Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/03a325-a169-44ce-84ec-5728fb24bf0e/1/tDJYoYz00SKOXHkHDfpjMRaDIMU.mft
File: tDJYoYz00SKOXHkHDfpjMRaDIMU.mft (raw, json)
Hash identifier: 86zAhrHU4qeirg92WLbXvlVp/gbskTn/vA4gF5wOKa4=
Subject key identifier: E6:26:20:CB:1C:7F:A1:37:7A:E0:79:E8:F1:C7:02:AB:1D:C5:67:05
Authority key identifier: B4:32:58:A1:8C:F4:D1:22:8E:5C:79:07:0D:FA:63:31:16:83:20:C5
Certificate issuer: /CN=b43258a18cf4d1228e5c79070dfa6331168320c5
Certificate serial: 019CAC0FEAE651AE5CDF0B8135DC2AE03020
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDJYoYz00SKOXHkHDfpjMRaDIMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/03a325-a169-44ce-84ec-5728fb24bf0e/1/tDJYoYz00SKOXHkHDfpjMRaDIMU.mft
Manifest number: 168A
Signing time: Mon 02 Mar 2026 01:00:50 +0000
Manifest this update: Mon 02 Mar 2026 01:00:50 +0000
Manifest next update: Tue 03 Mar 2026 01:00:50 +0000
Files and hashes: 1: LBEwWg6NXwV0Qivix1KpxT3aiNU.roa (hash: NAmrPdbUkUwZLyDdKu29iu1NmoDceqKiDehZJJ6AYqk=)
2: tDJYoYz00SKOXHkHDfpjMRaDIMU.crl (hash: 0oO6dQFORpm9SdPpbSyNSFzzhtLfOaK+X74hlZLQSzs=)
3: u3rQ39mTeV2kE1STzKrih9_L758.roa (hash: KWfkHmC+Pf41EAOenIiA1l0ufOFeet991JgGZvHoQlg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/03a325-a169-44ce-84ec-5728fb24bf0e/1/tDJYoYz00SKOXHkHDfpjMRaDIMU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/03a325-a169-44ce-84ec-5728fb24bf0e/1/tDJYoYz00SKOXHkHDfpjMRaDIMU.mft
rsync://rpki.ripe.net/repository/DEFAULT/tDJYoYz00SKOXHkHDfpjMRaDIMU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:0f:ea:e6:51:ae:5c:df:0b:81:35:dc:2a:e0:30:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b43258a18cf4d1228e5c79070dfa6331168320c5
Validity
Not Before: Mar 2 01:00:50 2026 GMT
Not After : Mar 3 01:00:50 2026 GMT
Subject: CN=e62620cb1c7fa1377ae079e8f1c702ab1dc56705
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:7f:42:b9:2e:4b:e0:99:a3:03:1f:8b:76:82:
fd:dc:b4:3b:5c:41:c0:d7:ea:28:99:b5:95:25:6a:
89:2f:b0:08:8c:38:33:2f:27:f3:b3:b2:88:93:8b:
b1:4e:90:2a:de:8b:d4:ee:35:f6:bb:82:78:f9:d5:
68:ec:1b:ef:93:df:bb:02:4c:f5:f0:9c:38:95:29:
47:68:30:ba:12:14:ab:93:69:f3:a0:fe:19:a5:cb:
52:30:6b:2e:21:9b:6f:fc:6b:68:39:8a:64:72:1d:
52:83:1b:b4:a7:e0:fe:95:57:97:83:61:74:9c:dd:
0f:b7:bb:f0:ea:97:0d:dd:dc:86:b2:a1:e6:7d:6a:
c0:10:6d:18:0a:09:23:d7:f2:8e:3d:77:14:ce:85:
63:a9:90:7b:55:51:23:5c:f4:02:5f:ae:a8:19:73:
a9:b3:f8:21:18:e5:26:b5:3b:25:cd:2f:63:91:32:
b2:12:b7:ec:19:0e:db:75:00:57:1c:8e:e9:7d:fb:
d7:8e:c2:51:f5:b5:26:02:72:d5:66:2c:29:e9:11:
94:b3:e0:01:90:c8:21:e8:3e:99:94:c6:c7:4c:ee:
d6:9e:33:b3:39:d5:18:0f:74:b0:bb:74:66:8c:a6:
2c:58:16:76:87:5e:41:43:08:d8:37:36:3b:f5:b0:
69:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:26:20:CB:1C:7F:A1:37:7A:E0:79:E8:F1:C7:02:AB:1D:C5:67:05
X509v3 Authority Key Identifier:
keyid:B4:32:58:A1:8C:F4:D1:22:8E:5C:79:07:0D:FA:63:31:16:83:20:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDJYoYz00SKOXHkHDfpjMRaDIMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/03a325-a169-44ce-84ec-5728fb24bf0e/1/tDJYoYz00SKOXHkHDfpjMRaDIMU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/03a325-a169-44ce-84ec-5728fb24bf0e/1/tDJYoYz00SKOXHkHDfpjMRaDIMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:db:21:bd:f8:dd:76:06:8c:61:53:03:36:62:9f:33:db:6e:
40:25:88:7c:42:4a:65:b3:7e:5b:f2:fa:d5:21:7b:03:6b:7e:
0d:b8:78:b1:d0:80:c8:83:59:1b:57:4b:e1:24:84:3a:b1:2c:
ad:b4:8a:fb:fa:7c:53:13:c5:83:f0:62:3a:1e:e9:5e:59:7c:
bf:a7:b5:10:69:b7:44:b5:1c:ea:2d:09:e7:21:10:07:f6:5d:
59:d9:cf:ac:04:de:f8:6a:bd:77:d4:35:53:45:bc:18:4d:a2:
4f:d8:93:6e:cd:62:d2:6c:1f:33:4f:1d:0a:91:09:d0:b8:74:
ba:8d:93:4c:8e:7b:10:32:59:34:84:b0:ff:41:f1:4f:06:bd:
3c:69:ce:0f:4d:21:3a:50:fd:5c:ff:9f:8d:e3:58:b9:b4:9c:
8d:1d:97:5c:03:c4:a1:73:be:1f:ba:d1:8c:f4:a7:ae:e5:66:
31:45:39:7c:1c:7e:e3:7e:18:91:63:47:01:25:d0:38:a5:55:
b7:e0:7f:a1:33:41:42:e1:93:3b:3d:59:09:ce:6b:0f:6d:e5:
4c:6d:98:c4:7f:af:40:71:35:52:df:65:b3:57:ee:c1:8b:37:
c4:16:bb:9f:4f:66:60:d5:cf:ff:dd:74:bd:66:3f:a1:cd:45:
a7:22:ff:0a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZysD+rmUa5c3wuBNdwq4DAgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0MzI1OGExOGNmNGQxMjI4ZTVjNzkwNzBkZmE2MzMxMTY4
MzIwYzUwHhcNMjYwMzAyMDEwMDUwWhcNMjYwMzAzMDEwMDUwWjAzMTEwLwYDVQQD
EyhlNjI2MjBjYjFjN2ZhMTM3N2FlMDc5ZThmMWM3MDJhYjFkYzU2NzA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyn9CuS5L4JmjAx+LdoL93LQ7XEHA
1+oombWVJWqJL7AIjDgzLyfzs7KIk4uxTpAq3ovU7jX2u4J4+dVo7Bvvk9+7Akz1
8Jw4lSlHaDC6EhSrk2nzoP4ZpctSMGsuIZtv/GtoOYpkch1Sgxu0p+D+lVeXg2F0
nN0Pt7vw6pcN3dyGsqHmfWrAEG0YCgkj1/KOPXcUzoVjqZB7VVEjXPQCX66oGXOp
s/ghGOUmtTslzS9jkTKyErfsGQ7bdQBXHI7pffvXjsJR9bUmAnLVZiwp6RGUs+AB
kMgh6D6ZlMbHTO7WnjOzOdUYD3Swu3RmjKYsWBZ2h15BQwjYNzY79bBplwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOYmIMscf6E3euB56PHHAqsdxWcFMB8GA1UdIwQY
MBaAFLQyWKGM9NEijlx5Bw36YzEWgyDFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdERKWW9ZejAwU0tPWEhrSERmcGpNUmFESU1VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy8wM2EzMjUtYTE2OS00NGNlLTg0ZWMt
NTcyOGZiMjRiZjBlLzEvdERKWW9ZejAwU0tPWEhrSERmcGpNUmFESU1VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy8wM2EzMjUtYTE2OS00NGNlLTg0ZWMtNTcyOGZiMjRiZjBl
LzEvdERKWW9ZejAwU0tPWEhrSERmcGpNUmFESU1VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbdshvfjd
dgaMYVMDNmKfM9tuQCWIfEJKZbN+W/L61SF7A2t+Dbh4sdCAyINZG1dL4SSEOrEs
rbSK+/p8UxPFg/BiOh7pXll8v6e1EGm3RLUc6i0J5yEQB/ZdWdnPrATe+Gq9d9Q1
U0W8GE2iT9iTbs1i0mwfM08dCpEJ0Lh0uo2TTI57EDJZNISw/0HxTwa9PGnOD00h
OlD9XP+fjeNYubScjR2XXAPEoXO+H7rRjPSnruVmMUU5fBx+434YkWNHASXQOKVV
t+B/oTNBQuGTOz1ZCc5rD23lTG2YxH+vQHE1Ut9ls1fuwYs3xBa7n09mYNXP/910
vWY/oc1FpyL/Cg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 06:17:43 2026 by rpki-client