Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/ee29a6-691d-4b0c-ad63-94c8254bd3b7/1/TBsMQJaQgJV_zO4fuKP7S7OL9dw.mft
File: TBsMQJaQgJV_zO4fuKP7S7OL9dw.mft (raw, json)
Hash identifier: +0RzZnkwGYuHRnaexFJzx851cc2+6uQTmOnbSZu2uw8=
Subject key identifier: F3:8B:BB:5C:8A:6F:3B:4B:02:C0:7F:81:4D:F9:EC:CE:99:E5:E0:CD
Authority key identifier: 4C:1B:0C:40:96:90:80:95:7F:CC:EE:1F:B8:A3:FB:4B:B3:8B:F5:DC
Certificate issuer: /CN=4c1b0c40969080957fccee1fb8a3fb4bb38bf5dc
Certificate serial: 019DA41CC59B6DB05551DBEA990767F59DC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TBsMQJaQgJV_zO4fuKP7S7OL9dw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/ee29a6-691d-4b0c-ad63-94c8254bd3b7/1/TBsMQJaQgJV_zO4fuKP7S7OL9dw.mft
Manifest number: 15B5
Signing time: Sun 19 Apr 2026 05:00:42 +0000
Manifest this update: Sun 19 Apr 2026 05:00:42 +0000
Manifest next update: Mon 20 Apr 2026 05:00:42 +0000
Files and hashes: 1: B0kfMqpAGqXnYaMTrQLvbBjvxOk.roa (hash: YEV3wXNHcOYmzWyvVh84es9QxYCJzyckUbH9jX+YQQA=)
2: TBsMQJaQgJV_zO4fuKP7S7OL9dw.crl (hash: pky67kGT4BfKUPsF1FkgJ6D1lgoeWG+WVLEKu48pZYA=)
3: YA-H3bfE3r6ihPzDZtgenypbPbg.roa (hash: pUTlAIWeqA52q3MAJOIPYUZ8tJQ/eIlG+BT4v4cwsGM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/ee29a6-691d-4b0c-ad63-94c8254bd3b7/1/TBsMQJaQgJV_zO4fuKP7S7OL9dw.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/ee29a6-691d-4b0c-ad63-94c8254bd3b7/1/TBsMQJaQgJV_zO4fuKP7S7OL9dw.mft
rsync://rpki.ripe.net/repository/DEFAULT/TBsMQJaQgJV_zO4fuKP7S7OL9dw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:1c:c5:9b:6d:b0:55:51:db:ea:99:07:67:f5:9d:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c1b0c40969080957fccee1fb8a3fb4bb38bf5dc
Validity
Not Before: Apr 19 05:00:42 2026 GMT
Not After : Apr 20 05:00:42 2026 GMT
Subject: CN=f38bbb5c8a6f3b4b02c07f814df9ecce99e5e0cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:81:25:68:dc:e5:10:92:13:c7:7d:fc:28:75:
11:3f:5d:03:48:39:52:7f:57:90:61:ce:41:f8:f1:
3a:a5:ca:dc:f8:3f:ae:61:cc:22:42:57:23:f9:2b:
5b:68:b1:71:89:47:f4:6f:35:85:8c:fa:5c:56:03:
9f:a9:1d:b3:73:fb:29:ca:9a:89:38:db:7e:1d:01:
33:34:4b:6f:49:39:31:28:cf:39:34:8a:a6:41:64:
c1:6b:f5:58:c2:8b:69:ef:e9:e2:d9:e4:68:32:a2:
19:a4:a8:4a:fb:bf:09:de:4d:00:52:d8:56:c8:24:
78:23:c1:e7:f3:f6:c1:13:f4:d4:da:7f:5b:4f:4a:
41:bf:cd:fd:31:19:a2:03:d2:fe:4a:6d:f4:c3:01:
4c:78:09:5d:b4:96:eb:25:09:27:9c:9a:e5:4c:2a:
e7:82:7e:d5:50:cb:25:7b:54:6d:b4:f2:41:e0:1f:
46:6e:29:a6:95:3f:60:cc:51:7f:ab:23:93:3d:7d:
57:3e:4e:56:76:a3:77:9c:f3:6a:ce:8d:d8:29:8f:
40:a7:89:53:3c:a9:a6:0e:c3:04:78:9d:f5:3f:fc:
be:b9:91:0c:d8:54:d8:3d:8a:87:b3:40:29:d1:f3:
94:14:fa:40:c4:0b:5c:72:4d:db:b2:fa:02:b6:b0:
52:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:8B:BB:5C:8A:6F:3B:4B:02:C0:7F:81:4D:F9:EC:CE:99:E5:E0:CD
X509v3 Authority Key Identifier:
keyid:4C:1B:0C:40:96:90:80:95:7F:CC:EE:1F:B8:A3:FB:4B:B3:8B:F5:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TBsMQJaQgJV_zO4fuKP7S7OL9dw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/ee29a6-691d-4b0c-ad63-94c8254bd3b7/1/TBsMQJaQgJV_zO4fuKP7S7OL9dw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/ee29a6-691d-4b0c-ad63-94c8254bd3b7/1/TBsMQJaQgJV_zO4fuKP7S7OL9dw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:78:12:fc:d7:0f:1a:75:6c:88:5e:98:92:10:0d:c9:d4:36:
70:cf:b0:17:37:19:59:dd:cf:1f:66:9a:ed:ed:29:7b:0f:92:
70:3a:19:44:f4:37:47:73:b2:7e:74:ae:3e:d0:7f:9f:84:6e:
c8:9f:88:10:3f:13:61:2a:c1:73:d0:09:3f:ce:d7:7a:27:e7:
9e:e4:ea:5a:9c:1c:21:43:05:fb:75:44:f7:92:4d:fb:e3:40:
ff:ee:63:53:a7:3d:56:60:13:68:c6:e2:5f:6b:1e:b8:f3:fd:
5f:f2:86:9c:84:44:61:7c:a6:07:eb:c2:bc:01:39:5c:4a:f5:
da:a4:44:82:a3:67:b4:f1:16:94:27:9e:e9:62:c9:52:5e:45:
9f:c2:8a:de:9a:1c:06:6e:43:b6:c2:86:74:6c:ce:b7:dc:ab:
b0:f1:e9:75:fe:23:20:60:13:f4:30:0f:19:bd:0a:19:c9:25:
0c:07:06:4a:62:1a:c5:5b:9e:b1:c4:cd:df:8a:d0:b0:38:d4:
e7:8a:72:fb:2d:5d:7f:cd:82:81:5f:0c:06:df:8e:7e:e2:ec:
be:1b:eb:9b:cf:9d:9e:fb:51:49:45:54:89:38:51:b3:81:6b:
c3:0d:a4:fe:73:d3:fa:dd:61:cc:16:64:00:6b:7f:2d:db:18:
ee:34:3e:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:22:55 2026 by rpki-client