Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/e4e07e-15fc-4942-842a-538509f3a789/1/TSPi7bMh4ailzp7j4tlapA8N6KA.mft
File: TSPi7bMh4ailzp7j4tlapA8N6KA.mft (raw, json)
Hash identifier: J6Bd8rm8PX+hNvJLEAMsBxq8/b+2RyyX8vG64QvKrM0=
Subject key identifier: 70:8D:B9:BC:FB:40:2E:B9:BE:41:D7:88:58:12:38:2E:59:8C:A9:B0
Authority key identifier: 4D:23:E2:ED:B3:21:E1:A8:A5:CE:9E:E3:E2:D9:5A:A4:0F:0D:E8:A0
Certificate issuer: /CN=4d23e2edb321e1a8a5ce9ee3e2d95aa40f0de8a0
Certificate serial: 019CF04CA28B0D8C264CD3739DDE88FBB562
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TSPi7bMh4ailzp7j4tlapA8N6KA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/e4e07e-15fc-4942-842a-538509f3a789/1/TSPi7bMh4ailzp7j4tlapA8N6KA.mft
Manifest number: 0D20
Signing time: Sun 15 Mar 2026 07:01:19 +0000
Manifest this update: Sun 15 Mar 2026 07:01:19 +0000
Manifest next update: Mon 16 Mar 2026 07:01:19 +0000
Files and hashes: 1: JXFUH416zwkJgWarbpHaBu4OjrM.roa (hash: 4a95XnQ0KPTukf9VV0SjrYCDAkfbYBMqoLt/hvW2kls=)
2: Ne3vXvFZfDJtHFxRi2iyMMXZXak.roa (hash: 90S1YKvYb+j9r5QawOi7WPQ7WUn8bPfBJqf4jlJtVS4=)
3: TSPi7bMh4ailzp7j4tlapA8N6KA.crl (hash: 6FPjeCQ6DUyf4rBGFt71fr8gLh0VbhJG3afG3XBnK/8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/e4e07e-15fc-4942-842a-538509f3a789/1/TSPi7bMh4ailzp7j4tlapA8N6KA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/e4e07e-15fc-4942-842a-538509f3a789/1/TSPi7bMh4ailzp7j4tlapA8N6KA.mft
rsync://rpki.ripe.net/repository/DEFAULT/TSPi7bMh4ailzp7j4tlapA8N6KA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Mar 2026 07:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:f0:4c:a2:8b:0d:8c:26:4c:d3:73:9d:de:88:fb:b5:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d23e2edb321e1a8a5ce9ee3e2d95aa40f0de8a0
Validity
Not Before: Mar 15 07:01:19 2026 GMT
Not After : Mar 16 07:01:19 2026 GMT
Subject: CN=708db9bcfb402eb9be41d7885812382e598ca9b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:af:9f:d6:db:da:08:7c:78:f5:cf:bc:81:60:
dd:54:06:ea:da:65:2f:c3:e3:74:57:20:78:d4:db:
12:1b:57:c1:bc:ad:ed:23:19:d6:ee:00:50:81:28:
fb:62:2f:d7:a6:9a:70:4e:24:c5:f5:72:95:dd:f0:
c4:60:67:f7:34:5b:ce:c6:53:4c:55:30:7b:14:62:
4b:2e:fb:90:9b:fb:d3:43:28:0a:e6:da:2a:5a:22:
c1:fe:43:de:02:dd:bd:ec:8e:dd:af:e0:a6:0a:90:
02:aa:43:ff:54:1d:ee:3f:f7:09:43:24:88:a0:f4:
69:f7:b7:af:3b:97:60:72:3e:ff:dc:f6:32:78:79:
6b:56:74:65:93:03:e6:5c:39:db:51:da:16:83:58:
3f:3f:c7:70:42:08:f9:35:a2:1f:e7:80:5f:5e:ce:
b5:56:b6:cd:7a:5e:87:bd:7e:c8:ab:d3:d0:23:a8:
1d:ad:14:a2:bc:f9:d3:de:59:01:b2:07:03:21:1a:
e7:5d:78:12:8d:dd:ad:87:aa:0b:45:38:5e:25:3b:
6b:c4:2b:e5:4d:4e:c0:52:c6:b2:fe:91:8c:2e:ef:
ff:6a:5f:8f:c9:cb:df:b6:fe:d6:6d:ad:fa:7d:9b:
13:96:e7:70:ae:11:09:5f:96:9d:b3:1e:c4:b5:ae:
2d:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:8D:B9:BC:FB:40:2E:B9:BE:41:D7:88:58:12:38:2E:59:8C:A9:B0
X509v3 Authority Key Identifier:
keyid:4D:23:E2:ED:B3:21:E1:A8:A5:CE:9E:E3:E2:D9:5A:A4:0F:0D:E8:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TSPi7bMh4ailzp7j4tlapA8N6KA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/e4e07e-15fc-4942-842a-538509f3a789/1/TSPi7bMh4ailzp7j4tlapA8N6KA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/e4e07e-15fc-4942-842a-538509f3a789/1/TSPi7bMh4ailzp7j4tlapA8N6KA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:d1:28:bb:ee:78:a3:64:5e:79:24:42:a7:d6:c0:56:23:40:
5b:6e:48:d2:62:c2:05:e2:4c:fd:0c:f0:3f:51:d6:b5:8e:43:
15:83:15:69:36:c9:e9:1e:c8:51:88:66:e6:a5:42:99:5a:78:
b2:58:29:79:d2:a9:f1:73:4b:eb:56:14:c3:01:92:c0:fe:2e:
50:74:4c:f2:02:f0:bf:73:a9:6e:3b:e1:3d:62:b2:14:08:b3:
ca:07:9f:86:c5:fc:9d:e9:c3:3c:3f:bf:ca:5d:a9:a5:c6:8e:
63:aa:0f:31:3c:1e:b1:67:fe:ad:7e:7d:2c:35:a3:aa:5c:c3:
0e:b9:c3:00:5e:6e:82:fd:ce:7e:25:67:f2:57:fe:77:f8:39:
92:20:fb:34:76:38:9a:b0:61:74:65:36:a3:6c:98:f1:4f:20:
30:61:2b:8e:36:ad:e0:1e:ca:27:25:3b:29:ed:bb:62:dc:08:
7b:97:c4:13:a5:3d:05:70:4f:20:54:c3:2e:b7:6e:e3:7f:e3:
09:54:b7:91:f7:28:7e:72:ee:5e:11:44:02:22:fb:bb:48:af:
89:2e:1c:94:92:40:ab:1b:cd:8d:9c:27:a3:24:c0:40:0e:ae:
d7:ba:ce:aa:3a:dd:03:6a:5e:72:a3:b2:41:5f:89:ee:6d:54:
fa:44:a4:7d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZzwTKKLDYwmTNNznd6I+7ViMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRkMjNlMmVkYjMyMWUxYThhNWNlOWVlM2UyZDk1YWE0MGYw
ZGU4YTAwHhcNMjYwMzE1MDcwMTE5WhcNMjYwMzE2MDcwMTE5WjAzMTEwLwYDVQQD
Eyg3MDhkYjliY2ZiNDAyZWI5YmU0MWQ3ODg1ODEyMzgyZTU5OGNhOWIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3q+f1tvaCHx49c+8gWDdVAbq2mUv
w+N0VyB41NsSG1fBvK3tIxnW7gBQgSj7Yi/XpppwTiTF9XKV3fDEYGf3NFvOxlNM
VTB7FGJLLvuQm/vTQygK5toqWiLB/kPeAt297I7dr+CmCpACqkP/VB3uP/cJQySI
oPRp97evO5dgcj7/3PYyeHlrVnRlkwPmXDnbUdoWg1g/P8dwQgj5NaIf54BfXs61
VrbNel6HvX7Iq9PQI6gdrRSivPnT3lkBsgcDIRrnXXgSjd2th6oLRTheJTtrxCvl
TU7AUsay/pGMLu//al+Pycvftv7Wba36fZsTludwrhEJX5adsx7Eta4trwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHCNubz7QC65vkHXiFgSOC5ZjKmwMB8GA1UdIwQY
MBaAFE0j4u2zIeGopc6e4+LZWqQPDeigMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVFNQaTdiTWg0YWlsenA3ajR0bGFwQThONktBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC9lNGUwN2UtMTVmYy00OTQyLTg0MmEt
NTM4NTA5ZjNhNzg5LzEvVFNQaTdiTWg0YWlsenA3ajR0bGFwQThONktBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC9lNGUwN2UtMTVmYy00OTQyLTg0MmEtNTM4NTA5ZjNhNzg5
LzEvVFNQaTdiTWg0YWlsenA3ajR0bGFwQThONktBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW9Eou+54
o2ReeSRCp9bAViNAW25I0mLCBeJM/QzwP1HWtY5DFYMVaTbJ6R7IUYhm5qVCmVp4
slgpedKp8XNL61YUwwGSwP4uUHRM8gLwv3OpbjvhPWKyFAizygefhsX8nenDPD+/
yl2ppcaOY6oPMTwesWf+rX59LDWjqlzDDrnDAF5ugv3OfiVn8lf+d/g5kiD7NHY4
mrBhdGU2o2yY8U8gMGErjjat4B7KJyU7Ke27YtwIe5fEE6U9BXBPIFTDLrdu43/j
CVS3kfcofnLuXhFEAiL7u0iviS4clJJAqxvNjZwnoyTAQA6u17rOqjrdA2pecqOy
QV+J7m1U+kSkfQ==
-----END CERTIFICATE-----
Generated at Sun Mar 15 17:58:30 2026 by rpki-client