Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/786b51-e2df-4fd6-9c9b-f567c3e9f5ff/1/TsOgYsuW2aPyGostqEj4HG9zv5U.mft
File: TsOgYsuW2aPyGostqEj4HG9zv5U.mft (raw, json)
Hash identifier: sFIsh6D0/t2a1dD1hxbwB0ATGtIv8ZclBCEVC57tXik=
Subject key identifier: 0F:45:DE:88:A1:EA:99:CC:EA:DE:EE:4D:66:BD:BE:CA:9A:B3:1C:9D
Authority key identifier: 4E:C3:A0:62:CB:96:D9:A3:F2:1A:8B:2D:A8:48:F8:1C:6F:73:BF:95
Certificate issuer: /CN=4ec3a062cb96d9a3f21a8b2da848f81c6f73bf95
Certificate serial: 019D265F5D83B666C6D80032AB23B5332C57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TsOgYsuW2aPyGostqEj4HG9zv5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/786b51-e2df-4fd6-9c9b-f567c3e9f5ff/1/TsOgYsuW2aPyGostqEj4HG9zv5U.mft
Manifest number: 1821
Signing time: Wed 25 Mar 2026 19:01:17 +0000
Manifest this update: Wed 25 Mar 2026 19:01:17 +0000
Manifest next update: Thu 26 Mar 2026 19:01:17 +0000
Files and hashes: 1: TsOgYsuW2aPyGostqEj4HG9zv5U.crl (hash: 8JKPHx1VC5em7KV0ocl5NdYZoxVp/WdrAy8VhJi0tic=)
2: cMSq_NcYXBjORlEeP54TeKaU-zc.roa (hash: AnKK7epayFvj9OjYad7fK2xMQOaLyQs9vYbQVKbmXI8=)
3: svmsZH4j3FCzPSNp-bJETBP8qzs.roa (hash: enOf8GhkIm48YbUB7aWnRSzpdWjW5NG5zxx4fZ/PPB4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/786b51-e2df-4fd6-9c9b-f567c3e9f5ff/1/TsOgYsuW2aPyGostqEj4HG9zv5U.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/786b51-e2df-4fd6-9c9b-f567c3e9f5ff/1/TsOgYsuW2aPyGostqEj4HG9zv5U.mft
rsync://rpki.ripe.net/repository/DEFAULT/TsOgYsuW2aPyGostqEj4HG9zv5U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:5d:83:b6:66:c6:d8:00:32:ab:23:b5:33:2c:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ec3a062cb96d9a3f21a8b2da848f81c6f73bf95
Validity
Not Before: Mar 25 19:01:17 2026 GMT
Not After : Mar 26 19:01:17 2026 GMT
Subject: CN=0f45de88a1ea99cceadeee4d66bdbeca9ab31c9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:2d:1d:2f:65:c8:96:ad:1b:69:62:2f:ef:e0:
f7:ac:a1:c5:2f:30:13:c5:a4:85:a2:fe:25:c9:67:
27:1d:5a:7a:0a:ec:72:20:c3:82:10:e9:fb:ca:de:
07:33:c9:76:fa:e2:bf:77:b4:e3:4d:07:38:37:01:
8b:9e:3b:71:5c:ad:f8:66:3b:81:b6:27:dc:59:26:
90:f7:fb:86:54:88:6d:27:91:dd:05:56:67:26:17:
79:b1:20:44:fd:58:df:34:bc:b1:62:4d:28:a6:83:
3e:0d:da:33:07:be:90:9b:6b:48:64:89:93:0c:9f:
b0:d6:8e:1c:bc:c3:e6:4d:b2:4b:31:04:60:79:d0:
1f:0f:ed:fd:ad:a7:07:c2:87:80:9b:5e:23:f1:af:
b6:e2:0e:36:5a:9a:9d:dd:0f:87:d7:e5:27:65:7a:
65:f7:2f:98:65:ec:f3:0b:c2:4b:68:57:20:de:39:
d1:8c:87:ac:71:60:93:04:37:33:a1:96:56:6a:18:
15:5f:96:36:48:05:02:d0:87:35:62:81:33:2c:36:
4c:d9:72:ef:5e:08:6a:7f:65:d7:3c:7c:f4:7e:dc:
53:7c:0e:01:6b:06:05:17:3a:d1:3a:ea:f3:0a:d4:
72:d7:27:08:41:f6:89:df:b4:09:60:f4:a5:31:db:
bd:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:45:DE:88:A1:EA:99:CC:EA:DE:EE:4D:66:BD:BE:CA:9A:B3:1C:9D
X509v3 Authority Key Identifier:
keyid:4E:C3:A0:62:CB:96:D9:A3:F2:1A:8B:2D:A8:48:F8:1C:6F:73:BF:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TsOgYsuW2aPyGostqEj4HG9zv5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/786b51-e2df-4fd6-9c9b-f567c3e9f5ff/1/TsOgYsuW2aPyGostqEj4HG9zv5U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/786b51-e2df-4fd6-9c9b-f567c3e9f5ff/1/TsOgYsuW2aPyGostqEj4HG9zv5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:6f:7c:c4:8b:e7:81:aa:7c:35:ed:7a:8c:cc:f2:55:96:ac:
6d:d6:38:13:fe:40:3d:d3:91:04:0a:b3:09:85:71:76:c8:a4:
27:67:95:8f:15:76:ae:34:99:fd:5e:c4:8d:2d:47:d2:cb:ac:
bd:af:33:6b:34:eb:ca:c4:7d:0b:78:77:4c:19:0a:cb:e4:8c:
22:cf:a4:42:db:c2:29:1b:f1:03:27:86:d2:36:75:71:af:f2:
51:eb:b3:ee:ec:96:bb:d9:41:8c:f1:07:e1:36:a1:bc:08:ec:
12:2a:f0:1b:e8:96:63:3e:4a:d0:f1:be:ba:69:40:81:73:c3:
38:50:b6:3e:bb:c9:75:77:0e:c1:dc:73:8f:1e:cd:ad:98:1b:
92:96:c5:65:33:68:2b:3b:3b:61:87:a0:c6:15:bd:e8:c8:cf:
6d:73:28:ee:7b:3e:77:5f:37:13:b0:53:97:2c:df:18:ad:3c:
ce:02:1b:f2:1d:57:c0:e3:de:59:a1:10:9c:04:1c:63:22:73:
f2:b9:3f:3a:d2:08:7d:06:83:e3:6d:4d:8a:cf:2c:42:f2:72:
a9:67:c4:f4:d5:26:bf:0c:b0:53:90:a6:5f:ce:36:99:65:04:
6f:b2:84:c6:41:5e:41:9d:57:2c:b0:11:7a:a8:1e:de:7e:b6:
1d:84:7d:06
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mX12DtmbG2AAyqyO1MyxXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRlYzNhMDYyY2I5NmQ5YTNmMjFhOGIyZGE4NDhmODFjNmY3
M2JmOTUwHhcNMjYwMzI1MTkwMTE3WhcNMjYwMzI2MTkwMTE3WjAzMTEwLwYDVQQD
EygwZjQ1ZGU4OGExZWE5OWNjZWFkZWVlNGQ2NmJkYmVjYTlhYjMxYzlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAui0dL2XIlq0baWIv7+D3rKHFLzAT
xaSFov4lyWcnHVp6CuxyIMOCEOn7yt4HM8l2+uK/d7TjTQc4NwGLnjtxXK34ZjuB
tifcWSaQ9/uGVIhtJ5HdBVZnJhd5sSBE/VjfNLyxYk0opoM+DdozB76Qm2tIZImT
DJ+w1o4cvMPmTbJLMQRgedAfD+39racHwoeAm14j8a+24g42Wpqd3Q+H1+UnZXpl
9y+YZezzC8JLaFcg3jnRjIescWCTBDczoZZWahgVX5Y2SAUC0Ic1YoEzLDZM2XLv
Xghqf2XXPHz0ftxTfA4BawYFFzrROurzCtRy1ycIQfaJ37QJYPSlMdu96QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA9F3oih6pnM6t7uTWa9vsqasxydMB8GA1UdIwQY
MBaAFE7DoGLLltmj8hqLLahI+Bxvc7+VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHNPZ1lzdVcyYVB5R29zdHFFajRIRzl6djVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi83ODZiNTEtZTJkZi00ZmQ2LTljOWIt
ZjU2N2MzZTlmNWZmLzEvVHNPZ1lzdVcyYVB5R29zdHFFajRIRzl6djVVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi83ODZiNTEtZTJkZi00ZmQ2LTljOWItZjU2N2MzZTlmNWZm
LzEvVHNPZ1lzdVcyYVB5R29zdHFFajRIRzl6djVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtG98xIvn
gap8Ne16jMzyVZasbdY4E/5APdORBAqzCYVxdsikJ2eVjxV2rjSZ/V7EjS1H0sus
va8zazTrysR9C3h3TBkKy+SMIs+kQtvCKRvxAyeG0jZ1ca/yUeuz7uyWu9lBjPEH
4TahvAjsEirwG+iWYz5K0PG+umlAgXPDOFC2PrvJdXcOwdxzjx7NrZgbkpbFZTNo
Kzs7YYegxhW96MjPbXMo7ns+d183E7BTlyzfGK08zgIb8h1XwOPeWaEQnAQcYyJz
8rk/OtIIfQaD421Nis8sQvJyqWfE9NUmvwywU5CmX842mWUEb7KExkFeQZ1XLLAR
eqge3n62HYR9Bg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 04:57:45 2026 by rpki-client