Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/0c9de8-cef2-4d8d-a920-76594a19177c/1/1-TmwPxKU69NaOxXWldfpH4y0H6A.mft
File: 1-TmwPxKU69NaOxXWldfpH4y0H6A.mft (raw, json)
Hash identifier: u2Sh0Vf+ouV8w5K5DbXPZJVSw7Qi7g+/3RHKDW05t7Y=
Subject key identifier: 52:3F:51:07:B2:49:F6:92:22:A4:80:09:39:FD:86:74:D3:01:E0:11
Authority key identifier: F9:39:B0:3F:12:94:EB:D3:5A:3B:15:D6:95:D7:E9:1F:8C:B4:1F:A0
Certificate issuer: /CN=f939b03f1294ebd35a3b15d695d7e91f8cb41fa0
Certificate serial: 019D9A74DC8F01489946BD946A74E5331629
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-TmwPxKU69NaOxXWldfpH4y0H6A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/0c9de8-cef2-4d8d-a920-76594a19177c/1/1-TmwPxKU69NaOxXWldfpH4y0H6A.mft
Manifest number: 150E
Signing time: Fri 17 Apr 2026 08:00:42 +0000
Manifest this update: Fri 17 Apr 2026 08:00:42 +0000
Manifest next update: Sat 18 Apr 2026 08:00:42 +0000
Files and hashes: 1: 1-TmwPxKU69NaOxXWldfpH4y0H6A.crl (hash: KN4fv1UunZ7QHA3AmEhOIil86pr1G/ef9dKbZ4R0v38=)
2: fBLAHwUkRrn6HYBRnTV7FYQGNDQ.roa (hash: 2J5IIevOI4AOjVlKsCvjgqwg6VuZoErPwilBziOfEkw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/0c9de8-cef2-4d8d-a920-76594a19177c/1/1-TmwPxKU69NaOxXWldfpH4y0H6A.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/0c9de8-cef2-4d8d-a920-76594a19177c/1/1-TmwPxKU69NaOxXWldfpH4y0H6A.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-TmwPxKU69NaOxXWldfpH4y0H6A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:74:dc:8f:01:48:99:46:bd:94:6a:74:e5:33:16:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f939b03f1294ebd35a3b15d695d7e91f8cb41fa0
Validity
Not Before: Apr 17 08:00:42 2026 GMT
Not After : Apr 18 08:00:42 2026 GMT
Subject: CN=523f5107b249f69222a4800939fd8674d301e011
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:e9:1e:75:b9:6e:a6:cf:56:4c:5d:50:48:2f:
35:ea:fb:25:54:bb:47:c2:30:39:e1:2b:97:8b:af:
0e:bc:70:3e:cd:7a:89:17:0b:d0:8d:b8:58:7c:3e:
ca:b4:59:5d:87:62:b4:13:61:3d:04:39:bf:b6:3b:
8b:03:bf:1d:fe:b7:d0:5e:23:d8:73:81:4b:5d:c1:
ee:5e:76:9e:fa:f7:cb:da:63:82:85:a0:84:b9:f5:
f3:25:84:f9:92:03:81:55:6e:4e:c3:c4:9c:71:b7:
29:4b:53:f8:98:a6:9a:e6:98:38:2a:a3:04:31:59:
6c:9b:c0:ef:29:a1:09:6a:65:85:a6:0d:42:95:8f:
9c:19:11:70:e4:78:34:30:73:7f:24:c6:1e:e5:57:
d5:7e:f9:d7:38:35:a7:40:91:32:60:fc:be:8f:4b:
7e:3c:93:b3:68:cb:eb:d6:b0:ba:a0:de:d8:bd:65:
d0:a5:5a:f4:a1:16:d5:41:c6:32:cb:cb:45:3b:60:
b1:3d:b2:fb:23:d5:4c:c9:56:fb:8c:6a:d3:dc:ad:
03:06:a2:c5:6e:96:51:f6:9e:45:19:dc:f9:28:b0:
80:db:ea:58:a7:03:67:0a:06:43:a2:23:d0:81:de:
ff:5c:bf:5f:54:b3:11:28:f1:8f:fa:ca:4e:73:fb:
6d:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:3F:51:07:B2:49:F6:92:22:A4:80:09:39:FD:86:74:D3:01:E0:11
X509v3 Authority Key Identifier:
keyid:F9:39:B0:3F:12:94:EB:D3:5A:3B:15:D6:95:D7:E9:1F:8C:B4:1F:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-TmwPxKU69NaOxXWldfpH4y0H6A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/0c9de8-cef2-4d8d-a920-76594a19177c/1/1-TmwPxKU69NaOxXWldfpH4y0H6A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/0c9de8-cef2-4d8d-a920-76594a19177c/1/1-TmwPxKU69NaOxXWldfpH4y0H6A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:30:d7:b9:7e:4d:d3:bd:4e:ee:e5:e8:9a:a0:a8:08:33:50:
5f:7d:19:a2:94:ff:76:af:3e:3c:ba:84:8e:87:d6:b0:b1:6d:
87:ee:da:d3:4f:b7:bc:05:e3:98:d0:15:4c:77:a3:57:11:36:
e4:2b:af:30:97:01:26:56:9a:98:13:d9:0b:b6:fd:4a:26:a3:
c9:fb:3c:ca:21:50:a3:85:1d:cb:3e:d8:fd:cc:5a:3e:d0:53:
98:4d:1d:98:b3:88:c0:e7:c1:c3:04:cd:19:0a:42:6e:13:b4:
2f:94:9b:4c:bb:2e:45:b7:7a:6e:cf:1b:98:5f:ea:d5:13:25:
c9:bd:c4:4b:40:cd:10:8d:83:73:a1:a1:49:c8:d7:40:c4:77:
00:88:e7:2d:2e:8e:5e:58:a1:62:0d:47:90:4f:9a:92:d0:4b:
26:fd:2c:86:ce:f2:05:a4:bc:93:a2:c0:6d:60:f6:b6:bb:08:
98:77:a6:58:d2:e5:95:f4:16:31:59:8f:0d:d4:ac:a5:20:86:
84:71:b2:b0:a8:c4:19:3b:32:99:00:ab:a7:55:fd:0f:c4:02:
23:a7:33:ee:26:81:e1:d9:00:df:7a:d3:83:9b:22:d4:46:d6:
3d:42:aa:fc:d8:77:82:c9:e4:67:38:9b:8b:7e:2d:8d:50:f5:
96:ae:ce:30
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZ2adNyPAUiZRr2UanTlMxYpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY5MzliMDNmMTI5NGViZDM1YTNiMTVkNjk1ZDdlOTFmOGNi
NDFmYTAwHhcNMjYwNDE3MDgwMDQyWhcNMjYwNDE4MDgwMDQyWjAzMTEwLwYDVQQD
Eyg1MjNmNTEwN2IyNDlmNjkyMjJhNDgwMDkzOWZkODY3NGQzMDFlMDExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr+kedblups9WTF1QSC816vslVLtH
wjA54SuXi68OvHA+zXqJFwvQjbhYfD7KtFldh2K0E2E9BDm/tjuLA78d/rfQXiPY
c4FLXcHuXnae+vfL2mOChaCEufXzJYT5kgOBVW5Ow8SccbcpS1P4mKaa5pg4KqME
MVlsm8DvKaEJamWFpg1ClY+cGRFw5Hg0MHN/JMYe5VfVfvnXODWnQJEyYPy+j0t+
PJOzaMvr1rC6oN7YvWXQpVr0oRbVQcYyy8tFO2CxPbL7I9VMyVb7jGrT3K0DBqLF
bpZR9p5FGdz5KLCA2+pYpwNnCgZDoiPQgd7/XL9fVLMRKPGP+spOc/ttfwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFFI/UQeySfaSIqSACTn9hnTTAeARMB8GA1UdIwQY
MBaAFPk5sD8SlOvTWjsV1pXX6R+MtB+gMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1UbXdQeEtVNjlOYU94WFdsZGZwSDR5MEg2QS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTcvMGM5ZGU4LWNlZjItNGQ4ZC1hOTIw
LTc2NTk0YTE5MTc3Yy8xLzEtVG13UHhLVTY5TmFPeFhXbGRmcEg0eTBINkEubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2E3LzBjOWRlOC1jZWYyLTRkOGQtYTkyMC03NjU5NGExOTE3
N2MvMS8xLVRtd1B4S1U2OU5hT3hYV2xkZnBINHkwSDZBLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKzDX
uX5N071O7uXomqCoCDNQX30ZopT/dq8+PLqEjofWsLFth+7a00+3vAXjmNAVTHej
VxE25CuvMJcBJlaamBPZC7b9Siajyfs8yiFQo4Udyz7Y/cxaPtBTmE0dmLOIwOfB
wwTNGQpCbhO0L5SbTLsuRbd6bs8bmF/q1RMlyb3ES0DNEI2Dc6GhScjXQMR3AIjn
LS6OXlihYg1HkE+aktBLJv0shs7yBaS8k6LAbWD2trsImHemWNLllfQWMVmPDdSs
pSCGhHGysKjEGTsymQCrp1X9D8QCI6cz7iaB4dkA33rTg5si1EbWPUKq/Nh3gsnk
Zzibi34tjVD1lq7OMA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 11:58:26 2026 by rpki-client