Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/ee29a6-691d-4b0c-ad63-94c8254bd3b7/1/TBsMQJaQgJV_zO4fuKP7S7OL9dw.mft
File: TBsMQJaQgJV_zO4fuKP7S7OL9dw.mft (raw, json)
Hash identifier: hI1XyBvUHjOQeArgRSI5S4vZ9NAXVH/2B5E1MnRj2jA=
Subject key identifier: 74:1D:59:0B:00:9B:14:91:EE:3D:F6:2C:9F:55:C5:27:9B:CF:3D:1A
Authority key identifier: 4C:1B:0C:40:96:90:80:95:7F:CC:EE:1F:B8:A3:FB:4B:B3:8B:F5:DC
Certificate issuer: /CN=4c1b0c40969080957fccee1fb8a3fb4bb38bf5dc
Certificate serial: 019FAD886069FEB23E43A498C5737BBAD989
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TBsMQJaQgJV_zO4fuKP7S7OL9dw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/ee29a6-691d-4b0c-ad63-94c8254bd3b7/1/TBsMQJaQgJV_zO4fuKP7S7OL9dw.mft
Manifest number: 16C3
Signing time: Wed 29 Jul 2026 11:00:23 +0000
Manifest this update: Wed 29 Jul 2026 11:00:23 +0000
Manifest next update: Thu 30 Jul 2026 11:00:23 +0000
Files and hashes: 1: B0kfMqpAGqXnYaMTrQLvbBjvxOk.roa (hash: YEV3wXNHcOYmzWyvVh84es9QxYCJzyckUbH9jX+YQQA=)
2: TBsMQJaQgJV_zO4fuKP7S7OL9dw.crl (hash: xq90VzLdLnycNQ35cjvoH4l7AtqZEw39r+AbJUohFeY=)
3: YA-H3bfE3r6ihPzDZtgenypbPbg.roa (hash: pUTlAIWeqA52q3MAJOIPYUZ8tJQ/eIlG+BT4v4cwsGM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/ee29a6-691d-4b0c-ad63-94c8254bd3b7/1/TBsMQJaQgJV_zO4fuKP7S7OL9dw.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/ee29a6-691d-4b0c-ad63-94c8254bd3b7/1/TBsMQJaQgJV_zO4fuKP7S7OL9dw.mft
rsync://rpki.ripe.net/repository/DEFAULT/TBsMQJaQgJV_zO4fuKP7S7OL9dw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 11:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ad:88:60:69:fe:b2:3e:43:a4:98:c5:73:7b:ba:d9:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c1b0c40969080957fccee1fb8a3fb4bb38bf5dc
Validity
Not Before: Jul 29 11:00:23 2026 GMT
Not After : Jul 30 11:00:23 2026 GMT
Subject: CN=741d590b009b1491ee3df62c9f55c5279bcf3d1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:b1:20:fe:16:c7:0e:18:0c:33:0c:1f:34:9b:
95:ab:2d:4a:e4:55:79:bf:e7:37:9b:fb:5c:5a:72:
3a:d6:b9:56:ba:8e:35:c7:58:fd:5d:d4:74:bf:05:
9c:e2:b3:5c:4f:e2:8a:e7:e4:9e:f2:19:33:5d:08:
21:5e:9c:03:c5:89:f9:57:50:88:4e:1c:b0:1a:94:
59:a5:77:11:9a:39:b2:36:27:83:0e:5a:79:76:29:
43:36:c6:49:c9:53:1e:11:e6:e1:ed:e5:a3:c1:50:
4a:1c:78:91:b5:1a:9b:48:67:02:8e:be:a8:93:b6:
c9:ae:92:92:f4:2c:cc:f8:21:e5:c7:ff:08:15:b4:
e2:dd:c9:9b:ef:ba:e8:53:fd:fc:73:5c:78:6f:f0:
67:45:0d:45:a6:c1:77:00:16:ff:bf:28:a8:ab:28:
22:b2:c1:55:de:7c:6e:6b:ad:b3:17:e6:70:ad:e4:
ab:67:67:f5:5f:e9:8d:48:dd:06:73:56:43:6a:0b:
ee:7a:15:69:95:3e:69:93:42:ee:1f:8b:43:93:83:
fb:9d:df:24:df:de:92:4f:ab:c0:22:30:d9:cf:b2:
aa:6f:cf:a9:f4:a6:f4:2e:8d:66:d1:e4:3d:93:42:
1b:21:1f:ad:cc:4c:65:8e:e6:48:07:6c:d3:34:94:
16:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:1D:59:0B:00:9B:14:91:EE:3D:F6:2C:9F:55:C5:27:9B:CF:3D:1A
X509v3 Authority Key Identifier:
keyid:4C:1B:0C:40:96:90:80:95:7F:CC:EE:1F:B8:A3:FB:4B:B3:8B:F5:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TBsMQJaQgJV_zO4fuKP7S7OL9dw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/ee29a6-691d-4b0c-ad63-94c8254bd3b7/1/TBsMQJaQgJV_zO4fuKP7S7OL9dw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/ee29a6-691d-4b0c-ad63-94c8254bd3b7/1/TBsMQJaQgJV_zO4fuKP7S7OL9dw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:ca:33:ce:ba:21:a0:76:c2:32:5f:78:e3:24:f9:69:99:6a:
a9:13:c8:76:06:fe:aa:87:dc:71:e4:1b:52:3e:3e:43:3d:a5:
4b:bb:74:2e:37:10:e1:95:0b:6f:53:95:16:0d:88:7f:54:36:
95:37:7d:49:5c:13:8d:d4:d5:40:dd:c9:fc:c0:5a:a9:30:24:
ae:39:1d:b9:94:5e:f1:3c:37:fb:ad:48:a2:0c:55:4c:3a:33:
b0:6b:c8:2a:cb:76:39:ee:ce:ce:c0:e8:28:8b:f5:8c:d5:6d:
5a:03:5f:66:aa:0e:8b:4b:bf:00:ac:18:4b:45:02:45:39:fd:
0d:86:f9:57:76:dc:32:52:9f:d8:1f:55:74:87:a5:82:88:ed:
c5:f4:6f:17:52:39:46:1f:f8:e5:d0:71:1e:d7:2b:c7:03:bf:
e1:52:60:ba:10:d8:e5:9e:cb:4c:ae:c4:d6:56:56:11:47:f5:
53:59:ea:f2:90:4a:ec:02:02:a2:48:1c:36:43:f0:26:3e:9a:
38:26:da:a2:05:58:7c:85:e4:f0:c2:1e:8a:2d:b0:d3:20:e0:
35:0c:d2:39:96:98:56:42:3d:40:1c:8c:4d:ae:55:0f:1d:13:
b9:d8:8f:0d:77:5f:31:ed:46:67:17:4b:c3:12:5d:6c:9b:be:
2e:74:38:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 21:07:58 2026 by rpki-client