Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2f/786b51-e2df-4fd6-9c9b-f567c3e9f5ff/1/TsOgYsuW2aPyGostqEj4HG9zv5U.mft
File: TsOgYsuW2aPyGostqEj4HG9zv5U.mft (raw, json)
Hash identifier: +b/GzDff8CNAD24Yekb3dhcytZZf/WmVZEMyZnbW8Fc=
Subject key identifier: 5B:21:89:DE:4F:D3:A2:C9:FC:26:2B:8D:A4:67:97:25:7C:EB:C9:C4
Authority key identifier: 4E:C3:A0:62:CB:96:D9:A3:F2:1A:8B:2D:A8:48:F8:1C:6F:73:BF:95
Certificate issuer: /CN=4ec3a062cb96d9a3f21a8b2da848f81c6f73bf95
Certificate serial: 01A0C557380BC5E216727FACA2BE33251D19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TsOgYsuW2aPyGostqEj4HG9zv5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/786b51-e2df-4fd6-9c9b-f567c3e9f5ff/1/TsOgYsuW2aPyGostqEj4HG9zv5U.mft
Manifest number: 1A01
Signing time: Mon 21 Sep 2026 19:00:22 +0000
Manifest this update: Mon 21 Sep 2026 19:00:22 +0000
Manifest next update: Tue 22 Sep 2026 19:00:22 +0000
Files and hashes: 1: TsOgYsuW2aPyGostqEj4HG9zv5U.crl (hash: qTYCdDYN0AHhyn7287ifuKKcMt12z7Il8UDWrP1VbBU=)
2: cMSq_NcYXBjORlEeP54TeKaU-zc.roa (hash: AnKK7epayFvj9OjYad7fK2xMQOaLyQs9vYbQVKbmXI8=)
3: svmsZH4j3FCzPSNp-bJETBP8qzs.roa (hash: enOf8GhkIm48YbUB7aWnRSzpdWjW5NG5zxx4fZ/PPB4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/786b51-e2df-4fd6-9c9b-f567c3e9f5ff/1/TsOgYsuW2aPyGostqEj4HG9zv5U.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/786b51-e2df-4fd6-9c9b-f567c3e9f5ff/1/TsOgYsuW2aPyGostqEj4HG9zv5U.mft
rsync://rpki.ripe.net/repository/DEFAULT/TsOgYsuW2aPyGostqEj4HG9zv5U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 19:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c5:57:38:0b:c5:e2:16:72:7f:ac:a2:be:33:25:1d:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ec3a062cb96d9a3f21a8b2da848f81c6f73bf95
Validity
Not Before: Sep 21 19:00:22 2026 GMT
Not After : Sep 22 19:00:22 2026 GMT
Subject: CN=5b2189de4fd3a2c9fc262b8da46797257cebc9c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:42:13:c9:51:ad:d6:a3:d4:ac:1c:a3:1d:eb:
b5:b8:b2:18:ae:1b:43:1d:82:01:6c:33:14:1b:3a:
30:d1:be:d5:8c:f7:5b:e7:62:af:e0:04:c7:12:6e:
cd:1e:ef:20:f2:62:9e:ce:74:96:56:bb:a5:cf:76:
c3:aa:d0:65:74:93:9f:be:fb:0a:a3:46:74:91:25:
b9:82:9d:64:f1:44:a0:ed:f5:b6:b9:bc:d5:69:11:
c2:90:63:67:b4:8e:42:be:94:24:ee:99:18:73:9b:
27:92:d6:5f:b5:05:c9:60:52:18:6b:9b:29:10:3b:
b8:65:78:a2:dc:08:4f:5f:9f:6c:88:61:fb:95:0f:
83:28:5b:69:ac:30:f6:53:68:1e:3f:1d:37:a6:2a:
f5:70:8f:0e:2c:58:74:02:ea:16:ee:78:ec:13:ee:
0f:bc:03:47:09:aa:87:15:72:ae:9a:21:6c:10:b9:
7f:f4:0e:1b:d0:a4:7b:d5:21:48:08:43:71:2a:3a:
32:ae:f1:fd:51:7c:06:bd:ee:61:5e:31:86:1b:91:
dd:a9:14:f2:92:7a:ab:b3:c2:c7:6e:b8:68:09:5b:
46:f4:32:c0:05:58:48:1e:d9:8d:93:7b:bb:9b:db:
a6:71:5b:dd:09:10:b0:3d:a1:ae:8c:aa:b9:bb:1c:
cd:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:21:89:DE:4F:D3:A2:C9:FC:26:2B:8D:A4:67:97:25:7C:EB:C9:C4
X509v3 Authority Key Identifier:
keyid:4E:C3:A0:62:CB:96:D9:A3:F2:1A:8B:2D:A8:48:F8:1C:6F:73:BF:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TsOgYsuW2aPyGostqEj4HG9zv5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/786b51-e2df-4fd6-9c9b-f567c3e9f5ff/1/TsOgYsuW2aPyGostqEj4HG9zv5U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/786b51-e2df-4fd6-9c9b-f567c3e9f5ff/1/TsOgYsuW2aPyGostqEj4HG9zv5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:09:82:23:9b:43:76:53:30:94:d3:85:3d:74:1d:2b:21:65:
9d:e0:29:bd:1a:07:66:20:ce:64:ca:b9:df:4e:8f:e2:34:f0:
60:19:36:7e:e9:41:b5:47:c9:07:c6:94:bb:23:37:9f:bc:74:
38:ac:e8:88:8d:6e:05:8a:07:5c:67:6c:6e:d4:d6:5c:84:77:
0d:30:0d:71:2d:31:ce:6d:0a:44:59:d5:38:8a:a7:4f:6a:a4:
cd:f8:0d:ba:cf:32:81:12:95:32:4f:1c:e2:8e:35:21:f0:70:
eb:76:9e:5e:90:41:0c:e1:c5:7a:79:88:fa:03:93:55:4a:11:
f8:76:29:78:46:97:44:d5:21:42:d7:74:f6:44:ec:4d:e0:b3:
87:9f:f2:6b:88:70:b7:db:ff:09:14:5d:85:f4:26:cb:2e:9d:
b9:b5:1b:e7:61:85:a4:8f:85:85:69:0b:21:06:cd:77:2c:1f:
8b:b0:92:29:fa:5e:2e:4c:f9:6c:42:d8:40:7d:bb:31:9e:74:
cd:5f:bd:c0:bb:65:b1:c4:26:4e:9c:f9:d6:f0:be:3d:fa:6c:
c2:f0:0c:52:80:ac:f0:9c:44:00:5a:7c:af:8d:40:01:a2:b2:
56:38:64:18:79:22:02:c1:c7:5e:04:9b:50:f8:b7:09:71:01:
4f:7c:83:c8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDFVzgLxeIWcn+sor4zJR0ZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRlYzNhMDYyY2I5NmQ5YTNmMjFhOGIyZGE4NDhmODFjNmY3
M2JmOTUwHhcNMjYwOTIxMTkwMDIyWhcNMjYwOTIyMTkwMDIyWjAzMTEwLwYDVQQD
Eyg1YjIxODlkZTRmZDNhMmM5ZmMyNjJiOGRhNDY3OTcyNTdjZWJjOWM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm0ITyVGt1qPUrByjHeu1uLIYrhtD
HYIBbDMUGzow0b7VjPdb52Kv4ATHEm7NHu8g8mKeznSWVrulz3bDqtBldJOfvvsK
o0Z0kSW5gp1k8USg7fW2ubzVaRHCkGNntI5CvpQk7pkYc5snktZftQXJYFIYa5sp
EDu4ZXii3AhPX59siGH7lQ+DKFtprDD2U2gePx03pir1cI8OLFh0AuoW7njsE+4P
vANHCaqHFXKumiFsELl/9A4b0KR71SFICENxKjoyrvH9UXwGve5hXjGGG5HdqRTy
knqrs8LHbrhoCVtG9DLABVhIHtmNk3u7m9umcVvdCRCwPaGujKq5uxzNiwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFshid5P06LJ/CYrjaRnlyV868nEMB8GA1UdIwQY
MBaAFE7DoGLLltmj8hqLLahI+Bxvc7+VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHNPZ1lzdVcyYVB5R29zdHFFajRIRzl6djVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi83ODZiNTEtZTJkZi00ZmQ2LTljOWIt
ZjU2N2MzZTlmNWZmLzEvVHNPZ1lzdVcyYVB5R29zdHFFajRIRzl6djVVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi83ODZiNTEtZTJkZi00ZmQ2LTljOWItZjU2N2MzZTlmNWZm
LzEvVHNPZ1lzdVcyYVB5R29zdHFFajRIRzl6djVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuwmCI5tD
dlMwlNOFPXQdKyFlneApvRoHZiDOZMq5306P4jTwYBk2fulBtUfJB8aUuyM3n7x0
OKzoiI1uBYoHXGdsbtTWXIR3DTANcS0xzm0KRFnVOIqnT2qkzfgNus8ygRKVMk8c
4o41IfBw63aeXpBBDOHFenmI+gOTVUoR+HYpeEaXRNUhQtd09kTsTeCzh5/ya4hw
t9v/CRRdhfQmyy6dubUb52GFpI+FhWkLIQbNdywfi7CSKfpeLkz5bELYQH27MZ50
zV+9wLtlscQmTpz51vC+PfpswvAMUoCs8JxEAFp8r41AAaKyVjhkGHkiAsHHXgSb
UPi3CXEBT3yDyA==
-----END CERTIFICATE-----
Generated at Tue Sep 22 02:21:47 2026 by rpki-client