
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/3e8e42-dffb-435d-bd2b-eb8b1ecc4741/1/TdL8TSP9nCQgxASRhxgI7FQkpnA.mft
File: TdL8TSP9nCQgxASRhxgI7FQkpnA.mft (raw, json)
Hash identifier: osG1ONItlx0vM0Zuu/9GmmCftM40FcKedkB5u76c5IM=
Subject key identifier: 6D:98:7E:DD:D9:4C:78:6D:E3:45:3D:F8:9C:12:FF:24:DD:06:E5:7A
Authority key identifier: 4D:D2:FC:4D:23:FD:9C:24:20:C4:04:91:87:18:08:EC:54:24:A6:70
Certificate issuer: /CN=4dd2fc4d23fd9c2420c40491871808ec5424a670
Certificate serial: 019CABA1D8A0FBE96E72C28303032A4D05BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TdL8TSP9nCQgxASRhxgI7FQkpnA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/3e8e42-dffb-435d-bd2b-eb8b1ecc4741/1/TdL8TSP9nCQgxASRhxgI7FQkpnA.mft
Manifest number: 184A
Signing time: Sun 01 Mar 2026 23:00:36 +0000
Manifest this update: Sun 01 Mar 2026 23:00:36 +0000
Manifest next update: Mon 02 Mar 2026 23:00:36 +0000
Files and hashes: 1: ECKViBV7wRLHTav2jF-AfG9JxzQ.roa (hash: ObO6UXIOSmhNDyTyxoQq4HbBjcMNfcy2i3MVlt06RT0=)
2: TdL8TSP9nCQgxASRhxgI7FQkpnA.crl (hash: fK/+Tt8rAoGPPBlCgFa1j61baFg0+MHXSKtoA7MFD8k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/3e8e42-dffb-435d-bd2b-eb8b1ecc4741/1/TdL8TSP9nCQgxASRhxgI7FQkpnA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/3e8e42-dffb-435d-bd2b-eb8b1ecc4741/1/TdL8TSP9nCQgxASRhxgI7FQkpnA.mft
rsync://rpki.ripe.net/repository/DEFAULT/TdL8TSP9nCQgxASRhxgI7FQkpnA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a1:d8:a0:fb:e9:6e:72:c2:83:03:03:2a:4d:05:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4dd2fc4d23fd9c2420c40491871808ec5424a670
Validity
Not Before: Mar 1 23:00:36 2026 GMT
Not After : Mar 2 23:00:36 2026 GMT
Subject: CN=6d987eddd94c786de3453df89c12ff24dd06e57a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:02:dd:35:fc:ac:1d:a9:f7:38:3e:d3:e0:68:
5b:83:cf:d4:3c:a9:fe:81:59:d9:a2:af:52:9e:d9:
21:2f:51:5e:78:78:9a:67:02:8f:ed:b0:b2:c2:d3:
40:db:44:2c:60:9f:8d:1a:81:87:32:c1:63:48:e4:
bb:45:82:fd:34:b3:93:04:db:dc:4c:95:e8:94:7e:
6d:06:8a:94:39:28:d6:ba:34:9e:54:62:d9:f2:40:
a4:4b:30:96:c6:b5:38:4c:29:a7:c4:41:47:0d:c4:
b1:da:1e:c7:76:67:7e:b4:6c:ed:a2:b3:dd:8d:fb:
5d:51:ae:bd:41:79:7c:6b:8e:22:bd:99:40:78:53:
c1:3a:21:17:9a:57:af:0c:44:91:d3:a8:be:94:12:
fd:45:77:0d:5c:0e:6b:0c:9e:e8:f6:d8:57:b7:3c:
9b:2a:0d:00:de:e9:51:bd:b6:06:c5:87:ad:a0:5a:
37:5d:bc:8c:a7:6a:14:a0:cd:5d:fb:21:6b:33:a7:
2e:af:b6:dd:c7:df:7e:c5:06:10:e9:13:e0:4f:e4:
af:82:c2:55:7e:7d:ab:e7:c1:4e:f7:49:75:0e:1b:
f5:51:99:10:31:57:94:32:28:5f:90:1b:c3:b5:0c:
67:cd:ff:d1:58:19:b6:6c:34:60:7e:70:ff:83:d1:
24:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:98:7E:DD:D9:4C:78:6D:E3:45:3D:F8:9C:12:FF:24:DD:06:E5:7A
X509v3 Authority Key Identifier:
keyid:4D:D2:FC:4D:23:FD:9C:24:20:C4:04:91:87:18:08:EC:54:24:A6:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TdL8TSP9nCQgxASRhxgI7FQkpnA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/3e8e42-dffb-435d-bd2b-eb8b1ecc4741/1/TdL8TSP9nCQgxASRhxgI7FQkpnA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/3e8e42-dffb-435d-bd2b-eb8b1ecc4741/1/TdL8TSP9nCQgxASRhxgI7FQkpnA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:f1:91:2a:38:5d:b4:c6:e5:73:cb:3f:44:2b:93:6c:fe:09:
8e:0f:bc:2c:fb:4c:34:88:c5:59:cf:87:0d:d1:e7:f5:b2:32:
74:77:c1:f9:bb:96:54:22:56:c9:8b:cf:89:69:43:f9:e7:f1:
a3:01:69:e8:59:4b:28:7b:05:72:70:6b:9a:b7:cd:04:64:16:
ed:0e:ba:36:45:5d:df:75:a4:6b:75:af:f4:ef:20:f9:66:e0:
9f:7b:95:f6:50:ad:9e:da:22:89:38:2d:50:aa:25:8e:fd:e5:
65:aa:6b:37:7b:18:bd:8d:e1:13:af:1e:82:0e:68:40:7c:2a:
20:88:1e:5e:73:d0:15:df:1a:fd:38:7a:c6:7e:33:f1:45:69:
87:b7:15:ac:09:4f:37:97:63:c4:93:b5:9a:48:36:c9:d1:50:
6b:7f:3a:5a:0c:86:58:e6:68:a9:4e:fc:31:78:a6:b1:c2:e8:
97:58:0f:4e:20:4d:9a:21:97:9f:a2:04:5b:0d:8c:85:22:a5:
a0:32:2d:4d:c8:bc:ce:57:40:45:f1:cc:91:e7:b7:dd:9b:f7:
f4:4a:2e:ff:ba:6a:34:f4:e2:59:6b:b6:2d:ea:2f:eb:d6:96:
cd:9e:35:d3:f4:0c:a3:f6:43:20:0d:ac:24:72:af:db:c8:f3:
b4:d2:16:3f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyrodig++lucsKDAwMqTQW9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRkZDJmYzRkMjNmZDljMjQyMGM0MDQ5MTg3MTgwOGVjNTQy
NGE2NzAwHhcNMjYwMzAxMjMwMDM2WhcNMjYwMzAyMjMwMDM2WjAzMTEwLwYDVQQD
Eyg2ZDk4N2VkZGQ5NGM3ODZkZTM0NTNkZjg5YzEyZmYyNGRkMDZlNTdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuQLdNfysHan3OD7T4Ghbg8/UPKn+
gVnZoq9SntkhL1FeeHiaZwKP7bCywtNA20QsYJ+NGoGHMsFjSOS7RYL9NLOTBNvc
TJXolH5tBoqUOSjWujSeVGLZ8kCkSzCWxrU4TCmnxEFHDcSx2h7Hdmd+tGztorPd
jftdUa69QXl8a44ivZlAeFPBOiEXmlevDESR06i+lBL9RXcNXA5rDJ7o9thXtzyb
Kg0A3ulRvbYGxYetoFo3XbyMp2oUoM1d+yFrM6cur7bdx99+xQYQ6RPgT+SvgsJV
fn2r58FO90l1Dhv1UZkQMVeUMihfkBvDtQxnzf/RWBm2bDRgfnD/g9EkEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG2Yft3ZTHht40U9+JwS/yTdBuV6MB8GA1UdIwQY
MBaAFE3S/E0j/ZwkIMQEkYcYCOxUJKZwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVGRMOFRTUDluQ1FneEFTUmh4Z0k3RlFrcG5BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy8zZThlNDItZGZmYi00MzVkLWJkMmIt
ZWI4YjFlY2M0NzQxLzEvVGRMOFRTUDluQ1FneEFTUmh4Z0k3RlFrcG5BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNy8zZThlNDItZGZmYi00MzVkLWJkMmItZWI4YjFlY2M0NzQx
LzEvVGRMOFRTUDluQ1FneEFTUmh4Z0k3RlFrcG5BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGfGRKjhd
tMblc8s/RCuTbP4Jjg+8LPtMNIjFWc+HDdHn9bIydHfB+buWVCJWyYvPiWlD+efx
owFp6FlLKHsFcnBrmrfNBGQW7Q66NkVd33Wka3Wv9O8g+Wbgn3uV9lCtntoiiTgt
UKoljv3lZaprN3sYvY3hE68egg5oQHwqIIgeXnPQFd8a/Th6xn4z8UVph7cVrAlP
N5djxJO1mkg2ydFQa386WgyGWOZoqU78MXimscLol1gPTiBNmiGXn6IEWw2MhSKl
oDItTci8zldARfHMkee33Zv39Eou/7pqNPTiWWu2Leov69aWzZ410/QMo/ZDIA2s
JHKv28jztNIWPw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 03:25:20 2026 by rpki-client