Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/975c5e-6b05-4a47-9e91-13699365c3c7/1/Ts9hevNfNyTn2oYOv75OwTiuGAA.mft
File: Ts9hevNfNyTn2oYOv75OwTiuGAA.mft (raw, json)
Hash identifier: DVQT9XJydvV2EvI5uFjn0cgU91ene+qqirBL08iw1O8=
Subject key identifier: 85:82:18:89:C8:5E:FE:99:9A:1C:61:00:25:5E:DE:64:BE:C1:96:70
Authority key identifier: 4E:CF:61:7A:F3:5F:37:24:E7:DA:86:0E:BF:BE:4E:C1:38:AE:18:00
Certificate issuer: /CN=4ecf617af35f3724e7da860ebfbe4ec138ae1800
Certificate serial: 019CACB4760BBBF9C0237A9CEB261070B7EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ts9hevNfNyTn2oYOv75OwTiuGAA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/975c5e-6b05-4a47-9e91-13699365c3c7/1/Ts9hevNfNyTn2oYOv75OwTiuGAA.mft
Manifest number: 158C
Signing time: Mon 02 Mar 2026 04:00:33 +0000
Manifest this update: Mon 02 Mar 2026 04:00:33 +0000
Manifest next update: Tue 03 Mar 2026 04:00:33 +0000
Files and hashes: 1: Ts9hevNfNyTn2oYOv75OwTiuGAA.crl (hash: WpKYT3O4/CCSTWf7NF/+UCmp223JdijlpHwfu/dvyvI=)
2: lRIjNj0BHQE6hiLGxFavKUdyoeg.roa (hash: PocADE6/FL6eoSgXxu0JdSE+M73YHwsz3KQP93yGopU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/975c5e-6b05-4a47-9e91-13699365c3c7/1/Ts9hevNfNyTn2oYOv75OwTiuGAA.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/975c5e-6b05-4a47-9e91-13699365c3c7/1/Ts9hevNfNyTn2oYOv75OwTiuGAA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ts9hevNfNyTn2oYOv75OwTiuGAA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 04:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b4:76:0b:bb:f9:c0:23:7a:9c:eb:26:10:70:b7:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ecf617af35f3724e7da860ebfbe4ec138ae1800
Validity
Not Before: Mar 2 04:00:33 2026 GMT
Not After : Mar 3 04:00:33 2026 GMT
Subject: CN=85821889c85efe999a1c6100255ede64bec19670
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:a3:6f:71:86:f0:52:14:14:8e:91:e3:c7:4a:
59:95:81:bb:8a:53:e8:91:bf:28:3b:32:8a:48:df:
3d:a0:7a:4b:43:3d:ec:25:49:cf:80:d1:7d:04:3b:
2b:43:47:f5:aa:ff:56:15:25:6e:70:eb:b6:9f:ac:
d9:8b:ee:d4:c1:e2:43:25:5b:87:8c:e0:fb:94:88:
43:60:80:d7:82:48:01:fa:d8:36:a1:61:ef:f3:cf:
8f:47:c4:d3:3e:f0:6a:b5:0f:d6:ed:dd:18:bb:8c:
c6:08:5d:73:5e:88:79:7c:d5:f1:fc:d9:f6:55:08:
18:40:eb:60:6b:78:63:bf:06:e0:45:68:fc:c2:0d:
5a:b2:d0:4c:32:b0:13:eb:ea:b5:e6:20:8c:00:86:
97:e1:4c:4a:e5:be:1d:54:8b:85:fb:9b:c3:4d:34:
a9:15:a4:59:88:94:dd:9b:d1:0d:31:2c:35:e6:af:
44:42:df:ef:07:35:7e:2c:ea:fd:19:28:8b:9f:9f:
14:a7:a6:54:52:92:5f:6b:af:23:c4:f9:93:1f:d3:
b4:64:10:8f:a4:ff:23:28:94:25:ca:98:7d:d4:98:
42:5b:d3:b8:b2:98:6e:8e:bc:5b:b2:2d:85:c7:7a:
42:6e:46:33:7e:3e:94:69:cf:32:ce:a8:8d:59:41:
a5:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:82:18:89:C8:5E:FE:99:9A:1C:61:00:25:5E:DE:64:BE:C1:96:70
X509v3 Authority Key Identifier:
keyid:4E:CF:61:7A:F3:5F:37:24:E7:DA:86:0E:BF:BE:4E:C1:38:AE:18:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ts9hevNfNyTn2oYOv75OwTiuGAA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/975c5e-6b05-4a47-9e91-13699365c3c7/1/Ts9hevNfNyTn2oYOv75OwTiuGAA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/975c5e-6b05-4a47-9e91-13699365c3c7/1/Ts9hevNfNyTn2oYOv75OwTiuGAA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:30:41:c3:70:59:c7:28:42:0b:ec:df:82:c3:d2:cc:de:6d:
94:c4:02:f0:72:b5:f8:42:69:85:7e:06:f6:9d:d5:ec:08:0f:
66:5d:a6:ad:78:4c:ff:2b:10:73:0b:f9:b2:de:37:df:bc:eb:
7b:03:bc:41:d9:aa:81:be:65:80:41:75:e8:f5:8b:ab:1c:49:
00:2a:40:72:a4:db:0a:d7:78:2e:57:e9:3b:76:1c:39:31:c0:
ee:50:90:7b:50:1f:a3:cb:5f:67:9c:0e:43:72:5a:18:2a:8e:
d8:a8:28:3d:95:5a:80:3b:7a:fa:6d:84:f9:35:d3:8d:93:ac:
1c:5f:86:28:5d:6c:8d:c9:a1:bb:c7:1d:28:2a:34:2b:79:3e:
ca:f2:76:92:76:5f:b9:57:e0:a7:a4:3c:69:24:6e:95:81:a4:
f2:a5:2c:b2:a6:9b:de:c4:28:37:11:25:9d:20:0c:9e:fd:9d:
51:af:ac:fd:b3:74:5a:aa:9a:ff:35:54:be:31:75:b2:13:78:
31:37:19:57:0d:67:54:f1:32:a8:25:a8:b4:2c:1f:ea:27:64:
f7:da:77:df:c0:25:90:cf:5f:62:15:ea:2a:b4:64:0a:3f:af:
87:da:dd:58:a3:75:e0:48:76:a4:28:54:29:1c:9a:28:31:e9:
59:fb:72:2f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZystHYLu/nAI3qc6yYQcLfqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRlY2Y2MTdhZjM1ZjM3MjRlN2RhODYwZWJmYmU0ZWMxMzhh
ZTE4MDAwHhcNMjYwMzAyMDQwMDMzWhcNMjYwMzAzMDQwMDMzWjAzMTEwLwYDVQQD
Eyg4NTgyMTg4OWM4NWVmZTk5OWExYzYxMDAyNTVlZGU2NGJlYzE5NjcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3aNvcYbwUhQUjpHjx0pZlYG7ilPo
kb8oOzKKSN89oHpLQz3sJUnPgNF9BDsrQ0f1qv9WFSVucOu2n6zZi+7UweJDJVuH
jOD7lIhDYIDXgkgB+tg2oWHv88+PR8TTPvBqtQ/W7d0Yu4zGCF1zXoh5fNXx/Nn2
VQgYQOtga3hjvwbgRWj8wg1astBMMrAT6+q15iCMAIaX4UxK5b4dVIuF+5vDTTSp
FaRZiJTdm9ENMSw15q9EQt/vBzV+LOr9GSiLn58Up6ZUUpJfa68jxPmTH9O0ZBCP
pP8jKJQlyph91JhCW9O4sphujrxbsi2Fx3pCbkYzfj6Uac8yzqiNWUGlZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIWCGInIXv6ZmhxhACVe3mS+wZZwMB8GA1UdIwQY
MBaAFE7PYXrzXzck59qGDr++TsE4rhgAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHM5aGV2TmZOeVRuMm9ZT3Y3NU93VGl1R0FBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi85NzVjNWUtNmIwNS00YTQ3LTllOTEt
MTM2OTkzNjVjM2M3LzEvVHM5aGV2TmZOeVRuMm9ZT3Y3NU93VGl1R0FBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZi85NzVjNWUtNmIwNS00YTQ3LTllOTEtMTM2OTkzNjVjM2M3
LzEvVHM5aGV2TmZOeVRuMm9ZT3Y3NU93VGl1R0FBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHTBBw3BZ
xyhCC+zfgsPSzN5tlMQC8HK1+EJphX4G9p3V7AgPZl2mrXhM/ysQcwv5st4337zr
ewO8Qdmqgb5lgEF16PWLqxxJACpAcqTbCtd4LlfpO3YcOTHA7lCQe1Afo8tfZ5wO
Q3JaGCqO2KgoPZVagDt6+m2E+TXTjZOsHF+GKF1sjcmhu8cdKCo0K3k+yvJ2knZf
uVfgp6Q8aSRulYGk8qUssqab3sQoNxElnSAMnv2dUa+s/bN0Wqqa/zVUvjF1shN4
MTcZVw1nVPEyqCWotCwf6idk99p338AlkM9fYhXqKrRkCj+vh9rdWKN14Eh2pChU
KRyaKDHpWftyLw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 13:25:18 2026 by rpki-client