Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/ee29a6-691d-4b0c-ad63-94c8254bd3b7/1/TBsMQJaQgJV_zO4fuKP7S7OL9dw.mft
File: TBsMQJaQgJV_zO4fuKP7S7OL9dw.mft (raw, json)
Hash identifier: 3xVOEx16XOsCpeoalofnagJw7GSrOLbAuUuAwxBU/6Y=
Subject key identifier: EC:B9:57:84:AF:A6:35:45:B6:6D:57:ED:DF:81:B9:5B:BD:C4:07:AB
Authority key identifier: 4C:1B:0C:40:96:90:80:95:7F:CC:EE:1F:B8:A3:FB:4B:B3:8B:F5:DC
Certificate issuer: /CN=4c1b0c40969080957fccee1fb8a3fb4bb38bf5dc
Certificate serial: 019DDA30652737A73283F1B462E02A2ADD8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TBsMQJaQgJV_zO4fuKP7S7OL9dw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/ee29a6-691d-4b0c-ad63-94c8254bd3b7/1/TBsMQJaQgJV_zO4fuKP7S7OL9dw.mft
Manifest number: 15D1
Signing time: Wed 29 Apr 2026 17:01:37 +0000
Manifest this update: Wed 29 Apr 2026 17:01:37 +0000
Manifest next update: Thu 30 Apr 2026 17:01:37 +0000
Files and hashes: 1: B0kfMqpAGqXnYaMTrQLvbBjvxOk.roa (hash: YEV3wXNHcOYmzWyvVh84es9QxYCJzyckUbH9jX+YQQA=)
2: TBsMQJaQgJV_zO4fuKP7S7OL9dw.crl (hash: +TMoiGR82fYz0/eNfqmE+7j16FSlB0Zf4S/4BXLxGUI=)
3: YA-H3bfE3r6ihPzDZtgenypbPbg.roa (hash: pUTlAIWeqA52q3MAJOIPYUZ8tJQ/eIlG+BT4v4cwsGM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/ee29a6-691d-4b0c-ad63-94c8254bd3b7/1/TBsMQJaQgJV_zO4fuKP7S7OL9dw.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/ee29a6-691d-4b0c-ad63-94c8254bd3b7/1/TBsMQJaQgJV_zO4fuKP7S7OL9dw.mft
rsync://rpki.ripe.net/repository/DEFAULT/TBsMQJaQgJV_zO4fuKP7S7OL9dw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Apr 2026 17:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:da:30:65:27:37:a7:32:83:f1:b4:62:e0:2a:2a:dd:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c1b0c40969080957fccee1fb8a3fb4bb38bf5dc
Validity
Not Before: Apr 29 17:01:37 2026 GMT
Not After : Apr 30 17:01:37 2026 GMT
Subject: CN=ecb95784afa63545b66d57eddf81b95bbdc407ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:61:01:3c:c3:86:b9:bc:4f:dc:c2:a7:84:81:
28:46:12:1f:50:ef:ab:71:73:5b:50:cd:1e:dc:bb:
e0:25:d0:1d:c4:e9:d7:58:11:a8:1b:88:dc:34:e6:
b6:af:ab:0b:f1:27:e6:15:97:cb:d2:35:10:59:48:
7e:da:69:c3:29:2e:0f:24:97:92:39:ff:b9:17:ed:
b3:75:8e:a7:8e:8c:bf:ef:7d:bd:c5:7c:d1:b5:f4:
5f:c4:3a:1c:3a:7f:ea:f3:a5:9a:09:01:bc:c4:c4:
ca:5f:ec:a8:e4:e5:61:9b:fd:17:dc:25:40:25:10:
eb:16:e5:62:6a:44:50:7a:14:4e:db:8e:b9:ca:5b:
c0:76:7b:13:68:0c:9d:1b:3b:02:f1:bb:57:87:f5:
06:31:54:5b:f9:dc:05:ec:77:03:47:67:f6:03:f5:
47:28:5f:aa:1b:76:36:ee:1b:f7:ed:c5:5e:f0:d8:
70:6f:1e:6f:7d:8b:bc:6e:03:06:25:bb:26:63:f1:
34:75:75:d0:e3:3d:5a:0c:99:4c:68:d2:7d:b8:51:
31:c3:6d:f4:f4:59:14:44:c7:3b:77:ff:19:21:ce:
e6:58:42:67:30:cf:a2:1a:69:97:45:18:6c:90:56:
d7:b9:6a:7c:80:55:39:19:2f:51:ad:b3:cc:9f:53:
12:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:B9:57:84:AF:A6:35:45:B6:6D:57:ED:DF:81:B9:5B:BD:C4:07:AB
X509v3 Authority Key Identifier:
keyid:4C:1B:0C:40:96:90:80:95:7F:CC:EE:1F:B8:A3:FB:4B:B3:8B:F5:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TBsMQJaQgJV_zO4fuKP7S7OL9dw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/ee29a6-691d-4b0c-ad63-94c8254bd3b7/1/TBsMQJaQgJV_zO4fuKP7S7OL9dw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/ee29a6-691d-4b0c-ad63-94c8254bd3b7/1/TBsMQJaQgJV_zO4fuKP7S7OL9dw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:e4:d3:fd:4e:26:fa:78:15:e9:f6:02:7b:4d:71:46:96:86:
52:b9:92:34:0f:cc:75:00:57:6b:67:41:be:b0:ab:1c:9b:63:
47:79:da:33:05:a0:35:e3:7a:a5:ee:02:a3:49:f2:47:96:1d:
6a:93:79:55:ff:25:e9:90:76:8e:d8:32:76:d5:41:b1:08:1b:
f4:cb:6e:c9:ca:62:1e:6e:f7:04:33:b7:8e:a0:50:f0:06:40:
32:44:00:f3:bb:97:3b:dd:57:61:cd:c1:38:a5:80:4e:f6:93:
97:dd:75:59:1f:0c:f9:b5:87:56:1a:8b:f7:cb:b4:a7:e4:56:
c9:ce:45:1f:ea:40:8e:b9:33:f4:f8:8b:f5:da:dc:63:f1:25:
3a:36:d5:09:c6:4c:f5:f4:5f:b7:0d:02:e5:f5:be:c4:45:e5:
cc:a3:01:3a:14:25:8a:e1:48:b4:b1:eb:f9:72:f2:d6:0d:86:
b6:24:94:57:be:3d:7b:44:21:a7:05:b7:5b:6b:28:7d:c4:98:
d9:0f:03:a8:f1:af:84:fe:31:80:a1:a2:16:11:59:b9:2a:f4:
91:ad:65:34:e4:cd:ff:f6:73:25:9a:01:54:ab:a9:e3:cf:4a:
90:67:6f:52:71:91:42:7c:cd:a2:5a:42:04:32:14:95:46:12:
31:a1:c2:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 30 02:02:08 2026 by rpki-client