Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/e4d20f-6dc8-497d-a8d6-9dddd6802088/1/tjowlEOcrA9VVwEobNVDc7zmy1A.mft
File: tjowlEOcrA9VVwEobNVDc7zmy1A.mft (raw, json)
Hash identifier: NHFFsQtNw9DCTTWlFdNCsXCXDewUwZjdl3C6f+fb6nY=
Subject key identifier: 34:21:29:33:F6:A7:52:6A:0E:C5:21:CC:60:6E:3E:38:87:99:C6:CF
Authority key identifier: B6:3A:30:94:43:9C:AC:0F:55:57:01:28:6C:D5:43:73:BC:E6:CB:50
Certificate issuer: /CN=b63a3094439cac0f555701286cd54373bce6cb50
Certificate serial: 019CAAC6C6A4E565D531CDEFD5596028F8E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tjowlEOcrA9VVwEobNVDc7zmy1A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/e4d20f-6dc8-497d-a8d6-9dddd6802088/1/tjowlEOcrA9VVwEobNVDc7zmy1A.mft
Manifest number: 05EA
Signing time: Sun 01 Mar 2026 19:01:19 +0000
Manifest this update: Sun 01 Mar 2026 19:01:19 +0000
Manifest next update: Mon 02 Mar 2026 19:01:19 +0000
Files and hashes: 1: f7CpyN6sW0ZcgvCuLUdNYJVfmi4.roa (hash: BUr3/0WmGIaDdHN6nw+UqfT6IUf3UU/+UGTcpdHXJwI=)
2: tjowlEOcrA9VVwEobNVDc7zmy1A.crl (hash: z+pEEXBi1jFsusg4v2sssXFY2tw6bDJvFHJjp50gjhI=)
3: u2WfF9In72cKbk56xhUnLtQds5E.roa (hash: lXqEAMd861hGDluqkgvGTYLqDE2FQJtnTBvspyPWGQ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/e4d20f-6dc8-497d-a8d6-9dddd6802088/1/tjowlEOcrA9VVwEobNVDc7zmy1A.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/e4d20f-6dc8-497d-a8d6-9dddd6802088/1/tjowlEOcrA9VVwEobNVDc7zmy1A.mft
rsync://rpki.ripe.net/repository/DEFAULT/tjowlEOcrA9VVwEobNVDc7zmy1A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:c6:a4:e5:65:d5:31:cd:ef:d5:59:60:28:f8:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b63a3094439cac0f555701286cd54373bce6cb50
Validity
Not Before: Mar 1 19:01:19 2026 GMT
Not After : Mar 2 19:01:19 2026 GMT
Subject: CN=34212933f6a7526a0ec521cc606e3e388799c6cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:76:d9:1c:d2:d1:cc:b9:61:fc:fa:ef:e1:1d:
72:b1:67:7b:83:d7:d2:a8:e1:69:f2:35:03:9c:46:
b1:9e:55:94:4a:82:57:b7:41:8c:e8:f6:f5:bf:04:
d1:b1:b9:c9:1b:60:07:ee:ab:cf:b9:09:0e:08:81:
ae:84:26:d2:4f:ec:a7:75:cd:8e:90:25:e0:c6:eb:
c1:76:7f:f3:f8:c7:12:44:53:c8:7c:13:6f:30:85:
9b:d0:c1:28:56:72:f0:44:70:19:a4:e8:64:aa:01:
bc:11:c2:78:3d:6c:fd:5c:a6:ee:9b:0a:3f:73:91:
af:d0:c4:97:7a:b3:ba:eb:16:8d:a8:e7:5a:25:0c:
14:38:bc:b9:09:e5:be:90:8c:32:f1:39:9b:93:45:
4d:a8:f3:df:1d:8c:3c:65:3d:07:fa:81:26:25:4d:
b4:c9:dc:7f:0a:12:ec:ad:da:12:6e:a3:b9:77:68:
7f:94:ba:05:96:62:79:9f:6c:0d:08:f7:50:e4:f3:
31:6d:06:29:0e:0d:7e:60:82:cc:0c:64:50:0d:5d:
ca:33:59:89:dc:06:ee:d5:10:e8:2f:c1:fa:1f:00:
7f:30:3b:1a:74:d5:8b:34:00:84:91:b2:50:a0:1e:
c7:62:59:16:65:0c:0e:7a:49:a5:99:70:86:4d:59:
40:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:21:29:33:F6:A7:52:6A:0E:C5:21:CC:60:6E:3E:38:87:99:C6:CF
X509v3 Authority Key Identifier:
keyid:B6:3A:30:94:43:9C:AC:0F:55:57:01:28:6C:D5:43:73:BC:E6:CB:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tjowlEOcrA9VVwEobNVDc7zmy1A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/e4d20f-6dc8-497d-a8d6-9dddd6802088/1/tjowlEOcrA9VVwEobNVDc7zmy1A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/e4d20f-6dc8-497d-a8d6-9dddd6802088/1/tjowlEOcrA9VVwEobNVDc7zmy1A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:f4:10:be:b2:6d:7e:b0:33:74:b8:b8:b9:a0:30:9a:52:ab:
22:4c:d2:07:a7:4b:83:8e:9a:4e:15:05:5c:3f:75:17:4c:18:
05:ac:c3:32:03:b7:99:49:84:81:38:99:9c:c8:83:cb:6c:42:
72:2d:1d:1b:5b:46:a0:68:e9:7f:55:8d:97:3f:4d:85:9a:2b:
f5:e9:8c:b3:cf:7d:d1:53:02:49:00:b1:80:aa:f4:dc:4a:25:
01:ba:41:e9:e2:1d:02:67:55:54:e6:c5:a6:1f:e3:8e:56:29:
40:a4:22:af:83:5d:83:71:4a:24:97:b7:73:83:1b:7c:16:17:
8f:fb:2a:ef:ff:48:9b:ae:e4:e7:20:d4:53:3e:19:21:80:1d:
75:20:fa:30:c7:05:1d:5e:ff:b4:8d:e0:8e:93:f3:67:dc:ff:
ad:bc:d9:30:f2:9e:0d:d7:ce:6b:07:2b:ad:12:dc:08:75:d2:
9b:23:f4:dd:cd:18:25:42:cd:f8:8d:35:dd:82:95:51:2b:85:
ec:cc:dc:9a:5e:05:5a:20:30:65:2b:4d:e9:f4:90:98:6f:14:
23:1a:6a:63:ed:c4:38:6f:14:10:7e:31:57:52:43:cd:4e:cd:
b1:25:59:b5:ad:4a:20:4f:f6:9e:b6:44:b9:b4:56:86:99:1e:
d7:17:85:70
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqxsak5WXVMc3v1VlgKPjjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI2M2EzMDk0NDM5Y2FjMGY1NTU3MDEyODZjZDU0MzczYmNl
NmNiNTAwHhcNMjYwMzAxMTkwMTE5WhcNMjYwMzAyMTkwMTE5WjAzMTEwLwYDVQQD
EygzNDIxMjkzM2Y2YTc1MjZhMGVjNTIxY2M2MDZlM2UzODg3OTljNmNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp3bZHNLRzLlh/Prv4R1ysWd7g9fS
qOFp8jUDnEaxnlWUSoJXt0GM6Pb1vwTRsbnJG2AH7qvPuQkOCIGuhCbST+yndc2O
kCXgxuvBdn/z+McSRFPIfBNvMIWb0MEoVnLwRHAZpOhkqgG8EcJ4PWz9XKbumwo/
c5Gv0MSXerO66xaNqOdaJQwUOLy5CeW+kIwy8Tmbk0VNqPPfHYw8ZT0H+oEmJU20
ydx/ChLsrdoSbqO5d2h/lLoFlmJ5n2wNCPdQ5PMxbQYpDg1+YILMDGRQDV3KM1mJ
3Abu1RDoL8H6HwB/MDsadNWLNACEkbJQoB7HYlkWZQwOekmlmXCGTVlADwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDQhKTP2p1JqDsUhzGBuPjiHmcbPMB8GA1UdIwQY
MBaAFLY6MJRDnKwPVVcBKGzVQ3O85stQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdGpvd2xFT2NyQTlWVndFb2JOVkRjN3pteTFBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC9lNGQyMGYtNmRjOC00OTdkLWE4ZDYt
OWRkZGQ2ODAyMDg4LzEvdGpvd2xFT2NyQTlWVndFb2JOVkRjN3pteTFBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMC9lNGQyMGYtNmRjOC00OTdkLWE4ZDYtOWRkZGQ2ODAyMDg4
LzEvdGpvd2xFT2NyQTlWVndFb2JOVkRjN3pteTFBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGvQQvrJt
frAzdLi4uaAwmlKrIkzSB6dLg46aThUFXD91F0wYBazDMgO3mUmEgTiZnMiDy2xC
ci0dG1tGoGjpf1WNlz9NhZor9emMs8990VMCSQCxgKr03EolAbpB6eIdAmdVVObF
ph/jjlYpQKQir4Ndg3FKJJe3c4MbfBYXj/sq7/9Im67k5yDUUz4ZIYAddSD6MMcF
HV7/tI3gjpPzZ9z/rbzZMPKeDdfOawcrrRLcCHXSmyP03c0YJULN+I013YKVUSuF
7Mzcml4FWiAwZStN6fSQmG8UIxpqY+3EOG8UEH4xV1JDzU7NsSVZta1KIE/2nrZE
ubRWhpke1xeFcA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:40:24 2026 by rpki-client