Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/786b51-e2df-4fd6-9c9b-f567c3e9f5ff/1/TsOgYsuW2aPyGostqEj4HG9zv5U.mft
File: TsOgYsuW2aPyGostqEj4HG9zv5U.mft (raw, json)
Hash identifier: E2ZeSesZnMbg1hsdXVPXFwhobhzqxTdIYzy9QQIzCfo=
Subject key identifier: D9:33:3D:CE:04:7F:3D:3C:7F:1B:2B:E2:49:CA:E0:37:BF:38:DA:DD
Authority key identifier: 4E:C3:A0:62:CB:96:D9:A3:F2:1A:8B:2D:A8:48:F8:1C:6F:73:BF:95
Certificate issuer: /CN=4ec3a062cb96d9a3f21a8b2da848f81c6f73bf95
Certificate serial: 019CAAC67E86F8216E7A417A1CE71F10F6FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TsOgYsuW2aPyGostqEj4HG9zv5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/786b51-e2df-4fd6-9c9b-f567c3e9f5ff/1/TsOgYsuW2aPyGostqEj4HG9zv5U.mft
Manifest number: 17E1
Signing time: Sun 01 Mar 2026 19:01:01 +0000
Manifest this update: Sun 01 Mar 2026 19:01:01 +0000
Manifest next update: Mon 02 Mar 2026 19:01:01 +0000
Files and hashes: 1: TsOgYsuW2aPyGostqEj4HG9zv5U.crl (hash: 22AFJT45dKzWOwhzKihUSZzPFKeEi0z0Q8srvE+A7UI=)
2: cMSq_NcYXBjORlEeP54TeKaU-zc.roa (hash: AnKK7epayFvj9OjYad7fK2xMQOaLyQs9vYbQVKbmXI8=)
3: svmsZH4j3FCzPSNp-bJETBP8qzs.roa (hash: enOf8GhkIm48YbUB7aWnRSzpdWjW5NG5zxx4fZ/PPB4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/786b51-e2df-4fd6-9c9b-f567c3e9f5ff/1/TsOgYsuW2aPyGostqEj4HG9zv5U.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/786b51-e2df-4fd6-9c9b-f567c3e9f5ff/1/TsOgYsuW2aPyGostqEj4HG9zv5U.mft
rsync://rpki.ripe.net/repository/DEFAULT/TsOgYsuW2aPyGostqEj4HG9zv5U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 19:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:7e:86:f8:21:6e:7a:41:7a:1c:e7:1f:10:f6:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ec3a062cb96d9a3f21a8b2da848f81c6f73bf95
Validity
Not Before: Mar 1 19:01:01 2026 GMT
Not After : Mar 2 19:01:01 2026 GMT
Subject: CN=d9333dce047f3d3c7f1b2be249cae037bf38dadd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:99:58:b9:28:76:ad:a4:ff:b3:b3:e5:40:15:
46:9c:37:81:ef:11:f5:5e:f5:3b:11:06:76:4e:56:
e4:6d:44:82:cd:53:9a:6e:86:ad:cb:76:bb:89:ae:
7b:30:86:af:9e:22:e6:88:71:d7:97:4b:62:40:5c:
70:b0:60:9c:7f:41:aa:84:5c:e5:e2:76:2f:f9:ee:
bc:b0:4e:ce:91:ff:8c:3a:b7:58:ae:45:61:78:cb:
00:79:b5:71:b7:7e:0c:ac:75:12:2c:cd:fb:c5:7f:
95:df:40:b5:d5:0f:49:7b:41:bf:24:8e:82:77:ec:
87:4e:31:e2:64:a7:de:be:9c:d0:a5:82:94:0f:5e:
4d:89:2a:7d:ef:a9:ff:ef:8e:fc:91:ed:ce:45:a7:
4d:09:1c:d2:c5:4c:85:d3:02:da:08:2b:23:cd:e3:
b0:01:da:06:7b:e4:30:cd:a4:7a:23:01:97:0d:2f:
35:eb:5f:c2:a4:70:9b:1f:c7:a8:52:28:c7:88:32:
ee:43:95:f6:36:ca:03:39:8f:07:b9:16:19:e9:a8:
79:3b:52:b3:08:eb:c5:0d:8f:51:ea:b6:88:c7:96:
5d:eb:ee:d6:2d:0f:5b:49:9e:90:81:42:92:da:6c:
52:c7:74:d3:8f:80:6a:38:5d:ce:bb:75:c3:55:44:
31:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:33:3D:CE:04:7F:3D:3C:7F:1B:2B:E2:49:CA:E0:37:BF:38:DA:DD
X509v3 Authority Key Identifier:
keyid:4E:C3:A0:62:CB:96:D9:A3:F2:1A:8B:2D:A8:48:F8:1C:6F:73:BF:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TsOgYsuW2aPyGostqEj4HG9zv5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/786b51-e2df-4fd6-9c9b-f567c3e9f5ff/1/TsOgYsuW2aPyGostqEj4HG9zv5U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/786b51-e2df-4fd6-9c9b-f567c3e9f5ff/1/TsOgYsuW2aPyGostqEj4HG9zv5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:6a:b1:61:fd:b5:28:92:15:f9:af:b9:c6:84:14:3f:b5:ad:
18:ab:d5:21:34:74:e1:b7:f3:fc:a4:e7:3c:de:37:85:be:07:
9a:98:7f:5a:c2:ce:6e:e8:ab:a9:ba:5b:74:e0:ae:3a:75:d1:
0d:92:bc:4f:19:67:cb:09:18:ee:52:7f:a5:7b:71:ac:ac:b5:
77:54:ba:0e:5d:d4:3d:03:e4:a4:79:52:cc:81:bb:74:c4:85:
b4:dd:30:e8:da:fa:05:ae:b1:ec:73:b2:40:53:bc:8e:af:47:
af:11:3e:cb:c6:a4:b0:86:df:1f:a7:ad:80:39:4d:f3:e7:73:
25:67:eb:6c:a5:d2:8f:88:de:35:a3:4d:2f:07:d3:87:f7:bc:
d8:d9:71:2e:21:c5:54:35:4f:13:62:00:57:7e:78:8b:31:e1:
21:52:75:a5:09:8c:90:61:70:ed:a5:a6:bc:64:54:30:b0:14:
16:82:1f:b0:c5:73:7c:2e:05:76:63:e3:78:06:8e:a9:4c:48:
2b:81:11:68:81:49:39:ba:07:2a:2e:96:d1:41:4b:b4:0b:7b:
d1:0f:b4:60:73:43:c5:fd:5a:83:d1:51:74:34:3a:08:20:18:
59:84:51:a2:07:8d:5e:b1:cd:1a:12:98:7b:ae:35:c2:84:e1:
c7:1a:4f:b9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqxn6G+CFuekF6HOcfEPb7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRlYzNhMDYyY2I5NmQ5YTNmMjFhOGIyZGE4NDhmODFjNmY3
M2JmOTUwHhcNMjYwMzAxMTkwMTAxWhcNMjYwMzAyMTkwMTAxWjAzMTEwLwYDVQQD
EyhkOTMzM2RjZTA0N2YzZDNjN2YxYjJiZTI0OWNhZTAzN2JmMzhkYWRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnplYuSh2raT/s7PlQBVGnDeB7xH1
XvU7EQZ2TlbkbUSCzVOaboaty3a7ia57MIavniLmiHHXl0tiQFxwsGCcf0GqhFzl
4nYv+e68sE7Okf+MOrdYrkVheMsAebVxt34MrHUSLM37xX+V30C11Q9Je0G/JI6C
d+yHTjHiZKfevpzQpYKUD15NiSp976n/7478ke3ORadNCRzSxUyF0wLaCCsjzeOw
AdoGe+QwzaR6IwGXDS8161/CpHCbH8eoUijHiDLuQ5X2NsoDOY8HuRYZ6ah5O1Kz
COvFDY9R6raIx5Zd6+7WLQ9bSZ6QgUKS2mxSx3TTj4BqOF3Ou3XDVUQxTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNkzPc4Efz08fxsr4knK4De/ONrdMB8GA1UdIwQY
MBaAFE7DoGLLltmj8hqLLahI+Bxvc7+VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHNPZ1lzdVcyYVB5R29zdHFFajRIRzl6djVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi83ODZiNTEtZTJkZi00ZmQ2LTljOWIt
ZjU2N2MzZTlmNWZmLzEvVHNPZ1lzdVcyYVB5R29zdHFFajRIRzl6djVVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi83ODZiNTEtZTJkZi00ZmQ2LTljOWItZjU2N2MzZTlmNWZm
LzEvVHNPZ1lzdVcyYVB5R29zdHFFajRIRzl6djVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOmqxYf21
KJIV+a+5xoQUP7WtGKvVITR04bfz/KTnPN43hb4Hmph/WsLObuirqbpbdOCuOnXR
DZK8TxlnywkY7lJ/pXtxrKy1d1S6Dl3UPQPkpHlSzIG7dMSFtN0w6Nr6Ba6x7HOy
QFO8jq9HrxE+y8aksIbfH6etgDlN8+dzJWfrbKXSj4jeNaNNLwfTh/e82NlxLiHF
VDVPE2IAV354izHhIVJ1pQmMkGFw7aWmvGRUMLAUFoIfsMVzfC4FdmPjeAaOqUxI
K4ERaIFJOboHKi6W0UFLtAt70Q+0YHNDxf1ag9FRdDQ6CCAYWYRRogeNXrHNGhKY
e641woThxxpPuQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 05:35:38 2026 by rpki-client