Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cf/ee29a6-691d-4b0c-ad63-94c8254bd3b7/1/TBsMQJaQgJV_zO4fuKP7S7OL9dw.mft
File: TBsMQJaQgJV_zO4fuKP7S7OL9dw.mft (raw, json)
Hash identifier: lSB33r4BARiXggPGXzNGyzOVAvrLq/3mWv0pjc6F5mU=
Subject key identifier: C2:D8:CC:B2:28:6A:92:C3:6E:15:29:AA:1F:92:6D:5F:AC:AD:A2:CA
Authority key identifier: 4C:1B:0C:40:96:90:80:95:7F:CC:EE:1F:B8:A3:FB:4B:B3:8B:F5:DC
Certificate issuer: /CN=4c1b0c40969080957fccee1fb8a3fb4bb38bf5dc
Certificate serial: 01A18E667D2431A8102B0F850DD24BEE7379
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TBsMQJaQgJV_zO4fuKP7S7OL9dw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/ee29a6-691d-4b0c-ad63-94c8254bd3b7/1/TBsMQJaQgJV_zO4fuKP7S7OL9dw.mft
Manifest number: 17BC
Signing time: Fri 30 Oct 2026 20:00:43 +0000
Manifest this update: Fri 30 Oct 2026 20:00:43 +0000
Manifest next update: Sat 31 Oct 2026 20:00:43 +0000
Files and hashes: 1: B0kfMqpAGqXnYaMTrQLvbBjvxOk.roa (hash: YEV3wXNHcOYmzWyvVh84es9QxYCJzyckUbH9jX+YQQA=)
2: TBsMQJaQgJV_zO4fuKP7S7OL9dw.crl (hash: /90FUQXLpTVzgtUMHUr8eqeW8xiWl0B7E0KbK3xgQSY=)
3: YA-H3bfE3r6ihPzDZtgenypbPbg.roa (hash: pUTlAIWeqA52q3MAJOIPYUZ8tJQ/eIlG+BT4v4cwsGM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/ee29a6-691d-4b0c-ad63-94c8254bd3b7/1/TBsMQJaQgJV_zO4fuKP7S7OL9dw.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/ee29a6-691d-4b0c-ad63-94c8254bd3b7/1/TBsMQJaQgJV_zO4fuKP7S7OL9dw.mft
rsync://rpki.ripe.net/repository/DEFAULT/TBsMQJaQgJV_zO4fuKP7S7OL9dw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 31 Oct 2026 20:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:8e:66:7d:24:31:a8:10:2b:0f:85:0d:d2:4b:ee:73:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c1b0c40969080957fccee1fb8a3fb4bb38bf5dc
Validity
Not Before: Oct 30 20:00:43 2026 GMT
Not After : Oct 31 20:00:43 2026 GMT
Subject: CN=c2d8ccb2286a92c36e1529aa1f926d5facada2ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:18:00:59:e3:bb:c2:cf:4d:60:2e:af:6a:a0:
dc:0b:f8:94:a9:7b:aa:a1:d4:a7:77:a6:ab:db:03:
08:55:8f:8c:84:03:5d:67:b3:43:b3:5e:74:f9:92:
b9:b0:98:77:05:a2:a2:8d:d5:d8:6c:7a:d8:5e:d3:
1c:1e:b3:fc:f8:3c:40:a9:95:a2:45:ba:8c:92:e7:
b4:8c:df:77:61:89:e9:07:97:cf:ff:c6:35:54:e1:
91:6d:de:34:14:5e:a1:fa:a8:6a:23:89:71:d2:ef:
c1:22:e5:33:fa:52:41:b7:ec:29:8e:9e:56:e8:63:
db:f9:a9:ad:74:2c:d9:ec:2e:a9:ec:c6:43:e1:57:
a6:e7:16:00:66:b7:4b:ab:75:c2:eb:e5:87:c5:f4:
10:62:da:e5:4a:6d:14:82:f3:37:bb:5a:7a:7e:f4:
fa:7f:9d:b3:ca:85:ba:2f:73:3c:7c:62:3d:72:6a:
2b:4d:71:3c:76:e3:9f:71:36:3e:14:56:9f:40:6f:
d2:8c:78:fc:a4:95:72:fe:83:0b:b4:de:78:fb:dd:
6a:98:bf:88:79:a0:da:bb:f7:4f:81:5b:e8:80:7c:
75:31:11:00:9c:b4:36:7b:47:90:35:28:8b:62:cd:
27:5e:2e:8d:b5:a9:3d:9e:06:8d:34:f3:b0:66:32:
5b:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:D8:CC:B2:28:6A:92:C3:6E:15:29:AA:1F:92:6D:5F:AC:AD:A2:CA
X509v3 Authority Key Identifier:
keyid:4C:1B:0C:40:96:90:80:95:7F:CC:EE:1F:B8:A3:FB:4B:B3:8B:F5:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TBsMQJaQgJV_zO4fuKP7S7OL9dw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/ee29a6-691d-4b0c-ad63-94c8254bd3b7/1/TBsMQJaQgJV_zO4fuKP7S7OL9dw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/ee29a6-691d-4b0c-ad63-94c8254bd3b7/1/TBsMQJaQgJV_zO4fuKP7S7OL9dw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:ad:b0:bd:d7:da:4d:64:88:54:47:8f:bc:c3:54:45:47:5f:
f2:b6:19:59:af:b2:51:26:c4:c1:78:5c:50:05:97:44:3d:f5:
cc:55:03:a8:1c:af:37:fa:d2:23:2a:e7:ca:0e:be:7a:62:7b:
ad:f5:20:9c:7b:b0:67:fc:70:cb:da:b0:04:08:ac:ad:33:e0:
eb:53:b9:98:63:63:dc:17:ed:bc:ab:f9:1c:7e:cd:6a:57:84:
69:7c:0f:71:72:52:51:ad:59:77:2b:81:bc:1f:4e:6f:6a:f9:
4c:bd:01:dd:71:a2:99:fd:b2:71:a2:d8:2b:df:1a:19:8d:90:
ee:17:7d:fe:13:64:ba:2d:f2:81:f5:c4:d1:c7:91:04:ed:24:
6e:75:0b:f0:ac:a6:98:e0:d2:73:17:72:d6:7c:d2:b3:7b:0d:
e2:ea:3e:70:2a:61:70:7f:66:de:77:13:ac:6e:37:c4:84:7d:
c3:8f:eb:92:f4:6e:87:e3:dc:6c:a8:6a:aa:91:0b:8a:7a:f9:
fb:5c:d1:29:db:f8:ad:c6:eb:30:a3:81:07:d0:45:b1:3e:8b:
e5:d8:90:d8:82:cc:0f:28:3f:a4:e4:6e:0f:26:8e:9f:c3:4f:
56:87:10:d9:57:ee:4c:8a:8a:40:a8:1c:ba:d5:5c:17:e2:c1:
79:af:84:e2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGOZn0kMagQKw+FDdJL7nN5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjMWIwYzQwOTY5MDgwOTU3ZmNjZWUxZmI4YTNmYjRiYjM4
YmY1ZGMwHhcNMjYxMDMwMjAwMDQzWhcNMjYxMDMxMjAwMDQzWjAzMTEwLwYDVQQD
EyhjMmQ4Y2NiMjI4NmE5MmMzNmUxNTI5YWExZjkyNmQ1ZmFjYWRhMmNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmhgAWeO7ws9NYC6vaqDcC/iUqXuq
odSnd6ar2wMIVY+MhANdZ7NDs150+ZK5sJh3BaKijdXYbHrYXtMcHrP8+DxAqZWi
RbqMkue0jN93YYnpB5fP/8Y1VOGRbd40FF6h+qhqI4lx0u/BIuUz+lJBt+wpjp5W
6GPb+amtdCzZ7C6p7MZD4Vem5xYAZrdLq3XC6+WHxfQQYtrlSm0UgvM3u1p6fvT6
f52zyoW6L3M8fGI9cmorTXE8duOfcTY+FFafQG/SjHj8pJVy/oMLtN54+91qmL+I
eaDau/dPgVvogHx1MREAnLQ2e0eQNSiLYs0nXi6Ntak9ngaNNPOwZjJbDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMLYzLIoapLDbhUpqh+SbV+sraLKMB8GA1UdIwQY
MBaAFEwbDECWkICVf8zuH7ij+0uzi/XcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVEJzTVFKYVFnSlZfek80ZnVLUDdTN09MOWR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi9lZTI5YTYtNjkxZC00YjBjLWFkNjMt
OTRjODI1NGJkM2I3LzEvVEJzTVFKYVFnSlZfek80ZnVLUDdTN09MOWR3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZi9lZTI5YTYtNjkxZC00YjBjLWFkNjMtOTRjODI1NGJkM2I3
LzEvVEJzTVFKYVFnSlZfek80ZnVLUDdTN09MOWR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE62wvdfa
TWSIVEePvMNURUdf8rYZWa+yUSbEwXhcUAWXRD31zFUDqByvN/rSIyrnyg6+emJ7
rfUgnHuwZ/xwy9qwBAisrTPg61O5mGNj3BftvKv5HH7NaleEaXwPcXJSUa1ZdyuB
vB9Ob2r5TL0B3XGimf2ycaLYK98aGY2Q7hd9/hNkui3ygfXE0ceRBO0kbnUL8Kym
mODScxdy1nzSs3sN4uo+cCphcH9m3ncTrG43xIR9w4/rkvRuh+PcbKhqqpELinr5
+1zRKdv4rcbrMKOBB9BFsT6L5diQ2ILMDyg/pORuDyaOn8NPVocQ2VfuTIqKQKgc
utVcF+LBea+E4g==
-----END CERTIFICATE-----
Generated at Sat Oct 31 05:43:38 2026 by rpki-client