
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2c/c3a85d-9d0b-4562-9238-46ee0cd7fcba/1/TsoQXOSvbCHNQp6ZLQbqfQbYpW0.mft
File: TsoQXOSvbCHNQp6ZLQbqfQbYpW0.mft (raw, json)
Hash identifier: yIKBvkDXIM1o9DlDBbdqqhWbT8d9/ZOonW8X7sfLuTU=
Subject key identifier: 16:C3:D6:16:6B:FF:7E:FE:76:BF:9E:5C:07:C5:BA:A5:E5:90:8F:7F
Authority key identifier: 4E:CA:10:5C:E4:AF:6C:21:CD:42:9E:99:2D:06:EA:7D:06:D8:A5:6D
Certificate issuer: /CN=4eca105ce4af6c21cd429e992d06ea7d06d8a56d
Certificate serial: 01A0D2DE6BBEA679892B8B3643F251C1A40E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TsoQXOSvbCHNQp6ZLQbqfQbYpW0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/c3a85d-9d0b-4562-9238-46ee0cd7fcba/1/TsoQXOSvbCHNQp6ZLQbqfQbYpW0.mft
Manifest number: 1A72
Signing time: Thu 24 Sep 2026 10:03:06 +0000
Manifest this update: Thu 24 Sep 2026 10:03:06 +0000
Manifest next update: Fri 25 Sep 2026 10:03:06 +0000
Files and hashes: 1: AwY5mgjpthmtObHXqwAVAnajhhs.roa (hash: Ynq5lonnqADLu0ss1thtGFYZaU4FINs+79TFKUmEVMc=)
2: FEE0W1FvUWZY1yNTAUusq7fzBQA.roa (hash: Hd0jbgNDlWlFVrZYfQAqVLAGgeJbu+X/gxILT2NBZwY=)
3: HBpn81d4cG4_UILVsdO8exzlDsY.roa (hash: kRgmgXZK5yKUe+saBJuegm6bkvNmijxbzes8bqH8BJE=)
4: Kpj-186fjuAYRRYnilKKfHVGN8E.roa (hash: W4eIu6BlkL603t8W8JuwGE33q4DgMOfHpuuHjrT/r2s=)
5: NueqQvkP6OwbYq3KeGusJiI5nB4.roa (hash: Iwo1uDTct62657OX8teLFspmVyOSx/FLeOTjd7KJmFk=)
6: TsoQXOSvbCHNQp6ZLQbqfQbYpW0.crl (hash: dDUE0Qw1ZyCb8pnuybRms27F6Lt2Xr9N4AWcG1+TxSE=)
7: XhbfkmgppgGaa0jwxEEK1QpmG_o.roa (hash: RblW9p63Q8/3oZMyKn6Kq61NaEzW9XB/T1oxdZPwAPk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/c3a85d-9d0b-4562-9238-46ee0cd7fcba/1/TsoQXOSvbCHNQp6ZLQbqfQbYpW0.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/c3a85d-9d0b-4562-9238-46ee0cd7fcba/1/TsoQXOSvbCHNQp6ZLQbqfQbYpW0.mft
rsync://rpki.ripe.net/repository/DEFAULT/TsoQXOSvbCHNQp6ZLQbqfQbYpW0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 10:03:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:de:6b:be:a6:79:89:2b:8b:36:43:f2:51:c1:a4:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4eca105ce4af6c21cd429e992d06ea7d06d8a56d
Validity
Not Before: Sep 24 10:03:06 2026 GMT
Not After : Sep 25 10:03:06 2026 GMT
Subject: CN=16c3d6166bff7efe76bf9e5c07c5baa5e5908f7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:3e:9a:9a:eb:ff:75:6c:5f:6f:76:c3:4f:c9:
52:c8:7e:44:34:d1:53:36:2b:58:c7:e6:a6:ac:d0:
94:a8:86:dd:b0:73:f9:3f:9b:2b:ad:b7:a1:7f:d9:
45:07:2e:d2:c9:42:2c:0e:a9:eb:4a:c5:89:19:62:
4b:1c:04:d3:30:94:87:f1:60:ad:8a:89:fa:bc:64:
72:78:02:ba:7c:bd:26:d1:14:9d:a7:d2:92:6b:95:
c1:6f:de:31:3d:d4:44:fb:a3:c9:07:26:b8:98:67:
c5:b0:19:52:6a:77:b1:ba:6a:9e:d5:5a:26:96:6e:
c5:1d:c9:6b:ce:13:d0:b6:ef:32:7e:44:07:74:c1:
d9:54:b0:14:7b:cd:de:a2:40:eb:05:e0:f5:ca:af:
57:3d:05:3e:a9:c2:01:67:b3:e0:7f:f5:a3:1a:0d:
43:e4:7b:da:6d:83:76:3c:b3:1c:24:b6:99:8d:59:
de:99:c8:2e:f8:b3:9b:77:50:c4:b6:be:d7:3b:dd:
62:84:08:59:46:21:5d:81:47:6e:17:fc:7a:85:96:
19:e2:22:f8:6e:13:88:49:8a:66:47:d9:13:55:5e:
c7:54:e1:a5:a7:15:43:2a:29:2d:d3:66:b3:9b:e5:
36:95:62:d9:dc:24:6e:0c:c2:30:4f:ae:31:f7:3b:
b1:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:C3:D6:16:6B:FF:7E:FE:76:BF:9E:5C:07:C5:BA:A5:E5:90:8F:7F
X509v3 Authority Key Identifier:
keyid:4E:CA:10:5C:E4:AF:6C:21:CD:42:9E:99:2D:06:EA:7D:06:D8:A5:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TsoQXOSvbCHNQp6ZLQbqfQbYpW0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/c3a85d-9d0b-4562-9238-46ee0cd7fcba/1/TsoQXOSvbCHNQp6ZLQbqfQbYpW0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/c3a85d-9d0b-4562-9238-46ee0cd7fcba/1/TsoQXOSvbCHNQp6ZLQbqfQbYpW0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cc:ab:56:fc:91:5e:a3:66:e4:f1:ab:7a:69:a2:c8:ad:2d:26:
3b:1d:6f:61:8b:cf:6e:b1:84:5d:d3:d4:ad:69:31:9b:bf:00:
43:e2:a8:6c:22:c7:6d:48:4a:4c:91:91:b6:51:e6:d4:87:39:
78:ae:e7:7a:a3:e4:40:bb:e0:19:40:11:58:39:0e:09:e3:ac:
c0:cc:cf:d2:2f:3b:14:5e:d1:19:8f:da:1a:cc:fc:23:55:5e:
df:1e:b0:11:f2:c7:b3:ca:4c:81:98:08:34:13:62:e2:54:66:
0c:cc:15:12:dc:0a:7c:14:42:4d:83:9b:20:e4:ed:3c:8d:48:
6b:b6:a3:b1:8f:67:c2:45:09:65:58:2a:93:e3:bc:67:da:7e:
35:55:51:7a:ec:0f:66:52:e8:37:6f:85:31:fd:29:8d:77:61:
4e:6e:76:3b:9e:a1:de:bc:37:7e:57:67:fd:98:ad:77:03:a6:
d1:e0:03:ef:81:4c:26:73:6b:5c:e7:5d:32:44:44:fc:6a:3c:
e9:c9:d0:0b:ab:4b:6b:02:0d:89:64:bd:f5:79:4a:d8:12:83:
c4:61:af:4d:00:2d:9b:b1:8d:c7:a0:0e:ce:27:4e:a0:c3:45:
45:e2:47:c9:aa:45:93:68:68:77:37:3b:98:7b:7d:13:13:d4:
15:5b:52:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 18:10:02 2026 by rpki-client