Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/ee29a6-691d-4b0c-ad63-94c8254bd3b7/1/TBsMQJaQgJV_zO4fuKP7S7OL9dw.mft
File: TBsMQJaQgJV_zO4fuKP7S7OL9dw.mft (raw, json)
Hash identifier: ZoK9UtiXNC5h9XdjegjQbATZTwWptgcYwk8HEMuMSnc=
Subject key identifier: 1D:99:7A:A3:E6:1B:F0:9C:26:0B:6C:3F:78:DA:6C:BE:B5:CE:1D:14
Authority key identifier: 4C:1B:0C:40:96:90:80:95:7F:CC:EE:1F:B8:A3:FB:4B:B3:8B:F5:DC
Certificate issuer: /CN=4c1b0c40969080957fccee1fb8a3fb4bb38bf5dc
Certificate serial: 019CAAFD8D496E8259AD13EB01E8BFC40EA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TBsMQJaQgJV_zO4fuKP7S7OL9dw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/ee29a6-691d-4b0c-ad63-94c8254bd3b7/1/TBsMQJaQgJV_zO4fuKP7S7OL9dw.mft
Manifest number: 1534
Signing time: Sun 01 Mar 2026 20:01:09 +0000
Manifest this update: Sun 01 Mar 2026 20:01:09 +0000
Manifest next update: Mon 02 Mar 2026 20:01:09 +0000
Files and hashes: 1: B0kfMqpAGqXnYaMTrQLvbBjvxOk.roa (hash: YEV3wXNHcOYmzWyvVh84es9QxYCJzyckUbH9jX+YQQA=)
2: TBsMQJaQgJV_zO4fuKP7S7OL9dw.crl (hash: tAScarbhf/Jgcx7eJO8aHD34sq2wLyNIB4buNt0EdWc=)
3: YA-H3bfE3r6ihPzDZtgenypbPbg.roa (hash: pUTlAIWeqA52q3MAJOIPYUZ8tJQ/eIlG+BT4v4cwsGM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/ee29a6-691d-4b0c-ad63-94c8254bd3b7/1/TBsMQJaQgJV_zO4fuKP7S7OL9dw.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/ee29a6-691d-4b0c-ad63-94c8254bd3b7/1/TBsMQJaQgJV_zO4fuKP7S7OL9dw.mft
rsync://rpki.ripe.net/repository/DEFAULT/TBsMQJaQgJV_zO4fuKP7S7OL9dw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:8d:49:6e:82:59:ad:13:eb:01:e8:bf:c4:0e:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c1b0c40969080957fccee1fb8a3fb4bb38bf5dc
Validity
Not Before: Mar 1 20:01:09 2026 GMT
Not After : Mar 2 20:01:09 2026 GMT
Subject: CN=1d997aa3e61bf09c260b6c3f78da6cbeb5ce1d14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:8b:32:6d:a2:70:0f:b8:51:39:f1:36:78:9e:
80:96:9d:bf:3f:06:a8:b2:a3:f1:56:af:cf:c2:4b:
aa:12:30:a5:7a:79:9b:ea:a7:ad:05:5a:3f:ac:b5:
48:d6:2e:44:2b:f3:70:99:44:5d:97:7a:be:c0:6e:
2c:7b:39:27:cd:d1:42:4c:e4:69:b2:a7:7d:7d:6b:
ca:66:41:6c:f7:a0:a0:65:13:bf:9b:ae:1d:12:f2:
81:5d:3b:f6:72:6e:33:e3:c0:27:3c:94:45:c4:73:
91:ff:04:80:f9:ac:ee:6d:17:79:69:98:6f:d2:c0:
71:68:b6:fc:ac:b1:19:47:7d:28:ca:cc:cd:4b:dc:
dc:f2:a2:68:c7:a9:50:4e:e9:e5:c5:d2:ef:9b:08:
22:c7:0b:fc:2d:f8:64:22:e7:c6:ae:80:3a:12:8b:
4d:a4:f4:e5:d3:2f:9e:e7:f3:03:97:2c:f8:bc:f9:
d2:1d:23:6a:64:77:67:e0:b6:fe:9e:9e:8c:9f:90:
a3:7b:0d:2c:6e:9c:66:2d:75:e6:1f:a0:d9:e8:c4:
07:8d:0e:e3:9f:cf:e6:a0:a9:9c:8b:f9:68:2e:95:
91:02:4e:2b:5a:ff:b4:c5:c8:a0:9a:b4:44:df:7b:
50:05:48:7e:9a:65:73:47:62:3a:9f:db:e3:30:bb:
48:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:99:7A:A3:E6:1B:F0:9C:26:0B:6C:3F:78:DA:6C:BE:B5:CE:1D:14
X509v3 Authority Key Identifier:
keyid:4C:1B:0C:40:96:90:80:95:7F:CC:EE:1F:B8:A3:FB:4B:B3:8B:F5:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TBsMQJaQgJV_zO4fuKP7S7OL9dw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/ee29a6-691d-4b0c-ad63-94c8254bd3b7/1/TBsMQJaQgJV_zO4fuKP7S7OL9dw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/ee29a6-691d-4b0c-ad63-94c8254bd3b7/1/TBsMQJaQgJV_zO4fuKP7S7OL9dw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:d9:7f:b9:ce:da:9b:19:1b:f5:6e:88:03:e9:2b:b3:a3:97:
a3:26:57:cb:9a:17:c5:6c:61:2b:79:1a:8b:90:b8:0b:53:85:
c0:5e:e4:94:91:d5:52:7c:bd:8f:90:09:61:f8:8e:24:7f:c8:
3b:c0:d5:f0:f3:5f:02:f3:17:ef:97:f5:b3:8f:87:92:3e:d4:
1a:87:ff:b0:a3:d3:44:c9:18:a5:82:3b:24:dd:c2:c0:e2:8e:
40:69:31:d5:c7:bd:6b:c6:3e:63:6e:4d:db:a8:37:63:f1:1a:
fc:2a:e3:12:37:5f:5d:9d:2f:f1:7d:78:76:33:81:63:2b:38:
8f:0e:f8:d8:8b:ce:df:cd:1b:65:96:5e:eb:fb:db:d0:38:ed:
c9:75:01:3f:e4:c3:cc:e2:31:b4:39:b5:79:d4:e7:3f:3d:e2:
d4:6d:74:d3:9d:0b:22:6e:9b:30:ec:08:41:48:85:ba:d5:bf:
3b:1a:7f:8a:b2:41:ea:ed:d3:d6:90:9a:75:74:79:1c:3a:58:
b0:d8:71:c2:b9:06:46:cb:62:75:a8:b2:90:71:27:2f:31:98:
97:93:ac:2b:82:51:d9:8c:1d:89:f7:00:4d:fe:b4:42:dd:76:
b5:52:84:a4:ed:1b:8f:0a:d2:91:00:4e:3b:dc:64:b8:cd:fc:
be:35:e6:aa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyq/Y1JboJZrRPrAei/xA6hMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjMWIwYzQwOTY5MDgwOTU3ZmNjZWUxZmI4YTNmYjRiYjM4
YmY1ZGMwHhcNMjYwMzAxMjAwMTA5WhcNMjYwMzAyMjAwMTA5WjAzMTEwLwYDVQQD
EygxZDk5N2FhM2U2MWJmMDljMjYwYjZjM2Y3OGRhNmNiZWI1Y2UxZDE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs4sybaJwD7hROfE2eJ6Alp2/Pwao
sqPxVq/PwkuqEjClenmb6qetBVo/rLVI1i5EK/NwmURdl3q+wG4sezknzdFCTORp
sqd9fWvKZkFs96CgZRO/m64dEvKBXTv2cm4z48AnPJRFxHOR/wSA+azubRd5aZhv
0sBxaLb8rLEZR30oyszNS9zc8qJox6lQTunlxdLvmwgixwv8LfhkIufGroA6EotN
pPTl0y+e5/MDlyz4vPnSHSNqZHdn4Lb+np6Mn5Cjew0sbpxmLXXmH6DZ6MQHjQ7j
n8/moKmci/loLpWRAk4rWv+0xcigmrRE33tQBUh+mmVzR2I6n9vjMLtIyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB2ZeqPmG/CcJgtsP3jabL61zh0UMB8GA1UdIwQY
MBaAFEwbDECWkICVf8zuH7ij+0uzi/XcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVEJzTVFKYVFnSlZfek80ZnVLUDdTN09MOWR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi9lZTI5YTYtNjkxZC00YjBjLWFkNjMt
OTRjODI1NGJkM2I3LzEvVEJzTVFKYVFnSlZfek80ZnVLUDdTN09MOWR3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZi9lZTI5YTYtNjkxZC00YjBjLWFkNjMtOTRjODI1NGJkM2I3
LzEvVEJzTVFKYVFnSlZfek80ZnVLUDdTN09MOWR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADdl/uc7a
mxkb9W6IA+krs6OXoyZXy5oXxWxhK3kai5C4C1OFwF7klJHVUny9j5AJYfiOJH/I
O8DV8PNfAvMX75f1s4+Hkj7UGof/sKPTRMkYpYI7JN3CwOKOQGkx1ce9a8Y+Y25N
26g3Y/Ea/CrjEjdfXZ0v8X14djOBYys4jw742IvO380bZZZe6/vb0DjtyXUBP+TD
zOIxtDm1edTnPz3i1G10050LIm6bMOwIQUiFutW/Oxp/irJB6u3T1pCadXR5HDpY
sNhxwrkGRstidaiykHEnLzGYl5OsK4JR2YwdifcATf60Qt12tVKEpO0bjwrSkQBO
O9xkuM38vjXmqg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:04:22 2026 by rpki-client