Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/d5e3cc-c1cd-4d68-bec3-1b08f7f5015d/1/Tg854squjizxS8xBsj88huGnIPg.mft
File: Tg854squjizxS8xBsj88huGnIPg.mft (raw, json)
Hash identifier: uAMEst7hEWyRze99WcTMi5HlTt0B/OQeZ9+7K2tXc1I=
Subject key identifier: BA:B8:8F:47:BB:35:11:14:7C:03:9F:7C:81:2E:05:9F:17:69:32:BB
Authority key identifier: 4E:0F:39:E2:CA:AE:8E:2C:F1:4B:CC:41:B2:3F:3C:86:E1:A7:20:F8
Certificate issuer: /CN=4e0f39e2caae8e2cf14bcc41b23f3c86e1a720f8
Certificate serial: 019CABD9C8D39ED771C74BEE93BA1D6A1151
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tg854squjizxS8xBsj88huGnIPg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/d5e3cc-c1cd-4d68-bec3-1b08f7f5015d/1/Tg854squjizxS8xBsj88huGnIPg.mft
Manifest number: 184A
Signing time: Mon 02 Mar 2026 00:01:42 +0000
Manifest this update: Mon 02 Mar 2026 00:01:42 +0000
Manifest next update: Tue 03 Mar 2026 00:01:42 +0000
Files and hashes: 1: Q_cKojzZsCR7sHqcACX5_Xsszdg.roa (hash: 13DJN0AYMyq7FKRePbvdklWh/SNv0jTV2Z45dv8uucM=)
2: RBXH0ektt1CQc3W3hp-LoPyoFDI.roa (hash: n7TnoGzFQ9ajRDTZ9C84X5KWHPVtB0cd7T1ju2YPzsI=)
3: Tg854squjizxS8xBsj88huGnIPg.crl (hash: NK+TlPcP3D4i14GGT9I4D+aguSfKOCglYCboD0jErhs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/d5e3cc-c1cd-4d68-bec3-1b08f7f5015d/1/Tg854squjizxS8xBsj88huGnIPg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/d5e3cc-c1cd-4d68-bec3-1b08f7f5015d/1/Tg854squjizxS8xBsj88huGnIPg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tg854squjizxS8xBsj88huGnIPg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:c8:d3:9e:d7:71:c7:4b:ee:93:ba:1d:6a:11:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e0f39e2caae8e2cf14bcc41b23f3c86e1a720f8
Validity
Not Before: Mar 2 00:01:42 2026 GMT
Not After : Mar 3 00:01:42 2026 GMT
Subject: CN=bab88f47bb3511147c039f7c812e059f176932bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:df:4a:dd:80:23:8f:77:9e:f6:b7:85:5e:ac:
91:a8:80:d3:1f:8c:cd:5b:e3:95:ef:08:59:b2:42:
9a:eb:5a:c3:f2:85:1b:c4:90:04:d7:eb:6d:62:13:
1a:71:20:6c:c5:32:79:13:22:67:5a:b9:64:fb:90:
77:e6:96:5f:ac:eb:91:b3:28:98:79:ba:a6:38:4b:
1d:74:38:44:09:c5:87:c7:b2:d1:73:45:e9:c4:78:
4a:86:49:33:22:57:fa:a3:b3:2d:bd:1e:ab:6c:96:
21:b1:e0:c2:ff:72:2c:29:b8:64:5b:85:05:76:7e:
48:65:2b:64:c9:83:22:48:a8:6b:2b:5f:67:d6:9a:
05:f7:c8:71:c6:25:f3:46:54:77:42:7f:4c:66:d2:
05:7e:d2:5a:0c:ed:df:6b:bc:a2:ad:54:4f:ed:77:
59:02:75:52:0a:91:49:ca:6a:cf:c9:fc:26:79:d0:
f4:70:01:9c:1d:e5:e4:57:11:60:b5:b0:02:36:d9:
93:18:d2:1a:79:e8:66:f4:0e:df:d6:d7:f1:ca:f8:
88:43:72:30:6d:0f:9f:f8:1a:13:00:27:c9:ff:c6:
1f:32:64:e1:e9:a4:87:bb:76:0d:d9:83:89:3c:30:
9d:ac:35:0d:60:38:94:ce:e5:92:96:f5:d0:65:13:
60:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:B8:8F:47:BB:35:11:14:7C:03:9F:7C:81:2E:05:9F:17:69:32:BB
X509v3 Authority Key Identifier:
keyid:4E:0F:39:E2:CA:AE:8E:2C:F1:4B:CC:41:B2:3F:3C:86:E1:A7:20:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tg854squjizxS8xBsj88huGnIPg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d5e3cc-c1cd-4d68-bec3-1b08f7f5015d/1/Tg854squjizxS8xBsj88huGnIPg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d5e3cc-c1cd-4d68-bec3-1b08f7f5015d/1/Tg854squjizxS8xBsj88huGnIPg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:d2:6d:fb:f1:05:bf:eb:9b:e5:ba:18:df:e7:5e:62:bd:8a:
2b:78:03:f6:c1:c8:a4:2d:8d:c3:c8:8e:68:cd:8b:a2:ac:25:
c7:83:dd:47:00:d7:2f:f2:fc:02:3b:26:00:34:5b:70:59:01:
68:7e:06:65:1c:e4:d5:75:4d:6f:0f:bb:a9:09:1b:c4:5f:2d:
41:8e:d2:56:b6:6d:c1:52:fa:e7:37:bc:2a:77:20:e5:7a:6a:
b3:26:a7:1d:0d:60:e2:c0:f2:e6:05:e2:12:a3:7a:ed:bb:67:
24:cd:37:e5:f6:c7:cb:ef:03:38:1c:47:c5:c9:d3:d0:a1:3b:
c9:d8:16:06:85:14:0e:b9:12:dc:0f:f2:7c:bb:2f:4d:50:b0:
17:02:87:fc:71:b3:2d:19:90:2d:a3:1f:65:fe:f6:f8:27:63:
77:8b:d1:dd:c8:60:2b:f2:f3:30:0d:a9:a7:36:b4:31:37:47:
94:80:c9:d0:a3:75:75:96:a1:4b:2e:a3:28:bd:54:77:fd:7c:
4e:68:ca:eb:b3:56:8e:60:8a:d7:83:a2:67:5a:eb:b0:7a:a1:
62:14:a6:f7:35:2e:03:07:b3:6a:01:cf:d3:38:e7:1b:ee:dd:
37:48:29:a4:d7:aa:d6:13:44:95:5b:8c:c8:78:e0:c7:ab:a2:
17:ba:88:5f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyr2cjTntdxx0vuk7odahFRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRlMGYzOWUyY2FhZThlMmNmMTRiY2M0MWIyM2YzYzg2ZTFh
NzIwZjgwHhcNMjYwMzAyMDAwMTQyWhcNMjYwMzAzMDAwMTQyWjAzMTEwLwYDVQQD
EyhiYWI4OGY0N2JiMzUxMTE0N2MwMzlmN2M4MTJlMDU5ZjE3NjkzMmJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuN9K3YAjj3ee9reFXqyRqIDTH4zN
W+OV7whZskKa61rD8oUbxJAE1+ttYhMacSBsxTJ5EyJnWrlk+5B35pZfrOuRsyiY
ebqmOEsddDhECcWHx7LRc0XpxHhKhkkzIlf6o7MtvR6rbJYhseDC/3IsKbhkW4UF
dn5IZStkyYMiSKhrK19n1poF98hxxiXzRlR3Qn9MZtIFftJaDO3fa7yirVRP7XdZ
AnVSCpFJymrPyfwmedD0cAGcHeXkVxFgtbACNtmTGNIaeehm9A7f1tfxyviIQ3Iw
bQ+f+BoTACfJ/8YfMmTh6aSHu3YN2YOJPDCdrDUNYDiUzuWSlvXQZRNgxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLq4j0e7NREUfAOffIEuBZ8XaTK7MB8GA1UdIwQY
MBaAFE4POeLKro4s8UvMQbI/PIbhpyD4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVGc4NTRzcXVqaXp4Uzh4QnNqODhodUduSVBnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC9kNWUzY2MtYzFjZC00ZDY4LWJlYzMt
MWIwOGY3ZjUwMTVkLzEvVGc4NTRzcXVqaXp4Uzh4QnNqODhodUduSVBnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNC9kNWUzY2MtYzFjZC00ZDY4LWJlYzMtMWIwOGY3ZjUwMTVk
LzEvVGc4NTRzcXVqaXp4Uzh4QnNqODhodUduSVBnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEtJt+/EF
v+ub5boY3+deYr2KK3gD9sHIpC2Nw8iOaM2Loqwlx4PdRwDXL/L8AjsmADRbcFkB
aH4GZRzk1XVNbw+7qQkbxF8tQY7SVrZtwVL65ze8Kncg5XpqsyanHQ1g4sDy5gXi
EqN67btnJM035fbHy+8DOBxHxcnT0KE7ydgWBoUUDrkS3A/yfLsvTVCwFwKH/HGz
LRmQLaMfZf72+Cdjd4vR3chgK/LzMA2ppza0MTdHlIDJ0KN1dZahSy6jKL1Ud/18
TmjK67NWjmCK14OiZ1rrsHqhYhSm9zUuAwezagHP0zjnG+7dN0gppNeq1hNElVuM
yHjgx6uiF7qIXw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:32:25 2026 by rpki-client