Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/69331c-aea2-4237-8400-6221403db58b/1/tmdL-ORX4pV-7k9R-Le0TFfbmio.mft
File: tmdL-ORX4pV-7k9R-Le0TFfbmio.mft (raw, json)
Hash identifier: 5XY9m6bFeOA40/Yy875+HwOrSTT6kNHRRLPWth4VNEE=
Subject key identifier: BC:E5:AE:A0:46:CD:F8:56:43:A5:CE:80:2E:36:4D:7F:24:FF:99:8B
Authority key identifier: B6:67:4B:F8:E4:57:E2:95:7E:EE:4F:51:F8:B7:B4:4C:57:DB:9A:2A
Certificate issuer: /CN=b6674bf8e457e2957eee4f51f8b7b44c57db9a2a
Certificate serial: 019CACB55CD453981F1E584F41D58B093107
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tmdL-ORX4pV-7k9R-Le0TFfbmio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/69331c-aea2-4237-8400-6221403db58b/1/tmdL-ORX4pV-7k9R-Le0TFfbmio.mft
Manifest number: 1242
Signing time: Mon 02 Mar 2026 04:01:32 +0000
Manifest this update: Mon 02 Mar 2026 04:01:32 +0000
Manifest next update: Tue 03 Mar 2026 04:01:32 +0000
Files and hashes: 1: rUXKeVVJ04wZzY-9AMdF7X_kQUY.roa (hash: JD0yLLKxNO7w7T95rG6mxBg4uiPzT+AUeh23SkMpuwQ=)
2: tmdL-ORX4pV-7k9R-Le0TFfbmio.crl (hash: ZtDtdLufpigWwwp5r1uDRNhgZvq3n6C4dDg7G1AkRak=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/69331c-aea2-4237-8400-6221403db58b/1/tmdL-ORX4pV-7k9R-Le0TFfbmio.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/69331c-aea2-4237-8400-6221403db58b/1/tmdL-ORX4pV-7k9R-Le0TFfbmio.mft
rsync://rpki.ripe.net/repository/DEFAULT/tmdL-ORX4pV-7k9R-Le0TFfbmio.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 04:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b5:5c:d4:53:98:1f:1e:58:4f:41:d5:8b:09:31:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6674bf8e457e2957eee4f51f8b7b44c57db9a2a
Validity
Not Before: Mar 2 04:01:32 2026 GMT
Not After : Mar 3 04:01:32 2026 GMT
Subject: CN=bce5aea046cdf85643a5ce802e364d7f24ff998b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:f3:92:e9:9d:d1:bc:9d:e5:48:50:cd:1a:49:
1d:85:19:c4:b0:f2:79:71:77:13:90:e8:f0:da:f0:
b6:86:6d:95:8e:20:3c:90:d9:dc:20:54:0b:91:8d:
dc:32:ec:5a:be:57:2d:4a:79:4b:59:4c:5d:ba:bd:
53:b5:09:fc:2d:d4:d0:7b:f7:aa:c8:35:e6:bd:8f:
36:86:22:51:d3:ee:80:a6:ba:be:e1:1d:db:da:1d:
46:ab:01:d1:cc:00:a4:03:3d:b0:ae:62:c9:a6:25:
35:01:53:9e:02:11:78:06:54:20:ad:03:f4:7d:44:
26:aa:f3:f5:38:c4:69:9f:91:86:7c:dc:1c:a0:59:
cc:77:d7:f4:c6:54:e5:e7:ca:3a:18:04:ad:1e:95:
77:88:5e:6f:2f:8e:0f:55:eb:fa:68:61:92:d1:31:
7f:cd:a0:ad:5c:c7:dd:59:c2:9a:43:cf:ca:41:2b:
d7:cf:5f:cc:87:3b:35:40:0c:00:cc:38:27:8b:12:
da:0b:bc:c0:59:27:9f:06:c6:bc:57:bc:b6:28:59:
e5:a9:8b:f6:1b:9a:06:6e:22:a0:de:a6:9f:f7:fc:
ae:02:37:7a:74:22:49:53:5e:19:a5:76:35:af:39:
26:17:8c:cf:0a:f1:69:2c:fa:db:c0:a8:62:fc:9e:
3a:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:E5:AE:A0:46:CD:F8:56:43:A5:CE:80:2E:36:4D:7F:24:FF:99:8B
X509v3 Authority Key Identifier:
keyid:B6:67:4B:F8:E4:57:E2:95:7E:EE:4F:51:F8:B7:B4:4C:57:DB:9A:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tmdL-ORX4pV-7k9R-Le0TFfbmio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/69331c-aea2-4237-8400-6221403db58b/1/tmdL-ORX4pV-7k9R-Le0TFfbmio.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/69331c-aea2-4237-8400-6221403db58b/1/tmdL-ORX4pV-7k9R-Le0TFfbmio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:70:39:ea:33:54:2b:10:90:af:ab:f6:77:3d:ce:95:5b:c8:
28:85:53:01:a6:08:2e:fa:ad:c4:ea:79:78:48:d5:4e:a8:21:
14:6c:7f:a1:0b:33:59:f7:75:2f:17:86:05:92:9f:9b:29:54:
98:bc:8f:7a:34:cb:3c:54:a3:a5:6c:be:ca:3b:e4:7e:fe:14:
86:15:7b:0b:bb:bb:0a:52:bf:77:f1:b9:cd:7c:fa:23:cd:c0:
78:cc:2d:2c:59:ed:63:5f:85:52:b9:ad:28:ed:cb:a2:41:ef:
d8:6d:33:36:e9:17:b5:bc:24:a8:84:73:98:e6:67:cc:10:fa:
5d:e9:bc:15:27:07:ac:bb:15:56:bb:88:f9:41:ad:ee:90:8d:
83:64:72:cc:4a:ef:4e:c1:93:67:fb:c3:11:65:5a:1f:25:ad:
62:bf:0e:2f:54:db:57:36:88:0d:21:88:d6:4a:88:aa:31:78:
50:f5:53:96:b1:6c:d8:47:7d:ee:da:a7:40:38:95:2d:8c:ee:
5a:10:40:7d:27:9c:94:22:10:e5:74:ef:f7:e6:15:7e:77:a9:
96:19:56:f0:b1:93:9d:37:6c:03:ad:f6:80:ed:48:4f:85:7f:
83:b7:09:d4:30:11:d3:82:5d:87:5c:7d:c9:df:ec:f0:ef:d6:
a5:94:ec:17
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZystVzUU5gfHlhPQdWLCTEHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI2Njc0YmY4ZTQ1N2UyOTU3ZWVlNGY1MWY4YjdiNDRjNTdk
YjlhMmEwHhcNMjYwMzAyMDQwMTMyWhcNMjYwMzAzMDQwMTMyWjAzMTEwLwYDVQQD
EyhiY2U1YWVhMDQ2Y2RmODU2NDNhNWNlODAyZTM2NGQ3ZjI0ZmY5OThiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2vOS6Z3RvJ3lSFDNGkkdhRnEsPJ5
cXcTkOjw2vC2hm2VjiA8kNncIFQLkY3cMuxavlctSnlLWUxdur1TtQn8LdTQe/eq
yDXmvY82hiJR0+6Aprq+4R3b2h1GqwHRzACkAz2wrmLJpiU1AVOeAhF4BlQgrQP0
fUQmqvP1OMRpn5GGfNwcoFnMd9f0xlTl58o6GAStHpV3iF5vL44PVev6aGGS0TF/
zaCtXMfdWcKaQ8/KQSvXz1/Mhzs1QAwAzDgnixLaC7zAWSefBsa8V7y2KFnlqYv2
G5oGbiKg3qaf9/yuAjd6dCJJU14ZpXY1rzkmF4zPCvFpLPrbwKhi/J462wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLzlrqBGzfhWQ6XOgC42TX8k/5mLMB8GA1UdIwQY
MBaAFLZnS/jkV+KVfu5PUfi3tExX25oqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdG1kTC1PUlg0cFYtN2s5Ui1MZTBURmZibWlvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi82OTMzMWMtYWVhMi00MjM3LTg0MDAt
NjIyMTQwM2RiNThiLzEvdG1kTC1PUlg0cFYtN2s5Ui1MZTBURmZibWlvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNi82OTMzMWMtYWVhMi00MjM3LTg0MDAtNjIyMTQwM2RiNThi
LzEvdG1kTC1PUlg0cFYtN2s5Ui1MZTBURmZibWlvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQnA56jNU
KxCQr6v2dz3OlVvIKIVTAaYILvqtxOp5eEjVTqghFGx/oQszWfd1LxeGBZKfmylU
mLyPejTLPFSjpWy+yjvkfv4UhhV7C7u7ClK/d/G5zXz6I83AeMwtLFntY1+FUrmt
KO3LokHv2G0zNukXtbwkqIRzmOZnzBD6Xem8FScHrLsVVruI+UGt7pCNg2RyzErv
TsGTZ/vDEWVaHyWtYr8OL1TbVzaIDSGI1kqIqjF4UPVTlrFs2Ed97tqnQDiVLYzu
WhBAfSeclCIQ5XTv9+YVfneplhlW8LGTnTdsA632gO1IT4V/g7cJ1DAR04Jdh1x9
yd/s8O/WpZTsFw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 12:40:08 2026 by rpki-client