Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/6a9378-2fa7-482d-8c7c-69ca4cb65f97/1/TNkIkaeTL3NWqAMznaDM32OtLTU.mft
File: TNkIkaeTL3NWqAMznaDM32OtLTU.mft (raw, json)
Hash identifier: vGIL/GQO8tmntNZeQnK6jEE9fwz3lTOccAA+bNSbhpU=
Subject key identifier: F6:AC:62:7A:B0:28:07:1F:7B:D0:8E:73:64:FF:9A:CB:FD:77:F2:4C
Authority key identifier: 4C:D9:08:91:A7:93:2F:73:56:A8:03:33:9D:A0:CC:DF:63:AD:2D:35
Certificate issuer: /CN=4cd90891a7932f7356a803339da0ccdf63ad2d35
Certificate serial: 019CAF48221816EA9989CCA5936625300D56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TNkIkaeTL3NWqAMznaDM32OtLTU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/6a9378-2fa7-482d-8c7c-69ca4cb65f97/1/TNkIkaeTL3NWqAMznaDM32OtLTU.mft
Manifest number: 0333
Signing time: Mon 02 Mar 2026 16:01:05 +0000
Manifest this update: Mon 02 Mar 2026 16:01:05 +0000
Manifest next update: Tue 03 Mar 2026 16:01:05 +0000
Files and hashes: 1: SyOMrq9ZPqa-CxddJFs4EYM4Fbg.roa (hash: wy5+/o73Vk3SAFiCb5cli4N7qOzZBJq1Ya6ET4kdAcw=)
2: TNkIkaeTL3NWqAMznaDM32OtLTU.crl (hash: ZqAYl0SzZIDBPBHJKpOEE1g1/dEYfJY0VY23ys9KQpw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/6a9378-2fa7-482d-8c7c-69ca4cb65f97/1/TNkIkaeTL3NWqAMznaDM32OtLTU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/6a9378-2fa7-482d-8c7c-69ca4cb65f97/1/TNkIkaeTL3NWqAMznaDM32OtLTU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TNkIkaeTL3NWqAMznaDM32OtLTU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 15:05:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:af:48:22:18:16:ea:99:89:cc:a5:93:66:25:30:0d:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cd90891a7932f7356a803339da0ccdf63ad2d35
Validity
Not Before: Mar 2 16:01:05 2026 GMT
Not After : Mar 3 16:01:05 2026 GMT
Subject: CN=f6ac627ab028071f7bd08e7364ff9acbfd77f24c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:a8:e8:07:a0:7c:48:21:e1:a0:6d:54:17:ed:
bd:4a:6a:9a:ac:b7:4f:c9:20:a4:90:b4:a2:b9:b8:
18:94:a8:94:ea:7e:66:5f:70:c6:b1:a0:20:56:27:
b2:87:68:f8:d9:2d:1c:75:6c:6f:31:c1:b4:da:0a:
5b:52:08:c3:ae:4f:2d:fa:75:9a:21:ae:eb:70:fc:
97:7e:36:f0:68:88:bb:9f:32:a0:63:97:ee:c0:57:
53:b3:03:a6:f6:43:d4:56:d6:26:fe:36:49:c4:17:
b2:cd:25:21:08:93:5e:94:5c:ab:f3:fe:f0:af:7b:
50:fd:0e:39:5a:c1:1f:f7:4f:cf:29:8c:99:16:22:
74:00:7d:e2:bb:36:fe:fc:93:56:06:f0:f8:a1:67:
ff:cc:b4:33:0f:15:75:ba:99:3f:2e:f9:78:ab:68:
73:56:3e:43:63:80:25:26:2a:b8:33:ee:c9:7b:ea:
8b:88:94:4e:68:0b:5e:31:9a:d1:1e:7a:8f:80:c4:
c1:c0:fb:8c:af:f9:f3:e2:d0:df:ff:6d:27:e4:e9:
dd:e3:e8:79:3c:36:ea:0a:4c:4c:9b:8a:0d:1d:e5:
2c:5e:a0:0b:36:7a:c7:d5:7b:5d:db:03:43:b0:42:
bd:f7:1e:9b:18:61:2c:3e:8e:f2:b3:91:52:4e:57:
1e:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:AC:62:7A:B0:28:07:1F:7B:D0:8E:73:64:FF:9A:CB:FD:77:F2:4C
X509v3 Authority Key Identifier:
keyid:4C:D9:08:91:A7:93:2F:73:56:A8:03:33:9D:A0:CC:DF:63:AD:2D:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TNkIkaeTL3NWqAMznaDM32OtLTU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/6a9378-2fa7-482d-8c7c-69ca4cb65f97/1/TNkIkaeTL3NWqAMznaDM32OtLTU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/6a9378-2fa7-482d-8c7c-69ca4cb65f97/1/TNkIkaeTL3NWqAMznaDM32OtLTU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:7d:68:d9:2b:79:2c:14:7a:9b:b9:82:ab:e7:9d:93:dd:fb:
81:21:99:81:a8:f6:fb:15:97:ca:b4:35:c0:42:75:a5:95:ed:
2c:65:ff:e2:75:02:14:9a:57:80:aa:0a:2b:5c:a2:db:b3:65:
bc:91:b8:2e:c0:8e:7e:a8:c9:ae:b8:38:a1:94:4f:a9:35:1c:
e8:36:e5:69:39:c2:bf:f6:ce:0e:cc:02:78:b7:e1:7e:e7:74:
d7:ce:17:4d:f3:82:63:e3:a1:b4:4d:f5:4b:93:70:67:2a:94:
3c:8e:df:6c:2e:07:e8:90:ac:88:17:13:e2:a1:ae:ce:90:0c:
96:63:77:1e:f7:28:2f:f0:f2:92:59:fe:29:70:c8:2c:59:80:
c2:bf:3e:0c:26:3f:c1:69:07:fa:3a:9a:e6:3e:f8:46:7b:55:
7a:6b:12:1e:ab:8e:98:f0:79:1a:9d:62:4a:d8:5c:08:4a:be:
8a:47:0a:bb:b3:46:a8:c9:f8:da:18:23:42:6d:e9:d7:a8:ff:
6a:14:3d:66:3c:54:f9:12:ff:af:24:79:c8:14:6a:9d:25:5e:
34:52:94:e8:1a:7e:31:45:86:53:fc:42:f2:ff:a1:5c:8a:44:
7d:85:8a:90:ea:0f:60:f5:07:42:c7:d2:20:2b:79:f9:50:37:
f6:f0:e6:04
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyvSCIYFuqZicylk2YlMA1WMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjZDkwODkxYTc5MzJmNzM1NmE4MDMzMzlkYTBjY2RmNjNh
ZDJkMzUwHhcNMjYwMzAyMTYwMTA1WhcNMjYwMzAzMTYwMTA1WjAzMTEwLwYDVQQD
EyhmNmFjNjI3YWIwMjgwNzFmN2JkMDhlNzM2NGZmOWFjYmZkNzdmMjRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtKjoB6B8SCHhoG1UF+29SmqarLdP
ySCkkLSiubgYlKiU6n5mX3DGsaAgVieyh2j42S0cdWxvMcG02gpbUgjDrk8t+nWa
Ia7rcPyXfjbwaIi7nzKgY5fuwFdTswOm9kPUVtYm/jZJxBeyzSUhCJNelFyr8/7w
r3tQ/Q45WsEf90/PKYyZFiJ0AH3iuzb+/JNWBvD4oWf/zLQzDxV1upk/Lvl4q2hz
Vj5DY4AlJiq4M+7Je+qLiJROaAteMZrRHnqPgMTBwPuMr/nz4tDf/20n5Ond4+h5
PDbqCkxMm4oNHeUsXqALNnrH1Xtd2wNDsEK99x6bGGEsPo7ys5FSTlceuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPasYnqwKAcfe9COc2T/msv9d/JMMB8GA1UdIwQY
MBaAFEzZCJGnky9zVqgDM52gzN9jrS01MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVE5rSWthZVRMM05XcUFNem5hRE0zMk90TFRVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS82YTkzNzgtMmZhNy00ODJkLThjN2Mt
NjljYTRjYjY1Zjk3LzEvVE5rSWthZVRMM05XcUFNem5hRE0zMk90TFRVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS82YTkzNzgtMmZhNy00ODJkLThjN2MtNjljYTRjYjY1Zjk3
LzEvVE5rSWthZVRMM05XcUFNem5hRE0zMk90TFRVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnn1o2St5
LBR6m7mCq+edk937gSGZgaj2+xWXyrQ1wEJ1pZXtLGX/4nUCFJpXgKoKK1yi27Nl
vJG4LsCOfqjJrrg4oZRPqTUc6DblaTnCv/bODswCeLfhfud0184XTfOCY+OhtE31
S5NwZyqUPI7fbC4H6JCsiBcT4qGuzpAMlmN3HvcoL/Dykln+KXDILFmAwr8+DCY/
wWkH+jqa5j74RntVemsSHquOmPB5Gp1iSthcCEq+ikcKu7NGqMn42hgjQm3p16j/
ahQ9ZjxU+RL/ryR5yBRqnSVeNFKU6Bp+MUWGU/xC8v+hXIpEfYWKkOoPYPUHQsfS
ICt5+VA39vDmBA==
-----END CERTIFICATE-----
Generated at Tue Mar 3 00:06:15 2026 by rpki-client