Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/ee29a6-691d-4b0c-ad63-94c8254bd3b7/1/TBsMQJaQgJV_zO4fuKP7S7OL9dw.mft
File: TBsMQJaQgJV_zO4fuKP7S7OL9dw.mft (raw, json)
Hash identifier: 5fpPacpW5g+NjpIYC/cMr3YgFQ9OacaAAjcl72yvPis=
Subject key identifier: 1E:B9:87:8D:44:E1:7E:DC:C9:27:0C:12:FC:30:25:62:73:CF:BA:66
Authority key identifier: 4C:1B:0C:40:96:90:80:95:7F:CC:EE:1F:B8:A3:FB:4B:B3:8B:F5:DC
Certificate issuer: /CN=4c1b0c40969080957fccee1fb8a3fb4bb38bf5dc
Certificate serial: 019FA9AC4E61A06548E5179114AECE182506
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TBsMQJaQgJV_zO4fuKP7S7OL9dw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/ee29a6-691d-4b0c-ad63-94c8254bd3b7/1/TBsMQJaQgJV_zO4fuKP7S7OL9dw.mft
Manifest number: 16C1
Signing time: Tue 28 Jul 2026 17:01:09 +0000
Manifest this update: Tue 28 Jul 2026 17:01:09 +0000
Manifest next update: Wed 29 Jul 2026 17:01:09 +0000
Files and hashes: 1: B0kfMqpAGqXnYaMTrQLvbBjvxOk.roa (hash: YEV3wXNHcOYmzWyvVh84es9QxYCJzyckUbH9jX+YQQA=)
2: TBsMQJaQgJV_zO4fuKP7S7OL9dw.crl (hash: 3XoGtXAQjkv+ImTDJ6fA3B/GZdVmJimQ8PbxWzuQt+U=)
3: YA-H3bfE3r6ihPzDZtgenypbPbg.roa (hash: pUTlAIWeqA52q3MAJOIPYUZ8tJQ/eIlG+BT4v4cwsGM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/ee29a6-691d-4b0c-ad63-94c8254bd3b7/1/TBsMQJaQgJV_zO4fuKP7S7OL9dw.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/ee29a6-691d-4b0c-ad63-94c8254bd3b7/1/TBsMQJaQgJV_zO4fuKP7S7OL9dw.mft
rsync://rpki.ripe.net/repository/DEFAULT/TBsMQJaQgJV_zO4fuKP7S7OL9dw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:ac:4e:61:a0:65:48:e5:17:91:14:ae:ce:18:25:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c1b0c40969080957fccee1fb8a3fb4bb38bf5dc
Validity
Not Before: Jul 28 17:01:09 2026 GMT
Not After : Jul 29 17:01:09 2026 GMT
Subject: CN=1eb9878d44e17edcc9270c12fc30256273cfba66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:40:97:82:3e:c0:77:72:58:32:5d:04:2f:23:
b1:fb:a4:fe:28:f9:a0:fb:f3:45:92:56:8c:52:b6:
70:1f:25:7a:a8:19:40:f7:02:0c:50:a6:69:e1:47:
a9:90:e8:f0:9f:4c:f4:28:3b:40:57:e5:d7:2f:64:
a7:92:0b:03:d2:fd:82:6b:29:d2:40:63:63:7f:29:
21:7f:8c:0b:ce:27:75:2b:9d:20:f4:42:7a:0e:d6:
18:68:47:06:22:06:90:8d:2f:91:76:1c:38:a3:6d:
fa:db:76:16:25:45:4a:05:57:f8:aa:f7:1c:93:3b:
23:89:ac:00:05:e9:03:fe:d2:8d:e6:d8:68:d9:7e:
53:36:a6:23:8e:bb:fa:a6:13:22:30:c5:e7:86:69:
08:8c:f7:6c:09:a6:0e:0d:a7:79:31:e6:75:2f:9a:
2a:72:98:6e:b3:04:9d:44:c7:d9:86:c5:7d:5d:ea:
19:24:6a:98:d3:c8:53:31:1a:85:33:c4:c6:8d:d4:
cf:df:2e:6b:d6:9c:f4:c6:76:92:5e:bd:79:aa:9f:
b2:fa:61:b3:4a:07:55:e0:69:9d:96:dd:68:ce:cb:
97:c2:d6:27:a8:b8:a9:1b:63:ae:94:f6:33:05:2d:
0a:75:2c:de:64:21:e8:00:70:f4:ab:ca:c7:16:ce:
fb:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:B9:87:8D:44:E1:7E:DC:C9:27:0C:12:FC:30:25:62:73:CF:BA:66
X509v3 Authority Key Identifier:
keyid:4C:1B:0C:40:96:90:80:95:7F:CC:EE:1F:B8:A3:FB:4B:B3:8B:F5:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TBsMQJaQgJV_zO4fuKP7S7OL9dw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/ee29a6-691d-4b0c-ad63-94c8254bd3b7/1/TBsMQJaQgJV_zO4fuKP7S7OL9dw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/ee29a6-691d-4b0c-ad63-94c8254bd3b7/1/TBsMQJaQgJV_zO4fuKP7S7OL9dw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:72:bf:88:63:39:7a:9d:de:93:b2:56:91:bd:9d:8c:92:a6:
3b:8d:14:f2:04:2f:a5:0e:47:81:49:85:1b:b1:86:09:b4:af:
3e:f3:17:46:af:56:27:7b:d3:be:86:06:74:4e:d6:1a:96:b7:
73:cd:97:d4:af:02:70:2c:93:55:5a:17:73:54:96:c9:2f:ab:
e0:c5:08:49:2c:55:45:6c:a1:b3:81:4d:b7:d7:3f:55:b6:64:
8d:9b:62:f1:c9:08:7d:24:ec:a0:2e:cb:2f:c9:73:8e:8b:ac:
b4:fa:89:9c:2b:24:b1:b5:53:79:6f:ce:81:18:12:8a:23:c4:
39:2f:43:f1:e5:33:eb:1b:f3:52:0a:b7:d9:19:a3:5f:5a:77:
df:aa:5e:5c:fd:e1:38:d4:4f:73:86:88:64:15:73:f9:b2:bc:
d2:a2:a8:23:33:c6:46:5d:89:66:8b:5b:4d:04:99:bd:f2:ea:
5d:95:cf:92:52:97:8d:81:ae:43:79:d4:d3:93:a5:7d:e1:74:
f1:e7:5d:af:b4:cb:06:4d:93:ff:4a:45:67:f2:c3:e3:74:16:
36:88:9b:5a:71:52:81:71:73:37:0b:55:31:09:a4:06:45:3b:
a0:91:ac:ef:e6:16:73:25:c8:72:b3:e6:87:8b:b1:8e:2f:c1:
4f:94:bc:53
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+prE5hoGVI5ReRFK7OGCUGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjMWIwYzQwOTY5MDgwOTU3ZmNjZWUxZmI4YTNmYjRiYjM4
YmY1ZGMwHhcNMjYwNzI4MTcwMTA5WhcNMjYwNzI5MTcwMTA5WjAzMTEwLwYDVQQD
EygxZWI5ODc4ZDQ0ZTE3ZWRjYzkyNzBjMTJmYzMwMjU2MjczY2ZiYTY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3ECXgj7Ad3JYMl0ELyOx+6T+KPmg
+/NFklaMUrZwHyV6qBlA9wIMUKZp4UepkOjwn0z0KDtAV+XXL2SnkgsD0v2CaynS
QGNjfykhf4wLzid1K50g9EJ6DtYYaEcGIgaQjS+Rdhw4o23623YWJUVKBVf4qvcc
kzsjiawABekD/tKN5tho2X5TNqYjjrv6phMiMMXnhmkIjPdsCaYODad5MeZ1L5oq
cphuswSdRMfZhsV9XeoZJGqY08hTMRqFM8TGjdTP3y5r1pz0xnaSXr15qp+y+mGz
SgdV4Gmdlt1ozsuXwtYnqLipG2OulPYzBS0KdSzeZCHoAHD0q8rHFs77vwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB65h41E4X7cyScMEvwwJWJzz7pmMB8GA1UdIwQY
MBaAFEwbDECWkICVf8zuH7ij+0uzi/XcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVEJzTVFKYVFnSlZfek80ZnVLUDdTN09MOWR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi9lZTI5YTYtNjkxZC00YjBjLWFkNjMt
OTRjODI1NGJkM2I3LzEvVEJzTVFKYVFnSlZfek80ZnVLUDdTN09MOWR3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZi9lZTI5YTYtNjkxZC00YjBjLWFkNjMtOTRjODI1NGJkM2I3
LzEvVEJzTVFKYVFnSlZfek80ZnVLUDdTN09MOWR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGnK/iGM5
ep3ek7JWkb2djJKmO40U8gQvpQ5HgUmFG7GGCbSvPvMXRq9WJ3vTvoYGdE7WGpa3
c82X1K8CcCyTVVoXc1SWyS+r4MUISSxVRWyhs4FNt9c/VbZkjZti8ckIfSTsoC7L
L8lzjoustPqJnCsksbVTeW/OgRgSiiPEOS9D8eUz6xvzUgq32RmjX1p336peXP3h
ONRPc4aIZBVz+bK80qKoIzPGRl2JZotbTQSZvfLqXZXPklKXjYGuQ3nU05OlfeF0
8eddr7TLBk2T/0pFZ/LD43QWNoibWnFSgXFzNwtVMQmkBkU7oJGs7+YWcyXIcrPm
h4uxji/BT5S8Uw==
-----END CERTIFICATE-----
Generated at Tue Jul 28 23:21:50 2026 by rpki-client