Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/2f672b-236c-40fb-aaf6-08d0f4bd2c28/1/tXPS3ak-QgQJFj2lnnQU7pGi7vI.mft
File: tXPS3ak-QgQJFj2lnnQU7pGi7vI.mft (raw, json)
Hash identifier: 5xZkb3hQpjxOhRTg9Sn9HNkyyqL7De2Cs+414jyyLJM=
Subject key identifier: 86:E8:F5:43:1A:DD:0F:FD:46:4A:94:2B:60:7C:0E:2E:BA:7A:6C:86
Authority key identifier: B5:73:D2:DD:A9:3E:42:04:09:16:3D:A5:9E:74:14:EE:91:A2:EE:F2
Certificate issuer: /CN=b573d2dda93e420409163da59e7414ee91a2eef2
Certificate serial: 019D9D3EC05029853A29462030FFCB6E144C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tXPS3ak-QgQJFj2lnnQU7pGi7vI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/2f672b-236c-40fb-aaf6-08d0f4bd2c28/1/tXPS3ak-QgQJFj2lnnQU7pGi7vI.mft
Manifest number: 0361
Signing time: Fri 17 Apr 2026 21:00:28 +0000
Manifest this update: Fri 17 Apr 2026 21:00:28 +0000
Manifest next update: Sat 18 Apr 2026 21:00:28 +0000
Files and hashes: 1: 0mP1ztpahebUSVqYXstfQVo6lU8.roa (hash: ROTZ3HoBIhGjMRa1VghM4xscpCElB4RFAaHFDBzcBcc=)
2: tXPS3ak-QgQJFj2lnnQU7pGi7vI.crl (hash: ix7YOHToXwyZ8QvhxizIfbnKVZUSmkjlda2Auawopik=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/2f672b-236c-40fb-aaf6-08d0f4bd2c28/1/tXPS3ak-QgQJFj2lnnQU7pGi7vI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/2f672b-236c-40fb-aaf6-08d0f4bd2c28/1/tXPS3ak-QgQJFj2lnnQU7pGi7vI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tXPS3ak-QgQJFj2lnnQU7pGi7vI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 21:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9d:3e:c0:50:29:85:3a:29:46:20:30:ff:cb:6e:14:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b573d2dda93e420409163da59e7414ee91a2eef2
Validity
Not Before: Apr 17 21:00:28 2026 GMT
Not After : Apr 18 21:00:28 2026 GMT
Subject: CN=86e8f5431add0ffd464a942b607c0e2eba7a6c86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:98:63:62:ee:90:f3:0b:ed:10:09:fe:32:1e:
e8:99:7b:0f:98:15:b6:e2:8b:e0:00:9d:0f:fc:2b:
28:44:17:78:27:07:c0:21:e0:62:6d:fb:4d:ef:09:
6d:9d:50:47:44:4b:0a:94:43:60:7b:b2:4c:ae:a9:
78:c7:a2:78:52:a2:d4:ed:ba:5d:09:79:4a:a8:3a:
44:0a:74:ad:fa:62:bf:23:22:4f:fe:a9:d7:fe:ce:
1a:18:37:3c:87:55:b4:42:9a:5f:d0:47:33:8d:04:
f5:a7:89:04:c7:21:84:ee:ce:1d:d9:4e:4d:66:b4:
07:2b:52:46:72:5d:b5:01:1d:fe:d7:8e:e4:ca:db:
13:4c:49:e8:9c:cc:dd:1e:17:17:7b:29:eb:aa:a9:
0c:b1:b1:8c:fa:1e:e8:3b:02:48:aa:5a:44:f2:cd:
d1:e6:91:f3:08:7c:fc:c5:31:d2:b9:a0:0c:89:37:
c0:7c:b3:76:81:99:cd:d8:99:e1:2a:e9:b0:3e:12:
cc:d7:c4:f9:67:e8:36:56:a7:40:09:c3:6c:8b:96:
32:d5:b6:dd:51:ad:82:a1:de:b4:a6:d6:e6:5f:e0:
ec:78:2b:f8:32:b7:55:b3:1f:1e:90:f4:6a:29:36:
4e:37:d3:52:4f:c1:69:a8:81:b7:d2:33:e1:31:69:
6d:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:E8:F5:43:1A:DD:0F:FD:46:4A:94:2B:60:7C:0E:2E:BA:7A:6C:86
X509v3 Authority Key Identifier:
keyid:B5:73:D2:DD:A9:3E:42:04:09:16:3D:A5:9E:74:14:EE:91:A2:EE:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tXPS3ak-QgQJFj2lnnQU7pGi7vI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/2f672b-236c-40fb-aaf6-08d0f4bd2c28/1/tXPS3ak-QgQJFj2lnnQU7pGi7vI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/2f672b-236c-40fb-aaf6-08d0f4bd2c28/1/tXPS3ak-QgQJFj2lnnQU7pGi7vI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:29:6e:46:0d:e9:d2:d3:4e:f5:fe:97:fe:e5:53:27:52:64:
e1:b8:be:2a:40:f8:63:40:dd:3e:95:8a:47:6e:e8:b9:ad:b4:
d9:2c:8e:a4:84:30:07:0c:8c:da:6e:32:c5:89:ce:a8:41:2e:
de:ac:1f:10:ad:88:5e:ee:20:04:c8:28:f3:05:50:98:f0:d4:
df:9f:7c:9d:50:6c:8c:45:d6:d9:92:de:4e:bc:8c:4c:0b:03:
3b:4a:b6:6d:62:c1:64:e9:d4:e1:3a:91:b3:09:01:98:6e:d6:
2b:26:fa:b2:03:26:c5:fe:73:ea:7a:ac:d2:45:a7:ed:79:ef:
96:94:34:69:96:37:d3:42:91:28:a6:aa:6e:7c:fc:cb:e9:14:
3d:86:42:f1:2f:9f:ed:1a:0e:c4:f6:26:ad:07:cf:d3:60:a8:
47:ab:13:b2:45:54:ae:b6:f5:67:da:77:4b:44:c2:81:5f:4e:
40:d0:08:c1:7c:09:ad:a4:5b:a9:57:7a:c7:02:96:36:f1:be:
6e:2b:0b:59:79:2a:8e:38:12:49:9c:ff:23:e1:a1:e1:a8:24:
aa:fe:51:08:06:c1:3a:a3:ba:21:67:3a:fe:12:d5:ba:37:cb:
30:87:da:67:e5:f7:48:97:d7:35:9f:db:9e:ce:9c:75:66:81:
e4:43:77:8a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2dPsBQKYU6KUYgMP/LbhRMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1NzNkMmRkYTkzZTQyMDQwOTE2M2RhNTllNzQxNGVlOTFh
MmVlZjIwHhcNMjYwNDE3MjEwMDI4WhcNMjYwNDE4MjEwMDI4WjAzMTEwLwYDVQQD
Eyg4NmU4ZjU0MzFhZGQwZmZkNDY0YTk0MmI2MDdjMGUyZWJhN2E2Yzg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx5hjYu6Q8wvtEAn+Mh7omXsPmBW2
4ovgAJ0P/CsoRBd4JwfAIeBibftN7wltnVBHREsKlENge7JMrql4x6J4UqLU7bpd
CXlKqDpECnSt+mK/IyJP/qnX/s4aGDc8h1W0Qppf0EczjQT1p4kExyGE7s4d2U5N
ZrQHK1JGcl21AR3+147kytsTTEnonMzdHhcXeynrqqkMsbGM+h7oOwJIqlpE8s3R
5pHzCHz8xTHSuaAMiTfAfLN2gZnN2JnhKumwPhLM18T5Z+g2VqdACcNsi5Yy1bbd
Ua2Cod60ptbmX+DseCv4MrdVsx8ekPRqKTZON9NST8FpqIG30jPhMWltuwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIbo9UMa3Q/9RkqUK2B8Di66emyGMB8GA1UdIwQY
MBaAFLVz0t2pPkIECRY9pZ50FO6Rou7yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFhQUzNhay1RZ1FKRmoybG5uUVU3cEdpN3ZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy8yZjY3MmItMjM2Yy00MGZiLWFhZjYt
MDhkMGY0YmQyYzI4LzEvdFhQUzNhay1RZ1FKRmoybG5uUVU3cEdpN3ZJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy8yZjY3MmItMjM2Yy00MGZiLWFhZjYtMDhkMGY0YmQyYzI4
LzEvdFhQUzNhay1RZ1FKRmoybG5uUVU3cEdpN3ZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZCluRg3p
0tNO9f6X/uVTJ1Jk4bi+KkD4Y0DdPpWKR27oua202SyOpIQwBwyM2m4yxYnOqEEu
3qwfEK2IXu4gBMgo8wVQmPDU3598nVBsjEXW2ZLeTryMTAsDO0q2bWLBZOnU4TqR
swkBmG7WKyb6sgMmxf5z6nqs0kWn7XnvlpQ0aZY300KRKKaqbnz8y+kUPYZC8S+f
7RoOxPYmrQfP02CoR6sTskVUrrb1Z9p3S0TCgV9OQNAIwXwJraRbqVd6xwKWNvG+
bisLWXkqjjgSSZz/I+Gh4agkqv5RCAbBOqO6IWc6/hLVujfLMIfaZ+X3SJfXNZ/b
ns6cdWaB5EN3ig==
-----END CERTIFICATE-----
Generated at Sat Apr 18 03:58:44 2026 by rpki-client