Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/229c3f-9972-43d6-8e42-5713f1749c1d/1/TpEWK7DZtVG_X3scFe4xWlGmd_Q.mft
File: TpEWK7DZtVG_X3scFe4xWlGmd_Q.mft (raw, json)
Hash identifier: NbTGq4mkNkAAwDXxGeZiHz5Nuem10XHO/0xQDWG0UcI=
Subject key identifier: 10:4F:01:1A:35:08:ED:32:B2:6D:BC:89:D3:32:5A:E3:48:01:D4:F2
Authority key identifier: 4E:91:16:2B:B0:D9:B5:51:BF:5F:7B:1C:15:EE:31:5A:51:A6:77:F4
Certificate issuer: /CN=4e91162bb0d9b551bf5f7b1c15ee315a51a677f4
Certificate serial: 019CAA5921E7241DFAFCA678478C66F40CE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TpEWK7DZtVG_X3scFe4xWlGmd_Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/229c3f-9972-43d6-8e42-5713f1749c1d/1/TpEWK7DZtVG_X3scFe4xWlGmd_Q.mft
Manifest number: 0DB8
Signing time: Sun 01 Mar 2026 17:01:33 +0000
Manifest this update: Sun 01 Mar 2026 17:01:33 +0000
Manifest next update: Mon 02 Mar 2026 17:01:33 +0000
Files and hashes: 1: TpEWK7DZtVG_X3scFe4xWlGmd_Q.crl (hash: RusuV9yLwdFQVq/VCAZnRQuw2i+cThvn8lMECaVsqcs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/229c3f-9972-43d6-8e42-5713f1749c1d/1/TpEWK7DZtVG_X3scFe4xWlGmd_Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/229c3f-9972-43d6-8e42-5713f1749c1d/1/TpEWK7DZtVG_X3scFe4xWlGmd_Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/TpEWK7DZtVG_X3scFe4xWlGmd_Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:59:21:e7:24:1d:fa:fc:a6:78:47:8c:66:f4:0c:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e91162bb0d9b551bf5f7b1c15ee315a51a677f4
Validity
Not Before: Mar 1 17:01:33 2026 GMT
Not After : Mar 2 17:01:33 2026 GMT
Subject: CN=104f011a3508ed32b26dbc89d3325ae34801d4f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:f3:77:de:76:50:1b:c5:a8:35:35:86:c0:20:
47:f9:b0:e9:85:de:4e:a7:8f:2d:a0:c6:63:e9:65:
82:1d:6d:c7:19:1d:16:d3:c9:77:13:2d:67:e9:76:
5e:f1:27:ed:66:04:71:1e:b8:67:7d:73:4f:16:d7:
c1:9f:a8:df:ed:3b:2f:5b:36:5d:8a:e7:b3:b3:35:
f7:39:b1:2c:75:70:71:e6:57:b8:a2:a5:f4:73:30:
b9:65:7f:d7:b2:b3:e9:d4:a9:5b:10:ec:fd:32:26:
62:b1:0a:9c:a1:76:f2:77:91:0c:d3:2a:a2:54:0c:
cc:dd:86:3e:35:ec:10:35:1b:ea:30:15:b7:7d:92:
0c:b0:f2:3a:f6:01:60:53:67:b9:93:ea:d6:e2:c9:
18:d9:ca:52:00:5b:dd:c4:b6:35:18:e6:7e:dc:3d:
2f:29:d7:e3:d8:1f:d0:c3:31:f7:b1:a0:da:3f:49:
af:2e:52:8b:71:27:f3:12:64:2a:15:d0:7f:31:39:
23:f8:1d:20:e3:82:34:04:06:ca:08:44:c9:9f:d0:
e3:b3:ee:3e:7e:fd:a5:3e:e1:4b:fd:76:6a:1e:ca:
72:7f:45:00:28:08:e2:be:bb:b1:96:21:80:49:8d:
c7:63:23:ea:60:02:78:f4:dd:c4:0f:a9:a6:5c:8d:
fd:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:4F:01:1A:35:08:ED:32:B2:6D:BC:89:D3:32:5A:E3:48:01:D4:F2
X509v3 Authority Key Identifier:
keyid:4E:91:16:2B:B0:D9:B5:51:BF:5F:7B:1C:15:EE:31:5A:51:A6:77:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TpEWK7DZtVG_X3scFe4xWlGmd_Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/229c3f-9972-43d6-8e42-5713f1749c1d/1/TpEWK7DZtVG_X3scFe4xWlGmd_Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/229c3f-9972-43d6-8e42-5713f1749c1d/1/TpEWK7DZtVG_X3scFe4xWlGmd_Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:6f:9e:92:a8:5b:79:cd:ae:dc:f6:16:88:ca:6b:83:5f:30:
3f:d7:6a:2d:96:c8:f6:89:ef:5d:1b:26:79:5f:bf:45:8e:c5:
84:cb:45:a0:47:06:e4:76:77:c2:20:00:19:e7:8c:04:45:45:
70:b1:79:5c:4e:53:8c:84:1d:d6:85:35:86:c4:d8:d0:5a:00:
ff:6f:f7:60:10:6a:54:21:23:c8:82:c7:1b:b1:fa:58:bb:85:
9d:28:a0:1f:b3:10:17:03:85:cd:8c:c7:2c:ec:f8:9c:20:6f:
71:86:58:c7:5b:67:31:53:0c:ff:9a:c8:39:db:92:c0:9c:ca:
6a:19:00:70:bc:25:46:63:91:cd:52:13:9b:cc:8a:11:d1:82:
3b:fb:50:52:25:19:d9:b4:44:bf:39:5b:1e:0b:71:ad:92:f5:
46:4d:07:a8:24:55:d1:2a:c0:78:3c:19:cb:5d:09:f6:4d:8b:
3b:51:0a:c5:aa:01:39:db:f8:76:12:f2:90:fb:0b:a5:fb:0f:
b3:aa:c4:41:f5:39:d1:05:b6:fd:30:f3:f7:a1:7e:db:b7:4f:
87:95:07:20:ef:41:39:a9:eb:fa:12:11:50:a5:00:5b:3a:5f:
b5:c3:f9:71:59:0f:74:f7:8b:40:bf:90:ad:75:a7:90:9d:d0:
59:88:3e:a1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqWSHnJB36/KZ4R4xm9AznMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRlOTExNjJiYjBkOWI1NTFiZjVmN2IxYzE1ZWUzMTVhNTFh
Njc3ZjQwHhcNMjYwMzAxMTcwMTMzWhcNMjYwMzAyMTcwMTMzWjAzMTEwLwYDVQQD
EygxMDRmMDExYTM1MDhlZDMyYjI2ZGJjODlkMzMyNWFlMzQ4MDFkNGYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy/N33nZQG8WoNTWGwCBH+bDphd5O
p48toMZj6WWCHW3HGR0W08l3Ey1n6XZe8SftZgRxHrhnfXNPFtfBn6jf7TsvWzZd
iuezszX3ObEsdXBx5le4oqX0czC5ZX/XsrPp1KlbEOz9MiZisQqcoXbyd5EM0yqi
VAzM3YY+NewQNRvqMBW3fZIMsPI69gFgU2e5k+rW4skY2cpSAFvdxLY1GOZ+3D0v
Kdfj2B/QwzH3saDaP0mvLlKLcSfzEmQqFdB/MTkj+B0g44I0BAbKCETJn9Djs+4+
fv2lPuFL/XZqHspyf0UAKAjivruxliGASY3HYyPqYAJ49N3ED6mmXI39BQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBBPARo1CO0ysm28idMyWuNIAdTyMB8GA1UdIwQY
MBaAFE6RFiuw2bVRv197HBXuMVpRpnf0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHBFV0s3RFp0VkdfWDNzY0ZlNHhXbEdtZF9RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi8yMjljM2YtOTk3Mi00M2Q2LThlNDIt
NTcxM2YxNzQ5YzFkLzEvVHBFV0s3RFp0VkdfWDNzY0ZlNHhXbEdtZF9RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi8yMjljM2YtOTk3Mi00M2Q2LThlNDItNTcxM2YxNzQ5YzFk
LzEvVHBFV0s3RFp0VkdfWDNzY0ZlNHhXbEdtZF9RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfW+ekqhb
ec2u3PYWiMprg18wP9dqLZbI9onvXRsmeV+/RY7FhMtFoEcG5HZ3wiAAGeeMBEVF
cLF5XE5TjIQd1oU1hsTY0FoA/2/3YBBqVCEjyILHG7H6WLuFnSigH7MQFwOFzYzH
LOz4nCBvcYZYx1tnMVMM/5rIOduSwJzKahkAcLwlRmORzVITm8yKEdGCO/tQUiUZ
2bREvzlbHgtxrZL1Rk0HqCRV0SrAeDwZy10J9k2LO1EKxaoBOdv4dhLykPsLpfsP
s6rEQfU50QW2/TDz96F+27dPh5UHIO9BOanr+hIRUKUAWzpftcP5cVkPdPeLQL+Q
rXWnkJ3QWYg+oQ==
-----END CERTIFICATE-----
Generated at Sun Mar 1 23:59:39 2026 by rpki-client