Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/86f38d-8647-413f-a4fe-355f26fca128/1/tCQBfG4cj_1jly4CRJCYR33fF98.mft
File: tCQBfG4cj_1jly4CRJCYR33fF98.mft (raw, json)
Hash identifier: e1LR1hjtu1bRtwU7GhQ/CwF8KwI2oJGEHMuyWCwe/LI=
Subject key identifier: A1:54:F1:51:62:01:53:A7:B7:A2:BC:E8:99:DD:74:9D:1A:F2:6B:AB
Authority key identifier: B4:24:01:7C:6E:1C:8F:FD:63:97:2E:02:44:90:98:47:7D:DF:17:DF
Certificate issuer: /CN=b424017c6e1c8ffd63972e02449098477ddf17df
Certificate serial: 019DA4C1EBE58FB61D4B0010EB3263762812
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tCQBfG4cj_1jly4CRJCYR33fF98.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/86f38d-8647-413f-a4fe-355f26fca128/1/tCQBfG4cj_1jly4CRJCYR33fF98.mft
Manifest number: 92
Signing time: Sun 19 Apr 2026 08:01:05 +0000
Manifest this update: Sun 19 Apr 2026 08:01:05 +0000
Manifest next update: Mon 20 Apr 2026 08:01:05 +0000
Files and hashes: 1: Z9tAGQF9StCthIO0Pjcyl0N2xM4.roa (hash: 6AWanwgFbNvMqkMl3YCOopQDUI07IMGf93/6aV4ujtg=)
2: h2S5SOYfIdtYgW2lzny0MQ8S930.asa (hash: rCu8Reo7yVY7Fv0iiMibroZtuw9DHcD5SnkWO03YCtk=)
3: tCQBfG4cj_1jly4CRJCYR33fF98.crl (hash: nPTYyxFSzGZ+iu2irhwVF6xRGk+dMKQTQU3VL6Gvvs8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/86f38d-8647-413f-a4fe-355f26fca128/1/tCQBfG4cj_1jly4CRJCYR33fF98.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/86f38d-8647-413f-a4fe-355f26fca128/1/tCQBfG4cj_1jly4CRJCYR33fF98.mft
rsync://rpki.ripe.net/repository/DEFAULT/tCQBfG4cj_1jly4CRJCYR33fF98.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:c1:eb:e5:8f:b6:1d:4b:00:10:eb:32:63:76:28:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b424017c6e1c8ffd63972e02449098477ddf17df
Validity
Not Before: Apr 19 08:01:05 2026 GMT
Not After : Apr 20 08:01:05 2026 GMT
Subject: CN=a154f151620153a7b7a2bce899dd749d1af26bab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:3f:2e:8e:67:b3:e5:84:99:ef:0b:a4:3b:07:
0f:87:b0:db:f4:de:e3:3e:cd:f7:f4:14:3d:dc:a3:
6a:45:03:3a:46:7c:4c:19:ed:a7:9c:ac:cc:94:dc:
10:df:5d:53:41:83:35:71:1f:15:14:d9:5c:cf:f1:
e2:e2:6a:ed:b7:36:46:0e:8a:d0:96:92:48:c3:a2:
69:96:36:2b:73:5e:9b:8d:71:01:9f:2a:11:83:23:
a5:65:2a:ff:70:b6:82:25:6a:94:3a:bc:c7:b1:89:
a8:97:d6:4f:02:29:50:fa:29:6c:70:e1:2e:72:9a:
da:67:a5:d8:bc:df:b0:b5:46:a5:97:c0:4a:9d:17:
d9:4c:58:70:14:40:6d:c9:05:f6:dc:39:f9:77:8a:
80:19:cc:92:fb:f6:c2:10:bb:7b:de:7b:0d:01:c9:
29:9a:36:56:2a:fd:61:35:ed:1d:54:7a:fd:2d:d3:
ad:4b:6d:30:ca:be:83:5b:b2:2c:0d:cb:78:27:bb:
e7:29:38:d1:77:68:d6:79:7c:2f:7b:48:20:aa:20:
b6:6b:7c:5f:15:16:4e:1b:6c:bf:5f:1b:b4:ff:4e:
79:3c:bb:3c:80:c9:d0:c3:34:9e:d8:62:88:cd:da:
b5:40:2c:ab:dd:d3:c8:2c:28:83:63:c6:9f:11:87:
78:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:54:F1:51:62:01:53:A7:B7:A2:BC:E8:99:DD:74:9D:1A:F2:6B:AB
X509v3 Authority Key Identifier:
keyid:B4:24:01:7C:6E:1C:8F:FD:63:97:2E:02:44:90:98:47:7D:DF:17:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tCQBfG4cj_1jly4CRJCYR33fF98.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/86f38d-8647-413f-a4fe-355f26fca128/1/tCQBfG4cj_1jly4CRJCYR33fF98.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/86f38d-8647-413f-a4fe-355f26fca128/1/tCQBfG4cj_1jly4CRJCYR33fF98.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:5b:59:75:34:20:b5:96:47:24:60:dc:b6:cf:7c:42:f9:13:
8b:b9:e3:b0:94:9a:f8:b0:b8:d5:90:0e:f0:27:3b:df:f5:97:
84:07:c3:7f:e7:c6:69:4d:0e:e4:6c:43:9d:3f:d9:4c:00:33:
31:35:5a:10:c4:b2:aa:7f:43:33:92:93:b6:ad:9b:c8:2b:df:
21:ab:92:52:d4:fe:62:e3:60:0d:42:b0:7a:8e:37:9b:2f:49:
06:2c:99:e8:81:75:51:be:95:e2:31:7e:e7:1d:49:b1:1c:7f:
48:4f:0b:9b:95:91:42:19:bf:f1:9c:82:33:02:9e:1d:59:d0:
51:52:ae:ed:c0:1a:dd:d2:7a:ef:f2:68:b0:80:de:ea:04:f0:
69:22:a6:82:c0:da:31:be:9d:c3:e5:cd:bd:e8:6b:f3:5a:c6:
01:5d:fa:e0:75:3c:37:ad:ef:fa:80:38:d3:b4:48:95:91:08:
b2:71:94:a9:64:ef:f4:19:53:be:bd:40:16:49:2e:c1:09:16:
14:f2:90:35:57:a8:ad:91:4d:a3:f1:d8:70:34:39:8f:b9:c9:
ac:95:dc:44:e3:ea:ec:34:48:86:cf:81:ea:5b:5a:b0:c6:6a:
a2:0e:7d:a1:e6:21:1a:77:b1:06:ea:ad:07:7e:0c:7d:d4:3d:
81:ad:50:38
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2kwevlj7YdSwAQ6zJjdigSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0MjQwMTdjNmUxYzhmZmQ2Mzk3MmUwMjQ0OTA5ODQ3N2Rk
ZjE3ZGYwHhcNMjYwNDE5MDgwMTA1WhcNMjYwNDIwMDgwMTA1WjAzMTEwLwYDVQQD
EyhhMTU0ZjE1MTYyMDE1M2E3YjdhMmJjZTg5OWRkNzQ5ZDFhZjI2YmFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvj8ujmez5YSZ7wukOwcPh7Db9N7j
Ps339BQ93KNqRQM6RnxMGe2nnKzMlNwQ311TQYM1cR8VFNlcz/Hi4mrttzZGDorQ
lpJIw6JpljYrc16bjXEBnyoRgyOlZSr/cLaCJWqUOrzHsYmol9ZPAilQ+ilscOEu
cpraZ6XYvN+wtUall8BKnRfZTFhwFEBtyQX23Dn5d4qAGcyS+/bCELt73nsNAckp
mjZWKv1hNe0dVHr9LdOtS20wyr6DW7IsDct4J7vnKTjRd2jWeXwve0ggqiC2a3xf
FRZOG2y/Xxu0/055PLs8gMnQwzSe2GKIzdq1QCyr3dPILCiDY8afEYd4YQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKFU8VFiAVOnt6K86JnddJ0a8murMB8GA1UdIwQY
MBaAFLQkAXxuHI/9Y5cuAkSQmEd93xffMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdENRQmZHNGNqXzFqbHk0Q1JKQ1lSMzNmRjk4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS84NmYzOGQtODY0Ny00MTNmLWE0ZmUt
MzU1ZjI2ZmNhMTI4LzEvdENRQmZHNGNqXzFqbHk0Q1JKQ1lSMzNmRjk4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYS84NmYzOGQtODY0Ny00MTNmLWE0ZmUtMzU1ZjI2ZmNhMTI4
LzEvdENRQmZHNGNqXzFqbHk0Q1JKQ1lSMzNmRjk4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASltZdTQg
tZZHJGDcts98QvkTi7njsJSa+LC41ZAO8Cc73/WXhAfDf+fGaU0O5GxDnT/ZTAAz
MTVaEMSyqn9DM5KTtq2byCvfIauSUtT+YuNgDUKweo43my9JBiyZ6IF1Ub6V4jF+
5x1JsRx/SE8Lm5WRQhm/8ZyCMwKeHVnQUVKu7cAa3dJ67/JosIDe6gTwaSKmgsDa
Mb6dw+XNvehr81rGAV364HU8N63v+oA407RIlZEIsnGUqWTv9BlTvr1AFkkuwQkW
FPKQNVeorZFNo/HYcDQ5j7nJrJXcROPq7DRIhs+B6ltasMZqog59oeYhGnexBuqt
B34MfdQ9ga1QOA==
-----END CERTIFICATE-----
Generated at Sun Apr 19 14:50:10 2026 by rpki-client