Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fe/795ed9-8fad-4c44-8583-06ca709a3c59/1/tcsrXq88wV3Us7I62LlHKlJAwDs.mft
File: tcsrXq88wV3Us7I62LlHKlJAwDs.mft (raw, json)
Hash identifier: qMkwHWK7WalC4NmGv34Q9BWW1w9+Nam3/NjOBsmNpy8=
Subject key identifier: 24:0C:EF:DC:EA:9C:DC:DA:98:1D:AC:FE:D6:93:0F:51:93:83:2C:F7
Authority key identifier: B5:CB:2B:5E:AF:3C:C1:5D:D4:B3:B2:3A:D8:B9:47:2A:52:40:C0:3B
Certificate issuer: /CN=b5cb2b5eaf3cc15dd4b3b23ad8b9472a5240c03b
Certificate serial: 01A0E8F6EC9DFA31E668DA458FE573A36015
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tcsrXq88wV3Us7I62LlHKlJAwDs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/795ed9-8fad-4c44-8583-06ca709a3c59/1/tcsrXq88wV3Us7I62LlHKlJAwDs.mft
Manifest number: 045B
Signing time: Mon 28 Sep 2026 17:01:31 +0000
Manifest this update: Mon 28 Sep 2026 17:01:31 +0000
Manifest next update: Tue 29 Sep 2026 17:01:31 +0000
Files and hashes: 1: GJGcFx0xGAuamOa3lmo_7TyCIas.roa (hash: qw0UBzd9Mkc6V2U3rQ/Tp5ymNOy4O3f5at2SdO5Hyh4=)
2: JD-_RMbQpF-pKZOnXs4mYFjjidQ.roa (hash: kFiezG9HvRIWsHO1y6hBEeY1FqGlLKVulu5N0PlRmH8=)
3: mOOpQixSR_G0BkBLz_pfNJqCpPc.roa (hash: J7597tV7KTTIerXR1FKozSh7ddWeTNBPbVoOCxMRSXM=)
4: tcsrXq88wV3Us7I62LlHKlJAwDs.crl (hash: MVuh3vnElzC2guKBUVwEf5XHW5P0501boZ4oyNLYq3E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/795ed9-8fad-4c44-8583-06ca709a3c59/1/tcsrXq88wV3Us7I62LlHKlJAwDs.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/795ed9-8fad-4c44-8583-06ca709a3c59/1/tcsrXq88wV3Us7I62LlHKlJAwDs.mft
rsync://rpki.ripe.net/repository/DEFAULT/tcsrXq88wV3Us7I62LlHKlJAwDs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 17:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e8:f6:ec:9d:fa:31:e6:68:da:45:8f:e5:73:a3:60:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5cb2b5eaf3cc15dd4b3b23ad8b9472a5240c03b
Validity
Not Before: Sep 28 17:01:31 2026 GMT
Not After : Sep 29 17:01:31 2026 GMT
Subject: CN=240cefdcea9cdcda981dacfed6930f5193832cf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ba:43:00:f3:f7:0a:d2:d5:3a:75:da:0c:1c:
9b:c2:9b:cf:ad:f5:e7:5e:b5:81:9c:c2:1f:51:d9:
75:47:93:94:45:1c:1e:4a:56:d2:13:98:71:24:37:
ce:4a:3d:64:95:a6:b3:d7:7d:64:8d:f6:ae:cc:f5:
eb:a7:d0:4a:52:b3:f1:c1:e2:8c:d1:63:8b:49:62:
ca:f3:c8:2c:77:4b:6f:21:35:e3:54:ef:26:00:47:
54:2d:12:d2:f6:61:63:6c:aa:50:11:5b:15:42:ce:
03:91:17:43:25:88:9d:c4:eb:68:2b:f0:6b:25:b3:
87:e5:29:e6:08:c1:d4:c8:f5:68:0f:c7:15:5a:a0:
3a:55:ec:61:f4:9c:25:56:2d:2f:5a:03:1b:6c:89:
62:20:66:49:71:5e:b6:e6:55:7b:4d:4f:9e:44:7e:
19:19:c8:e8:5b:d8:8a:c5:35:5f:6f:f8:2a:b9:de:
31:09:cd:9e:e3:dd:8a:01:cc:41:8b:49:ef:f1:79:
67:c7:c6:96:7b:fc:2c:36:36:4f:1a:96:ab:93:e5:
cc:5d:66:37:d0:62:38:bd:b0:bd:8c:39:ef:a4:36:
e5:4d:c3:bd:0b:df:f9:69:53:b9:47:b7:0f:ba:2c:
6c:1b:09:c4:18:d2:4d:6d:9b:f9:4f:5b:4f:6a:2d:
1f:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:0C:EF:DC:EA:9C:DC:DA:98:1D:AC:FE:D6:93:0F:51:93:83:2C:F7
X509v3 Authority Key Identifier:
keyid:B5:CB:2B:5E:AF:3C:C1:5D:D4:B3:B2:3A:D8:B9:47:2A:52:40:C0:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tcsrXq88wV3Us7I62LlHKlJAwDs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/795ed9-8fad-4c44-8583-06ca709a3c59/1/tcsrXq88wV3Us7I62LlHKlJAwDs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/795ed9-8fad-4c44-8583-06ca709a3c59/1/tcsrXq88wV3Us7I62LlHKlJAwDs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:0e:68:97:92:f3:05:95:23:2a:44:59:99:51:5c:60:9e:c0:
5f:0a:77:59:a0:05:3e:aa:af:42:c6:8f:b5:83:7e:a1:01:be:
94:c8:fd:1c:82:ab:9d:0f:40:c2:e8:fa:1b:4e:d4:a2:fa:9a:
07:8d:3c:18:20:8d:b1:3d:22:ca:77:db:95:84:68:ea:7f:a9:
e7:c9:5d:ed:10:b5:6e:b0:f4:ce:7f:7a:fd:9f:89:a8:f7:60:
3f:37:42:31:a3:e1:ff:1f:e7:73:b0:b5:ed:93:dc:e6:30:ef:
f3:b8:09:1e:c9:65:7a:5a:f5:84:51:f4:7b:0f:6f:65:be:75:
a3:82:f2:c9:0c:fc:5e:f4:bf:73:cf:33:bf:42:d8:15:8c:6f:
42:bb:9a:73:a9:67:ae:62:ee:70:26:dd:7b:bb:79:01:4b:6e:
a3:7b:b3:09:6f:86:fb:e8:16:2e:ca:8e:f6:a0:66:1d:79:26:
e1:b1:04:13:ef:11:b0:46:1a:19:2d:f6:e9:b4:9f:bd:d1:c2:
8d:69:24:c5:89:75:24:63:79:c0:2c:35:f9:52:7c:84:79:83:
67:78:fc:3d:d2:80:f5:e3:2f:7f:bb:7f:04:64:77:89:56:34:
7a:fa:62:e7:5c:cd:81:b1:9e:2a:fb:1e:85:b3:9a:1e:93:1c:
89:df:e6:b2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDo9uyd+jHmaNpFj+Vzo2AVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1Y2IyYjVlYWYzY2MxNWRkNGIzYjIzYWQ4Yjk0NzJhNTI0
MGMwM2IwHhcNMjYwOTI4MTcwMTMxWhcNMjYwOTI5MTcwMTMxWjAzMTEwLwYDVQQD
EygyNDBjZWZkY2VhOWNkY2RhOTgxZGFjZmVkNjkzMGY1MTkzODMyY2Y3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv7pDAPP3CtLVOnXaDBybwpvPrfXn
XrWBnMIfUdl1R5OURRweSlbSE5hxJDfOSj1klaaz131kjfauzPXrp9BKUrPxweKM
0WOLSWLK88gsd0tvITXjVO8mAEdULRLS9mFjbKpQEVsVQs4DkRdDJYidxOtoK/Br
JbOH5SnmCMHUyPVoD8cVWqA6Vexh9JwlVi0vWgMbbIliIGZJcV625lV7TU+eRH4Z
GcjoW9iKxTVfb/gqud4xCc2e492KAcxBi0nv8Xlnx8aWe/wsNjZPGpark+XMXWY3
0GI4vbC9jDnvpDblTcO9C9/5aVO5R7cPuixsGwnEGNJNbZv5T1tPai0fwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCQM79zqnNzamB2s/taTD1GTgyz3MB8GA1UdIwQY
MBaAFLXLK16vPMFd1LOyOti5RypSQMA7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdGNzclhxODh3VjNVczdJNjJMbEhLbEpBd0RzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS83OTVlZDktOGZhZC00YzQ0LTg1ODMt
MDZjYTcwOWEzYzU5LzEvdGNzclhxODh3VjNVczdJNjJMbEhLbEpBd0RzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS83OTVlZDktOGZhZC00YzQ0LTg1ODMtMDZjYTcwOWEzYzU5
LzEvdGNzclhxODh3VjNVczdJNjJMbEhLbEpBd0RzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbw5ol5Lz
BZUjKkRZmVFcYJ7AXwp3WaAFPqqvQsaPtYN+oQG+lMj9HIKrnQ9Awuj6G07Uovqa
B408GCCNsT0iynfblYRo6n+p58ld7RC1brD0zn96/Z+JqPdgPzdCMaPh/x/nc7C1
7ZPc5jDv87gJHsllelr1hFH0ew9vZb51o4LyyQz8XvS/c88zv0LYFYxvQruac6ln
rmLucCbde7t5AUtuo3uzCW+G++gWLsqO9qBmHXkm4bEEE+8RsEYaGS326bSfvdHC
jWkkxYl1JGN5wCw1+VJ8hHmDZ3j8PdKA9eMvf7t/BGR3iVY0evpi51zNgbGeKvse
hbOaHpMcid/msg==
-----END CERTIFICATE-----
Generated at Tue Sep 29 04:04:36 2026 by rpki-client