Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/67d57e-f3de-4d10-bd9d-87a10bc68a37/1/tBErtZsGJ9ojr5DA8FhLcbUPd48.mft
File: tBErtZsGJ9ojr5DA8FhLcbUPd48.mft (raw, json)
Hash identifier: QVWX+6frqBOWED3pNZT2/m3eSH9aIbbMvRRVBnkymWk=
Subject key identifier: 73:8A:F4:8C:5A:F3:1C:39:DC:3C:60:DD:25:07:3E:B3:85:A4:EC:C3
Authority key identifier: B4:11:2B:B5:9B:06:27:DA:23:AF:90:C0:F0:58:4B:71:B5:0F:77:8F
Certificate issuer: /CN=b4112bb59b0627da23af90c0f0584b71b50f778f
Certificate serial: 019D992B95A0A107FC7DA92FE14271DB42B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tBErtZsGJ9ojr5DA8FhLcbUPd48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/67d57e-f3de-4d10-bd9d-87a10bc68a37/1/tBErtZsGJ9ojr5DA8FhLcbUPd48.mft
Manifest number: 1853
Signing time: Fri 17 Apr 2026 02:01:03 +0000
Manifest this update: Fri 17 Apr 2026 02:01:03 +0000
Manifest next update: Sat 18 Apr 2026 02:01:03 +0000
Files and hashes: 1: LYGy5EllLjLC7TGMDgwkX0_QvDU.roa (hash: xMfq4e5OlYkNcnNj+cpAE6tuZxSVsEy28YruLrqthqE=)
2: tBErtZsGJ9ojr5DA8FhLcbUPd48.crl (hash: osrCM4kSbWWGX1LxwBdcHek60gsqXU8auYQg3T9sez0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/67d57e-f3de-4d10-bd9d-87a10bc68a37/1/tBErtZsGJ9ojr5DA8FhLcbUPd48.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/67d57e-f3de-4d10-bd9d-87a10bc68a37/1/tBErtZsGJ9ojr5DA8FhLcbUPd48.mft
rsync://rpki.ripe.net/repository/DEFAULT/tBErtZsGJ9ojr5DA8FhLcbUPd48.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 02:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2b:95:a0:a1:07:fc:7d:a9:2f:e1:42:71:db:42:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4112bb59b0627da23af90c0f0584b71b50f778f
Validity
Not Before: Apr 17 02:01:03 2026 GMT
Not After : Apr 18 02:01:03 2026 GMT
Subject: CN=738af48c5af31c39dc3c60dd25073eb385a4ecc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:11:51:8b:7f:b0:32:e7:17:aa:10:73:06:fb:
4a:01:74:96:91:be:9b:b8:8b:02:05:96:44:fb:43:
41:43:da:48:1d:bd:17:76:61:8b:c7:5a:d7:be:02:
e3:c5:32:53:57:0b:55:7a:dd:64:cb:0d:c1:30:3d:
61:a4:f9:e6:6d:ba:62:97:24:84:02:31:2f:a1:c7:
20:d5:19:3b:bc:98:3b:98:4e:13:3e:09:8d:ba:01:
df:b2:9e:69:df:b0:e0:db:de:1a:8d:e8:69:38:b8:
6e:77:69:10:54:60:a5:07:0b:35:6c:9d:ff:67:bf:
58:e6:62:96:2f:db:8b:89:68:09:65:b8:a5:0d:ef:
57:a3:3a:6e:28:a0:00:56:e4:03:fe:aa:13:ae:a4:
ca:3b:a6:c2:b2:ac:d8:84:c4:61:82:63:46:cf:9e:
37:5e:29:e7:23:71:80:03:1c:09:e1:8f:2f:9c:06:
f3:9f:2d:4c:1c:d9:c1:7d:ec:1e:c0:0b:39:3f:c1:
9e:ce:8d:f1:85:10:22:49:98:eb:9b:2a:7d:6b:6c:
d3:32:fa:bc:21:70:4e:e3:47:55:26:aa:a2:54:d6:
e3:3e:79:85:65:da:9c:1e:d0:8d:b6:6a:66:34:d8:
ad:29:2a:8b:99:42:98:cc:f0:dd:91:4e:9b:a4:63:
5b:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:8A:F4:8C:5A:F3:1C:39:DC:3C:60:DD:25:07:3E:B3:85:A4:EC:C3
X509v3 Authority Key Identifier:
keyid:B4:11:2B:B5:9B:06:27:DA:23:AF:90:C0:F0:58:4B:71:B5:0F:77:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tBErtZsGJ9ojr5DA8FhLcbUPd48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/67d57e-f3de-4d10-bd9d-87a10bc68a37/1/tBErtZsGJ9ojr5DA8FhLcbUPd48.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/67d57e-f3de-4d10-bd9d-87a10bc68a37/1/tBErtZsGJ9ojr5DA8FhLcbUPd48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:a3:21:49:bb:74:e4:da:d0:91:bd:9e:ca:24:1e:a7:56:85:
dc:aa:97:60:87:e9:07:5e:29:08:9c:98:8c:d3:3c:06:86:cc:
38:84:df:94:79:1c:82:96:14:b9:9d:4b:f3:c7:8c:26:36:c9:
8f:02:3a:d0:50:6f:62:33:7d:68:d8:64:a6:52:22:22:2a:27:
b5:4d:82:97:41:ad:ad:6c:56:f9:bc:e3:ab:2f:2e:2d:7e:9c:
63:ec:b7:9d:a6:85:aa:ae:03:e1:f8:a7:39:2a:3d:bc:e9:1c:
16:08:e6:fb:d4:b0:22:63:68:14:9b:e8:d6:22:44:31:28:2f:
df:d7:d1:9b:14:1a:1b:13:7d:79:00:2b:a8:0d:28:a8:2c:e5:
13:2f:84:d4:5f:90:29:44:f6:0b:9f:80:8e:28:b2:f4:24:36:
cb:ee:68:7f:88:e9:49:ae:eb:27:74:49:af:6f:13:e0:9c:37:
42:b3:51:0e:ee:f1:52:f8:af:d3:dd:38:fe:99:0b:02:7f:89:
7c:60:4a:14:0d:2f:fd:1f:55:5f:52:79:55:33:05:de:13:48:
71:12:72:19:86:f7:e2:31:ca:6a:a4:e0:c4:8a:21:95:df:ff:
d3:c1:8e:79:f8:e9:05:07:5c:95:c5:13:0f:f7:5d:b9:c6:ce:
1f:c9:5a:21
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2ZK5WgoQf8fakv4UJx20K0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0MTEyYmI1OWIwNjI3ZGEyM2FmOTBjMGYwNTg0YjcxYjUw
Zjc3OGYwHhcNMjYwNDE3MDIwMTAzWhcNMjYwNDE4MDIwMTAzWjAzMTEwLwYDVQQD
Eyg3MzhhZjQ4YzVhZjMxYzM5ZGMzYzYwZGQyNTA3M2ViMzg1YTRlY2MzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxRFRi3+wMucXqhBzBvtKAXSWkb6b
uIsCBZZE+0NBQ9pIHb0XdmGLx1rXvgLjxTJTVwtVet1kyw3BMD1hpPnmbbpilySE
AjEvoccg1Rk7vJg7mE4TPgmNugHfsp5p37Dg294ajehpOLhud2kQVGClBws1bJ3/
Z79Y5mKWL9uLiWgJZbilDe9XozpuKKAAVuQD/qoTrqTKO6bCsqzYhMRhgmNGz543
XinnI3GAAxwJ4Y8vnAbzny1MHNnBfewewAs5P8Gezo3xhRAiSZjrmyp9a2zTMvq8
IXBO40dVJqqiVNbjPnmFZdqcHtCNtmpmNNitKSqLmUKYzPDdkU6bpGNbjQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHOK9Ixa8xw53Dxg3SUHPrOFpOzDMB8GA1UdIwQY
MBaAFLQRK7WbBifaI6+QwPBYS3G1D3ePMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdEJFcnRac0dKOW9qcjVEQThGaExjYlVQZDQ4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy82N2Q1N2UtZjNkZS00ZDEwLWJkOWQt
ODdhMTBiYzY4YTM3LzEvdEJFcnRac0dKOW9qcjVEQThGaExjYlVQZDQ4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy82N2Q1N2UtZjNkZS00ZDEwLWJkOWQtODdhMTBiYzY4YTM3
LzEvdEJFcnRac0dKOW9qcjVEQThGaExjYlVQZDQ4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsqMhSbt0
5NrQkb2eyiQep1aF3KqXYIfpB14pCJyYjNM8BobMOITflHkcgpYUuZ1L88eMJjbJ
jwI60FBvYjN9aNhkplIiIiontU2Cl0GtrWxW+bzjqy8uLX6cY+y3naaFqq4D4fin
OSo9vOkcFgjm+9SwImNoFJvo1iJEMSgv39fRmxQaGxN9eQArqA0oqCzlEy+E1F+Q
KUT2C5+Ajiiy9CQ2y+5of4jpSa7rJ3RJr28T4Jw3QrNRDu7xUviv0904/pkLAn+J
fGBKFA0v/R9VX1J5VTMF3hNIcRJyGYb34jHKaqTgxIohld//08GOefjpBQdclcUT
D/dducbOH8laIQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 11:58:12 2026 by rpki-client