Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/59dcbd-78bf-48ed-954d-ccaa6eb3c513/1/TBAf9Rtn7v4NZ4AOdtNgbfTJRyE.mft
File: TBAf9Rtn7v4NZ4AOdtNgbfTJRyE.mft (raw, json)
Hash identifier: Z2lCQcix+j3Oza70O1QpDL8XF7nRhVIFvqdS+ZImJak=
Subject key identifier: B2:80:7C:E9:60:A7:49:A9:6B:E7:5E:21:52:D1:26:E0:AA:7E:93:93
Authority key identifier: 4C:10:1F:F5:1B:67:EE:FE:0D:67:80:0E:76:D3:60:6D:F4:C9:47:21
Certificate issuer: /CN=4c101ff51b67eefe0d67800e76d3606df4c94721
Certificate serial: 019CAB6BA63B66B9B36728E29F649EF2E177
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TBAf9Rtn7v4NZ4AOdtNgbfTJRyE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/59dcbd-78bf-48ed-954d-ccaa6eb3c513/1/TBAf9Rtn7v4NZ4AOdtNgbfTJRyE.mft
Manifest number: 07B7
Signing time: Sun 01 Mar 2026 22:01:24 +0000
Manifest this update: Sun 01 Mar 2026 22:01:24 +0000
Manifest next update: Mon 02 Mar 2026 22:01:24 +0000
Files and hashes: 1: TBAf9Rtn7v4NZ4AOdtNgbfTJRyE.crl (hash: Mfos6RpNa3+AgMXRzgMOrI19nEeb762E4Ajk4cXS9nw=)
2: xeyEvOh_T5SXDa3wzGCDSEKXeJo.roa (hash: xT5SlCyi7OJT7hItkCDdSCgLR6moh28cNvwOG2rN9V0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/59dcbd-78bf-48ed-954d-ccaa6eb3c513/1/TBAf9Rtn7v4NZ4AOdtNgbfTJRyE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/59dcbd-78bf-48ed-954d-ccaa6eb3c513/1/TBAf9Rtn7v4NZ4AOdtNgbfTJRyE.mft
rsync://rpki.ripe.net/repository/DEFAULT/TBAf9Rtn7v4NZ4AOdtNgbfTJRyE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:a6:3b:66:b9:b3:67:28:e2:9f:64:9e:f2:e1:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c101ff51b67eefe0d67800e76d3606df4c94721
Validity
Not Before: Mar 1 22:01:24 2026 GMT
Not After : Mar 2 22:01:24 2026 GMT
Subject: CN=b2807ce960a749a96be75e2152d126e0aa7e9393
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:7a:42:7f:46:26:13:3b:2d:10:c7:f8:c8:07:
72:a3:1a:41:e9:90:8b:94:dd:40:f5:45:3d:92:1f:
46:28:2d:a8:1b:77:07:fb:bd:d2:e9:d2:58:fa:1c:
dd:a7:05:1c:8f:ad:2f:bd:0d:dc:30:fe:80:51:b8:
13:fb:bd:bd:e6:31:8f:91:b2:52:c0:5a:9c:e1:2e:
01:1d:24:85:c7:05:0b:0a:c7:dc:a7:5d:ae:25:64:
e9:a0:16:54:e2:76:0b:4a:0c:cc:e3:9a:8e:be:3a:
a4:1b:d2:c7:26:70:08:bc:08:8e:ef:da:ec:c8:a4:
17:b2:e1:06:23:55:8b:c1:51:68:51:d0:d1:72:ae:
2d:92:a7:a1:a6:9b:8e:52:ac:85:52:50:3a:a8:c5:
28:c9:68:a6:71:78:fd:01:1c:44:a7:58:81:c9:f9:
da:ae:bd:8f:a3:f8:00:ac:20:d9:a5:50:f2:7a:cd:
14:7a:e7:b3:8f:e4:65:ab:81:8a:c1:a0:4c:7d:20:
c0:2d:98:6b:10:52:e2:d3:f3:9b:4f:c0:c3:01:e6:
df:93:be:58:63:b4:b6:1d:aa:e8:6d:13:7a:cf:24:
28:a8:d8:a1:48:ca:e2:3d:64:99:c2:70:ed:a4:ae:
e4:77:30:f1:fb:0a:3e:c1:47:00:ae:ae:57:ed:b5:
e4:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:80:7C:E9:60:A7:49:A9:6B:E7:5E:21:52:D1:26:E0:AA:7E:93:93
X509v3 Authority Key Identifier:
keyid:4C:10:1F:F5:1B:67:EE:FE:0D:67:80:0E:76:D3:60:6D:F4:C9:47:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TBAf9Rtn7v4NZ4AOdtNgbfTJRyE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/59dcbd-78bf-48ed-954d-ccaa6eb3c513/1/TBAf9Rtn7v4NZ4AOdtNgbfTJRyE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/59dcbd-78bf-48ed-954d-ccaa6eb3c513/1/TBAf9Rtn7v4NZ4AOdtNgbfTJRyE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:ef:f7:6b:73:4e:c8:70:77:fb:1a:56:6f:f4:d6:f1:fe:61:
b1:f2:3c:13:b1:c8:bb:de:74:b0:85:46:f5:d3:55:a6:29:38:
1a:62:62:5d:3a:ba:a1:1f:5c:96:f8:13:32:b6:c1:65:7c:8d:
b1:e0:52:28:79:2b:aa:f8:45:b3:a0:1c:0a:45:c8:76:7f:60:
0f:9b:65:ea:96:a3:6f:8b:2f:90:69:32:7b:3e:23:c5:d0:f6:
02:63:f7:69:28:51:ae:d0:7e:77:0a:74:42:ac:e0:76:e3:d8:
28:0e:4f:4a:73:9b:53:b8:0e:ba:e2:09:94:e5:94:6d:2b:af:
0f:e2:32:b1:97:9f:44:e5:ae:ec:ef:57:20:57:d6:84:b7:1f:
73:3b:d8:cc:fc:9e:61:4c:a5:bb:df:3b:31:42:e3:f2:09:99:
7c:ed:31:12:1e:29:36:08:c6:42:4e:dd:41:77:50:94:d4:31:
67:a6:ea:83:d8:ae:ed:5b:a1:51:de:0d:a6:ea:15:bd:3c:c9:
17:ce:74:49:25:45:fc:97:55:56:26:9a:25:3b:9b:f0:ca:69:
73:5d:d4:61:58:6f:ff:67:05:55:ce:e1:56:01:5c:fd:5d:ee:
9b:63:7a:90:2a:0c:b7:ad:52:0e:01:9e:03:13:d1:32:a8:76:
eb:0f:56:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:06:53 2026 by rpki-client