Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/648c75-2be8-4bfd-a1b1-cb8b3a094209/1/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.mft
File: Ts9TAHx5zF4vLXNWupEhp4wMdxQ.mft (raw, json)
Hash identifier: lxD6UWcTzzPvM7BuB5fI4QNh3lNMzqB6RTCA802pumA=
Subject key identifier: 85:2B:0A:3C:2D:C3:6D:13:D0:E7:0E:1C:89:89:B2:67:D4:86:3F:56
Authority key identifier: 4E:CF:53:00:7C:79:CC:5E:2F:2D:73:56:BA:91:21:A7:8C:0C:77:14
Certificate issuer: /CN=4ecf53007c79cc5e2f2d7356ba9121a78c0c7714
Certificate serial: 019DA3AF13FEA0DC512CCF2DD7280FCB5167
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/648c75-2be8-4bfd-a1b1-cb8b3a094209/1/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.mft
Manifest number: 1929
Signing time: Sun 19 Apr 2026 03:00:53 +0000
Manifest this update: Sun 19 Apr 2026 03:00:53 +0000
Manifest next update: Mon 20 Apr 2026 03:00:53 +0000
Files and hashes: 1: 7kCTcBBf9Y2mZp4MQo4FaThhaw4.roa (hash: 4G5b5APOZBeeZ1ZvQcD3v0tSN26DXUsz89KNzub4qWo=)
2: Axy-VDMaL0TttuQWr1HwszNqc0I.roa (hash: bbZhwLgQwTeviEfEB8kT+/Hr8GEpDxbaZvVMkhGxoa8=)
3: EIf4_e1IxdxiLFBKRrmbYkLdBhg.roa (hash: wTMfLnzpxmyagKAjlQHgrc2pzICPnW5ADwDSG8SyfAI=)
4: TX_u3ri8rca4P81egD9tMMtVs-E.roa (hash: VizDbLVqd0zmsz68Is1wbARP6+9Ai1vW465jIZXJ0vw=)
5: Ts9TAHx5zF4vLXNWupEhp4wMdxQ.crl (hash: qMSdNf+6aNHY12V1A2bnbd03mzXBODKxe+mOZ8VHubg=)
6: gnfK8SBpVOdVbxYnE0YvG_aCqwQ.roa (hash: 4HCQGxp9LRlzVGgeY9uvcPRB+giBsSJBc0o5g6+TINI=)
7: nlpW1LdUG8ccgcMsu_bYGBcmxBE.roa (hash: WjkJjvp8/U7WObhL1QFmDulfOKAgaqrKAeSX8GWbEKY=)
8: wtWJEYRFSG9Qv3ctSlt-PvC9YxU.roa (hash: zMI/aBSI0MnE5srRM6wJIzfTVWrBiFahbqJC56lWnfg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/648c75-2be8-4bfd-a1b1-cb8b3a094209/1/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/648c75-2be8-4bfd-a1b1-cb8b3a094209/1/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:af:13:fe:a0:dc:51:2c:cf:2d:d7:28:0f:cb:51:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ecf53007c79cc5e2f2d7356ba9121a78c0c7714
Validity
Not Before: Apr 19 03:00:53 2026 GMT
Not After : Apr 20 03:00:53 2026 GMT
Subject: CN=852b0a3c2dc36d13d0e70e1c8989b267d4863f56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:a9:3d:81:11:e4:aa:92:32:7c:9d:18:f4:33:
ed:c2:0c:a8:a4:39:83:b8:ad:d3:3a:1e:b7:e3:40:
29:09:fc:6d:8b:09:da:1f:a1:f1:e4:6c:da:17:67:
c7:89:0b:78:21:c2:2f:0b:56:79:6f:9a:1a:f3:ab:
dc:55:64:cc:52:2f:36:b7:a9:7f:84:48:1c:17:08:
15:3e:bb:1e:b3:0f:cd:46:56:ac:6a:be:da:bd:cb:
8e:cf:84:18:48:e8:62:a1:26:66:6b:dc:42:91:18:
69:d7:bd:89:c9:ff:15:15:c0:d8:fc:75:73:b8:ed:
e5:11:97:5a:05:58:f8:1d:f1:d0:d9:79:16:c7:7f:
9d:03:8e:be:5e:1c:34:b4:1e:72:0f:22:a0:20:ff:
b0:e6:dd:76:f9:58:34:f7:93:8b:6d:6f:83:d3:8f:
b8:31:50:4f:fc:ea:a6:35:4b:47:71:ab:4e:0d:1d:
22:35:5d:9c:63:41:c8:22:f1:bc:da:7d:b0:e9:9d:
2e:7b:5a:cc:4f:54:8f:fb:99:18:8a:bd:a9:56:6c:
2d:f6:07:f9:55:1e:1e:bb:e1:3e:e9:cf:ef:41:f6:
6f:8d:2b:7f:ec:c8:19:d7:ac:97:66:31:38:65:1a:
2f:85:39:76:67:19:6d:8c:0c:2c:fb:a8:db:3e:ce:
c0:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:2B:0A:3C:2D:C3:6D:13:D0:E7:0E:1C:89:89:B2:67:D4:86:3F:56
X509v3 Authority Key Identifier:
keyid:4E:CF:53:00:7C:79:CC:5E:2F:2D:73:56:BA:91:21:A7:8C:0C:77:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/648c75-2be8-4bfd-a1b1-cb8b3a094209/1/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/648c75-2be8-4bfd-a1b1-cb8b3a094209/1/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:3a:22:33:3f:8d:ef:71:05:5a:42:dd:dd:79:bf:f1:fa:88:
5f:3a:2c:59:35:b6:c0:6f:59:a7:22:44:c1:6f:ec:b4:5d:57:
b4:d7:61:e3:f5:dc:87:a8:57:f3:88:da:8b:46:1e:8c:9e:24:
b4:ba:07:68:fa:26:31:d4:83:4d:65:00:d4:d5:85:75:6b:d2:
14:af:ea:73:b2:d6:65:69:4a:81:c7:1e:eb:53:21:13:59:3a:
eb:67:0d:a2:0c:f3:4f:f3:23:16:85:ca:11:f8:b6:bb:a5:ea:
f4:3d:91:cf:7a:41:b4:6c:a0:e2:e6:18:3f:9d:dd:b1:eb:53:
73:62:82:5a:0e:b5:40:0c:08:6a:f3:6f:62:0f:17:3c:eb:ca:
88:af:98:60:b9:db:95:eb:33:f8:35:68:ee:48:8a:c5:aa:c9:
e7:a8:ff:e0:d1:64:a6:9f:b9:81:50:1e:ec:0b:4c:4a:06:fe:
da:77:ab:e1:24:96:c2:32:ba:01:ff:9a:e0:26:32:6e:0d:65:
87:48:4e:97:ad:86:ce:bb:c8:93:74:25:47:d9:7a:64:ed:86:
6c:c9:20:7f:30:ff:b9:d6:c5:10:c3:f2:ce:3b:aa:9b:f2:99:
87:fe:85:ac:17:68:22:90:82:c1:63:bf:ab:51:a5:04:df:2d:
53:65:d4:e6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2jrxP+oNxRLM8t1ygPy1FnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRlY2Y1MzAwN2M3OWNjNWUyZjJkNzM1NmJhOTEyMWE3OGMw
Yzc3MTQwHhcNMjYwNDE5MDMwMDUzWhcNMjYwNDIwMDMwMDUzWjAzMTEwLwYDVQQD
Eyg4NTJiMGEzYzJkYzM2ZDEzZDBlNzBlMWM4OTg5YjI2N2Q0ODYzZjU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmak9gRHkqpIyfJ0Y9DPtwgyopDmD
uK3TOh6340ApCfxtiwnaH6Hx5GzaF2fHiQt4IcIvC1Z5b5oa86vcVWTMUi82t6l/
hEgcFwgVPrsesw/NRlasar7avcuOz4QYSOhioSZma9xCkRhp172Jyf8VFcDY/HVz
uO3lEZdaBVj4HfHQ2XkWx3+dA46+Xhw0tB5yDyKgIP+w5t12+Vg095OLbW+D04+4
MVBP/OqmNUtHcatODR0iNV2cY0HIIvG82n2w6Z0ue1rMT1SP+5kYir2pVmwt9gf5
VR4eu+E+6c/vQfZvjSt/7MgZ16yXZjE4ZRovhTl2ZxltjAws+6jbPs7AVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIUrCjwtw20T0OcOHImJsmfUhj9WMB8GA1UdIwQY
MBaAFE7PUwB8ecxeLy1zVrqRIaeMDHcUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHM5VEFIeDV6RjR2TFhOV3VwRWhwNHdNZHhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi82NDhjNzUtMmJlOC00YmZkLWExYjEt
Y2I4YjNhMDk0MjA5LzEvVHM5VEFIeDV6RjR2TFhOV3VwRWhwNHdNZHhRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi82NDhjNzUtMmJlOC00YmZkLWExYjEtY2I4YjNhMDk0MjA5
LzEvVHM5VEFIeDV6RjR2TFhOV3VwRWhwNHdNZHhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAazoiMz+N
73EFWkLd3Xm/8fqIXzosWTW2wG9ZpyJEwW/stF1XtNdh4/Xch6hX84jai0YejJ4k
tLoHaPomMdSDTWUA1NWFdWvSFK/qc7LWZWlKgcce61MhE1k662cNogzzT/MjFoXK
Efi2u6Xq9D2Rz3pBtGyg4uYYP53dsetTc2KCWg61QAwIavNvYg8XPOvKiK+YYLnb
lesz+DVo7kiKxarJ56j/4NFkpp+5gVAe7AtMSgb+2ner4SSWwjK6Af+a4CYybg1l
h0hOl62GzrvIk3QlR9l6ZO2GbMkgfzD/udbFEMPyzjuqm/KZh/6FrBdoIpCCwWO/
q1GlBN8tU2XU5g==
-----END CERTIFICATE-----
Generated at Sun Apr 19 11:23:06 2026 by rpki-client