Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/645f6a-2653-4d31-bb4e-1f87976137a0/1/tAifhEgwV6w2RkfIChsjyXa5MBY.mft
File: tAifhEgwV6w2RkfIChsjyXa5MBY.mft (raw, json)
Hash identifier: cnFA3ZldP4Csx/ABOCU0jDUetLSpllmritOy5sD8hgw=
Subject key identifier: AB:A6:43:BF:33:8B:87:DC:05:EC:0C:9A:25:10:99:A1:B9:85:0B:3F
Authority key identifier: B4:08:9F:84:48:30:57:AC:36:46:47:C8:0A:1B:23:C9:76:B9:30:16
Certificate issuer: /CN=b4089f84483057ac364647c80a1b23c976b93016
Certificate serial: 019CAFB580D5FC5D2438992119680BC7C19E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tAifhEgwV6w2RkfIChsjyXa5MBY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/645f6a-2653-4d31-bb4e-1f87976137a0/1/tAifhEgwV6w2RkfIChsjyXa5MBY.mft
Manifest number: 1849
Signing time: Mon 02 Mar 2026 18:00:33 +0000
Manifest this update: Mon 02 Mar 2026 18:00:33 +0000
Manifest next update: Tue 03 Mar 2026 18:00:33 +0000
Files and hashes: 1: Enpd7RSzC3L6emd7pGDdiVehZtE.roa (hash: WWtbFjYeptz2lkJzGb3OE5GVhYZDAyY+VdSSKK6ahKw=)
2: tAifhEgwV6w2RkfIChsjyXa5MBY.crl (hash: P4d+LqwHg5nU13Ri/w1EYsNL4MazJuE6UV/kL05c1IQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/645f6a-2653-4d31-bb4e-1f87976137a0/1/tAifhEgwV6w2RkfIChsjyXa5MBY.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/645f6a-2653-4d31-bb4e-1f87976137a0/1/tAifhEgwV6w2RkfIChsjyXa5MBY.mft
rsync://rpki.ripe.net/repository/DEFAULT/tAifhEgwV6w2RkfIChsjyXa5MBY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 15:05:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:af:b5:80:d5:fc:5d:24:38:99:21:19:68:0b:c7:c1:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4089f84483057ac364647c80a1b23c976b93016
Validity
Not Before: Mar 2 18:00:33 2026 GMT
Not After : Mar 3 18:00:33 2026 GMT
Subject: CN=aba643bf338b87dc05ec0c9a251099a1b9850b3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:ed:b6:65:94:4b:9b:c5:f0:ac:48:b8:9f:f3:
4d:e7:42:b7:fe:00:e0:e2:ff:6c:70:bb:e7:96:68:
12:f1:b6:dc:02:e5:0f:cc:af:7d:81:06:f5:33:f3:
3c:7e:54:35:57:b9:f5:48:9a:3f:ac:44:b5:66:12:
24:e0:29:fd:3c:f4:75:33:5d:f6:ae:02:b2:49:c6:
5c:e3:7b:ef:c2:90:ea:5e:86:58:47:62:f1:56:74:
cd:1e:ea:4e:45:ea:bb:27:1d:0e:bb:a7:ea:5e:ac:
4a:c9:87:ac:30:7c:6a:0a:e6:93:eb:f4:2f:5d:f7:
ab:d1:c4:6e:0d:e3:b7:d0:00:2a:af:35:e9:f0:2e:
ea:6e:9f:b8:53:0a:f2:65:61:7e:94:5a:87:64:72:
9c:3b:e2:b4:14:fa:33:d3:3e:a8:b6:e4:38:c1:e0:
6e:17:ec:90:ad:84:6a:88:f5:bc:49:6a:19:8f:09:
40:6a:ae:1f:52:d8:1c:82:cd:97:80:d1:49:ec:71:
f7:94:9a:31:66:05:28:f6:e5:7c:00:86:0a:3e:b9:
30:27:02:fd:3d:30:2f:0a:ae:51:bc:16:61:4b:56:
99:45:8d:b2:a3:37:a1:c4:d1:8f:4d:a8:60:a8:e0:
2c:79:45:fa:ff:96:30:be:21:26:b5:80:35:70:a0:
6b:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:A6:43:BF:33:8B:87:DC:05:EC:0C:9A:25:10:99:A1:B9:85:0B:3F
X509v3 Authority Key Identifier:
keyid:B4:08:9F:84:48:30:57:AC:36:46:47:C8:0A:1B:23:C9:76:B9:30:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tAifhEgwV6w2RkfIChsjyXa5MBY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/645f6a-2653-4d31-bb4e-1f87976137a0/1/tAifhEgwV6w2RkfIChsjyXa5MBY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/645f6a-2653-4d31-bb4e-1f87976137a0/1/tAifhEgwV6w2RkfIChsjyXa5MBY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:5e:4f:1f:47:8b:6e:e0:d2:0c:d0:9b:d8:53:87:02:16:a9:
f4:c3:37:01:40:95:b4:e3:e9:7d:41:4f:01:8b:b6:c1:0b:ed:
3a:0d:f7:de:7a:aa:4b:8a:0e:2c:e1:43:5a:8c:42:86:97:36:
60:03:d1:41:2f:0b:be:d4:a2:2c:e8:09:f2:b2:4c:65:28:b0:
ca:f7:52:bf:ba:cb:24:c4:f6:93:ff:7d:a0:23:2d:88:f0:c5:
82:05:a9:b8:f7:6e:b5:33:16:7e:b7:5c:38:02:2f:84:1a:a8:
72:4d:24:72:36:28:4d:96:ac:0c:d0:88:90:ae:d8:fb:7d:6c:
75:4e:7c:9b:54:29:b9:a3:28:7f:ad:f5:9c:ed:fc:02:6d:93:
3f:29:85:9f:7d:22:a7:0e:bf:a5:70:b8:33:69:f1:06:f0:31:
b5:72:cf:67:f1:6c:f7:83:8c:f8:d6:55:98:d6:fa:d8:11:64:
ab:9e:c0:43:1f:7e:64:e8:23:84:b4:64:e2:ff:27:41:c6:7b:
39:2b:fb:e8:af:62:5a:64:3e:9a:b6:22:f4:36:d5:cf:11:70:
1d:81:75:42:7a:27:ef:34:07:d4:9d:24:e3:e3:4e:35:2c:b8:
72:3d:9c:bc:eb:32:9e:1d:48:a2:6a:a7:38:05:7c:69:0f:99:
54:66:c4:dd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyvtYDV/F0kOJkhGWgLx8GeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0MDg5Zjg0NDgzMDU3YWMzNjQ2NDdjODBhMWIyM2M5NzZi
OTMwMTYwHhcNMjYwMzAyMTgwMDMzWhcNMjYwMzAzMTgwMDMzWjAzMTEwLwYDVQQD
EyhhYmE2NDNiZjMzOGI4N2RjMDVlYzBjOWEyNTEwOTlhMWI5ODUwYjNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxu22ZZRLm8XwrEi4n/NN50K3/gDg
4v9scLvnlmgS8bbcAuUPzK99gQb1M/M8flQ1V7n1SJo/rES1ZhIk4Cn9PPR1M132
rgKyScZc43vvwpDqXoZYR2LxVnTNHupOReq7Jx0Ou6fqXqxKyYesMHxqCuaT6/Qv
Xfer0cRuDeO30AAqrzXp8C7qbp+4UwryZWF+lFqHZHKcO+K0FPoz0z6otuQ4weBu
F+yQrYRqiPW8SWoZjwlAaq4fUtgcgs2XgNFJ7HH3lJoxZgUo9uV8AIYKPrkwJwL9
PTAvCq5RvBZhS1aZRY2yozehxNGPTahgqOAseUX6/5YwviEmtYA1cKBr2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKumQ78zi4fcBewMmiUQmaG5hQs/MB8GA1UdIwQY
MBaAFLQIn4RIMFesNkZHyAobI8l2uTAWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdEFpZmhFZ3dWNncyUmtmSUNoc2p5WGE1TUJZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC82NDVmNmEtMjY1My00ZDMxLWJiNGUt
MWY4Nzk3NjEzN2EwLzEvdEFpZmhFZ3dWNncyUmtmSUNoc2p5WGE1TUJZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC82NDVmNmEtMjY1My00ZDMxLWJiNGUtMWY4Nzk3NjEzN2Ew
LzEvdEFpZmhFZ3dWNncyUmtmSUNoc2p5WGE1TUJZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO15PH0eL
buDSDNCb2FOHAhap9MM3AUCVtOPpfUFPAYu2wQvtOg333nqqS4oOLOFDWoxChpc2
YAPRQS8LvtSiLOgJ8rJMZSiwyvdSv7rLJMT2k/99oCMtiPDFggWpuPdutTMWfrdc
OAIvhBqock0kcjYoTZasDNCIkK7Y+31sdU58m1QpuaMof631nO38Am2TPymFn30i
pw6/pXC4M2nxBvAxtXLPZ/Fs94OM+NZVmNb62BFkq57AQx9+ZOgjhLRk4v8nQcZ7
OSv76K9iWmQ+mrYi9DbVzxFwHYF1Qnon7zQH1J0k4+NONSy4cj2cvOsynh1Iomqn
OAV8aQ+ZVGbE3Q==
-----END CERTIFICATE-----
Generated at Tue Mar 3 00:41:11 2026 by rpki-client