Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/fc481a-ab01-4f82-9e6e-eb02f3d3f40c/1/TRYkCJewEwVoHJQl_lI_WPqydBU.mft
File: TRYkCJewEwVoHJQl_lI_WPqydBU.mft (raw, json)
Hash identifier: mCNY/UU1bgZzmFLH7NHT1C4USxnR/mNE6YbY0vLK0vo=
Subject key identifier: 20:2E:97:E6:8F:D5:99:5E:09:FC:A5:90:B7:25:7D:A2:3E:B2:50:3E
Authority key identifier: 4D:16:24:08:97:B0:13:05:68:1C:94:25:FE:52:3F:58:FA:B2:74:15
Certificate issuer: /CN=4d16240897b01305681c9425fe523f58fab27415
Certificate serial: 019CACB5609C516A7D67AE498CB7B0F3FBA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TRYkCJewEwVoHJQl_lI_WPqydBU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/fc481a-ab01-4f82-9e6e-eb02f3d3f40c/1/TRYkCJewEwVoHJQl_lI_WPqydBU.mft
Manifest number: 1847
Signing time: Mon 02 Mar 2026 04:01:33 +0000
Manifest this update: Mon 02 Mar 2026 04:01:33 +0000
Manifest next update: Tue 03 Mar 2026 04:01:33 +0000
Files and hashes: 1: NlDeDV4WzeoUvKdIW3pq1ndiD6Q.roa (hash: gXt+Eq5uxoOgBwvqy+Kxf+ntZAhbrgykVlmEcwvKBeA=)
2: TRYkCJewEwVoHJQl_lI_WPqydBU.crl (hash: /J3X3D02gSULQVOXoZWdZh4+QCppbsWBX8aRI4Yelz4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/fc481a-ab01-4f82-9e6e-eb02f3d3f40c/1/TRYkCJewEwVoHJQl_lI_WPqydBU.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/fc481a-ab01-4f82-9e6e-eb02f3d3f40c/1/TRYkCJewEwVoHJQl_lI_WPqydBU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TRYkCJewEwVoHJQl_lI_WPqydBU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b5:60:9c:51:6a:7d:67:ae:49:8c:b7:b0:f3:fb:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d16240897b01305681c9425fe523f58fab27415
Validity
Not Before: Mar 2 04:01:33 2026 GMT
Not After : Mar 3 04:01:33 2026 GMT
Subject: CN=202e97e68fd5995e09fca590b7257da23eb2503e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:90:13:74:bb:41:d4:5b:81:0d:fd:a5:29:cd:
65:d4:4f:59:97:98:b6:7c:3f:84:51:9c:9a:4b:09:
21:50:2d:6d:d3:4b:59:5d:86:ff:7c:f1:85:5a:52:
fa:a5:09:ab:e9:db:4d:09:e5:b7:fe:e7:a0:5f:5d:
67:84:b7:41:c0:bd:60:c4:6c:89:7a:25:e2:96:18:
90:da:79:77:ca:25:90:a3:ee:74:16:52:45:f3:41:
69:41:bd:43:95:90:8a:75:ba:76:64:98:59:b5:37:
64:7f:c7:9f:32:3a:05:53:fa:c7:1f:6b:7a:23:3e:
9c:21:23:46:8b:f0:20:e1:cc:43:c3:77:15:13:7c:
6e:21:3e:26:32:81:f4:c6:f6:9a:fc:83:cd:37:b3:
19:3a:f8:39:9d:c5:51:8f:7a:29:1b:77:65:76:c5:
7f:7f:17:f6:fd:4f:27:76:d9:50:6d:a6:58:40:43:
19:cf:72:04:a7:bf:65:99:3c:db:64:d6:36:9e:07:
0e:0b:88:7b:bf:90:21:4b:77:5c:18:19:32:92:a7:
04:6b:8c:4c:68:99:94:3c:a4:ad:12:6a:ed:d9:b6:
15:26:1e:1b:b6:39:c3:d0:c1:06:78:e0:1f:40:92:
91:0d:42:4a:c5:e5:8b:7e:8b:90:e2:a3:a8:05:6a:
c4:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:2E:97:E6:8F:D5:99:5E:09:FC:A5:90:B7:25:7D:A2:3E:B2:50:3E
X509v3 Authority Key Identifier:
keyid:4D:16:24:08:97:B0:13:05:68:1C:94:25:FE:52:3F:58:FA:B2:74:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TRYkCJewEwVoHJQl_lI_WPqydBU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/fc481a-ab01-4f82-9e6e-eb02f3d3f40c/1/TRYkCJewEwVoHJQl_lI_WPqydBU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/fc481a-ab01-4f82-9e6e-eb02f3d3f40c/1/TRYkCJewEwVoHJQl_lI_WPqydBU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:7f:46:d3:45:cb:93:43:1c:ef:4d:21:b7:fd:3f:d0:dd:3a:
aa:dc:0d:ac:d9:2d:fb:8d:6c:cc:fe:0f:7c:9f:da:fa:b4:ed:
04:25:9b:ad:cb:1b:ed:69:76:f0:97:49:9a:69:1e:26:65:37:
0d:7d:39:78:26:0d:47:ac:c6:0e:20:65:5c:8d:57:46:f1:8a:
16:b8:e8:d3:56:1e:60:e4:d0:1e:91:bf:3a:cf:24:ac:52:ca:
e6:41:e9:7c:7f:1d:3e:b4:ee:38:52:47:67:d0:d1:b3:58:93:
9e:34:10:60:e5:ec:3d:d5:d4:8c:3b:71:44:93:9e:68:19:ec:
bd:a8:81:da:a1:e4:a0:be:ac:09:c3:61:50:47:74:88:da:c4:
1d:85:4d:d7:33:41:29:0b:e7:b1:de:14:8d:8e:32:1c:4a:51:
5b:9f:22:22:9d:2e:51:37:76:8b:86:f9:ac:fb:b3:89:f2:36:
1a:45:9a:fb:ba:0b:65:b4:48:44:a4:1f:54:01:c8:66:9c:90:
bc:22:b5:11:17:2a:2b:73:d2:65:41:e4:74:9c:e6:05:04:4c:
6e:8f:bb:4c:0e:52:eb:cb:a4:28:b2:8c:d2:2f:e8:ba:8e:a9:
bf:8f:85:72:15:69:ff:2e:30:86:43:83:4f:b2:c1:cb:8f:78:
24:17:4a:ad
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZystWCcUWp9Z65JjLew8/ujMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRkMTYyNDA4OTdiMDEzMDU2ODFjOTQyNWZlNTIzZjU4ZmFi
Mjc0MTUwHhcNMjYwMzAyMDQwMTMzWhcNMjYwMzAzMDQwMTMzWjAzMTEwLwYDVQQD
EygyMDJlOTdlNjhmZDU5OTVlMDlmY2E1OTBiNzI1N2RhMjNlYjI1MDNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoZATdLtB1FuBDf2lKc1l1E9Zl5i2
fD+EUZyaSwkhUC1t00tZXYb/fPGFWlL6pQmr6dtNCeW3/uegX11nhLdBwL1gxGyJ
eiXilhiQ2nl3yiWQo+50FlJF80FpQb1DlZCKdbp2ZJhZtTdkf8efMjoFU/rHH2t6
Iz6cISNGi/Ag4cxDw3cVE3xuIT4mMoH0xvaa/IPNN7MZOvg5ncVRj3opG3dldsV/
fxf2/U8ndtlQbaZYQEMZz3IEp79lmTzbZNY2ngcOC4h7v5AhS3dcGBkykqcEa4xM
aJmUPKStEmrt2bYVJh4btjnD0MEGeOAfQJKRDUJKxeWLfouQ4qOoBWrEcwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCAul+aP1ZleCfylkLclfaI+slA+MB8GA1UdIwQY
MBaAFE0WJAiXsBMFaByUJf5SP1j6snQVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVFJZa0NKZXdFd1ZvSEpRbF9sSV9XUHF5ZEJVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS9mYzQ4MWEtYWIwMS00ZjgyLTllNmUt
ZWIwMmYzZDNmNDBjLzEvVFJZa0NKZXdFd1ZvSEpRbF9sSV9XUHF5ZEJVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MS9mYzQ4MWEtYWIwMS00ZjgyLTllNmUtZWIwMmYzZDNmNDBj
LzEvVFJZa0NKZXdFd1ZvSEpRbF9sSV9XUHF5ZEJVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV39G00XL
k0Mc700ht/0/0N06qtwNrNkt+41szP4PfJ/a+rTtBCWbrcsb7Wl28JdJmmkeJmU3
DX05eCYNR6zGDiBlXI1XRvGKFrjo01YeYOTQHpG/Os8krFLK5kHpfH8dPrTuOFJH
Z9DRs1iTnjQQYOXsPdXUjDtxRJOeaBnsvaiB2qHkoL6sCcNhUEd0iNrEHYVN1zNB
KQvnsd4UjY4yHEpRW58iIp0uUTd2i4b5rPuzifI2GkWa+7oLZbRIRKQfVAHIZpyQ
vCK1ERcqK3PSZUHkdJzmBQRMbo+7TA5S68ukKLKM0i/ouo6pv4+FchVp/y4whkOD
T7LBy494JBdKrQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 10:38:25 2026 by rpki-client