Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/bbedbe-8821-4bd8-bbcc-3adf9b61347d/1/TPzH4BfCyfdjLacpNHa7fkowNlo.mft
File: TPzH4BfCyfdjLacpNHa7fkowNlo.mft (raw, json)
Hash identifier: qB3FtcGa1sCc2WJzu4lFNcfP43T3WUJh6Ymw+Fqkcdg=
Subject key identifier: 01:AB:1D:B3:FD:B3:EB:23:BD:FD:F5:72:09:06:35:9C:F7:F0:A8:AD
Authority key identifier: 4C:FC:C7:E0:17:C2:C9:F7:63:2D:A7:29:34:76:BB:7E:4A:30:36:5A
Certificate issuer: /CN=4cfcc7e017c2c9f7632da7293476bb7e4a30365a
Certificate serial: 019CAAFD0687C60776D8AEF53D2015921AD4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TPzH4BfCyfdjLacpNHa7fkowNlo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/bbedbe-8821-4bd8-bbcc-3adf9b61347d/1/TPzH4BfCyfdjLacpNHa7fkowNlo.mft
Manifest number: 1848
Signing time: Sun 01 Mar 2026 20:00:34 +0000
Manifest this update: Sun 01 Mar 2026 20:00:34 +0000
Manifest next update: Mon 02 Mar 2026 20:00:34 +0000
Files and hashes: 1: 4rWRMTAx37_lQCzr5hcZsju6dqw.roa (hash: W2xQvjb4BYluc6hJ83tM86YR+fMCZk+Sc0Dq669prBQ=)
2: TPzH4BfCyfdjLacpNHa7fkowNlo.crl (hash: R/AIAHHqrcqUU+xGEgqCgKu3XIr1yda254JzZtSDjfo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/bbedbe-8821-4bd8-bbcc-3adf9b61347d/1/TPzH4BfCyfdjLacpNHa7fkowNlo.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/bbedbe-8821-4bd8-bbcc-3adf9b61347d/1/TPzH4BfCyfdjLacpNHa7fkowNlo.mft
rsync://rpki.ripe.net/repository/DEFAULT/TPzH4BfCyfdjLacpNHa7fkowNlo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:06:87:c6:07:76:d8:ae:f5:3d:20:15:92:1a:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cfcc7e017c2c9f7632da7293476bb7e4a30365a
Validity
Not Before: Mar 1 20:00:34 2026 GMT
Not After : Mar 2 20:00:34 2026 GMT
Subject: CN=01ab1db3fdb3eb23bdfdf5720906359cf7f0a8ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:8a:ca:b1:3a:1a:05:c9:17:91:c1:16:46:ca:
ff:eb:fd:c8:2d:b9:5b:0c:fd:94:7c:07:e4:1d:ec:
4c:3c:e0:60:ec:c8:63:6d:8b:74:65:52:82:47:f7:
85:18:f8:a8:43:c6:04:9d:fd:26:e9:6d:71:34:8f:
85:ff:e9:12:57:72:95:29:ad:c3:32:44:5a:73:92:
fd:43:d3:15:e8:45:a7:6c:59:19:54:f9:a7:b2:18:
12:a4:47:72:73:52:b2:55:e0:a8:de:fe:f6:e4:c5:
86:54:da:11:58:57:a4:65:44:bd:f0:ab:36:06:f4:
44:5c:20:3c:70:1e:36:f4:f3:bf:01:e8:ed:7c:1c:
18:dd:64:3f:9d:e9:02:06:c7:14:85:f4:1a:5f:20:
f0:80:92:ce:65:4a:f5:2d:58:3e:89:60:1a:03:2f:
e1:34:3f:e6:0d:07:bc:94:66:c7:68:bb:d3:ef:be:
88:d6:44:23:e5:48:e8:fa:0b:e6:93:ad:5d:52:a8:
2e:18:26:96:11:d8:7b:20:da:f2:75:c3:c0:52:be:
9c:a2:99:61:c0:7a:05:49:95:81:31:ab:58:23:b1:
54:52:8e:a8:e6:6c:80:6e:44:9f:4a:02:ec:f7:40:
1d:be:04:b3:46:aa:8e:c4:67:a8:3e:ce:dc:8e:bf:
33:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:AB:1D:B3:FD:B3:EB:23:BD:FD:F5:72:09:06:35:9C:F7:F0:A8:AD
X509v3 Authority Key Identifier:
keyid:4C:FC:C7:E0:17:C2:C9:F7:63:2D:A7:29:34:76:BB:7E:4A:30:36:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TPzH4BfCyfdjLacpNHa7fkowNlo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/bbedbe-8821-4bd8-bbcc-3adf9b61347d/1/TPzH4BfCyfdjLacpNHa7fkowNlo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/bbedbe-8821-4bd8-bbcc-3adf9b61347d/1/TPzH4BfCyfdjLacpNHa7fkowNlo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:6b:93:21:5f:40:0c:4e:4d:46:bd:3d:df:ef:b7:5f:bb:fe:
c6:53:ac:f1:96:35:1d:76:55:b7:81:ef:86:3d:0f:a5:59:62:
40:c3:09:22:a0:84:61:5f:a0:73:a4:07:f6:4f:b5:85:3c:2c:
ad:5d:31:1c:54:76:aa:69:ab:20:4c:ee:08:a5:98:52:d9:67:
4f:10:97:4c:83:87:10:7d:7d:2f:bb:0a:93:d5:49:ef:39:0b:
23:c6:48:ec:a3:a9:e2:b8:9c:1c:8e:ef:71:d2:8b:45:24:b7:
0e:29:35:c9:54:eb:31:23:b2:fb:93:f8:92:bb:b9:a7:9f:ce:
87:f1:01:61:c2:f2:bf:35:87:1c:87:21:6c:c3:1a:10:86:91:
fa:01:34:65:0e:94:c7:a9:a8:a8:f2:11:b8:f2:08:17:69:a4:
5a:87:2d:58:37:e1:3a:33:70:91:62:74:d6:35:b0:4e:4e:f0:
bd:13:44:64:b2:7d:40:53:6a:b6:98:10:59:3a:33:57:96:86:
11:2e:fe:f2:33:05:f1:e9:bb:24:76:50:ec:38:73:73:36:f1:
91:6e:a0:23:4e:22:74:53:25:81:5e:13:b5:90:81:4c:76:31:
2d:af:80:62:86:87:4e:0c:40:61:5d:1d:a0:e7:7c:82:7e:c3:
c6:b2:7e:8b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyq/QaHxgd22K71PSAVkhrUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjZmNjN2UwMTdjMmM5Zjc2MzJkYTcyOTM0NzZiYjdlNGEz
MDM2NWEwHhcNMjYwMzAxMjAwMDM0WhcNMjYwMzAyMjAwMDM0WjAzMTEwLwYDVQQD
EygwMWFiMWRiM2ZkYjNlYjIzYmRmZGY1NzIwOTA2MzU5Y2Y3ZjBhOGFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmIrKsToaBckXkcEWRsr/6/3ILblb
DP2UfAfkHexMPOBg7MhjbYt0ZVKCR/eFGPioQ8YEnf0m6W1xNI+F/+kSV3KVKa3D
MkRac5L9Q9MV6EWnbFkZVPmnshgSpEdyc1KyVeCo3v725MWGVNoRWFekZUS98Ks2
BvREXCA8cB429PO/AejtfBwY3WQ/nekCBscUhfQaXyDwgJLOZUr1LVg+iWAaAy/h
ND/mDQe8lGbHaLvT776I1kQj5Ujo+gvmk61dUqguGCaWEdh7INrydcPAUr6coplh
wHoFSZWBMatYI7FUUo6o5myAbkSfSgLs90AdvgSzRqqOxGeoPs7cjr8z0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAGrHbP9s+sjvf31cgkGNZz38KitMB8GA1UdIwQY
MBaAFEz8x+AXwsn3Yy2nKTR2u35KMDZaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVFB6SDRCZkN5ZmRqTGFjcE5IYTdma293TmxvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy9iYmVkYmUtODgyMS00YmQ4LWJiY2Mt
M2FkZjliNjEzNDdkLzEvVFB6SDRCZkN5ZmRqTGFjcE5IYTdma293TmxvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNy9iYmVkYmUtODgyMS00YmQ4LWJiY2MtM2FkZjliNjEzNDdk
LzEvVFB6SDRCZkN5ZmRqTGFjcE5IYTdma293TmxvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATmuTIV9A
DE5NRr093++3X7v+xlOs8ZY1HXZVt4Hvhj0PpVliQMMJIqCEYV+gc6QH9k+1hTws
rV0xHFR2qmmrIEzuCKWYUtlnTxCXTIOHEH19L7sKk9VJ7zkLI8ZI7KOp4ricHI7v
cdKLRSS3Dik1yVTrMSOy+5P4kru5p5/Oh/EBYcLyvzWHHIchbMMaEIaR+gE0ZQ6U
x6moqPIRuPIIF2mkWoctWDfhOjNwkWJ01jWwTk7wvRNEZLJ9QFNqtpgQWTozV5aG
ES7+8jMF8em7JHZQ7DhzczbxkW6gI04idFMlgV4TtZCBTHYxLa+AYoaHTgxAYV0d
oOd8gn7DxrJ+iw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 01:47:38 2026 by rpki-client