Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cf/ee29a6-691d-4b0c-ad63-94c8254bd3b7/1/TBsMQJaQgJV_zO4fuKP7S7OL9dw.mft
File: TBsMQJaQgJV_zO4fuKP7S7OL9dw.mft (raw, json)
Hash identifier: XzHwIn5EeJcQ5DjWOK45KfWSQ6Us4P9CAdmX17O8NNs=
Subject key identifier: 65:6A:07:D3:F3:8D:2E:01:8C:3A:B0:50:15:29:AD:55:6F:FE:F9:6D
Authority key identifier: 4C:1B:0C:40:96:90:80:95:7F:CC:EE:1F:B8:A3:FB:4B:B3:8B:F5:DC
Certificate issuer: /CN=4c1b0c40969080957fccee1fb8a3fb4bb38bf5dc
Certificate serial: 01A0CB59BA687417DAE4B0AC2A829F4903E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TBsMQJaQgJV_zO4fuKP7S7OL9dw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/ee29a6-691d-4b0c-ad63-94c8254bd3b7/1/TBsMQJaQgJV_zO4fuKP7S7OL9dw.mft
Manifest number: 1757
Signing time: Tue 22 Sep 2026 23:00:49 +0000
Manifest this update: Tue 22 Sep 2026 23:00:49 +0000
Manifest next update: Wed 23 Sep 2026 23:00:49 +0000
Files and hashes: 1: B0kfMqpAGqXnYaMTrQLvbBjvxOk.roa (hash: YEV3wXNHcOYmzWyvVh84es9QxYCJzyckUbH9jX+YQQA=)
2: TBsMQJaQgJV_zO4fuKP7S7OL9dw.crl (hash: PANfu+YKUch0CNkU31rGa0T2jFpRPUcqmXPWlh9Y/VU=)
3: YA-H3bfE3r6ihPzDZtgenypbPbg.roa (hash: pUTlAIWeqA52q3MAJOIPYUZ8tJQ/eIlG+BT4v4cwsGM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/ee29a6-691d-4b0c-ad63-94c8254bd3b7/1/TBsMQJaQgJV_zO4fuKP7S7OL9dw.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/ee29a6-691d-4b0c-ad63-94c8254bd3b7/1/TBsMQJaQgJV_zO4fuKP7S7OL9dw.mft
rsync://rpki.ripe.net/repository/DEFAULT/TBsMQJaQgJV_zO4fuKP7S7OL9dw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 22:31:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cb:59:ba:68:74:17:da:e4:b0:ac:2a:82:9f:49:03:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c1b0c40969080957fccee1fb8a3fb4bb38bf5dc
Validity
Not Before: Sep 22 23:00:49 2026 GMT
Not After : Sep 23 23:00:49 2026 GMT
Subject: CN=656a07d3f38d2e018c3ab0501529ad556ffef96d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:15:4d:48:5e:22:5a:10:18:98:b1:6a:49:06:
09:57:bb:c9:4d:64:ef:c4:04:28:b1:0a:45:03:71:
a4:75:f4:70:1c:60:19:94:9b:51:e1:02:c8:10:f3:
57:24:3e:c4:5a:c5:d0:46:d0:49:e0:52:59:52:df:
7e:73:74:9f:9f:88:d4:06:23:25:1d:58:e7:aa:bd:
fa:4e:8a:90:73:d0:b1:9c:c5:07:51:78:cd:db:fb:
59:42:08:65:42:1f:2f:3e:9d:df:e2:d7:67:bd:9a:
ff:62:94:be:a0:b4:7e:fb:7f:3f:31:a7:00:02:f5:
6b:e2:2b:de:e9:c6:55:de:4d:5e:98:dd:dc:a7:1b:
92:4f:c6:e7:b6:13:38:5b:b9:e7:fd:d7:8a:ff:33:
4d:81:58:21:05:3d:58:e1:eb:98:b5:0a:a7:a4:09:
1f:0a:5a:bd:9e:f1:eb:20:c1:62:bd:94:09:7a:f3:
f5:80:24:ef:08:16:9e:11:59:02:56:19:e2:2b:05:
32:4e:8f:00:fd:2f:25:cc:40:85:69:4d:e5:5c:98:
17:66:34:a5:19:9e:43:23:83:86:9d:ef:2a:6d:ee:
6d:9a:d5:00:0c:a6:4f:ce:de:a2:cf:f0:b2:99:00:
52:74:50:90:b4:85:fa:c8:6f:65:e3:17:60:ce:81:
26:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:6A:07:D3:F3:8D:2E:01:8C:3A:B0:50:15:29:AD:55:6F:FE:F9:6D
X509v3 Authority Key Identifier:
keyid:4C:1B:0C:40:96:90:80:95:7F:CC:EE:1F:B8:A3:FB:4B:B3:8B:F5:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TBsMQJaQgJV_zO4fuKP7S7OL9dw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/ee29a6-691d-4b0c-ad63-94c8254bd3b7/1/TBsMQJaQgJV_zO4fuKP7S7OL9dw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/ee29a6-691d-4b0c-ad63-94c8254bd3b7/1/TBsMQJaQgJV_zO4fuKP7S7OL9dw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:b4:65:c1:a2:d7:84:8a:82:69:03:f8:6b:91:e1:d2:ce:3c:
ac:73:9e:3d:75:33:91:e9:f0:a2:3b:4e:47:4f:31:26:84:b1:
f9:9b:8a:2d:e3:9a:ab:7d:34:63:a6:2b:cd:a6:f5:6f:c1:8c:
40:da:ea:c7:f5:fc:1d:cc:71:4d:02:c7:75:9a:03:95:84:ee:
ab:bc:95:6a:92:18:79:db:f9:ac:ed:05:97:fd:ed:d6:69:84:
8e:61:6d:9c:5f:91:fd:f5:2b:80:aa:5e:c7:97:9e:0b:2b:ec:
6e:98:99:5a:76:10:98:85:c2:a4:94:b0:92:ee:ea:46:1d:2b:
1c:bb:8a:e7:e1:75:03:d5:69:e2:0f:00:4b:9d:59:c7:0f:b6:
69:cc:bb:cc:e8:13:23:cf:76:c0:2e:6a:d5:d0:c9:dc:fc:e7:
94:eb:a8:1e:32:d7:6f:3b:16:c1:31:e1:93:3b:02:c8:74:ad:
4f:6b:47:5f:4f:73:ab:44:f7:2c:91:ee:0f:18:86:5c:d7:ec:
8a:47:f3:03:53:f5:11:ab:f4:97:29:3c:8b:2d:e0:d6:95:9f:
01:5d:c9:9c:89:21:b1:60:b6:4e:48:75:8b:71:60:bb:7b:52:
f1:6d:43:3a:4b:a3:95:b8:92:c8:85:b9:20:10:e0:91:d0:7d:
cb:b4:44:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 07:47:50 2026 by rpki-client