Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/90a5cf-e484-4bb2-a285-6a49b5a31294/1/tPM_b9KbrwPMTUha9fa3DaawCZ8.mft
File: tPM_b9KbrwPMTUha9fa3DaawCZ8.mft (raw, json)
Hash identifier: NxG4uXjsyNHp+APHJkrIkTgdnfJnsrsPfc/lxTktqPk=
Subject key identifier: 4A:6C:33:C9:E8:27:B7:D2:F8:A7:A8:34:59:19:3D:83:29:E4:8F:3D
Authority key identifier: B4:F3:3F:6F:D2:9B:AF:03:CC:4D:48:5A:F5:F6:B7:0D:A6:B0:09:9F
Certificate issuer: /CN=b4f33f6fd29baf03cc4d485af5f6b70da6b0099f
Certificate serial: 019DA2D30E9211271DFB30CEEB0F56D90B4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPM_b9KbrwPMTUha9fa3DaawCZ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/90a5cf-e484-4bb2-a285-6a49b5a31294/1/tPM_b9KbrwPMTUha9fa3DaawCZ8.mft
Manifest number: 119F
Signing time: Sat 18 Apr 2026 23:00:33 +0000
Manifest this update: Sat 18 Apr 2026 23:00:33 +0000
Manifest next update: Sun 19 Apr 2026 23:00:33 +0000
Files and hashes: 1: Fmn_d_Mky7sAyYX6SnAgjbHa1Cc.roa (hash: FmLoKPhtszPmnHtcY6zDJ3BsNEoID8FJ22Wnnvq62SY=)
2: tPM_b9KbrwPMTUha9fa3DaawCZ8.crl (hash: KpnGXWmITTfqALxffVBf+gPpI443VpjB9HVkOoEFbaA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/90a5cf-e484-4bb2-a285-6a49b5a31294/1/tPM_b9KbrwPMTUha9fa3DaawCZ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/90a5cf-e484-4bb2-a285-6a49b5a31294/1/tPM_b9KbrwPMTUha9fa3DaawCZ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/tPM_b9KbrwPMTUha9fa3DaawCZ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 Apr 2026 23:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a2:d3:0e:92:11:27:1d:fb:30:ce:eb:0f:56:d9:0b:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f33f6fd29baf03cc4d485af5f6b70da6b0099f
Validity
Not Before: Apr 18 23:00:33 2026 GMT
Not After : Apr 19 23:00:33 2026 GMT
Subject: CN=4a6c33c9e827b7d2f8a7a83459193d8329e48f3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:78:36:44:ae:71:c5:06:5c:44:37:28:dd:c8:
e1:49:98:27:42:59:43:ba:35:f6:d7:02:5f:ff:e0:
1c:2a:a4:f3:86:dc:ad:6f:c4:52:8d:6c:b4:2f:19:
86:1f:ac:ca:d8:1f:5b:54:82:12:b3:6c:40:68:bc:
74:70:64:58:38:44:19:6f:84:45:e9:fb:3c:5b:64:
be:31:96:d4:bc:62:14:be:2f:1f:4f:36:44:16:87:
6b:94:f4:5d:61:48:ba:f8:42:6b:b9:ed:c4:6f:a3:
81:2e:33:42:de:0b:16:4a:29:c5:72:81:e5:38:10:
b9:18:a5:4f:03:4d:f5:1b:d7:8e:52:d3:fa:38:42:
ba:9b:53:2f:67:a5:aa:c2:5a:80:e5:8a:24:1b:40:
90:67:ce:95:25:c3:37:a6:7b:8d:56:70:57:9f:23:
5e:21:12:ba:2f:8a:e7:7a:1f:2b:85:5d:f1:19:36:
6f:e4:52:fb:3d:50:9a:df:35:70:8e:ff:9e:25:a9:
50:56:1c:60:ee:f6:4b:b0:7d:94:0b:f6:c6:e0:0d:
36:6a:17:fa:42:e0:1d:3a:bf:9c:a1:0a:40:10:6a:
fd:96:99:05:44:3e:23:dc:3a:ba:46:58:4e:47:b2:
be:37:9f:1c:d8:0b:dd:9b:88:44:17:6d:85:7c:bf:
de:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:6C:33:C9:E8:27:B7:D2:F8:A7:A8:34:59:19:3D:83:29:E4:8F:3D
X509v3 Authority Key Identifier:
keyid:B4:F3:3F:6F:D2:9B:AF:03:CC:4D:48:5A:F5:F6:B7:0D:A6:B0:09:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPM_b9KbrwPMTUha9fa3DaawCZ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/90a5cf-e484-4bb2-a285-6a49b5a31294/1/tPM_b9KbrwPMTUha9fa3DaawCZ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/90a5cf-e484-4bb2-a285-6a49b5a31294/1/tPM_b9KbrwPMTUha9fa3DaawCZ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:18:4c:1a:d9:9b:03:7e:99:50:fb:49:3a:87:fb:23:1d:2d:
6b:9c:62:d6:64:bd:2b:cd:b3:67:5f:8a:bf:25:68:ca:ff:9d:
9b:3a:15:90:f7:f7:7d:c1:45:28:51:52:40:b1:8f:9e:ee:9e:
73:36:b2:81:29:a2:e2:7b:6e:fa:69:93:57:39:4c:ec:7a:74:
5c:78:b4:41:a7:71:f0:2c:58:07:a5:a9:e8:ed:75:de:83:77:
9d:87:cb:d9:9a:79:1a:a7:01:4a:d8:f7:78:5c:91:38:3c:49:
00:59:2e:fe:3f:88:c2:a9:f9:96:8b:84:28:d6:8e:a6:34:b7:
52:0f:c1:3d:db:35:28:d4:a6:98:21:52:3e:b4:f8:99:14:a6:
3b:40:54:37:01:94:2a:08:a5:b7:be:fa:df:31:d4:36:1e:78:
02:1e:7a:07:e4:83:b7:41:cc:35:34:ff:dc:63:75:ba:bb:73:
38:e3:47:cd:5f:43:11:80:2b:72:e5:fc:e9:8d:4f:f3:67:c7:
fb:d2:b2:4d:b4:b0:fb:da:a1:69:d1:99:3f:dd:61:3e:bf:63:
eb:26:f6:7f:41:35:7b:91:96:11:c5:f2:da:88:f1:16:14:43:
6f:84:a2:a9:30:3a:83:55:44:b2:04:89:ef:9c:cd:00:b8:7c:
db:30:8b:fd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2i0w6SEScd+zDO6w9W2QtMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0ZjMzZjZmZDI5YmFmMDNjYzRkNDg1YWY1ZjZiNzBkYTZi
MDA5OWYwHhcNMjYwNDE4MjMwMDMzWhcNMjYwNDE5MjMwMDMzWjAzMTEwLwYDVQQD
Eyg0YTZjMzNjOWU4MjdiN2QyZjhhN2E4MzQ1OTE5M2Q4MzI5ZTQ4ZjNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsng2RK5xxQZcRDco3cjhSZgnQllD
ujX21wJf/+AcKqTzhtytb8RSjWy0LxmGH6zK2B9bVIISs2xAaLx0cGRYOEQZb4RF
6fs8W2S+MZbUvGIUvi8fTzZEFodrlPRdYUi6+EJrue3Eb6OBLjNC3gsWSinFcoHl
OBC5GKVPA031G9eOUtP6OEK6m1MvZ6WqwlqA5YokG0CQZ86VJcM3pnuNVnBXnyNe
IRK6L4rneh8rhV3xGTZv5FL7PVCa3zVwjv+eJalQVhxg7vZLsH2UC/bG4A02ahf6
QuAdOr+coQpAEGr9lpkFRD4j3Dq6RlhOR7K+N58c2Avdm4hEF22FfL/etQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEpsM8noJ7fS+KeoNFkZPYMp5I89MB8GA1UdIwQY
MBaAFLTzP2/Sm68DzE1IWvX2tw2msAmfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFBNX2I5S2Jyd1BNVFVoYTlmYTNEYWF3Q1o4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC85MGE1Y2YtZTQ4NC00YmIyLWEyODUt
NmE0OWI1YTMxMjk0LzEvdFBNX2I5S2Jyd1BNVFVoYTlmYTNEYWF3Q1o4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC85MGE1Y2YtZTQ4NC00YmIyLWEyODUtNmE0OWI1YTMxMjk0
LzEvdFBNX2I5S2Jyd1BNVFVoYTlmYTNEYWF3Q1o4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnBhMGtmb
A36ZUPtJOof7Ix0ta5xi1mS9K82zZ1+KvyVoyv+dmzoVkPf3fcFFKFFSQLGPnu6e
czaygSmi4ntu+mmTVzlM7Hp0XHi0Qadx8CxYB6Wp6O113oN3nYfL2Zp5GqcBStj3
eFyRODxJAFku/j+Iwqn5louEKNaOpjS3Ug/BPds1KNSmmCFSPrT4mRSmO0BUNwGU
Kgilt7763zHUNh54Ah56B+SDt0HMNTT/3GN1urtzOONHzV9DEYArcuX86Y1P82fH
+9KyTbSw+9qhadGZP91hPr9j6yb2f0E1e5GWEcXy2ojxFhRDb4SiqTA6g1VEsgSJ
75zNALh82zCL/Q==
-----END CERTIFICATE-----
Generated at Sun Apr 19 10:04:22 2026 by rpki-client