Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/1f3117-f2a1-4322-b63d-f7edb2688652/1/t4CzueCWIhYp_kfhAqxSLaA5ecQ.mft
File: t4CzueCWIhYp_kfhAqxSLaA5ecQ.mft (raw, json)
Hash identifier: OFVST7Tr6bRz/beEYa4uYe3eUEF2fXv82wc/EzqSIr4=
Subject key identifier: 7F:A1:F1:EB:0E:4D:1F:0B:02:98:0A:7F:83:9F:20:31:A9:51:5D:DE
Authority key identifier: B7:80:B3:B9:E0:96:22:16:29:FE:47:E1:02:AC:52:2D:A0:39:79:C4
Certificate issuer: /CN=b780b3b9e096221629fe47e102ac522da03979c4
Certificate serial: 019CAE35C01F91D58B9E20EBB6AF0DC53104
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t4CzueCWIhYp_kfhAqxSLaA5ecQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/1f3117-f2a1-4322-b63d-f7edb2688652/1/t4CzueCWIhYp_kfhAqxSLaA5ecQ.mft
Manifest number: 1846
Signing time: Mon 02 Mar 2026 11:01:23 +0000
Manifest this update: Mon 02 Mar 2026 11:01:23 +0000
Manifest next update: Tue 03 Mar 2026 11:01:23 +0000
Files and hashes: 1: mXR1vwAsCEfZCQ6KKfou_FufsHg.roa (hash: MguOaTrNnHUp4FVql5i5MlGMRxd61G72ChYyyrskpls=)
2: t4CzueCWIhYp_kfhAqxSLaA5ecQ.crl (hash: WQN9HZAWnkYX3gDFDMu9F+QIFTYVqf+OcgLrjTgpMBQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/1f3117-f2a1-4322-b63d-f7edb2688652/1/t4CzueCWIhYp_kfhAqxSLaA5ecQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/1f3117-f2a1-4322-b63d-f7edb2688652/1/t4CzueCWIhYp_kfhAqxSLaA5ecQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/t4CzueCWIhYp_kfhAqxSLaA5ecQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:35:c0:1f:91:d5:8b:9e:20:eb:b6:af:0d:c5:31:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b780b3b9e096221629fe47e102ac522da03979c4
Validity
Not Before: Mar 2 11:01:23 2026 GMT
Not After : Mar 3 11:01:23 2026 GMT
Subject: CN=7fa1f1eb0e4d1f0b02980a7f839f2031a9515dde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:6b:b2:47:4d:dd:cb:29:26:3c:28:08:53:a1:
e0:e5:9b:61:fe:e4:d5:ee:11:0b:72:f3:67:ac:c6:
be:18:3f:5e:d2:78:ed:93:c5:fa:02:bc:2e:28:b1:
af:9f:1e:a4:7b:b6:32:2f:a5:67:b7:f3:2c:41:3a:
ed:ac:49:38:a0:8f:c2:e4:bc:08:27:42:3d:e5:1b:
45:24:4f:e9:2a:3f:99:c4:f5:f5:65:63:a2:9e:cf:
49:f1:e8:26:4c:6a:b7:f2:85:bd:fb:e2:cd:64:2b:
73:a6:77:41:3f:ed:4f:06:09:af:eb:4d:46:e8:21:
99:3d:55:aa:af:64:07:49:f9:e9:87:3d:b6:ba:ca:
49:8c:0d:bc:7b:70:45:c4:b9:38:ae:fd:66:a7:70:
32:ba:26:ec:61:32:66:9e:5f:3a:86:83:6f:83:05:
c7:c4:f8:1c:23:04:21:10:d1:bf:9f:10:25:e1:d6:
a7:af:19:3f:03:c3:ef:64:a0:a9:fc:bc:b5:8c:9e:
01:7b:e9:a3:ab:da:5d:62:d1:df:84:06:73:d6:99:
b2:6e:5e:6c:e3:b4:6b:0b:e3:68:f6:ae:8c:aa:88:
57:5f:2a:ce:50:5e:67:97:69:ff:70:59:06:09:33:
87:d5:1b:27:8d:ea:84:cb:1a:8d:6d:07:b2:33:06:
45:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:A1:F1:EB:0E:4D:1F:0B:02:98:0A:7F:83:9F:20:31:A9:51:5D:DE
X509v3 Authority Key Identifier:
keyid:B7:80:B3:B9:E0:96:22:16:29:FE:47:E1:02:AC:52:2D:A0:39:79:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t4CzueCWIhYp_kfhAqxSLaA5ecQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/1f3117-f2a1-4322-b63d-f7edb2688652/1/t4CzueCWIhYp_kfhAqxSLaA5ecQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/1f3117-f2a1-4322-b63d-f7edb2688652/1/t4CzueCWIhYp_kfhAqxSLaA5ecQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:fa:ca:3b:59:30:38:2e:66:c7:c5:60:dd:90:60:33:53:c7:
6d:c0:42:0e:76:92:eb:38:6c:4e:76:20:85:92:9d:ad:53:c5:
64:c0:c1:56:88:49:db:b0:39:ae:ad:3b:db:6f:d4:bb:e4:d9:
c8:a8:6c:3f:4e:fe:e3:3b:30:e7:f2:1c:77:f0:54:e8:92:61:
95:49:46:37:fa:4c:db:bc:13:84:9d:9c:4b:0b:b2:fa:3f:28:
a1:a3:f6:c9:62:cc:6b:9b:c0:20:b8:3e:25:95:1b:17:12:db:
0f:74:ad:60:d5:c3:7d:6a:d2:27:72:4c:b7:db:2e:dd:71:2d:
b2:83:ba:f5:66:6e:65:ab:35:c8:42:c3:50:46:bf:56:42:3f:
d9:48:1d:be:cf:f9:12:3c:91:a6:7b:55:e9:ca:1b:7e:61:e7:
98:c9:3c:57:47:83:51:6b:01:a4:08:63:a7:06:a9:2b:b2:ee:
6c:a2:3d:cc:28:df:88:f7:99:39:e7:62:f2:27:37:81:e6:ae:
9e:df:05:85:e1:4a:e8:25:56:bb:a7:46:96:45:a6:e6:42:9d:
5b:bc:19:80:c6:04:21:44:95:15:f4:2d:c7:c8:4e:3b:3f:2f:
6a:a7:c2:41:c7:ff:5c:5f:ff:5f:45:92:55:18:af:48:89:91:
b5:da:37:6d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyuNcAfkdWLniDrtq8NxTEEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3ODBiM2I5ZTA5NjIyMTYyOWZlNDdlMTAyYWM1MjJkYTAz
OTc5YzQwHhcNMjYwMzAyMTEwMTIzWhcNMjYwMzAzMTEwMTIzWjAzMTEwLwYDVQQD
Eyg3ZmExZjFlYjBlNGQxZjBiMDI5ODBhN2Y4MzlmMjAzMWE5NTE1ZGRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz2uyR03dyykmPCgIU6Hg5Zth/uTV
7hELcvNnrMa+GD9e0njtk8X6ArwuKLGvnx6ke7YyL6Vnt/MsQTrtrEk4oI/C5LwI
J0I95RtFJE/pKj+ZxPX1ZWOins9J8egmTGq38oW9++LNZCtzpndBP+1PBgmv601G
6CGZPVWqr2QHSfnphz22uspJjA28e3BFxLk4rv1mp3AyuibsYTJmnl86hoNvgwXH
xPgcIwQhENG/nxAl4danrxk/A8PvZKCp/Ly1jJ4Be+mjq9pdYtHfhAZz1pmybl5s
47RrC+No9q6MqohXXyrOUF5nl2n/cFkGCTOH1RsnjeqEyxqNbQeyMwZFDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH+h8esOTR8LApgKf4OfIDGpUV3eMB8GA1UdIwQY
MBaAFLeAs7ngliIWKf5H4QKsUi2gOXnEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdDRDenVlQ1dJaFlwX2tmaEFxeFNMYUE1ZWNRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi8xZjMxMTctZjJhMS00MzIyLWI2M2Qt
ZjdlZGIyNjg4NjUyLzEvdDRDenVlQ1dJaFlwX2tmaEFxeFNMYUE1ZWNRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi8xZjMxMTctZjJhMS00MzIyLWI2M2QtZjdlZGIyNjg4NjUy
LzEvdDRDenVlQ1dJaFlwX2tmaEFxeFNMYUE1ZWNRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArPrKO1kw
OC5mx8Vg3ZBgM1PHbcBCDnaS6zhsTnYghZKdrVPFZMDBVohJ27A5rq0722/Uu+TZ
yKhsP07+4zsw5/Icd/BU6JJhlUlGN/pM27wThJ2cSwuy+j8ooaP2yWLMa5vAILg+
JZUbFxLbD3StYNXDfWrSJ3JMt9su3XEtsoO69WZuZas1yELDUEa/VkI/2Ugdvs/5
EjyRpntV6cobfmHnmMk8V0eDUWsBpAhjpwapK7LubKI9zCjfiPeZOedi8ic3geau
nt8FheFK6CVWu6dGlkWm5kKdW7wZgMYEIUSVFfQtx8hOOz8vaqfCQcf/XF//X0WS
VRivSImRtdo3bQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 14:12:38 2026 by rpki-client