Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/a3baca-437d-4607-9c1a-557a4c31e02e/1/tMQeWYNNphLYPKJBlPAsptdgJEg.mft
File: tMQeWYNNphLYPKJBlPAsptdgJEg.mft (raw, json)
Hash identifier: 0UrEiAIXoOvmlIIQKd0UPo3C5ct6jF6Lw88i1Fftmj4=
Subject key identifier: FF:08:86:7D:FA:E6:F8:B5:C3:E9:59:C6:96:04:B6:54:32:F0:7E:E9
Authority key identifier: B4:C4:1E:59:83:4D:A6:12:D8:3C:A2:41:94:F0:2C:A6:D7:60:24:48
Certificate issuer: /CN=b4c41e59834da612d83ca24194f02ca6d7602448
Certificate serial: 019CAA5846C8EB645F3F11CDC5D4462FF86E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tMQeWYNNphLYPKJBlPAsptdgJEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/a3baca-437d-4607-9c1a-557a4c31e02e/1/tMQeWYNNphLYPKJBlPAsptdgJEg.mft
Manifest number: 066B
Signing time: Sun 01 Mar 2026 17:00:37 +0000
Manifest this update: Sun 01 Mar 2026 17:00:37 +0000
Manifest next update: Mon 02 Mar 2026 17:00:37 +0000
Files and hashes: 1: JNBeyrY-s5eopsp59vWk83HFU5c.roa (hash: gsrDZu7NeQ1/vZ7JzsrWfUrloQVAyva35jOSVpK+lhg=)
2: tMQeWYNNphLYPKJBlPAsptdgJEg.crl (hash: GAUPGEorzQmmspDhUpURXH5yss/5LQDiLdhJuvbKuv4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/a3baca-437d-4607-9c1a-557a4c31e02e/1/tMQeWYNNphLYPKJBlPAsptdgJEg.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/a3baca-437d-4607-9c1a-557a4c31e02e/1/tMQeWYNNphLYPKJBlPAsptdgJEg.mft
rsync://rpki.ripe.net/repository/DEFAULT/tMQeWYNNphLYPKJBlPAsptdgJEg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:46:c8:eb:64:5f:3f:11:cd:c5:d4:46:2f:f8:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4c41e59834da612d83ca24194f02ca6d7602448
Validity
Not Before: Mar 1 17:00:37 2026 GMT
Not After : Mar 2 17:00:37 2026 GMT
Subject: CN=ff08867dfae6f8b5c3e959c69604b65432f07ee9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:4a:66:f7:0e:e9:6b:d2:2a:cb:bb:4c:7f:1f:
40:5c:c1:e0:b7:1f:a1:b3:51:32:75:2e:27:bc:dc:
79:c4:0b:49:98:a8:e6:57:95:c5:8a:01:bc:b5:5d:
61:67:0e:d3:7c:64:35:62:5d:92:8e:90:86:48:88:
4a:a8:ab:82:e9:ed:88:6b:b5:a1:1b:53:a2:69:47:
58:61:47:27:6d:3c:28:04:bd:86:e7:77:70:43:d9:
93:79:3c:48:e1:c4:12:ce:ec:4d:7e:32:dd:f0:f5:
d7:d0:16:f6:e4:9c:bd:54:0a:da:35:da:9c:b9:4d:
15:32:3a:d7:cd:16:56:d8:b1:7e:d3:38:cc:9e:33:
39:3a:2e:1a:2f:00:4d:92:c9:85:69:e3:dd:ae:f7:
6e:87:c8:fd:45:5d:1c:7d:73:84:d3:7e:4e:37:11:
72:db:8d:49:56:50:f6:03:2a:7d:0f:83:e9:fd:82:
30:e3:38:0d:76:c3:99:b8:8f:0e:ad:6e:64:8f:5a:
1d:19:37:04:85:b5:74:71:94:f7:00:2e:29:d2:41:
e4:ac:51:2c:95:07:77:34:aa:ea:91:e7:7b:97:02:
13:bb:f5:a0:dd:a0:28:7e:a8:71:6c:2d:44:10:94:
55:6e:17:82:c6:fe:3d:ea:90:c1:f4:78:d3:99:c7:
05:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:08:86:7D:FA:E6:F8:B5:C3:E9:59:C6:96:04:B6:54:32:F0:7E:E9
X509v3 Authority Key Identifier:
keyid:B4:C4:1E:59:83:4D:A6:12:D8:3C:A2:41:94:F0:2C:A6:D7:60:24:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tMQeWYNNphLYPKJBlPAsptdgJEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a3baca-437d-4607-9c1a-557a4c31e02e/1/tMQeWYNNphLYPKJBlPAsptdgJEg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a3baca-437d-4607-9c1a-557a4c31e02e/1/tMQeWYNNphLYPKJBlPAsptdgJEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:df:08:c2:ca:8d:77:7d:a9:b1:94:c1:97:85:af:e4:46:fd:
09:6a:e2:2d:8d:2d:29:86:2f:1b:f9:80:e3:cf:d6:b0:f7:01:
ce:e3:a7:60:ca:e9:c7:2a:2b:0f:5b:bb:fa:f7:97:4e:7c:95:
45:91:a6:52:f0:5e:47:1f:7d:66:e8:2f:7d:4c:4d:1d:74:03:
86:07:cc:27:a9:74:fd:0b:f5:c6:67:fb:bf:40:bf:b5:18:80:
6c:e3:00:27:aa:53:83:45:31:ed:34:c1:63:93:59:22:df:63:
01:1e:f1:a0:1b:1b:4a:86:d2:4f:64:7c:2e:07:0a:b5:57:f1:
d1:26:3b:bb:12:07:0c:ac:be:f8:5e:fc:66:44:44:41:82:8b:
45:e0:0b:e9:ef:e5:7d:5d:8d:35:fc:38:f4:c6:6d:af:51:83:
c3:76:60:a6:f7:cf:0e:47:0c:08:17:fe:3d:9d:5c:60:d2:af:
b8:5a:40:44:f2:f4:1a:05:e2:b0:57:69:25:78:10:16:13:81:
a4:f3:64:a8:a8:c1:36:d7:e7:7c:25:5b:43:1a:17:58:42:7f:
a9:c9:77:f8:4c:d9:6c:09:d0:2f:dd:34:e3:a9:33:28:ba:c2:
4a:6a:31:1a:0d:9a:e7:45:08:5f:42:b1:97:2c:0b:bb:35:40:
30:b6:70:0e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqWEbI62RfPxHNxdRGL/huMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0YzQxZTU5ODM0ZGE2MTJkODNjYTI0MTk0ZjAyY2E2ZDc2
MDI0NDgwHhcNMjYwMzAxMTcwMDM3WhcNMjYwMzAyMTcwMDM3WjAzMTEwLwYDVQQD
EyhmZjA4ODY3ZGZhZTZmOGI1YzNlOTU5YzY5NjA0YjY1NDMyZjA3ZWU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr0pm9w7pa9Iqy7tMfx9AXMHgtx+h
s1EydS4nvNx5xAtJmKjmV5XFigG8tV1hZw7TfGQ1Yl2SjpCGSIhKqKuC6e2Ia7Wh
G1OiaUdYYUcnbTwoBL2G53dwQ9mTeTxI4cQSzuxNfjLd8PXX0Bb25Jy9VAraNdqc
uU0VMjrXzRZW2LF+0zjMnjM5Oi4aLwBNksmFaePdrvduh8j9RV0cfXOE035ONxFy
241JVlD2Ayp9D4Pp/YIw4zgNdsOZuI8OrW5kj1odGTcEhbV0cZT3AC4p0kHkrFEs
lQd3NKrqked7lwITu/Wg3aAofqhxbC1EEJRVbheCxv496pDB9HjTmccFewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP8Ihn365vi1w+lZxpYEtlQy8H7pMB8GA1UdIwQY
MBaAFLTEHlmDTaYS2DyiQZTwLKbXYCRIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdE1RZVdZTk5waExZUEtKQmxQQXNwdGRnSkVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC9hM2JhY2EtNDM3ZC00NjA3LTljMWEt
NTU3YTRjMzFlMDJlLzEvdE1RZVdZTk5waExZUEtKQmxQQXNwdGRnSkVnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZC9hM2JhY2EtNDM3ZC00NjA3LTljMWEtNTU3YTRjMzFlMDJl
LzEvdE1RZVdZTk5waExZUEtKQmxQQXNwdGRnSkVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgt8IwsqN
d32psZTBl4Wv5Eb9CWriLY0tKYYvG/mA48/WsPcBzuOnYMrpxyorD1u7+veXTnyV
RZGmUvBeRx99ZugvfUxNHXQDhgfMJ6l0/Qv1xmf7v0C/tRiAbOMAJ6pTg0Ux7TTB
Y5NZIt9jAR7xoBsbSobST2R8LgcKtVfx0SY7uxIHDKy++F78ZkREQYKLReAL6e/l
fV2NNfw49MZtr1GDw3ZgpvfPDkcMCBf+PZ1cYNKvuFpARPL0GgXisFdpJXgQFhOB
pPNkqKjBNtfnfCVbQxoXWEJ/qcl3+EzZbAnQL90046kzKLrCSmoxGg2a50UIX0Kx
lywLuzVAMLZwDg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:03:40 2026 by rpki-client