Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/ec5584-6618-4b12-a11c-3055cb729bcf/1/TDuIzbE_PrEqm-VKsZuqkFWbOWo.mft
File: TDuIzbE_PrEqm-VKsZuqkFWbOWo.mft (raw, json)
Hash identifier: H3Fm1N85QdlVRW14rLk5QHrDuN+FwKo2MuVdEbn7T5A=
Subject key identifier: 1E:20:04:12:03:CA:A5:C5:92:8A:5F:2B:74:08:8E:9A:B2:E6:20:FB
Authority key identifier: 4C:3B:88:CD:B1:3F:3E:B1:2A:9B:E5:4A:B1:9B:AA:90:55:9B:39:6A
Certificate issuer: /CN=4c3b88cdb13f3eb12a9be54ab19baa90559b396a
Certificate serial: 019CAD225468DF17DA67A3CB4F5D5BD3A82B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TDuIzbE_PrEqm-VKsZuqkFWbOWo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/ec5584-6618-4b12-a11c-3055cb729bcf/1/TDuIzbE_PrEqm-VKsZuqkFWbOWo.mft
Manifest number: 09E1
Signing time: Mon 02 Mar 2026 06:00:34 +0000
Manifest this update: Mon 02 Mar 2026 06:00:34 +0000
Manifest next update: Tue 03 Mar 2026 06:00:34 +0000
Files and hashes: 1: ABn8P8ur6kX7bClq82flMqvErqM.asa (hash: RFlfK21yrghS19JPEbu5rJ0FdRlXS6JFOq5iELrrCi0=)
2: NSzxR15lxLwAdc7Ga165-6mKacc.roa (hash: 3N9qBcothKO0rosVFxeggNkLbRm7QTKDO+BXyY2NEkk=)
3: TDuIzbE_PrEqm-VKsZuqkFWbOWo.crl (hash: 33CM5DK9Nsa78JEjY0CXtPuW/M+AXGoRYuNUaOZ9xvg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/ec5584-6618-4b12-a11c-3055cb729bcf/1/TDuIzbE_PrEqm-VKsZuqkFWbOWo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/ec5584-6618-4b12-a11c-3055cb729bcf/1/TDuIzbE_PrEqm-VKsZuqkFWbOWo.mft
rsync://rpki.ripe.net/repository/DEFAULT/TDuIzbE_PrEqm-VKsZuqkFWbOWo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 06:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:22:54:68:df:17:da:67:a3:cb:4f:5d:5b:d3:a8:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c3b88cdb13f3eb12a9be54ab19baa90559b396a
Validity
Not Before: Mar 2 06:00:34 2026 GMT
Not After : Mar 3 06:00:34 2026 GMT
Subject: CN=1e20041203caa5c5928a5f2b74088e9ab2e620fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:fe:61:e5:74:9f:76:82:9d:6b:64:77:9f:f9:
97:9d:3d:2e:72:67:40:a6:79:24:12:89:38:32:d5:
21:be:40:32:00:bc:38:de:55:44:28:79:ff:89:ae:
6f:7b:d6:1a:7d:64:32:21:f6:d3:39:4b:6b:27:ba:
d0:60:bd:74:5e:bf:81:81:1e:e2:a8:90:9a:df:39:
66:45:6a:93:c9:8a:97:5a:82:73:4b:fe:a8:a4:37:
43:28:89:01:91:ee:01:6c:4e:f7:9f:50:2a:a5:45:
f7:94:d4:3e:97:b7:af:48:3d:81:ba:08:2e:ea:f8:
e4:80:70:db:83:66:31:3d:c1:b2:0b:8c:5d:f7:94:
75:a0:9b:dd:92:90:ec:76:a6:90:c5:63:da:35:8e:
9f:7f:b8:93:5d:65:fe:f5:a2:4b:cb:59:d2:5b:7a:
cb:8c:45:8f:02:92:69:c0:b8:7f:4e:76:af:a9:36:
b5:cf:63:f9:06:1f:8b:61:71:de:ce:1b:45:10:ee:
22:90:f2:90:11:c4:9c:4b:11:b8:94:25:ed:c4:32:
2a:d5:71:d2:0a:ef:a1:98:4c:d9:60:23:33:fe:b3:
f5:0a:29:e4:b1:9f:ae:8a:44:27:d7:88:83:e1:40:
3c:47:a4:f3:3f:49:9f:39:91:61:5d:88:32:4e:b8:
14:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:20:04:12:03:CA:A5:C5:92:8A:5F:2B:74:08:8E:9A:B2:E6:20:FB
X509v3 Authority Key Identifier:
keyid:4C:3B:88:CD:B1:3F:3E:B1:2A:9B:E5:4A:B1:9B:AA:90:55:9B:39:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TDuIzbE_PrEqm-VKsZuqkFWbOWo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/ec5584-6618-4b12-a11c-3055cb729bcf/1/TDuIzbE_PrEqm-VKsZuqkFWbOWo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/ec5584-6618-4b12-a11c-3055cb729bcf/1/TDuIzbE_PrEqm-VKsZuqkFWbOWo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:25:45:c1:59:e1:49:f2:50:6d:88:cb:a5:be:cf:ff:09:fc:
89:56:7c:83:18:bb:42:be:06:57:26:c6:43:df:98:e1:54:46:
d7:5c:b0:82:e5:d3:ae:a0:8f:d7:bd:53:3d:32:93:44:04:e0:
a9:b8:70:df:15:cc:44:1f:24:d1:94:15:87:cb:7b:19:d4:48:
ef:b8:39:1c:4a:76:dd:35:e8:ae:74:20:e7:34:65:c9:96:27:
06:08:7a:78:49:da:03:6a:1a:c2:66:f4:cd:f1:1b:72:84:cd:
ec:34:f8:86:10:8e:17:fb:0b:58:69:8c:bd:27:e4:e0:70:88:
6f:15:2e:1c:4f:98:38:5d:6c:ae:28:15:d7:05:2c:37:52:dc:
29:9e:68:bd:89:09:de:dd:72:51:4a:c7:a8:b5:0d:2b:9b:59:
57:4c:8b:2b:c4:9e:01:35:35:a5:81:37:9d:62:4f:f6:29:79:
48:7b:84:af:91:c0:a3:23:7e:e5:8c:2c:4d:c3:fb:13:3c:53:
6a:68:3c:0a:49:43:ae:30:61:c0:61:29:4a:56:7e:d6:ca:bf:
09:4c:e5:a5:0b:ed:28:57:4f:40:cf:e6:ad:6e:55:d5:a7:67:
dd:e6:65:0b:69:95:14:3b:cb:b5:f7:01:f9:bf:d4:e5:e8:20:
30:65:c7:69
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZytIlRo3xfaZ6PLT11b06grMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjM2I4OGNkYjEzZjNlYjEyYTliZTU0YWIxOWJhYTkwNTU5
YjM5NmEwHhcNMjYwMzAyMDYwMDM0WhcNMjYwMzAzMDYwMDM0WjAzMTEwLwYDVQQD
EygxZTIwMDQxMjAzY2FhNWM1OTI4YTVmMmI3NDA4OGU5YWIyZTYyMGZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAov5h5XSfdoKda2R3n/mXnT0ucmdA
pnkkEok4MtUhvkAyALw43lVEKHn/ia5ve9YafWQyIfbTOUtrJ7rQYL10Xr+BgR7i
qJCa3zlmRWqTyYqXWoJzS/6opDdDKIkBke4BbE73n1AqpUX3lNQ+l7evSD2Buggu
6vjkgHDbg2YxPcGyC4xd95R1oJvdkpDsdqaQxWPaNY6ff7iTXWX+9aJLy1nSW3rL
jEWPApJpwLh/TnavqTa1z2P5Bh+LYXHezhtFEO4ikPKQEcScSxG4lCXtxDIq1XHS
Cu+hmEzZYCMz/rP1CinksZ+uikQn14iD4UA8R6TzP0mfOZFhXYgyTrgU7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB4gBBIDyqXFkopfK3QIjpqy5iD7MB8GA1UdIwQY
MBaAFEw7iM2xPz6xKpvlSrGbqpBVmzlqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVER1SXpiRV9QckVxbS1WS3NadXFrRldiT1dvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy9lYzU1ODQtNjYxOC00YjEyLWExMWMt
MzA1NWNiNzI5YmNmLzEvVER1SXpiRV9QckVxbS1WS3NadXFrRldiT1dvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy9lYzU1ODQtNjYxOC00YjEyLWExMWMtMzA1NWNiNzI5YmNm
LzEvVER1SXpiRV9QckVxbS1WS3NadXFrRldiT1dvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkSVFwVnh
SfJQbYjLpb7P/wn8iVZ8gxi7Qr4GVybGQ9+Y4VRG11ywguXTrqCP171TPTKTRATg
qbhw3xXMRB8k0ZQVh8t7GdRI77g5HEp23TXornQg5zRlyZYnBgh6eEnaA2oawmb0
zfEbcoTN7DT4hhCOF/sLWGmMvSfk4HCIbxUuHE+YOF1srigV1wUsN1LcKZ5ovYkJ
3t1yUUrHqLUNK5tZV0yLK8SeATU1pYE3nWJP9il5SHuEr5HAoyN+5YwsTcP7EzxT
amg8CklDrjBhwGEpSlZ+1sq/CUzlpQvtKFdPQM/mrW5V1adn3eZlC2mVFDvLtfcB
+b/U5eggMGXHaQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 15:01:09 2026 by rpki-client