
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/16fbbf-6cdd-49b7-8c21-883b90cd134a/1/TO94CCwHKSqq4kD27P06_bp4uMo.mft
File: TO94CCwHKSqq4kD27P06_bp4uMo.mft (raw, json)
Hash identifier: Mw/7d40CFIH6hsBLs7eFSlRXygwhQmJWs0HuJSA3gY4=
Subject key identifier: 2C:15:D4:6C:8D:F9:A8:12:A9:AE:65:F3:77:97:58:DC:3A:D6:A6:FF
Authority key identifier: 4C:EF:78:08:2C:07:29:2A:AA:E2:40:F6:EC:FD:3A:FD:BA:78:B8:CA
Certificate issuer: /CN=4cef78082c07292aaae240f6ecfd3afdba78b8ca
Certificate serial: 019CA8D7A3A80CC70FF5C0ACC35F9D43D0BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TO94CCwHKSqq4kD27P06_bp4uMo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/16fbbf-6cdd-49b7-8c21-883b90cd134a/1/TO94CCwHKSqq4kD27P06_bp4uMo.mft
Manifest number: 05EF
Signing time: Sun 01 Mar 2026 10:00:30 +0000
Manifest this update: Sun 01 Mar 2026 10:00:30 +0000
Manifest next update: Mon 02 Mar 2026 10:00:30 +0000
Files and hashes: 1: DzOZLqQUulch0tfN19TPMP7l7NI.asa (hash: A7v4BAlqHExbGP1jRQY/Od094IwgACqCwokxSz1iOtQ=)
2: TO94CCwHKSqq4kD27P06_bp4uMo.crl (hash: 142bzAppqMRu0aP6FWwm3P9aLHfI0JZEV+xwz2yAIqs=)
3: vRz02q2XpG2yKdoejA6Edmj_d8k.roa (hash: jskIJxCVtupvjYcRL2UIAykBXf+yZJ8QG3OwF/ylsUg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/16fbbf-6cdd-49b7-8c21-883b90cd134a/1/TO94CCwHKSqq4kD27P06_bp4uMo.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/16fbbf-6cdd-49b7-8c21-883b90cd134a/1/TO94CCwHKSqq4kD27P06_bp4uMo.mft
rsync://rpki.ripe.net/repository/DEFAULT/TO94CCwHKSqq4kD27P06_bp4uMo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 09:38:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a8:d7:a3:a8:0c:c7:0f:f5:c0:ac:c3:5f:9d:43:d0:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cef78082c07292aaae240f6ecfd3afdba78b8ca
Validity
Not Before: Mar 1 10:00:30 2026 GMT
Not After : Mar 2 10:00:30 2026 GMT
Subject: CN=2c15d46c8df9a812a9ae65f3779758dc3ad6a6ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:f5:95:58:e4:c7:7d:5b:77:32:0f:e1:27:f4:
02:3d:28:97:9b:f8:90:86:5a:a4:0a:bf:ff:f0:75:
2b:46:61:2c:46:65:7c:39:71:82:bb:01:c6:33:47:
7d:6a:ec:9e:b9:36:9d:02:a9:e8:74:27:fc:0e:24:
59:c2:45:dd:bc:30:75:3d:93:ea:61:95:a9:62:d1:
66:f7:06:36:0c:4c:8a:5a:2b:cc:ba:39:1d:1f:10:
e8:e0:d2:e2:24:0d:aa:e8:ad:44:24:56:10:6f:08:
fa:b0:98:70:2f:c8:7e:c7:31:ba:81:b1:d3:74:71:
d9:c1:5c:5d:7a:04:1a:cb:5e:9b:81:9b:84:a0:55:
09:97:7e:94:00:50:be:0a:4f:75:dd:d3:cd:75:5a:
5c:71:01:56:31:bd:78:91:8b:fd:3d:17:85:d3:9e:
02:a5:12:60:05:7f:0f:b8:23:4f:9a:80:26:ea:c9:
44:e7:e0:a0:8a:82:27:b9:41:66:08:ab:49:e8:2d:
32:e3:40:74:66:93:00:f5:01:91:c2:9b:2e:46:d6:
d7:d2:83:e7:be:ae:df:b9:b2:be:5e:8a:e9:c4:7f:
c2:cc:15:02:ca:e7:6d:b8:24:08:fc:38:5e:36:30:
3c:cc:54:97:12:c5:92:83:92:50:3e:b2:0d:9b:5f:
db:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:15:D4:6C:8D:F9:A8:12:A9:AE:65:F3:77:97:58:DC:3A:D6:A6:FF
X509v3 Authority Key Identifier:
keyid:4C:EF:78:08:2C:07:29:2A:AA:E2:40:F6:EC:FD:3A:FD:BA:78:B8:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TO94CCwHKSqq4kD27P06_bp4uMo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/16fbbf-6cdd-49b7-8c21-883b90cd134a/1/TO94CCwHKSqq4kD27P06_bp4uMo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/16fbbf-6cdd-49b7-8c21-883b90cd134a/1/TO94CCwHKSqq4kD27P06_bp4uMo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:41:43:9c:15:fa:fc:37:4c:bd:01:bd:f6:db:bf:8c:52:40:
41:01:37:e7:8f:cc:ce:5f:5d:a7:3e:5d:28:13:fe:60:5b:5d:
3c:5a:67:8f:5d:47:08:04:fa:f8:f0:91:c9:e3:62:77:55:dc:
16:24:d1:cc:00:0c:3c:f6:a3:6d:73:63:d3:84:fb:22:b3:4f:
67:83:df:3d:1c:81:90:33:77:2d:ba:12:f0:d4:14:00:7b:b2:
46:d3:5f:c4:aa:76:9f:8c:4b:cd:7f:9b:06:1a:33:c6:ed:33:
b9:44:4d:a4:14:f0:f4:e0:2d:89:6f:74:b6:d0:4d:bc:12:01:
9f:7c:15:e8:b9:a5:47:32:e8:f9:06:0d:82:17:10:7a:20:8d:
85:11:32:f7:d6:2e:3f:40:3d:14:3b:be:c7:41:8d:68:19:de:
95:14:10:c8:0d:bd:1d:0d:5e:ff:ad:5e:17:51:c5:12:19:31:
14:ab:a8:e5:6d:5d:c2:e6:7b:0e:a9:1d:a5:5d:7d:1a:c3:b8:
fc:39:c5:7c:0e:99:72:29:c6:87:a6:22:36:ff:38:40:2a:e1:
5c:b2:a3:31:21:59:71:c7:26:a4:41:7a:0a:74:56:1d:a5:b2:
33:cb:ab:8e:b7:79:05:32:9e:f0:cb:99:59:49:e7:cb:72:47:
00:83:54:9c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyo16OoDMcP9cCsw1+dQ9C+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjZWY3ODA4MmMwNzI5MmFhYWUyNDBmNmVjZmQzYWZkYmE3
OGI4Y2EwHhcNMjYwMzAxMTAwMDMwWhcNMjYwMzAyMTAwMDMwWjAzMTEwLwYDVQQD
EygyYzE1ZDQ2YzhkZjlhODEyYTlhZTY1ZjM3Nzk3NThkYzNhZDZhNmZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsvWVWOTHfVt3Mg/hJ/QCPSiXm/iQ
hlqkCr//8HUrRmEsRmV8OXGCuwHGM0d9auyeuTadAqnodCf8DiRZwkXdvDB1PZPq
YZWpYtFm9wY2DEyKWivMujkdHxDo4NLiJA2q6K1EJFYQbwj6sJhwL8h+xzG6gbHT
dHHZwVxdegQay16bgZuEoFUJl36UAFC+Ck913dPNdVpccQFWMb14kYv9PReF054C
pRJgBX8PuCNPmoAm6slE5+CgioInuUFmCKtJ6C0y40B0ZpMA9QGRwpsuRtbX0oPn
vq7fubK+XorpxH/CzBUCyudtuCQI/DheNjA8zFSXEsWSg5JQPrINm1/bQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCwV1GyN+agSqa5l83eXWNw61qb/MB8GA1UdIwQY
MBaAFEzveAgsBykqquJA9uz9Ov26eLjKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVE85NENDd0hLU3FxNGtEMjdQMDZfYnA0dU1vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC8xNmZiYmYtNmNkZC00OWI3LThjMjEt
ODgzYjkwY2QxMzRhLzEvVE85NENDd0hLU3FxNGtEMjdQMDZfYnA0dU1vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC8xNmZiYmYtNmNkZC00OWI3LThjMjEtODgzYjkwY2QxMzRh
LzEvVE85NENDd0hLU3FxNGtEMjdQMDZfYnA0dU1vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO0FDnBX6
/DdMvQG99tu/jFJAQQE354/Mzl9dpz5dKBP+YFtdPFpnj11HCAT6+PCRyeNid1Xc
FiTRzAAMPPajbXNj04T7IrNPZ4PfPRyBkDN3LboS8NQUAHuyRtNfxKp2n4xLzX+b
Bhozxu0zuURNpBTw9OAtiW90ttBNvBIBn3wV6LmlRzLo+QYNghcQeiCNhREy99Yu
P0A9FDu+x0GNaBnelRQQyA29HQ1e/61eF1HFEhkxFKuo5W1dwuZ7DqkdpV19GsO4
/DnFfA6ZcinGh6YiNv84QCrhXLKjMSFZcccmpEF6CnRWHaWyM8urjrd5BTKe8MuZ
WUnny3JHAINUnA==
-----END CERTIFICATE-----
Generated at Sun Mar 1 18:25:01 2026 by rpki-client