
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/b5d955-c7f8-463f-815a-4eb9922860cd/1/tVG7qYKf51krGwLo1xyP18ziGrE.mft
File: tVG7qYKf51krGwLo1xyP18ziGrE.mft (raw, json)
Hash identifier: LU3vc5B2CR6AzjvfDJTwmESSo7TTCmxhLeLLk/YuonU=
Subject key identifier: 7D:2B:5B:88:75:F7:95:03:5A:A4:58:D1:07:64:55:76:CE:4B:E4:C0
Authority key identifier: B5:51:BB:A9:82:9F:E7:59:2B:1B:02:E8:D7:1C:8F:D7:CC:E2:1A:B1
Certificate issuer: /CN=b551bba9829fe7592b1b02e8d71c8fd7cce21ab1
Certificate serial: 019D9BF52C3B6428C41921105C5FAA0B7327
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tVG7qYKf51krGwLo1xyP18ziGrE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/b5d955-c7f8-463f-815a-4eb9922860cd/1/tVG7qYKf51krGwLo1xyP18ziGrE.mft
Manifest number: 02A8
Signing time: Fri 17 Apr 2026 15:00:29 +0000
Manifest this update: Fri 17 Apr 2026 15:00:29 +0000
Manifest next update: Sat 18 Apr 2026 15:00:29 +0000
Files and hashes: 1: iMHns26Twh_iKXADF620qDAnTy0.roa (hash: GWSmHWITFYygfJHovjbtsHzKxtolOYsM+f2kV7+EZnY=)
2: tVG7qYKf51krGwLo1xyP18ziGrE.crl (hash: Ioa17k/Rs3kZb9zZcviEjEyZYx2vUEdsM06D9VCpLzk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/b5d955-c7f8-463f-815a-4eb9922860cd/1/tVG7qYKf51krGwLo1xyP18ziGrE.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/b5d955-c7f8-463f-815a-4eb9922860cd/1/tVG7qYKf51krGwLo1xyP18ziGrE.mft
rsync://rpki.ripe.net/repository/DEFAULT/tVG7qYKf51krGwLo1xyP18ziGrE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 15:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:f5:2c:3b:64:28:c4:19:21:10:5c:5f:aa:0b:73:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b551bba9829fe7592b1b02e8d71c8fd7cce21ab1
Validity
Not Before: Apr 17 15:00:29 2026 GMT
Not After : Apr 18 15:00:29 2026 GMT
Subject: CN=7d2b5b8875f795035aa458d107645576ce4be4c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:50:d5:1c:32:91:20:b9:4f:9d:18:07:24:38:
3b:08:ba:39:10:85:a6:93:16:52:52:b1:c1:3f:e3:
15:e0:40:19:11:14:ca:5a:ce:e0:ed:7f:af:56:d9:
16:26:4f:1a:da:91:5c:d2:c6:01:c3:2c:a6:fc:18:
53:11:ee:f4:8b:b8:72:ae:a5:c7:45:b7:2a:89:65:
47:0f:03:46:07:6a:27:72:5a:ec:69:39:35:d1:a9:
ce:63:d7:e9:0e:ef:b5:f9:35:bc:37:9e:95:e2:fd:
d6:ff:60:00:de:a5:11:cb:a5:8b:c5:85:7e:12:18:
d6:6f:02:65:48:db:b8:6d:a9:26:30:fd:7f:1a:68:
f2:df:01:50:aa:32:bb:ab:44:57:bd:e4:d4:56:4a:
0c:4a:5e:43:c9:5a:d5:c3:3c:48:0c:d7:d1:d2:bc:
8f:03:65:00:3c:c2:87:7a:a1:e0:11:8a:33:2d:fe:
7b:53:c1:04:4a:af:45:ff:6b:be:2c:86:8f:e2:47:
44:ad:42:46:aa:29:eb:72:13:84:dd:a8:47:b8:0c:
32:fb:54:51:36:be:51:74:6c:88:00:be:76:88:3e:
41:40:3f:94:7f:bb:83:06:4b:46:55:ea:0c:02:6e:
23:4a:ea:e2:6b:de:62:a0:07:9e:97:f7:8e:f2:1f:
4a:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:2B:5B:88:75:F7:95:03:5A:A4:58:D1:07:64:55:76:CE:4B:E4:C0
X509v3 Authority Key Identifier:
keyid:B5:51:BB:A9:82:9F:E7:59:2B:1B:02:E8:D7:1C:8F:D7:CC:E2:1A:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tVG7qYKf51krGwLo1xyP18ziGrE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b5d955-c7f8-463f-815a-4eb9922860cd/1/tVG7qYKf51krGwLo1xyP18ziGrE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b5d955-c7f8-463f-815a-4eb9922860cd/1/tVG7qYKf51krGwLo1xyP18ziGrE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:46:93:be:54:99:a5:cc:b1:25:df:60:bb:75:1a:22:c2:cf:
a0:84:a0:4d:e4:a2:9b:71:3a:20:b6:c3:8d:c0:b6:e8:16:4b:
65:c0:a7:44:1f:bd:83:ec:87:bb:e3:c0:a4:a4:33:42:52:4d:
c8:4f:19:83:d4:e7:48:3b:ae:88:e5:dc:1c:d0:ed:91:1f:d3:
85:b9:a7:90:e6:a5:c1:2a:45:77:5b:47:1b:0f:52:b1:e2:5b:
67:fb:83:a9:e3:00:1f:de:f5:b5:55:fd:19:20:20:95:2d:41:
14:9a:83:54:d5:17:2d:e4:6b:5c:82:79:bf:e7:04:58:17:df:
f8:cc:59:05:6e:2f:00:63:3a:60:44:bd:a2:c0:b7:4c:a1:3b:
92:e3:3f:53:90:3e:00:c4:a0:1f:dd:25:d1:ac:a8:ea:39:1b:
36:f2:f3:4e:a8:bf:8e:2c:29:19:0f:33:49:91:66:95:33:61:
39:ca:6c:d8:f1:e6:3d:09:32:d7:74:0e:55:95:53:b9:00:9a:
1e:24:a9:76:d2:62:a9:cd:43:33:b8:41:11:2c:9f:6f:44:59:
2b:aa:d5:3d:a0:20:07:e5:3b:4f:71:d1:5b:03:29:45:6f:48:
9f:bc:92:6c:52:ae:7f:f2:2a:59:80:3a:a4:9f:ed:e0:44:34:
94:63:53:d3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2b9Sw7ZCjEGSEQXF+qC3MnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1NTFiYmE5ODI5ZmU3NTkyYjFiMDJlOGQ3MWM4ZmQ3Y2Nl
MjFhYjEwHhcNMjYwNDE3MTUwMDI5WhcNMjYwNDE4MTUwMDI5WjAzMTEwLwYDVQQD
Eyg3ZDJiNWI4ODc1Zjc5NTAzNWFhNDU4ZDEwNzY0NTU3NmNlNGJlNGMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArFDVHDKRILlPnRgHJDg7CLo5EIWm
kxZSUrHBP+MV4EAZERTKWs7g7X+vVtkWJk8a2pFc0sYBwyym/BhTEe70i7hyrqXH
RbcqiWVHDwNGB2onclrsaTk10anOY9fpDu+1+TW8N56V4v3W/2AA3qURy6WLxYV+
EhjWbwJlSNu4bakmMP1/Gmjy3wFQqjK7q0RXveTUVkoMSl5DyVrVwzxIDNfR0ryP
A2UAPMKHeqHgEYozLf57U8EESq9F/2u+LIaP4kdErUJGqinrchOE3ahHuAwy+1RR
Nr5RdGyIAL52iD5BQD+Uf7uDBktGVeoMAm4jSuria95ioAeel/eO8h9K8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH0rW4h195UDWqRY0QdkVXbOS+TAMB8GA1UdIwQY
MBaAFLVRu6mCn+dZKxsC6Nccj9fM4hqxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFZHN3FZS2Y1MWtyR3dMbzF4eVAxOHppR3JFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC9iNWQ5NTUtYzdmOC00NjNmLTgxNWEt
NGViOTkyMjg2MGNkLzEvdFZHN3FZS2Y1MWtyR3dMbzF4eVAxOHppR3JFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OC9iNWQ5NTUtYzdmOC00NjNmLTgxNWEtNGViOTkyMjg2MGNk
LzEvdFZHN3FZS2Y1MWtyR3dMbzF4eVAxOHppR3JFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU0aTvlSZ
pcyxJd9gu3UaIsLPoISgTeSim3E6ILbDjcC26BZLZcCnRB+9g+yHu+PApKQzQlJN
yE8Zg9TnSDuuiOXcHNDtkR/ThbmnkOalwSpFd1tHGw9SseJbZ/uDqeMAH971tVX9
GSAglS1BFJqDVNUXLeRrXIJ5v+cEWBff+MxZBW4vAGM6YES9osC3TKE7kuM/U5A+
AMSgH90l0ayo6jkbNvLzTqi/jiwpGQ8zSZFmlTNhOcps2PHmPQky13QOVZVTuQCa
HiSpdtJiqc1DM7hBESyfb0RZK6rVPaAgB+U7T3HRWwMpRW9In7ySbFKuf/IqWYA6
pJ/t4EQ0lGNT0w==
-----END CERTIFICATE-----
Generated at Fri Apr 17 19:24:03 2026 by rpki-client