Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/bf748d-c4ca-4fd1-a59d-4060f211f3c3/1/tFOis_uD2Gx4BswGYNgpEZ2TdbQ.mft
File: tFOis_uD2Gx4BswGYNgpEZ2TdbQ.mft (raw, json)
Hash identifier: SCOkY47iL0fs4rdwUrG9aEtPTF6RwfW/sk2TJ8AvDXc=
Subject key identifier: E8:60:F6:4B:80:F0:7B:F0:C4:AC:0E:95:FC:30:DE:51:99:0E:A8:C1
Authority key identifier: B4:53:A2:B3:FB:83:D8:6C:78:06:CC:06:60:D8:29:11:9D:93:75:B4
Certificate issuer: /CN=b453a2b3fb83d86c7806cc0660d829119d9375b4
Certificate serial: 019CAE35D72BE86A99332CFF4CD47664BCF5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tFOis_uD2Gx4BswGYNgpEZ2TdbQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/bf748d-c4ca-4fd1-a59d-4060f211f3c3/1/tFOis_uD2Gx4BswGYNgpEZ2TdbQ.mft
Manifest number: 091F
Signing time: Mon 02 Mar 2026 11:01:29 +0000
Manifest this update: Mon 02 Mar 2026 11:01:29 +0000
Manifest next update: Tue 03 Mar 2026 11:01:29 +0000
Files and hashes: 1: pf4imHRU2e6GfZe8rQKhzIc5LBg.roa (hash: dsJgVjGxo4nm0IH9s2QS1ktYyvlCS7K764cL/mH8BNg=)
2: tFOis_uD2Gx4BswGYNgpEZ2TdbQ.crl (hash: 50EvnJFxvlTsJxBd9u8bnl8t56YoqeLetDwEpdy/MBc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/bf748d-c4ca-4fd1-a59d-4060f211f3c3/1/tFOis_uD2Gx4BswGYNgpEZ2TdbQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/bf748d-c4ca-4fd1-a59d-4060f211f3c3/1/tFOis_uD2Gx4BswGYNgpEZ2TdbQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/tFOis_uD2Gx4BswGYNgpEZ2TdbQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 11:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:35:d7:2b:e8:6a:99:33:2c:ff:4c:d4:76:64:bc:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b453a2b3fb83d86c7806cc0660d829119d9375b4
Validity
Not Before: Mar 2 11:01:29 2026 GMT
Not After : Mar 3 11:01:29 2026 GMT
Subject: CN=e860f64b80f07bf0c4ac0e95fc30de51990ea8c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:94:a4:16:61:e0:f0:5f:cb:c8:5f:e7:1d:d4:
ef:0c:0a:d0:e8:86:a2:c3:5b:de:03:5c:c4:e6:50:
26:aa:d0:36:59:d0:c3:76:c9:fc:3d:11:53:2c:58:
bf:10:11:e6:a9:f2:49:30:a8:76:8b:93:45:17:be:
67:68:d5:00:86:5a:4e:e1:b5:8c:06:69:ce:19:00:
a7:01:69:3d:80:ed:dc:8f:90:45:36:85:29:61:43:
4d:77:51:82:b4:0c:db:f4:c1:09:5f:7e:cb:9d:62:
c0:25:3e:4d:d3:3b:ba:d1:b3:fe:42:8c:12:04:03:
34:b8:ea:fe:ce:96:ea:30:83:9b:1b:c0:07:5c:5c:
9c:92:65:73:38:a1:04:82:29:1d:b7:85:42:ab:f2:
2a:7e:72:2e:d0:83:d0:ad:f4:e7:e8:55:54:c6:43:
cc:fa:a7:81:46:79:1b:b1:08:b0:46:d6:99:2f:07:
a8:4a:06:76:79:4f:94:09:fa:ac:39:32:a1:b1:dc:
b5:7a:24:31:14:2c:97:5f:bf:fe:ff:7f:4d:72:a3:
d9:7c:d3:51:2a:bf:04:6f:91:c7:7f:6c:44:75:00:
50:d7:b6:bd:31:cc:2e:64:9b:90:6f:d2:05:e7:39:
bf:e7:36:06:dd:e2:7e:0c:3f:d3:f8:f6:85:b7:9a:
7a:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:60:F6:4B:80:F0:7B:F0:C4:AC:0E:95:FC:30:DE:51:99:0E:A8:C1
X509v3 Authority Key Identifier:
keyid:B4:53:A2:B3:FB:83:D8:6C:78:06:CC:06:60:D8:29:11:9D:93:75:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tFOis_uD2Gx4BswGYNgpEZ2TdbQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/bf748d-c4ca-4fd1-a59d-4060f211f3c3/1/tFOis_uD2Gx4BswGYNgpEZ2TdbQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/bf748d-c4ca-4fd1-a59d-4060f211f3c3/1/tFOis_uD2Gx4BswGYNgpEZ2TdbQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:63:3a:3c:5f:60:c4:4b:4f:48:24:9a:3f:41:25:39:48:e9:
16:2a:92:52:9f:6d:2e:7b:3e:00:9f:08:89:85:f4:23:25:ef:
de:55:a1:76:8c:bf:58:d8:6c:de:5b:35:0f:6c:25:b2:57:9e:
1b:f8:10:d3:3c:84:4a:d5:9d:bd:5b:3d:89:22:58:11:a1:2b:
de:f6:60:7d:25:62:09:47:31:59:11:dc:d4:be:af:d4:37:42:
c7:bd:ca:ee:76:df:76:f6:8c:90:75:3a:6f:40:7b:f1:f3:3e:
a8:a6:43:3c:4a:c6:94:d3:f2:6f:df:8d:08:87:66:81:d6:70:
43:24:62:94:40:22:56:54:54:29:6b:cc:84:9c:42:48:6a:e8:
7e:a1:fc:fd:cc:5b:7f:0d:9a:dd:97:1c:d2:05:fd:45:48:b8:
a5:ab:65:bb:24:eb:41:07:3e:a8:95:21:c0:57:6d:7f:3d:94:
d8:95:bb:88:d4:4e:89:a3:fa:ff:f2:0c:dd:e7:a5:01:85:ae:
6e:8f:6d:dc:ae:69:54:a7:4f:88:89:db:82:c7:8c:c1:d7:ee:
08:49:89:72:50:5c:df:9c:ac:ab:08:19:9e:2e:87:e0:cb:c6:
5f:b3:75:92:ea:79:18:13:0a:3b:58:d2:07:df:c4:eb:f4:f1:
27:2a:ff:d1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyuNdcr6GqZMyz/TNR2ZLz1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0NTNhMmIzZmI4M2Q4NmM3ODA2Y2MwNjYwZDgyOTExOWQ5
Mzc1YjQwHhcNMjYwMzAyMTEwMTI5WhcNMjYwMzAzMTEwMTI5WjAzMTEwLwYDVQQD
EyhlODYwZjY0YjgwZjA3YmYwYzRhYzBlOTVmYzMwZGU1MTk5MGVhOGMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsJSkFmHg8F/LyF/nHdTvDArQ6Iai
w1veA1zE5lAmqtA2WdDDdsn8PRFTLFi/EBHmqfJJMKh2i5NFF75naNUAhlpO4bWM
BmnOGQCnAWk9gO3cj5BFNoUpYUNNd1GCtAzb9MEJX37LnWLAJT5N0zu60bP+QowS
BAM0uOr+zpbqMIObG8AHXFyckmVzOKEEgikdt4VCq/IqfnIu0IPQrfTn6FVUxkPM
+qeBRnkbsQiwRtaZLweoSgZ2eU+UCfqsOTKhsdy1eiQxFCyXX7/+/39NcqPZfNNR
Kr8Eb5HHf2xEdQBQ17a9McwuZJuQb9IF5zm/5zYG3eJ+DD/T+PaFt5p6EQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOhg9kuA8HvwxKwOlfww3lGZDqjBMB8GA1UdIwQY
MBaAFLRTorP7g9hseAbMBmDYKRGdk3W0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdEZPaXNfdUQyR3g0QnN3R1lOZ3BFWjJUZGJRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi9iZjc0OGQtYzRjYS00ZmQxLWE1OWQt
NDA2MGYyMTFmM2MzLzEvdEZPaXNfdUQyR3g0QnN3R1lOZ3BFWjJUZGJRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi9iZjc0OGQtYzRjYS00ZmQxLWE1OWQtNDA2MGYyMTFmM2Mz
LzEvdEZPaXNfdUQyR3g0QnN3R1lOZ3BFWjJUZGJRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjGM6PF9g
xEtPSCSaP0ElOUjpFiqSUp9tLns+AJ8IiYX0IyXv3lWhdoy/WNhs3ls1D2wlslee
G/gQ0zyEStWdvVs9iSJYEaEr3vZgfSViCUcxWRHc1L6v1DdCx73K7nbfdvaMkHU6
b0B78fM+qKZDPErGlNPyb9+NCIdmgdZwQyRilEAiVlRUKWvMhJxCSGrofqH8/cxb
fw2a3Zcc0gX9RUi4patluyTrQQc+qJUhwFdtfz2U2JW7iNROiaP6//IM3eelAYWu
bo9t3K5pVKdPiInbgseMwdfuCEmJclBc35ysqwgZni6H4MvGX7N1kup5GBMKO1jS
B9/E6/TxJyr/0Q==
-----END CERTIFICATE-----
Generated at Mon Mar 2 17:55:50 2026 by rpki-client