Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/e8f95d-ad38-4b5c-b090-8a8564ba3c8c/1/tCV3H5kv1037Bzbmla61nGr2fpM.mft
File: tCV3H5kv1037Bzbmla61nGr2fpM.mft (raw, json)
Hash identifier: UkOpcf2eY5E3oInuZIss7CLR/ER04XGwmkpyPasseYg=
Subject key identifier: 26:AC:DC:81:36:7D:82:07:4F:D1:82:9C:51:06:D6:FC:D2:AE:E1:85
Authority key identifier: B4:25:77:1F:99:2F:D7:4D:FB:07:36:E6:95:AE:B5:9C:6A:F6:7E:93
Certificate issuer: /CN=b425771f992fd74dfb0736e695aeb59c6af67e93
Certificate serial: 019CAA21C567E31E85DA628BA14FC1B13B40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tCV3H5kv1037Bzbmla61nGr2fpM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/e8f95d-ad38-4b5c-b090-8a8564ba3c8c/1/tCV3H5kv1037Bzbmla61nGr2fpM.mft
Manifest number: 0916
Signing time: Sun 01 Mar 2026 16:01:05 +0000
Manifest this update: Sun 01 Mar 2026 16:01:05 +0000
Manifest next update: Mon 02 Mar 2026 16:01:05 +0000
Files and hashes: 1: Ipu1qUGfEU4g8Xm4HjOemR3yWWY.roa (hash: R0D/+J37ZrEsRH10sv5tmqRZhv8lgKjFyvvf+xRetHk=)
2: tCV3H5kv1037Bzbmla61nGr2fpM.crl (hash: mT3BX2M2jgZAXOmeP3n0oqJFZAcpiSJNgk0OxyGqYoM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/e8f95d-ad38-4b5c-b090-8a8564ba3c8c/1/tCV3H5kv1037Bzbmla61nGr2fpM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/e8f95d-ad38-4b5c-b090-8a8564ba3c8c/1/tCV3H5kv1037Bzbmla61nGr2fpM.mft
rsync://rpki.ripe.net/repository/DEFAULT/tCV3H5kv1037Bzbmla61nGr2fpM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:21:c5:67:e3:1e:85:da:62:8b:a1:4f:c1:b1:3b:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b425771f992fd74dfb0736e695aeb59c6af67e93
Validity
Not Before: Mar 1 16:01:05 2026 GMT
Not After : Mar 2 16:01:05 2026 GMT
Subject: CN=26acdc81367d82074fd1829c5106d6fcd2aee185
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:57:ec:af:43:90:9c:e8:62:2b:ca:6c:17:8d:
1c:c5:27:63:bd:1c:13:b0:8d:4c:c8:5f:ac:59:d5:
e6:72:f3:28:60:ab:ae:60:78:5a:e2:a7:b7:e0:25:
63:fc:1a:85:64:69:3a:23:dd:e8:df:d9:c1:10:55:
cb:c2:e0:78:e8:12:cf:05:13:fa:d9:12:bc:f4:93:
df:a6:3f:88:a8:1e:55:f5:fb:d6:63:d7:3d:bc:03:
3d:5e:09:0d:a0:c4:e4:7e:ea:97:b9:20:f7:86:7a:
a0:0b:24:2f:72:5d:7c:85:94:91:d7:39:6e:be:27:
78:b0:01:2f:b9:59:ae:70:2d:25:00:a7:33:d5:30:
1c:57:2b:a3:2d:a0:ea:10:34:e9:c9:d0:45:10:f6:
8c:ea:48:2c:af:a6:47:a4:b0:14:ab:0e:b3:92:8d:
8f:ac:c8:4d:d0:f4:e7:e9:ba:91:22:f5:85:df:7c:
4b:dd:e9:d2:5f:e0:f7:dc:d6:ed:ca:67:b6:7b:da:
dc:c5:d3:96:34:7d:f4:a0:6c:bf:69:3e:bd:75:90:
8f:24:39:48:ad:7f:02:f0:bd:18:c8:fd:4a:00:dc:
55:49:16:86:1d:40:94:1a:0f:b2:ac:04:cb:50:a8:
08:2e:9d:40:ad:87:68:23:15:80:a5:da:42:b8:92:
c6:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:AC:DC:81:36:7D:82:07:4F:D1:82:9C:51:06:D6:FC:D2:AE:E1:85
X509v3 Authority Key Identifier:
keyid:B4:25:77:1F:99:2F:D7:4D:FB:07:36:E6:95:AE:B5:9C:6A:F6:7E:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tCV3H5kv1037Bzbmla61nGr2fpM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/e8f95d-ad38-4b5c-b090-8a8564ba3c8c/1/tCV3H5kv1037Bzbmla61nGr2fpM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/e8f95d-ad38-4b5c-b090-8a8564ba3c8c/1/tCV3H5kv1037Bzbmla61nGr2fpM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:10:96:69:29:39:50:71:2f:ed:55:6d:9c:38:74:83:27:80:
7d:47:be:ba:57:3f:96:84:b0:d4:fa:72:3f:02:bc:9f:b6:48:
ac:18:27:b7:49:82:cb:fd:be:e3:a9:eb:3c:56:e8:9d:09:ab:
4a:93:0b:88:56:ba:d5:3f:95:8e:76:6e:9d:00:4a:5c:d4:60:
98:4a:3d:fa:cf:cf:9e:73:39:46:a8:13:e3:a5:16:1b:04:c1:
92:08:9b:5c:d8:31:b6:79:68:e9:6b:eb:44:9f:64:41:23:54:
99:10:98:ae:c4:d1:b4:4d:10:8a:37:a5:d6:69:d4:69:af:a1:
7b:d6:ae:ad:6f:59:ca:6f:2e:ea:b5:c8:6c:71:55:51:ae:06:
44:da:60:c4:da:aa:d2:1b:7a:41:ad:29:a3:48:98:59:c6:ea:
2a:88:1e:be:96:ac:77:11:f4:56:f2:e8:53:44:b3:1e:cc:78:
8f:55:db:46:8c:c1:98:58:52:ab:b8:b7:a2:0b:b1:5e:a3:6b:
4f:3e:0b:2e:a7:aa:96:5c:5c:d4:7b:a8:36:01:80:78:42:d9:
45:b1:c5:22:c5:8c:d0:fc:a9:36:05:93:3c:e7:21:35:c3:34:
e7:33:e9:7f:4c:d5:37:ba:e6:f9:25:a6:11:b8:22:0c:09:fc:
88:ab:f0:13
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqIcVn4x6F2mKLoU/BsTtAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0MjU3NzFmOTkyZmQ3NGRmYjA3MzZlNjk1YWViNTljNmFm
NjdlOTMwHhcNMjYwMzAxMTYwMTA1WhcNMjYwMzAyMTYwMTA1WjAzMTEwLwYDVQQD
EygyNmFjZGM4MTM2N2Q4MjA3NGZkMTgyOWM1MTA2ZDZmY2QyYWVlMTg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Vfsr0OQnOhiK8psF40cxSdjvRwT
sI1MyF+sWdXmcvMoYKuuYHha4qe34CVj/BqFZGk6I93o39nBEFXLwuB46BLPBRP6
2RK89JPfpj+IqB5V9fvWY9c9vAM9XgkNoMTkfuqXuSD3hnqgCyQvcl18hZSR1zlu
vid4sAEvuVmucC0lAKcz1TAcVyujLaDqEDTpydBFEPaM6kgsr6ZHpLAUqw6zko2P
rMhN0PTn6bqRIvWF33xL3enSX+D33Nbtyme2e9rcxdOWNH30oGy/aT69dZCPJDlI
rX8C8L0YyP1KANxVSRaGHUCUGg+yrATLUKgILp1ArYdoIxWApdpCuJLGIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCas3IE2fYIHT9GCnFEG1vzSruGFMB8GA1UdIwQY
MBaAFLQldx+ZL9dN+wc25pWutZxq9n6TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdENWM0g1a3YxMDM3QnpibWxhNjFuR3IyZnBNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi9lOGY5NWQtYWQzOC00YjVjLWIwOTAt
OGE4NTY0YmEzYzhjLzEvdENWM0g1a3YxMDM3QnpibWxhNjFuR3IyZnBNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZi9lOGY5NWQtYWQzOC00YjVjLWIwOTAtOGE4NTY0YmEzYzhj
LzEvdENWM0g1a3YxMDM3QnpibWxhNjFuR3IyZnBNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZxCWaSk5
UHEv7VVtnDh0gyeAfUe+ulc/loSw1PpyPwK8n7ZIrBgnt0mCy/2+46nrPFbonQmr
SpMLiFa61T+VjnZunQBKXNRgmEo9+s/PnnM5RqgT46UWGwTBkgibXNgxtnlo6Wvr
RJ9kQSNUmRCYrsTRtE0Qijel1mnUaa+he9aurW9Zym8u6rXIbHFVUa4GRNpgxNqq
0ht6Qa0po0iYWcbqKogevpasdxH0VvLoU0SzHsx4j1XbRozBmFhSq7i3oguxXqNr
Tz4LLqeqllxc1HuoNgGAeELZRbHFIsWM0PypNgWTPOchNcM05zPpf0zVN7rm+SWm
EbgiDAn8iKvwEw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 01:33:50 2026 by rpki-client