Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fe/795ed9-8fad-4c44-8583-06ca709a3c59/1/tcsrXq88wV3Us7I62LlHKlJAwDs.mft
File: tcsrXq88wV3Us7I62LlHKlJAwDs.mft (raw, json)
Hash identifier: kFKfL1HiHB9zEO353GVR0j5qjzmTxKvg/2rb+KHvC0E=
Subject key identifier: 0F:1E:72:39:03:40:C5:CE:84:4F:11:33:CB:C4:9A:5A:13:7D:96:E3
Authority key identifier: B5:CB:2B:5E:AF:3C:C1:5D:D4:B3:B2:3A:D8:B9:47:2A:52:40:C0:3B
Certificate issuer: /CN=b5cb2b5eaf3cc15dd4b3b23ad8b9472a5240c03b
Certificate serial: 01A17F987B159C1B9439021A8E716D9F3C72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tcsrXq88wV3Us7I62LlHKlJAwDs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/795ed9-8fad-4c44-8583-06ca709a3c59/1/tcsrXq88wV3Us7I62LlHKlJAwDs.mft
Manifest number: 04AA
Signing time: Tue 27 Oct 2026 23:01:01 +0000
Manifest this update: Tue 27 Oct 2026 23:01:01 +0000
Manifest next update: Wed 28 Oct 2026 23:01:01 +0000
Files and hashes: 1: JD-_RMbQpF-pKZOnXs4mYFjjidQ.roa (hash: kFiezG9HvRIWsHO1y6hBEeY1FqGlLKVulu5N0PlRmH8=)
2: Yu4sRMhjnaZ-XQmSj1D__phZeD8.roa (hash: AyFLhX8tiTmblt6O8oktuLS6s2R51Ojkbbk8JbQ8oQg=)
3: hcA2sybzN1Ofj8kjdHY3enQPW4k.roa (hash: rk0UL1nQQuTNj/9/qA18tEhUOk3ka6xo77V2/KmRLF0=)
4: r0L_fw2UIn4XIEtLQaD9FAZkIik.roa (hash: BdNMAuELXiRtJWYpCqHDZ0xqtLc1of7WQEm7b/IfqOA=)
5: tcsrXq88wV3Us7I62LlHKlJAwDs.crl (hash: t4yUDkk4OfaxJ1QhreHfcWc+SOGcs+JgWlNKGAedSu0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/795ed9-8fad-4c44-8583-06ca709a3c59/1/tcsrXq88wV3Us7I62LlHKlJAwDs.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/795ed9-8fad-4c44-8583-06ca709a3c59/1/tcsrXq88wV3Us7I62LlHKlJAwDs.mft
rsync://rpki.ripe.net/repository/DEFAULT/tcsrXq88wV3Us7I62LlHKlJAwDs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 22:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7f:98:7b:15:9c:1b:94:39:02:1a:8e:71:6d:9f:3c:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5cb2b5eaf3cc15dd4b3b23ad8b9472a5240c03b
Validity
Not Before: Oct 27 23:01:01 2026 GMT
Not After : Oct 28 23:01:01 2026 GMT
Subject: CN=0f1e72390340c5ce844f1133cbc49a5a137d96e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:af:3d:66:99:6c:9c:2f:f7:29:57:6e:a3:03:
34:db:a1:6e:76:e2:3f:5f:ad:34:fd:47:be:1a:07:
ed:63:be:78:10:6d:36:42:ad:a8:5e:57:bb:3c:73:
c8:3c:14:4a:21:9b:a5:14:73:c2:f6:38:ce:72:bb:
51:ff:93:5b:87:34:aa:e9:95:bc:a5:97:cd:52:59:
42:e4:57:06:fe:be:ea:40:5f:ff:4a:3e:27:af:69:
0e:66:5e:69:79:60:86:9f:f2:9b:b6:1f:4d:4a:bb:
79:69:64:3c:d9:78:35:f4:ec:b6:87:82:f0:0f:c0:
be:18:9b:f2:d1:4c:3c:dc:8c:4e:52:6c:4d:8e:98:
fc:32:87:f5:fe:43:13:06:9a:ee:ae:8d:de:b6:f9:
51:c9:09:f1:7d:96:0f:4c:b7:75:78:32:71:75:b6:
7d:e8:30:32:13:79:1c:f5:bf:a1:e8:7b:37:47:35:
4d:9c:90:6e:eb:77:e6:5e:ba:5a:58:7a:e0:8e:58:
72:f6:aa:d0:f0:00:11:45:7a:c7:90:33:44:67:db:
50:a6:f1:23:37:d9:0d:8f:ed:e0:17:a7:2c:ae:7a:
2c:45:aa:28:4a:67:fb:32:3b:dc:03:84:a9:2f:b0:
38:7f:fc:43:c1:9d:70:b1:4c:10:80:8d:aa:74:05:
aa:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:1E:72:39:03:40:C5:CE:84:4F:11:33:CB:C4:9A:5A:13:7D:96:E3
X509v3 Authority Key Identifier:
keyid:B5:CB:2B:5E:AF:3C:C1:5D:D4:B3:B2:3A:D8:B9:47:2A:52:40:C0:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tcsrXq88wV3Us7I62LlHKlJAwDs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/795ed9-8fad-4c44-8583-06ca709a3c59/1/tcsrXq88wV3Us7I62LlHKlJAwDs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/795ed9-8fad-4c44-8583-06ca709a3c59/1/tcsrXq88wV3Us7I62LlHKlJAwDs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:aa:d8:f4:80:a3:03:28:12:1c:78:57:40:0c:bc:0d:8b:2b:
f5:56:0d:1f:44:3e:7c:69:2b:18:1b:3b:60:30:4a:99:42:cb:
88:f2:41:49:84:d9:fb:5c:01:b8:6c:0e:76:0e:b6:8d:42:28:
15:c6:46:ff:4e:88:05:68:6c:0a:0f:93:8d:5b:16:03:ff:6e:
5c:a1:58:62:29:40:a7:2e:93:78:3b:a5:fa:6b:84:56:ed:02:
ff:ef:ac:21:d4:d7:04:55:c4:f8:42:80:10:56:e1:89:9a:ec:
85:85:e7:f7:25:7f:62:45:22:7b:09:09:cd:39:8e:c1:b8:39:
94:c1:8d:9b:a9:3a:ae:0b:8c:1a:d4:a5:4e:08:32:43:e0:67:
a0:af:7b:3a:ea:d4:0e:4c:72:28:14:5d:10:a8:55:ef:ac:cb:
df:88:52:51:4f:e4:77:27:71:f4:00:a9:1c:f2:81:80:6b:7a:
0b:77:b5:02:64:85:90:16:95:0e:f9:2e:fd:22:d9:1f:38:e7:
9a:cc:9b:ca:e4:25:9d:89:7f:d1:a7:33:16:3c:4d:74:a2:fa:
15:9f:eb:cd:61:8e:97:44:d2:a9:ac:72:66:43:23:b9:74:6a:
4c:d6:9c:6e:37:d4:9b:bd:be:ba:be:d2:0f:f3:28:6c:e0:d8:
ed:b1:b3:11
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF/mHsVnBuUOQIajnFtnzxyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1Y2IyYjVlYWYzY2MxNWRkNGIzYjIzYWQ4Yjk0NzJhNTI0
MGMwM2IwHhcNMjYxMDI3MjMwMTAxWhcNMjYxMDI4MjMwMTAxWjAzMTEwLwYDVQQD
EygwZjFlNzIzOTAzNDBjNWNlODQ0ZjExMzNjYmM0OWE1YTEzN2Q5NmUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnq89ZplsnC/3KVduowM026FuduI/
X600/Ue+GgftY754EG02Qq2oXle7PHPIPBRKIZulFHPC9jjOcrtR/5NbhzSq6ZW8
pZfNUllC5FcG/r7qQF//Sj4nr2kOZl5peWCGn/Kbth9NSrt5aWQ82Xg19Oy2h4Lw
D8C+GJvy0Uw83IxOUmxNjpj8Mof1/kMTBpruro3etvlRyQnxfZYPTLd1eDJxdbZ9
6DAyE3kc9b+h6Hs3RzVNnJBu63fmXrpaWHrgjlhy9qrQ8AARRXrHkDNEZ9tQpvEj
N9kNj+3gF6csrnosRaooSmf7MjvcA4SpL7A4f/xDwZ1wsUwQgI2qdAWqqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA8ecjkDQMXOhE8RM8vEmloTfZbjMB8GA1UdIwQY
MBaAFLXLK16vPMFd1LOyOti5RypSQMA7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdGNzclhxODh3VjNVczdJNjJMbEhLbEpBd0RzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS83OTVlZDktOGZhZC00YzQ0LTg1ODMt
MDZjYTcwOWEzYzU5LzEvdGNzclhxODh3VjNVczdJNjJMbEhLbEpBd0RzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS83OTVlZDktOGZhZC00YzQ0LTg1ODMtMDZjYTcwOWEzYzU5
LzEvdGNzclhxODh3VjNVczdJNjJMbEhLbEpBd0RzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALarY9ICj
AygSHHhXQAy8DYsr9VYNH0Q+fGkrGBs7YDBKmULLiPJBSYTZ+1wBuGwOdg62jUIo
FcZG/06IBWhsCg+TjVsWA/9uXKFYYilApy6TeDul+muEVu0C/++sIdTXBFXE+EKA
EFbhiZrshYXn9yV/YkUiewkJzTmOwbg5lMGNm6k6rguMGtSlTggyQ+BnoK97OurU
DkxyKBRdEKhV76zL34hSUU/kdydx9ACpHPKBgGt6C3e1AmSFkBaVDvku/SLZHzjn
msybyuQlnYl/0aczFjxNdKL6FZ/rzWGOl0TSqaxyZkMjuXRqTNacbjfUm72+ur7S
D/MobODY7bGzEQ==
-----END CERTIFICATE-----
Generated at Wed Oct 28 04:23:09 2026 by rpki-client