Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/778af2-b2c0-4704-9fa2-2841013bccb4/1/TCowVuYlkkn0ZvAFW7Ebg6ajCkI.mft
File: TCowVuYlkkn0ZvAFW7Ebg6ajCkI.mft (raw, json)
Hash identifier: uqDIFkpLxSz0Hkjav9esKzLJndVKWjWvI12UwsPiIXg=
Subject key identifier: FC:E4:A5:AB:20:5A:8F:C6:01:8B:18:9B:6F:0F:BB:77:81:27:93:B5
Authority key identifier: 4C:2A:30:56:E6:25:92:49:F4:66:F0:05:5B:B1:1B:83:A6:A3:0A:42
Certificate issuer: /CN=4c2a3056e6259249f466f0055bb11b83a6a30a42
Certificate serial: 019CAAC6EA4A42D503F2F6CA3554D5F43082
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TCowVuYlkkn0ZvAFW7Ebg6ajCkI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/778af2-b2c0-4704-9fa2-2841013bccb4/1/TCowVuYlkkn0ZvAFW7Ebg6ajCkI.mft
Manifest number: 0795
Signing time: Sun 01 Mar 2026 19:01:28 +0000
Manifest this update: Sun 01 Mar 2026 19:01:28 +0000
Manifest next update: Mon 02 Mar 2026 19:01:28 +0000
Files and hashes: 1: TCowVuYlkkn0ZvAFW7Ebg6ajCkI.crl (hash: F1QM+BOw37XhxFnBXFK6RkcUKEtlD53VPJTmgluSF0c=)
2: eN5E1N2fbNIwZ9RyYdP9j32arcA.roa (hash: Vg/cG2oIlWZ3XVorMkNOVvWySOFv00wWS3oGrbEzxmU=)
3: w9YEoSGGw5FqZxEAWpHoaM4fdnU.roa (hash: +H9ZxdN0LwsnaJ4J/ES/yJYI9G3YZQK2l2602ElBkSM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/778af2-b2c0-4704-9fa2-2841013bccb4/1/TCowVuYlkkn0ZvAFW7Ebg6ajCkI.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/778af2-b2c0-4704-9fa2-2841013bccb4/1/TCowVuYlkkn0ZvAFW7Ebg6ajCkI.mft
rsync://rpki.ripe.net/repository/DEFAULT/TCowVuYlkkn0ZvAFW7Ebg6ajCkI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:ea:4a:42:d5:03:f2:f6:ca:35:54:d5:f4:30:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c2a3056e6259249f466f0055bb11b83a6a30a42
Validity
Not Before: Mar 1 19:01:28 2026 GMT
Not After : Mar 2 19:01:28 2026 GMT
Subject: CN=fce4a5ab205a8fc6018b189b6f0fbb77812793b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:a6:7a:8e:e0:c6:46:f1:07:fa:79:2f:30:46:
43:1d:53:c6:d8:3b:61:d6:06:c3:62:00:28:ab:78:
1a:c1:55:9a:24:b7:9f:a6:a6:d3:6c:37:0c:e3:c0:
2f:ec:d3:bd:21:9a:3d:85:3d:5c:43:59:39:b2:53:
fe:a3:28:ba:19:44:cf:f2:be:08:d8:bc:5c:6a:39:
ec:60:98:eb:a0:11:bb:bd:27:83:5b:08:68:a0:3d:
2e:0a:a5:07:07:2f:bb:37:27:96:59:a6:4c:35:88:
89:3b:24:de:5e:05:40:19:11:54:b0:fb:3f:06:93:
a4:00:0e:38:1e:06:94:e5:b6:88:71:5f:08:ca:5a:
a8:d8:e7:d9:f7:aa:f6:ce:b6:72:8f:56:b7:a7:ae:
c0:01:ad:b2:52:9f:94:a4:de:c4:0a:2f:33:97:05:
6f:cf:16:c0:70:c5:00:6e:d1:ae:55:e0:4a:0c:11:
6f:f5:a3:6b:29:d2:51:c5:1c:47:7e:16:4e:69:bf:
bf:7c:9c:4a:47:41:69:5a:e5:c2:f0:e3:6c:aa:ef:
92:66:60:58:59:f7:10:fa:71:a7:16:02:bd:63:a8:
20:6e:57:81:ed:11:5d:e9:7f:3f:9b:1e:ed:05:a5:
7d:18:ff:c7:af:92:a9:78:ef:af:1e:9b:4a:d3:8f:
99:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:E4:A5:AB:20:5A:8F:C6:01:8B:18:9B:6F:0F:BB:77:81:27:93:B5
X509v3 Authority Key Identifier:
keyid:4C:2A:30:56:E6:25:92:49:F4:66:F0:05:5B:B1:1B:83:A6:A3:0A:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TCowVuYlkkn0ZvAFW7Ebg6ajCkI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/778af2-b2c0-4704-9fa2-2841013bccb4/1/TCowVuYlkkn0ZvAFW7Ebg6ajCkI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/778af2-b2c0-4704-9fa2-2841013bccb4/1/TCowVuYlkkn0ZvAFW7Ebg6ajCkI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:a5:ad:1d:eb:fb:3b:d8:12:9f:9c:a7:0f:59:ac:bb:cb:ac:
fe:c9:d9:c8:c4:d6:04:48:93:a5:cf:47:cc:2e:b1:c8:35:05:
20:7c:11:61:f1:37:2b:a0:25:66:bc:64:52:bc:77:5e:c2:6c:
5c:3c:0e:11:ba:68:4a:28:80:df:50:04:06:57:f5:dc:53:bc:
0f:da:21:52:33:78:d5:1d:05:f3:71:0a:ff:af:9d:74:9d:e2:
97:7a:b1:59:32:12:15:5e:06:b1:f1:ac:78:71:c6:5a:f4:9f:
57:0f:5a:f5:dc:12:2f:8d:0f:40:ba:1c:06:e1:3d:c2:cb:0d:
d8:af:6f:a7:0b:31:db:ba:2b:3c:b4:ce:3a:52:c7:22:7a:76:
5e:ed:3a:8c:5d:b4:4f:7d:7c:62:0e:63:53:63:6c:54:b4:e6:
f3:16:89:be:6d:35:1a:cc:e3:8a:17:9b:0b:ea:d8:60:d8:9e:
68:ba:08:4c:19:8c:e8:50:d6:80:33:ef:dc:28:3a:9d:53:49:
81:1b:fa:31:2d:d1:95:d1:65:82:94:55:8b:b9:43:18:15:c8:
a2:52:16:a8:e2:98:b7:15:20:ab:36:d5:f6:7c:31:a0:81:2b:
43:00:71:cd:3e:0c:c1:fe:ba:69:60:fa:e2:09:f3:1b:b5:61:
95:cc:05:c4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqxupKQtUD8vbKNVTV9DCCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjMmEzMDU2ZTYyNTkyNDlmNDY2ZjAwNTViYjExYjgzYTZh
MzBhNDIwHhcNMjYwMzAxMTkwMTI4WhcNMjYwMzAyMTkwMTI4WjAzMTEwLwYDVQQD
EyhmY2U0YTVhYjIwNWE4ZmM2MDE4YjE4OWI2ZjBmYmI3NzgxMjc5M2I1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl6Z6juDGRvEH+nkvMEZDHVPG2Dth
1gbDYgAoq3gawVWaJLefpqbTbDcM48Av7NO9IZo9hT1cQ1k5slP+oyi6GUTP8r4I
2LxcajnsYJjroBG7vSeDWwhooD0uCqUHBy+7NyeWWaZMNYiJOyTeXgVAGRFUsPs/
BpOkAA44HgaU5baIcV8Iylqo2OfZ96r2zrZyj1a3p67AAa2yUp+UpN7ECi8zlwVv
zxbAcMUAbtGuVeBKDBFv9aNrKdJRxRxHfhZOab+/fJxKR0FpWuXC8ONsqu+SZmBY
WfcQ+nGnFgK9Y6ggbleB7RFd6X8/mx7tBaV9GP/Hr5KpeO+vHptK04+ZawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPzkpasgWo/GAYsYm28Pu3eBJ5O1MB8GA1UdIwQY
MBaAFEwqMFbmJZJJ9GbwBVuxG4OmowpCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVENvd1Z1WWxra24wWnZBRlc3RWJnNmFqQ2tJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC83NzhhZjItYjJjMC00NzA0LTlmYTIt
Mjg0MTAxM2JjY2I0LzEvVENvd1Z1WWxra24wWnZBRlc3RWJnNmFqQ2tJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC83NzhhZjItYjJjMC00NzA0LTlmYTItMjg0MTAxM2JjY2I0
LzEvVENvd1Z1WWxra24wWnZBRlc3RWJnNmFqQ2tJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgKWtHev7
O9gSn5ynD1msu8us/snZyMTWBEiTpc9HzC6xyDUFIHwRYfE3K6AlZrxkUrx3XsJs
XDwOEbpoSiiA31AEBlf13FO8D9ohUjN41R0F83EK/6+ddJ3il3qxWTISFV4GsfGs
eHHGWvSfVw9a9dwSL40PQLocBuE9wssN2K9vpwsx27orPLTOOlLHInp2Xu06jF20
T318Yg5jU2NsVLTm8xaJvm01GszjihebC+rYYNieaLoITBmM6FDWgDPv3Cg6nVNJ
gRv6MS3RldFlgpRVi7lDGBXIolIWqOKYtxUgqzbV9nwxoIErQwBxzT4Mwf66aWD6
4gnzG7VhlcwFxA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:07:14 2026 by rpki-client