38d-8647-413f-a4fe-355f26fca128/1/tCQBfG4cj_1jly4CRJCYR33fF98.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:0a:e8:09:86:89:61:3d:eb:94:ea:c6:68:87:b4:38:0d:fe:
fa:3d:48:b9:91:7d:50:27:ee:6a:01:88:92:f0:e9:f3:67:b5:
a0:a7:9b:32:bc:6e:1c:f0:11:b3:f9:16:7b:aa:24:f2:6a:4e:
f0:56:b2:1c:87:7f:ec:b0:ef:a0:58:5c:31:cc:5f:d0:14:97:
b3:a7:73:ec:bc:e4:43:a1:04:de:aa:14:21:77:8e:5e:6c:dc:
10:3f:cc:29:99:bb:23:f9:87:5c:64:ff:78:41:1c:77:1d:56:
7e:d2:06:fc:61:f4:11:78:f3:d8:23:7e:c0:af:e6:58:f5:50:
a7:ce:28:c6:2b:07:98:dc:68:0a:f1:11:66:a0:91:e0:c1:1c:
75:f0:eb:d6:90:6d:41:70:0e:4f:d8:2e:87:cf:2e:2d:25:d1:
f4:16:b3:23:36:d3:87:b0:d6:91:31:33:87:8c:3d:62:3b:f9:
7c:5c:f1:8b:b6:ac:89:70:5a:24:ee:60:2c:65:03:69:96:a6:
bb:cd:5d:de:3f:c7:63:51:e3:79:92:e7:42:2f:7a:8e:db:82:
35:02:fc:24:23:d2:21:b4:72:4f:93:1b:8b:d4:ed:06:c2:22:
2e:cd:9c:11:98:8e:49:c7:dc:0e:c7:f0:3a:08:ab:d0:0f:04:
36:7b:d4:0c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZynxQM+PIWV8BB+85s5AY2kMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0MjQwMTdjNmUxYzhmZmQ2Mzk3MmUwMjQ0OTA5ODQ3N2Rk
ZjE3ZGYwHhcNMjYwMzAxMDUwMDMyWhcNMjYwMzAyMDUwMDMyWjAzMTEwLwYDVQQD
EyhjOWU1YzBmYTE3YzNlYWQ2ZDZkZjk1ZGFhZDE2Yzc1ODdjMjMwZjhmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu5//Z2Q7A8B4Ze63qiXa7xDHjEd9
mlyhvV1xWu6bU7x0ANLLZbA6yxyNl3Tv7DraRx0k4C1TsVYiFzd1AK5L1sx79GxT
3sH8iTdZiIGIMOEzNN6esdXNVq61OBLv6G7kt6zhpuw30gALZACP1vhH5FEIX1QY
z1w3iTiX7fhjO5mfgXAOO/W/C6aeAktmJLNcpxufM6iqYZjdg686uJgLEX7kfalo
ECHVLd2BXEt2wmr+37ADkqy/3LpIKEpJttg0Z2cp9ettkUv3EcZqbsA69HgCSr49
Hy5yNK0F1xniPZYoPbcMzbAYKtZOYOhvNzI/caFHOVchaOem6VnZv8zI6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMnlwPoXw+rW1t+V2q0Wx1h8Iw+PMB8GA1UdIwQY
MBaAFLQkAXxuHI/9Y5cuAkSQmEd93xffMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdENRQmZHNGNqXzFqbHk0Q1JKQ1lSMzNmRjk4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS84NmYzOGQtODY0Ny00MTNmLWE0ZmUt
MzU1ZjI2ZmNhMTI4LzEvdENRQmZHNGNqXzFqbHk0Q1JKQ1lSMzNmRjk4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYS84NmYzOGQtODY0Ny00MTNmLWE0ZmUtMzU1ZjI2ZmNhMTI4
LzEvdENRQmZHNGNqXzFqbHk0Q1JKQ1lSMzNmRjk4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXQroCYaJ
YT3rlOrGaIe0OA3++j1IuZF9UCfuagGIkvDp82e1oKebMrxuHPARs/kWe6ok8mpO
8FayHId/7LDvoFhcMcxf0BSXs6dz7LzkQ6EE3qoUIXeOXmzcED/MKZm7I/mHXGT/
eEEcdx1WftIG/GH0EXjz2CN+wK/mWPVQp84oxisHmNxoCvERZqCR4MEcdfDr1pBt
QXAOT9guh88uLSXR9BazIzbTh7DWkTEzh4w9Yjv5fFzxi7asiXBaJO5gLGUDaZam
u81d3j/HY1HjeZLnQi96jtuCNQL8JCPSIbRyT5Mbi9TtBsIiLs2cEZiOScfcDsfw
Ogir0A8ENnvUDA==
-----END CERTIFICATE-----
Generated at Sun Mar 1 14:40:30 2026 by rpki-client