Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/20974d-6403-4107-a75b-13fb7a5130ca/1/tOxsCl6-xYF9kbkeeaa8YTLrnSw.mft
File: tOxsCl6-xYF9kbkeeaa8YTLrnSw.mft (raw, json)
Hash identifier: hcjzwJxPuhxWKeOGN5768XsPZINVZkG4wazqEmMkkK4=
Subject key identifier: D8:C6:FF:A8:E8:0E:74:27:78:D5:DC:C1:4F:F0:F5:14:61:28:4B:A8
Authority key identifier: B4:EC:6C:0A:5E:BE:C5:81:7D:91:B9:1E:79:A6:BC:61:32:EB:9D:2C
Certificate issuer: /CN=b4ec6c0a5ebec5817d91b91e79a6bc6132eb9d2c
Certificate serial: 019CABA1D9E594E94D66764A75FC60FE5C39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tOxsCl6-xYF9kbkeeaa8YTLrnSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/20974d-6403-4107-a75b-13fb7a5130ca/1/tOxsCl6-xYF9kbkeeaa8YTLrnSw.mft
Manifest number: 184A
Signing time: Sun 01 Mar 2026 23:00:36 +0000
Manifest this update: Sun 01 Mar 2026 23:00:36 +0000
Manifest next update: Mon 02 Mar 2026 23:00:36 +0000
Files and hashes: 1: b7WIoLNUFyReyBs5srL2P-7kWBY.roa (hash: KaUmjHHJdwqwRidv+DylDRGHxrEDsHhrz5N8o1v6ikI=)
2: qA1FSgo8W2WfbgMfxgehUTGINhY.roa (hash: QlYJVn46F259ZKkX99iXU3ryDNDtJ4SF3Ih4Ss1i1sM=)
3: tOxsCl6-xYF9kbkeeaa8YTLrnSw.crl (hash: jKnxr1AFTJd0WHOoPaqIKZ6ZFOgdGSUr2q+5wzd3J9c=)
4: w1rSq9HiUPdlBfnJQU20TUnkDtc.roa (hash: e/N9+4KOJLWpyk5b2EmLTnk1UrTHENrYm4rgBBrmxPs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/20974d-6403-4107-a75b-13fb7a5130ca/1/tOxsCl6-xYF9kbkeeaa8YTLrnSw.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/20974d-6403-4107-a75b-13fb7a5130ca/1/tOxsCl6-xYF9kbkeeaa8YTLrnSw.mft
rsync://rpki.ripe.net/repository/DEFAULT/tOxsCl6-xYF9kbkeeaa8YTLrnSw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a1:d9:e5:94:e9:4d:66:76:4a:75:fc:60:fe:5c:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4ec6c0a5ebec5817d91b91e79a6bc6132eb9d2c
Validity
Not Before: Mar 1 23:00:36 2026 GMT
Not After : Mar 2 23:00:36 2026 GMT
Subject: CN=d8c6ffa8e80e742778d5dcc14ff0f51461284ba8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ef:0b:d8:89:2c:29:7d:68:cc:1f:e8:b2:67:
a4:b9:64:cd:b8:65:7e:13:0b:46:4c:50:ed:52:db:
94:a0:e0:b1:3e:51:c7:fa:8c:87:b3:6a:39:0b:33:
fa:60:a1:f4:f9:65:c3:ea:a3:10:1f:59:5a:5a:43:
67:59:2c:48:13:9c:d1:8d:6b:5f:99:f0:2e:cd:e3:
41:66:41:23:4f:52:fc:a4:40:64:2c:e1:9c:54:b0:
d6:21:62:f9:2b:de:a3:35:8f:53:f9:f1:27:c4:ea:
4c:b6:6a:ac:d6:7f:51:11:d0:7f:31:ac:87:9e:c3:
94:0d:eb:86:be:65:f1:e8:64:ae:f2:8c:22:3f:9c:
6f:82:c0:39:8c:87:2b:57:5f:56:21:e7:a4:f2:07:
07:77:b7:84:b8:ed:a9:06:70:5f:7a:d4:10:e7:57:
b9:76:e9:7a:7c:e6:0a:aa:4e:94:5f:fe:29:7d:5a:
d4:f1:87:99:dd:c2:39:7b:e6:59:ca:7c:53:39:4b:
53:71:97:21:2c:18:a9:83:ff:44:10:12:3e:7d:45:
89:43:27:70:01:16:c2:d7:bf:6b:f1:4f:a4:ef:57:
26:f3:ec:a7:b6:0a:7a:8b:65:b2:71:a6:7f:b8:47:
f3:a7:6f:4e:69:6d:67:70:ee:1e:70:46:81:9f:ed:
eb:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:C6:FF:A8:E8:0E:74:27:78:D5:DC:C1:4F:F0:F5:14:61:28:4B:A8
X509v3 Authority Key Identifier:
keyid:B4:EC:6C:0A:5E:BE:C5:81:7D:91:B9:1E:79:A6:BC:61:32:EB:9D:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tOxsCl6-xYF9kbkeeaa8YTLrnSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/20974d-6403-4107-a75b-13fb7a5130ca/1/tOxsCl6-xYF9kbkeeaa8YTLrnSw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/20974d-6403-4107-a75b-13fb7a5130ca/1/tOxsCl6-xYF9kbkeeaa8YTLrnSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:0d:d5:16:65:22:e9:cd:0c:51:70:cf:b1:fe:25:f1:27:48:
e0:b8:31:65:cb:83:fb:de:66:a5:8c:88:3f:2c:10:a9:b1:b8:
50:d1:28:27:72:32:8f:89:47:7e:ee:54:f6:fd:74:74:0c:9b:
db:65:76:8f:15:7f:96:17:5e:77:8e:5f:9f:45:32:44:31:2f:
c4:99:b5:7e:8b:a3:90:dc:f5:23:3d:a6:9f:6d:a5:c0:5d:3d:
0a:7d:6b:de:0d:4a:ba:7a:40:98:f1:c7:fd:bc:30:93:4f:b7:
89:94:5d:54:83:93:9c:6e:84:d2:aa:a5:7e:07:86:9c:cc:1e:
cd:40:29:f6:98:3a:7c:8c:2b:4a:cb:7c:48:c1:6a:be:a9:6a:
be:4f:91:3b:75:11:f5:eb:5f:cb:84:fe:f3:7d:6f:ef:4c:ff:
c7:9e:ae:76:86:47:29:cc:ee:d5:f5:02:cd:89:69:ba:0e:f7:
bc:30:1f:9e:4d:5e:2d:ef:42:db:3c:d9:bd:37:6d:85:c4:f8:
3f:59:c4:31:6e:e1:2d:de:6b:80:d4:d5:9b:72:cf:b3:27:94:
43:0d:37:46:4a:7e:bb:a7:f1:26:18:d0:ec:f9:20:6c:bf:89:
6b:65:98:b2:aa:2b:83:2f:50:aa:d7:bd:cb:8a:c8:29:df:f3:
8d:db:80:7c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyrodnllOlNZnZKdfxg/lw5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0ZWM2YzBhNWViZWM1ODE3ZDkxYjkxZTc5YTZiYzYxMzJl
YjlkMmMwHhcNMjYwMzAxMjMwMDM2WhcNMjYwMzAyMjMwMDM2WjAzMTEwLwYDVQQD
EyhkOGM2ZmZhOGU4MGU3NDI3NzhkNWRjYzE0ZmYwZjUxNDYxMjg0YmE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq+8L2IksKX1ozB/osmekuWTNuGV+
EwtGTFDtUtuUoOCxPlHH+oyHs2o5CzP6YKH0+WXD6qMQH1laWkNnWSxIE5zRjWtf
mfAuzeNBZkEjT1L8pEBkLOGcVLDWIWL5K96jNY9T+fEnxOpMtmqs1n9REdB/MayH
nsOUDeuGvmXx6GSu8owiP5xvgsA5jIcrV19WIeek8gcHd7eEuO2pBnBfetQQ51e5
dul6fOYKqk6UX/4pfVrU8YeZ3cI5e+ZZynxTOUtTcZchLBipg/9EEBI+fUWJQydw
ARbC179r8U+k71cm8+yntgp6i2WycaZ/uEfzp29OaW1ncO4ecEaBn+3rWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNjG/6joDnQneNXcwU/w9RRhKEuoMB8GA1UdIwQY
MBaAFLTsbApevsWBfZG5HnmmvGEy650sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdE94c0NsNi14WUY5a2JrZWVhYThZVExyblN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC8yMDk3NGQtNjQwMy00MTA3LWE3NWIt
MTNmYjdhNTEzMGNhLzEvdE94c0NsNi14WUY5a2JrZWVhYThZVExyblN3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC8yMDk3NGQtNjQwMy00MTA3LWE3NWItMTNmYjdhNTEzMGNh
LzEvdE94c0NsNi14WUY5a2JrZWVhYThZVExyblN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKw3VFmUi
6c0MUXDPsf4l8SdI4LgxZcuD+95mpYyIPywQqbG4UNEoJ3Iyj4lHfu5U9v10dAyb
22V2jxV/lhded45fn0UyRDEvxJm1foujkNz1Iz2mn22lwF09Cn1r3g1KunpAmPHH
/bwwk0+3iZRdVIOTnG6E0qqlfgeGnMwezUAp9pg6fIwrSst8SMFqvqlqvk+RO3UR
9etfy4T+831v70z/x56udoZHKczu1fUCzYlpug73vDAfnk1eLe9C2zzZvTdthcT4
P1nEMW7hLd5rgNTVm3LPsyeUQw03Rkp+u6fxJhjQ7PkgbL+Ja2WYsqorgy9Qqte9
y4rIKd/zjduAfA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 09:29:28 2026 by rpki-client