Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/e2510d-e573-45d3-9d20-754b60c5b568/1/tTuhjVzrjnlMgTnOAqeRuFAYJe8.mft
File: tTuhjVzrjnlMgTnOAqeRuFAYJe8.mft (raw, json)
Hash identifier: y4RW1blz5PJUwUn/5lvG8xhx1tRYTDjqY+MGmleJoV4=
Subject key identifier: 31:B1:73:AA:23:2E:61:A1:51:AC:0E:AE:5E:A1:C7:25:E4:96:2F:C7
Authority key identifier: B5:3B:A1:8D:5C:EB:8E:79:4C:81:39:CE:02:A7:91:B8:50:18:25:EF
Certificate issuer: /CN=b53ba18d5ceb8e794c8139ce02a791b8501825ef
Certificate serial: 019CAA8FCD90FB0E4F48BFA1EEEBE37D0AF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tTuhjVzrjnlMgTnOAqeRuFAYJe8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/e2510d-e573-45d3-9d20-754b60c5b568/1/tTuhjVzrjnlMgTnOAqeRuFAYJe8.mft
Manifest number: 0F6D
Signing time: Sun 01 Mar 2026 18:01:16 +0000
Manifest this update: Sun 01 Mar 2026 18:01:16 +0000
Manifest next update: Mon 02 Mar 2026 18:01:16 +0000
Files and hashes: 1: aZwxnKfHqmWxJT5LCOQaGzxTYfE.roa (hash: nuhL9NfNeMCM3Rnpe5bSoUeqEl5NVyDAwtG7Usr9Q4g=)
2: eVN-GPa2ZCzhCPNX82lsSDt1ilo.roa (hash: tjSDAKdgNEbCogLtkUwbJCmlZIdpfckJuru8vN6J8S8=)
3: tTuhjVzrjnlMgTnOAqeRuFAYJe8.crl (hash: 2ul6lG+zKFirxWh82GudZRwJCfWAgwyzZYF/YjobJn4=)
4: xxDHsd77vMM083YLrcc2xqEqOfo.roa (hash: w1yEB9PewQvSTE0IyZqBOAJcsbRhDlUVRG4rFXPAJVc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/e2510d-e573-45d3-9d20-754b60c5b568/1/tTuhjVzrjnlMgTnOAqeRuFAYJe8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/e2510d-e573-45d3-9d20-754b60c5b568/1/tTuhjVzrjnlMgTnOAqeRuFAYJe8.mft
rsync://rpki.ripe.net/repository/DEFAULT/tTuhjVzrjnlMgTnOAqeRuFAYJe8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:8f:cd:90:fb:0e:4f:48:bf:a1:ee:eb:e3:7d:0a:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b53ba18d5ceb8e794c8139ce02a791b8501825ef
Validity
Not Before: Mar 1 18:01:16 2026 GMT
Not After : Mar 2 18:01:16 2026 GMT
Subject: CN=31b173aa232e61a151ac0eae5ea1c725e4962fc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:e0:9f:b0:79:91:0f:39:9f:a9:00:ef:38:02:
3b:6a:48:f8:12:60:e1:0d:14:e4:3a:b7:71:df:21:
f7:64:49:a1:92:3b:77:10:32:1f:3f:7d:d6:1d:30:
6e:ff:8f:3a:5a:b3:a6:b9:98:e9:4b:be:7c:11:e3:
79:8d:bd:d9:c6:27:13:ce:8c:0c:ca:1a:69:af:34:
bd:cc:40:c8:15:8d:4c:a0:c0:93:52:d5:aa:17:42:
d0:e6:dc:f0:ee:8d:9a:56:8b:71:e6:6a:14:18:a7:
89:36:55:b5:c3:52:41:b3:ce:77:1d:fb:2d:cc:ee:
25:1e:be:f7:54:c7:b8:c5:5b:68:0a:ce:d0:0e:f9:
58:30:43:dc:be:1e:99:65:10:d2:2a:32:52:c6:5e:
7f:9e:e0:02:4d:ac:cb:08:1b:f0:f4:a5:ce:5a:75:
ed:fe:2a:a6:52:17:55:db:bc:4e:91:73:25:9b:e5:
81:33:3b:6f:74:0a:ae:bd:f5:f3:99:e9:9a:c6:e6:
a6:37:77:5b:bf:57:a5:7a:d8:fb:81:b9:c7:fc:5d:
fa:2b:a6:4e:a7:2d:c5:39:62:15:50:ee:33:6c:26:
24:09:4b:6b:71:c6:bf:d2:33:3b:fd:db:1a:f5:34:
5c:c7:b7:d5:84:c3:6f:b0:85:b4:70:07:e2:27:71:
83:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:B1:73:AA:23:2E:61:A1:51:AC:0E:AE:5E:A1:C7:25:E4:96:2F:C7
X509v3 Authority Key Identifier:
keyid:B5:3B:A1:8D:5C:EB:8E:79:4C:81:39:CE:02:A7:91:B8:50:18:25:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tTuhjVzrjnlMgTnOAqeRuFAYJe8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/e2510d-e573-45d3-9d20-754b60c5b568/1/tTuhjVzrjnlMgTnOAqeRuFAYJe8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/e2510d-e573-45d3-9d20-754b60c5b568/1/tTuhjVzrjnlMgTnOAqeRuFAYJe8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:0e:7a:ab:3a:33:fe:e7:56:c4:2e:10:85:03:eb:0b:5b:87:
87:0a:1d:d0:d1:57:90:d4:52:52:27:fd:d1:63:1c:09:e0:b2:
4d:a3:36:7e:08:e0:a5:bb:11:5b:84:32:01:92:d8:f2:11:5a:
d5:0c:27:ff:30:ff:7c:9d:f4:13:54:e4:28:b8:98:c1:45:dd:
7c:26:f2:06:1e:a8:e5:d5:dc:c3:bd:7a:9e:bd:3d:ef:6e:b8:
97:07:ff:20:71:f0:88:bc:1e:77:ac:76:d9:ac:ff:ac:03:80:
1d:8d:da:32:49:77:40:20:53:65:9c:bd:e5:47:8d:b0:29:66:
c5:74:36:5d:99:ef:ff:b0:fa:d0:13:0c:13:30:8e:c1:4e:e2:
43:8a:e9:bf:84:d7:ed:00:82:57:92:d9:23:f8:79:e5:e3:9b:
1f:3f:f4:d0:60:33:54:76:60:70:ab:75:c4:ae:dc:82:1f:4b:
a3:fe:0b:0f:c8:07:c9:47:50:67:77:f8:bc:9a:48:ef:36:0a:
23:ee:22:6a:fd:26:f3:10:94:8f:7b:de:f7:8b:a1:76:11:3a:
9f:eb:c0:7d:b2:e0:d9:5d:df:f9:e9:7d:d7:b7:e5:ed:d5:d3:
fa:cc:1d:da:97:57:9f:0e:d0:91:90:6e:c0:81:c9:58:46:5c:
85:84:56:08
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqj82Q+w5PSL+h7uvjfQrzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1M2JhMThkNWNlYjhlNzk0YzgxMzljZTAyYTc5MWI4NTAx
ODI1ZWYwHhcNMjYwMzAxMTgwMTE2WhcNMjYwMzAyMTgwMTE2WjAzMTEwLwYDVQQD
EygzMWIxNzNhYTIzMmU2MWExNTFhYzBlYWU1ZWExYzcyNWU0OTYyZmM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArOCfsHmRDzmfqQDvOAI7akj4EmDh
DRTkOrdx3yH3ZEmhkjt3EDIfP33WHTBu/486WrOmuZjpS758EeN5jb3ZxicTzowM
yhpprzS9zEDIFY1MoMCTUtWqF0LQ5tzw7o2aVotx5moUGKeJNlW1w1JBs853Hfst
zO4lHr73VMe4xVtoCs7QDvlYMEPcvh6ZZRDSKjJSxl5/nuACTazLCBvw9KXOWnXt
/iqmUhdV27xOkXMlm+WBMztvdAquvfXzmemaxuamN3dbv1eletj7gbnH/F36K6ZO
py3FOWIVUO4zbCYkCUtrcca/0jM7/dsa9TRcx7fVhMNvsIW0cAfiJ3GDqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDGxc6ojLmGhUawOrl6hxyXkli/HMB8GA1UdIwQY
MBaAFLU7oY1c6455TIE5zgKnkbhQGCXvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFR1aGpWenJqbmxNZ1RuT0FxZVJ1RkFZSmU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy9lMjUxMGQtZTU3My00NWQzLTlkMjAt
NzU0YjYwYzViNTY4LzEvdFR1aGpWenJqbmxNZ1RuT0FxZVJ1RkFZSmU4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy9lMjUxMGQtZTU3My00NWQzLTlkMjAtNzU0YjYwYzViNTY4
LzEvdFR1aGpWenJqbmxNZ1RuT0FxZVJ1RkFZSmU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOw56qzoz
/udWxC4QhQPrC1uHhwod0NFXkNRSUif90WMcCeCyTaM2fgjgpbsRW4QyAZLY8hFa
1Qwn/zD/fJ30E1TkKLiYwUXdfCbyBh6o5dXcw716nr097264lwf/IHHwiLwed6x2
2az/rAOAHY3aMkl3QCBTZZy95UeNsClmxXQ2XZnv/7D60BMMEzCOwU7iQ4rpv4TX
7QCCV5LZI/h55eObHz/00GAzVHZgcKt1xK7cgh9Lo/4LD8gHyUdQZ3f4vJpI7zYK
I+4iav0m8xCUj3ve94uhdhE6n+vAfbLg2V3f+el917fl7dXT+swd2pdXnw7QkZBu
wIHJWEZchYRWCA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:00:14 2026 by rpki-client