Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/2f672b-236c-40fb-aaf6-08d0f4bd2c28/1/tXPS3ak-QgQJFj2lnnQU7pGi7vI.mft
File: tXPS3ak-QgQJFj2lnnQU7pGi7vI.mft (raw, json)
Hash identifier: fM934ZGvRQK39+5KqqjkULf9GaCa7uLGZ0A+5aTkp+4=
Subject key identifier: E6:F5:72:30:E1:A8:C3:96:FA:F2:23:E2:12:01:DE:1B:F5:AB:7D:0B
Authority key identifier: B5:73:D2:DD:A9:3E:42:04:09:16:3D:A5:9E:74:14:EE:91:A2:EE:F2
Certificate issuer: /CN=b573d2dda93e420409163da59e7414ee91a2eef2
Certificate serial: 019CABD9F754493D44F942D3579645ED0D68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tXPS3ak-QgQJFj2lnnQU7pGi7vI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/2f672b-236c-40fb-aaf6-08d0f4bd2c28/1/tXPS3ak-QgQJFj2lnnQU7pGi7vI.mft
Manifest number: 02E4
Signing time: Mon 02 Mar 2026 00:01:54 +0000
Manifest this update: Mon 02 Mar 2026 00:01:54 +0000
Manifest next update: Tue 03 Mar 2026 00:01:54 +0000
Files and hashes: 1: 0mP1ztpahebUSVqYXstfQVo6lU8.roa (hash: ROTZ3HoBIhGjMRa1VghM4xscpCElB4RFAaHFDBzcBcc=)
2: tXPS3ak-QgQJFj2lnnQU7pGi7vI.crl (hash: wMHhVrUIsaHPEnAI+USqH2wJ9rAwIIXzxFC9wTFg8IE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/2f672b-236c-40fb-aaf6-08d0f4bd2c28/1/tXPS3ak-QgQJFj2lnnQU7pGi7vI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/2f672b-236c-40fb-aaf6-08d0f4bd2c28/1/tXPS3ak-QgQJFj2lnnQU7pGi7vI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tXPS3ak-QgQJFj2lnnQU7pGi7vI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:f7:54:49:3d:44:f9:42:d3:57:96:45:ed:0d:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b573d2dda93e420409163da59e7414ee91a2eef2
Validity
Not Before: Mar 2 00:01:54 2026 GMT
Not After : Mar 3 00:01:54 2026 GMT
Subject: CN=e6f57230e1a8c396faf223e21201de1bf5ab7d0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:8a:7c:d2:f8:0a:45:57:2c:90:da:09:83:73:
11:74:31:3c:e6:7a:ac:ff:23:3a:87:2c:f7:ee:14:
82:66:0b:ab:a7:7e:c3:ee:b4:51:fe:f4:4e:53:fb:
af:40:ce:3a:e6:eb:8f:a4:a7:93:c3:4c:ec:a8:ce:
09:9c:80:72:0c:dc:92:9e:30:67:c9:21:da:30:fc:
61:d1:40:09:41:50:75:6d:4a:7d:af:9d:96:cd:f7:
e7:a1:ec:9d:1b:bc:4f:be:76:b1:52:4b:1c:2e:57:
d7:96:d1:60:0b:7e:5c:ca:4e:54:95:fc:af:46:8a:
78:78:23:9b:f4:b2:b9:11:9e:0b:f9:93:35:7c:24:
3d:4e:24:06:ca:16:e5:3d:e3:a0:a9:e7:b4:b6:77:
8c:d0:c9:22:3f:30:98:04:fe:03:f7:3e:be:21:f6:
4f:18:24:9a:08:e5:92:7e:43:08:d1:5d:d9:12:ff:
93:28:49:d2:85:58:07:11:27:dc:72:a4:e5:00:9f:
1b:41:df:63:a2:27:9e:bd:ed:f6:23:c5:95:79:ff:
35:39:99:ae:60:6d:9f:20:31:c9:dc:64:46:d6:28:
ae:62:24:11:4a:19:69:b8:d1:a0:a6:4a:d3:61:3c:
e2:f1:32:d7:1e:c0:74:3c:98:bc:62:05:3d:2b:e3:
e8:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:F5:72:30:E1:A8:C3:96:FA:F2:23:E2:12:01:DE:1B:F5:AB:7D:0B
X509v3 Authority Key Identifier:
keyid:B5:73:D2:DD:A9:3E:42:04:09:16:3D:A5:9E:74:14:EE:91:A2:EE:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tXPS3ak-QgQJFj2lnnQU7pGi7vI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/2f672b-236c-40fb-aaf6-08d0f4bd2c28/1/tXPS3ak-QgQJFj2lnnQU7pGi7vI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/2f672b-236c-40fb-aaf6-08d0f4bd2c28/1/tXPS3ak-QgQJFj2lnnQU7pGi7vI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:90:f5:45:49:fe:9f:5c:f3:5b:09:72:d7:e7:cc:72:68:fd:
2a:32:b8:0d:0e:8c:0a:24:1f:b1:09:0a:1f:82:b4:7a:14:f6:
21:23:55:9f:66:d2:64:ce:d0:8d:28:6b:cd:e7:26:db:0e:ab:
23:27:8e:63:19:6c:ea:49:0d:b5:88:71:99:6e:89:55:4b:1d:
3f:21:7b:ed:29:51:5a:e9:e2:35:cc:59:5e:2c:4c:01:d4:b3:
a1:32:1a:df:99:ec:6e:7d:25:f6:93:ca:d7:f8:78:27:53:42:
88:74:66:cc:a4:f1:28:c4:9c:2c:06:5d:a7:cd:97:cc:8f:46:
09:13:4d:0c:7d:eb:77:c8:d8:8b:4c:cb:a5:b9:6c:ee:bf:e4:
b6:c9:cb:54:be:ac:29:20:58:04:71:92:9f:44:7f:9c:78:f2:
ab:45:ef:ce:ea:6d:91:44:d0:2d:4a:1a:fd:b7:0f:69:f2:79:
12:97:6d:9a:c3:b8:ee:d4:62:50:94:55:5e:02:c4:8c:d0:2e:
70:51:70:ad:02:43:d5:62:3f:ae:b3:b0:7c:ef:8e:c0:4f:1e:
b7:eb:74:c5:71:f4:0a:86:44:72:1e:f7:29:ad:88:b4:94:56:
96:42:cc:4f:70:6e:cb:52:f9:c2:40:b1:aa:e5:63:b4:61:94:
10:37:74:4e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyr2fdUST1E+ULTV5ZF7Q1oMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1NzNkMmRkYTkzZTQyMDQwOTE2M2RhNTllNzQxNGVlOTFh
MmVlZjIwHhcNMjYwMzAyMDAwMTU0WhcNMjYwMzAzMDAwMTU0WjAzMTEwLwYDVQQD
EyhlNmY1NzIzMGUxYThjMzk2ZmFmMjIzZTIxMjAxZGUxYmY1YWI3ZDBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq4p80vgKRVcskNoJg3MRdDE85nqs
/yM6hyz37hSCZgurp37D7rRR/vROU/uvQM465uuPpKeTw0zsqM4JnIByDNySnjBn
ySHaMPxh0UAJQVB1bUp9r52WzffnoeydG7xPvnaxUkscLlfXltFgC35cyk5Ulfyv
Rop4eCOb9LK5EZ4L+ZM1fCQ9TiQGyhblPeOgqee0tneM0MkiPzCYBP4D9z6+IfZP
GCSaCOWSfkMI0V3ZEv+TKEnShVgHESfccqTlAJ8bQd9joieeve32I8WVef81OZmu
YG2fIDHJ3GRG1iiuYiQRShlpuNGgpkrTYTzi8TLXHsB0PJi8YgU9K+PouQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOb1cjDhqMOW+vIj4hIB3hv1q30LMB8GA1UdIwQY
MBaAFLVz0t2pPkIECRY9pZ50FO6Rou7yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFhQUzNhay1RZ1FKRmoybG5uUVU3cEdpN3ZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy8yZjY3MmItMjM2Yy00MGZiLWFhZjYt
MDhkMGY0YmQyYzI4LzEvdFhQUzNhay1RZ1FKRmoybG5uUVU3cEdpN3ZJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy8yZjY3MmItMjM2Yy00MGZiLWFhZjYtMDhkMGY0YmQyYzI4
LzEvdFhQUzNhay1RZ1FKRmoybG5uUVU3cEdpN3ZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiZD1RUn+
n1zzWwly1+fMcmj9KjK4DQ6MCiQfsQkKH4K0ehT2ISNVn2bSZM7QjShrzecm2w6r
IyeOYxls6kkNtYhxmW6JVUsdPyF77SlRWuniNcxZXixMAdSzoTIa35nsbn0l9pPK
1/h4J1NCiHRmzKTxKMScLAZdp82XzI9GCRNNDH3rd8jYi0zLpbls7r/ktsnLVL6s
KSBYBHGSn0R/nHjyq0XvzuptkUTQLUoa/bcPafJ5EpdtmsO47tRiUJRVXgLEjNAu
cFFwrQJD1WI/rrOwfO+OwE8et+t0xXH0CoZEch73Ka2ItJRWlkLMT3Buy1L5wkCx
quVjtGGUEDd0Tg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 08:02:47 2026 by rpki-client