Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/c2ba72-a892-426d-aec9-a1575f91f83b/1/tKOwBTZrDhDVAulBSQHNhPri3JU.mft
File: tKOwBTZrDhDVAulBSQHNhPri3JU.mft (raw, json)
Hash identifier: jv7TnPpDv6kvCqZgfCES19V+CjjZ2ZzAniXetDMS2OE=
Subject key identifier: 5E:A5:1C:CD:7A:33:68:08:A7:30:56:4B:CB:4E:C1:A9:F9:A9:E1:37
Authority key identifier: B4:A3:B0:05:36:6B:0E:10:D5:02:E9:41:49:01:CD:84:FA:E2:DC:95
Certificate issuer: /CN=b4a3b005366b0e10d502e9414901cd84fae2dc95
Certificate serial: 019CB0FF6A31F02BB0C7DE1DB190308D91A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tKOwBTZrDhDVAulBSQHNhPri3JU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/c2ba72-a892-426d-aec9-a1575f91f83b/1/tKOwBTZrDhDVAulBSQHNhPri3JU.mft
Manifest number: DE
Signing time: Tue 03 Mar 2026 00:00:54 +0000
Manifest this update: Tue 03 Mar 2026 00:00:54 +0000
Manifest next update: Wed 04 Mar 2026 00:00:54 +0000
Files and hashes: 1: CSchYm_Yb2tAYnM5byG6HH2lrs0.roa (hash: QoobycHQMak1ztaLqGk0kAyMV2X2IAYlbkDS/x6XelI=)
2: tKOwBTZrDhDVAulBSQHNhPri3JU.crl (hash: pfZxqS6NL9dQOmeIZYsFcTo2vadeT1FDg34/HtpUm/E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/c2ba72-a892-426d-aec9-a1575f91f83b/1/tKOwBTZrDhDVAulBSQHNhPri3JU.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/c2ba72-a892-426d-aec9-a1575f91f83b/1/tKOwBTZrDhDVAulBSQHNhPri3JU.mft
rsync://rpki.ripe.net/repository/DEFAULT/tKOwBTZrDhDVAulBSQHNhPri3JU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 21:16:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b0:ff:6a:31:f0:2b:b0:c7:de:1d:b1:90:30:8d:91:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4a3b005366b0e10d502e9414901cd84fae2dc95
Validity
Not Before: Mar 3 00:00:54 2026 GMT
Not After : Mar 4 00:00:54 2026 GMT
Subject: CN=5ea51ccd7a336808a730564bcb4ec1a9f9a9e137
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:03:b9:ca:3e:af:cf:81:54:2b:2b:de:12:c7:
ae:c0:4c:5d:c8:40:44:e3:ed:f7:3c:d5:4b:9d:ce:
1d:1a:33:49:59:c5:17:90:29:01:28:1a:47:09:f2:
cd:0f:d3:d2:c1:29:4e:42:69:e5:21:7d:17:1c:b4:
01:c7:0f:a5:18:c9:80:b3:44:be:eb:45:27:18:64:
6a:6b:7c:a6:79:13:17:b0:1b:25:1e:c3:0f:12:64:
dc:86:e5:b2:e6:e3:c2:0f:00:f3:35:14:0c:dc:23:
30:bb:38:1d:71:cc:e7:a8:78:f3:2e:8d:75:62:7d:
c7:b0:d1:2f:25:fe:78:35:9e:30:19:3b:bd:bc:1c:
47:b8:cf:06:c3:32:e0:b5:22:22:32:ea:40:83:d3:
90:81:83:f3:06:c5:31:f9:38:9b:1a:18:5e:6d:3a:
91:13:32:e5:eb:80:13:d9:23:e9:68:dd:bf:f3:58:
4e:93:49:69:be:8d:45:40:be:f0:9b:fa:ad:a4:1a:
ba:2f:c8:13:9f:79:e7:e7:77:b8:c8:38:69:dc:9c:
a7:8a:16:04:70:78:5a:39:76:3a:94:2e:14:fd:1b:
82:06:47:cd:4b:55:05:aa:0c:38:c1:3b:4d:ba:d2:
d2:6e:ec:a9:f4:d6:04:3a:4b:6f:8f:35:17:5d:b2:
cb:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:A5:1C:CD:7A:33:68:08:A7:30:56:4B:CB:4E:C1:A9:F9:A9:E1:37
X509v3 Authority Key Identifier:
keyid:B4:A3:B0:05:36:6B:0E:10:D5:02:E9:41:49:01:CD:84:FA:E2:DC:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tKOwBTZrDhDVAulBSQHNhPri3JU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c2ba72-a892-426d-aec9-a1575f91f83b/1/tKOwBTZrDhDVAulBSQHNhPri3JU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c2ba72-a892-426d-aec9-a1575f91f83b/1/tKOwBTZrDhDVAulBSQHNhPri3JU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:b2:25:eb:2d:1d:90:41:2e:15:d8:28:5c:af:66:35:90:01:
a9:63:24:42:00:94:e9:51:d9:da:e1:c0:1c:e6:2d:85:61:e5:
e1:8c:21:aa:15:98:26:dd:85:97:ac:28:9c:b8:91:ae:a1:9a:
54:9a:bd:34:db:90:a4:30:8b:df:f0:5c:42:57:92:de:99:9b:
bf:50:a0:ba:ad:8b:97:51:5c:36:a5:95:eb:b3:bf:a3:f7:1a:
94:ff:5a:23:38:26:a0:13:2c:16:a7:7f:20:e8:e2:41:be:1d:
cf:53:0e:db:bd:75:d4:80:f5:a6:9d:69:8c:23:50:27:96:d6:
75:52:59:e2:21:fb:0a:92:49:4d:5c:56:db:be:a4:8e:f1:f5:
7c:9c:c8:08:60:0e:f4:0d:aa:ac:84:6e:bf:1a:3c:28:8c:0c:
44:21:7d:de:cc:f1:88:67:67:54:91:8f:87:07:cc:9e:04:5a:
da:d7:4a:25:22:e3:12:af:37:6e:51:4c:2d:f1:03:bb:6f:06:
44:6d:1f:32:de:71:fe:b6:1c:4e:48:2e:e2:25:f3:02:7b:1b:
78:fb:4c:56:37:39:21:49:dc:e7:e3:f8:67:d8:c0:b7:3e:41:
04:3d:01:92:9b:86:29:22:7c:e8:f5:fd:ca:b2:32:86:95:77:
ee:de:f8:32
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyw/2ox8Cuwx94dsZAwjZGpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0YTNiMDA1MzY2YjBlMTBkNTAyZTk0MTQ5MDFjZDg0ZmFl
MmRjOTUwHhcNMjYwMzAzMDAwMDU0WhcNMjYwMzA0MDAwMDU0WjAzMTEwLwYDVQQD
Eyg1ZWE1MWNjZDdhMzM2ODA4YTczMDU2NGJjYjRlYzFhOWY5YTllMTM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAugO5yj6vz4FUKyveEseuwExdyEBE
4+33PNVLnc4dGjNJWcUXkCkBKBpHCfLND9PSwSlOQmnlIX0XHLQBxw+lGMmAs0S+
60UnGGRqa3ymeRMXsBslHsMPEmTchuWy5uPCDwDzNRQM3CMwuzgdccznqHjzLo11
Yn3HsNEvJf54NZ4wGTu9vBxHuM8GwzLgtSIiMupAg9OQgYPzBsUx+TibGhhebTqR
EzLl64AT2SPpaN2/81hOk0lpvo1FQL7wm/qtpBq6L8gTn3nn53e4yDhp3JynihYE
cHhaOXY6lC4U/RuCBkfNS1UFqgw4wTtNutLSbuyp9NYEOktvjzUXXbLLewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF6lHM16M2gIpzBWS8tOwan5qeE3MB8GA1UdIwQY
MBaAFLSjsAU2aw4Q1QLpQUkBzYT64tyVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdEtPd0JUWnJEaERWQXVsQlNRSE5oUHJpM0pVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS9jMmJhNzItYTg5Mi00MjZkLWFlYzkt
YTE1NzVmOTFmODNiLzEvdEtPd0JUWnJEaERWQXVsQlNRSE5oUHJpM0pVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS9jMmJhNzItYTg5Mi00MjZkLWFlYzktYTE1NzVmOTFmODNi
LzEvdEtPd0JUWnJEaERWQXVsQlNRSE5oUHJpM0pVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU7Il6y0d
kEEuFdgoXK9mNZABqWMkQgCU6VHZ2uHAHOYthWHl4YwhqhWYJt2Fl6wonLiRrqGa
VJq9NNuQpDCL3/BcQleS3pmbv1Cguq2Ll1FcNqWV67O/o/calP9aIzgmoBMsFqd/
IOjiQb4dz1MO27111ID1pp1pjCNQJ5bWdVJZ4iH7CpJJTVxW276kjvH1fJzICGAO
9A2qrIRuvxo8KIwMRCF93szxiGdnVJGPhwfMngRa2tdKJSLjEq83blFMLfEDu28G
RG0fMt5x/rYcTkgu4iXzAnsbePtMVjc5IUnc5+P4Z9jAtz5BBD0BkpuGKSJ86PX9
yrIyhpV37t74Mg==
-----END CERTIFICATE-----
Generated at Tue Mar 3 04:18:32 2026 by rpki-client