Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/431daf-002b-4458-bbf5-564d18c6862b/1/tsAN1rE41q2498hDjdCy2Fg9xWY.mft
File: tsAN1rE41q2498hDjdCy2Fg9xWY.mft (raw, json)
Hash identifier: ytKIPWa3JwuSbQ3wIOrY3PgLpjlu/o76Pjby6Xd9C+g=
Subject key identifier: 40:C6:E7:1D:6E:6F:CB:1F:9D:B1:35:07:5C:3A:23:14:C6:B9:1A:4E
Authority key identifier: B6:C0:0D:D6:B1:38:D6:AD:B8:F7:C8:43:8D:D0:B2:D8:58:3D:C5:66
Certificate issuer: /CN=b6c00dd6b138d6adb8f7c8438dd0b2d8583dc566
Certificate serial: 019CA90ECA916635B14240B840DF15CFFFB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tsAN1rE41q2498hDjdCy2Fg9xWY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/431daf-002b-4458-bbf5-564d18c6862b/1/tsAN1rE41q2498hDjdCy2Fg9xWY.mft
Manifest number: EA
Signing time: Sun 01 Mar 2026 11:00:44 +0000
Manifest this update: Sun 01 Mar 2026 11:00:44 +0000
Manifest next update: Mon 02 Mar 2026 11:00:44 +0000
Files and hashes: 1: 9h9e6R0rqbyhkdydEjqTZrkWQxM.asa (hash: L3iLuEzCPk6Gw29gfGqHU9jLoff62sEQn25lEVcMyvM=)
2: tsAN1rE41q2498hDjdCy2Fg9xWY.crl (hash: T/dnYQ+RjCEpd5uWtZOz+rXfusUXrMsVOFhULu4Zam8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/431daf-002b-4458-bbf5-564d18c6862b/1/tsAN1rE41q2498hDjdCy2Fg9xWY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/431daf-002b-4458-bbf5-564d18c6862b/1/tsAN1rE41q2498hDjdCy2Fg9xWY.mft
rsync://rpki.ripe.net/repository/DEFAULT/tsAN1rE41q2498hDjdCy2Fg9xWY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 09:38:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:0e:ca:91:66:35:b1:42:40:b8:40:df:15:cf:ff:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6c00dd6b138d6adb8f7c8438dd0b2d8583dc566
Validity
Not Before: Mar 1 11:00:44 2026 GMT
Not After : Mar 2 11:00:44 2026 GMT
Subject: CN=40c6e71d6e6fcb1f9db135075c3a2314c6b91a4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:97:78:53:1e:5b:33:7d:1a:50:9f:6a:8a:da:
28:4b:ba:c9:b4:1a:76:86:cd:b1:ee:80:1c:62:f1:
f3:5b:c4:53:52:9d:7d:33:29:34:2e:fb:f3:28:45:
48:86:0c:a9:49:65:f6:4f:c6:6c:11:f7:62:74:03:
f6:bd:14:1f:78:64:c1:3b:df:46:77:93:1c:ad:2b:
54:d1:a9:30:cc:8a:7d:1a:de:c4:ee:85:1f:ec:f5:
7e:47:72:4c:9e:55:af:a0:4b:e5:34:10:19:25:ae:
bf:d5:35:e9:ea:75:1e:d8:a8:db:f4:21:87:ae:68:
29:43:2a:f8:3d:75:48:4e:57:92:a9:68:c2:0d:58:
2d:d3:1d:1f:f7:b3:3b:de:fa:7f:8a:76:89:bc:ba:
3d:07:52:8a:bb:c8:7d:cc:aa:a4:15:76:0b:a2:c1:
82:8f:3c:8f:16:f5:b3:3e:bf:a1:9b:00:3e:0b:8e:
c6:2f:3e:f8:89:4d:8e:9d:0e:a9:66:83:a9:01:d7:
53:d3:6c:71:e5:51:29:be:17:72:4f:f7:20:6d:94:
13:d9:c0:44:a5:82:b9:b1:a6:a4:3b:5d:16:93:03:
9d:17:7c:f2:63:30:c1:1b:9b:e5:71:90:7a:c8:b8:
4d:61:c2:e3:cb:62:08:a5:ae:fc:a3:87:31:65:a6:
5a:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:C6:E7:1D:6E:6F:CB:1F:9D:B1:35:07:5C:3A:23:14:C6:B9:1A:4E
X509v3 Authority Key Identifier:
keyid:B6:C0:0D:D6:B1:38:D6:AD:B8:F7:C8:43:8D:D0:B2:D8:58:3D:C5:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tsAN1rE41q2498hDjdCy2Fg9xWY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/431daf-002b-4458-bbf5-564d18c6862b/1/tsAN1rE41q2498hDjdCy2Fg9xWY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/431daf-002b-4458-bbf5-564d18c6862b/1/tsAN1rE41q2498hDjdCy2Fg9xWY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:9f:df:ce:43:c8:f1:13:9f:75:d3:79:7e:d4:c9:0a:c9:15:
4e:f3:51:42:de:28:e6:1e:36:31:b7:27:bf:35:da:c7:f3:d7:
66:a7:5b:43:d5:51:93:e8:ca:d9:f8:a3:d2:ce:39:ea:cb:40:
b6:6f:40:1e:0d:94:b1:8b:9e:c6:c4:82:16:8e:05:4a:0d:20:
84:f2:6f:7e:42:c4:06:b7:3c:7c:ce:ad:6b:1a:55:cb:aa:5b:
4f:06:52:a1:6e:ad:d3:68:c3:b3:0a:3e:cd:d4:03:a0:ed:0d:
12:4c:1d:6f:0b:2a:e5:fa:e4:54:04:ee:e9:59:01:fc:e3:a2:
72:ec:27:ff:56:c8:4f:79:a7:46:04:98:fb:75:21:71:46:7b:
18:2a:7a:89:48:89:71:1a:73:de:b6:8a:3c:a9:18:a4:b6:8a:
35:a3:0d:78:df:32:ef:67:5c:1b:e9:df:5a:7e:d2:21:f1:20:
63:cf:36:27:72:51:5c:8a:6e:a5:aa:96:73:53:65:09:d0:f8:
a2:41:0a:c1:95:1b:e6:1b:8b:bc:84:8e:4f:1f:ae:db:a5:97:
d5:51:97:9b:66:0f:5c:0f:0f:3a:c1:a6:d0:7f:05:42:83:61:
cc:14:02:9a:17:ca:31:30:9d:41:ea:e5:2d:77:d5:a8:a9:5b:
cb:d4:0a:91
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZypDsqRZjWxQkC4QN8Vz/+5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI2YzAwZGQ2YjEzOGQ2YWRiOGY3Yzg0MzhkZDBiMmQ4NTgz
ZGM1NjYwHhcNMjYwMzAxMTEwMDQ0WhcNMjYwMzAyMTEwMDQ0WjAzMTEwLwYDVQQD
Eyg0MGM2ZTcxZDZlNmZjYjFmOWRiMTM1MDc1YzNhMjMxNGM2YjkxYTRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy5d4Ux5bM30aUJ9qitooS7rJtBp2
hs2x7oAcYvHzW8RTUp19Myk0LvvzKEVIhgypSWX2T8ZsEfdidAP2vRQfeGTBO99G
d5McrStU0akwzIp9Gt7E7oUf7PV+R3JMnlWvoEvlNBAZJa6/1TXp6nUe2Kjb9CGH
rmgpQyr4PXVITleSqWjCDVgt0x0f97M73vp/inaJvLo9B1KKu8h9zKqkFXYLosGC
jzyPFvWzPr+hmwA+C47GLz74iU2OnQ6pZoOpAddT02xx5VEpvhdyT/cgbZQT2cBE
pYK5saakO10WkwOdF3zyYzDBG5vlcZB6yLhNYcLjy2IIpa78o4cxZaZa3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEDG5x1ub8sfnbE1B1w6IxTGuRpOMB8GA1UdIwQY
MBaAFLbADdaxONatuPfIQ43QsthYPcVmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdHNBTjFyRTQxcTI0OThoRGpkQ3kyRmc5eFdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi80MzFkYWYtMDAyYi00NDU4LWJiZjUt
NTY0ZDE4YzY4NjJiLzEvdHNBTjFyRTQxcTI0OThoRGpkQ3kyRmc5eFdZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Zi80MzFkYWYtMDAyYi00NDU4LWJiZjUtNTY0ZDE4YzY4NjJi
LzEvdHNBTjFyRTQxcTI0OThoRGpkQ3kyRmc5eFdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC5/fzkPI
8ROfddN5ftTJCskVTvNRQt4o5h42MbcnvzXax/PXZqdbQ9VRk+jK2fij0s456stA
tm9AHg2UsYuexsSCFo4FSg0ghPJvfkLEBrc8fM6taxpVy6pbTwZSoW6t02jDswo+
zdQDoO0NEkwdbwsq5frkVATu6VkB/OOicuwn/1bIT3mnRgSY+3UhcUZ7GCp6iUiJ
cRpz3raKPKkYpLaKNaMNeN8y72dcG+nfWn7SIfEgY882J3JRXIpupaqWc1NlCdD4
okEKwZUb5huLvISOTx+u26WX1VGXm2YPXA8POsGm0H8FQoNhzBQCmhfKMTCdQerl
LXfVqKlby9QKkQ==
-----END CERTIFICATE-----
Generated at Sun Mar 1 18:41:31 2026 by rpki-client