
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2c/c3a85d-9d0b-4562-9238-46ee0cd7fcba/1/TsoQXOSvbCHNQp6ZLQbqfQbYpW0.mft
File: TsoQXOSvbCHNQp6ZLQbqfQbYpW0.mft (raw, json)
Hash identifier: VPs1loOMzymfldVUWLTyDYwDHflzfNSZHrca9ZU7QuI=
Subject key identifier: 2F:4B:E4:B0:3A:2A:25:A1:7A:ED:F5:08:C5:E8:A2:CB:42:9C:D7:83
Authority key identifier: 4E:CA:10:5C:E4:AF:6C:21:CD:42:9E:99:2D:06:EA:7D:06:D8:A5:6D
Certificate issuer: /CN=4eca105ce4af6c21cd429e992d06ea7d06d8a56d
Certificate serial: 01A180ABA0290D109B4F4790BC7F88F185BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TsoQXOSvbCHNQp6ZLQbqfQbYpW0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/c3a85d-9d0b-4562-9238-46ee0cd7fcba/1/TsoQXOSvbCHNQp6ZLQbqfQbYpW0.mft
Manifest number: 1ACC
Signing time: Wed 28 Oct 2026 04:01:33 +0000
Manifest this update: Wed 28 Oct 2026 04:01:33 +0000
Manifest next update: Thu 29 Oct 2026 04:01:33 +0000
Files and hashes: 1: AwY5mgjpthmtObHXqwAVAnajhhs.roa (hash: Ynq5lonnqADLu0ss1thtGFYZaU4FINs+79TFKUmEVMc=)
2: FEE0W1FvUWZY1yNTAUusq7fzBQA.roa (hash: Hd0jbgNDlWlFVrZYfQAqVLAGgeJbu+X/gxILT2NBZwY=)
3: HBpn81d4cG4_UILVsdO8exzlDsY.roa (hash: kRgmgXZK5yKUe+saBJuegm6bkvNmijxbzes8bqH8BJE=)
4: Kpj-186fjuAYRRYnilKKfHVGN8E.roa (hash: W4eIu6BlkL603t8W8JuwGE33q4DgMOfHpuuHjrT/r2s=)
5: NueqQvkP6OwbYq3KeGusJiI5nB4.roa (hash: Iwo1uDTct62657OX8teLFspmVyOSx/FLeOTjd7KJmFk=)
6: TsoQXOSvbCHNQp6ZLQbqfQbYpW0.crl (hash: A0mAOJtK7ZzZfVVSoYFiqA3NEobH5LLbjPssCbN1DVo=)
7: XhbfkmgppgGaa0jwxEEK1QpmG_o.roa (hash: RblW9p63Q8/3oZMyKn6Kq61NaEzW9XB/T1oxdZPwAPk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/c3a85d-9d0b-4562-9238-46ee0cd7fcba/1/TsoQXOSvbCHNQp6ZLQbqfQbYpW0.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/c3a85d-9d0b-4562-9238-46ee0cd7fcba/1/TsoQXOSvbCHNQp6ZLQbqfQbYpW0.mft
rsync://rpki.ripe.net/repository/DEFAULT/TsoQXOSvbCHNQp6ZLQbqfQbYpW0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 04:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:80:ab:a0:29:0d:10:9b:4f:47:90:bc:7f:88:f1:85:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4eca105ce4af6c21cd429e992d06ea7d06d8a56d
Validity
Not Before: Oct 28 04:01:33 2026 GMT
Not After : Oct 29 04:01:33 2026 GMT
Subject: CN=2f4be4b03a2a25a17aedf508c5e8a2cb429cd783
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:35:71:7f:99:a0:aa:5b:42:59:ea:14:47:93:
a4:52:e1:14:b3:13:04:7a:97:47:2d:88:21:5e:be:
80:40:0a:e1:92:20:ad:94:d5:19:d5:63:57:ce:7e:
2b:38:95:8d:3b:f1:21:d9:64:85:be:d2:b2:99:d9:
87:e5:04:9a:77:4b:08:95:cc:1d:db:83:9b:d7:55:
89:cb:65:13:c6:62:a2:43:ac:e5:68:1f:eb:82:bb:
77:37:2c:61:15:7d:5f:eb:20:4d:ca:42:9e:dc:66:
dc:5a:84:46:58:b4:dc:fe:f4:9a:e0:e9:ff:05:29:
ed:8e:7c:38:8a:3f:d6:b5:50:39:ab:b1:58:10:df:
81:7e:e9:45:b5:07:3a:be:39:d7:b7:41:7f:ec:5f:
25:60:b5:07:07:85:70:e1:90:79:36:44:c8:e2:44:
09:98:a8:66:19:c1:a8:e6:81:b3:1a:f8:6a:e8:6f:
09:7e:0e:b1:5b:4e:23:bf:8e:64:45:fa:5f:cb:f0:
ed:46:44:80:70:e0:5a:78:c1:da:32:e2:e2:81:3f:
f0:8f:f3:99:f0:38:0b:ca:4c:0e:99:31:0c:e3:74:
a8:68:6a:63:f9:f3:95:5c:1c:9e:38:dc:05:66:2a:
18:82:d3:71:84:c3:3f:c6:33:c4:a9:dd:22:92:14:
5a:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:4B:E4:B0:3A:2A:25:A1:7A:ED:F5:08:C5:E8:A2:CB:42:9C:D7:83
X509v3 Authority Key Identifier:
keyid:4E:CA:10:5C:E4:AF:6C:21:CD:42:9E:99:2D:06:EA:7D:06:D8:A5:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TsoQXOSvbCHNQp6ZLQbqfQbYpW0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/c3a85d-9d0b-4562-9238-46ee0cd7fcba/1/TsoQXOSvbCHNQp6ZLQbqfQbYpW0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/c3a85d-9d0b-4562-9238-46ee0cd7fcba/1/TsoQXOSvbCHNQp6ZLQbqfQbYpW0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cd:8d:56:f1:ac:6e:98:07:a9:15:ed:8f:34:a7:f5:c9:2c:90:
a1:c9:a4:18:bd:60:0d:79:37:68:9f:99:3e:88:51:8b:33:91:
20:6d:f4:97:e6:9c:16:4f:20:f2:72:2a:c6:5c:c1:fe:55:b7:
b9:59:f9:44:fd:d5:b6:58:d7:a6:f0:93:5e:67:22:87:28:80:
6b:f8:e0:ac:0f:e3:9f:e6:4b:1f:4e:bc:1a:25:76:5e:1a:7b:
20:64:b8:0a:a1:b3:c2:ec:5f:b1:ef:44:63:cb:91:79:9b:a3:
f6:7a:a3:56:b4:d7:a2:ee:f1:f6:d2:da:74:f3:11:14:95:3e:
bd:fe:9a:60:d1:b1:74:5b:69:98:72:80:63:46:4f:7f:ac:32:
7e:81:4b:ae:a7:47:fc:ac:38:e3:ae:98:58:3e:52:d0:ac:9c:
76:4a:03:3a:b7:f3:69:f1:68:59:cc:c5:03:13:e7:80:4a:9e:
f8:04:fe:de:4e:51:9d:72:3b:5f:db:fa:a2:93:54:17:c4:8c:
cf:41:bd:e0:43:da:23:fb:99:01:e1:cd:de:3f:6c:de:0d:20:
8d:ad:da:ce:58:ba:ec:20:98:12:8f:c3:57:af:ac:f4:a9:32:
ac:e9:2c:3c:57:76:cc:7c:6f:41:4f:c2:af:01:d5:9b:e3:cd:
4e:21:92:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 10:18:44 2026 by rpki-client