Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/bbedbe-8821-4bd8-bbcc-3adf9b61347d/1/TPzH4BfCyfdjLacpNHa7fkowNlo.mft
File: TPzH4BfCyfdjLacpNHa7fkowNlo.mft (raw, json)
Hash identifier: hDdye7zj4J69CA+BQdGrvf5P6rS9HIm05ZWCXTqgZuI=
Subject key identifier: 4C:ED:33:93:9C:FC:73:9E:BB:F9:17:C9:91:0D:74:C2:07:2D:1C:21
Authority key identifier: 4C:FC:C7:E0:17:C2:C9:F7:63:2D:A7:29:34:76:BB:7E:4A:30:36:5A
Certificate issuer: /CN=4cfcc7e017c2c9f7632da7293476bb7e4a30365a
Certificate serial: 019D2884A17C7DA67221BC608D5565553B40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TPzH4BfCyfdjLacpNHa7fkowNlo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/bbedbe-8821-4bd8-bbcc-3adf9b61347d/1/TPzH4BfCyfdjLacpNHa7fkowNlo.mft
Manifest number: 1889
Signing time: Thu 26 Mar 2026 05:01:13 +0000
Manifest this update: Thu 26 Mar 2026 05:01:13 +0000
Manifest next update: Fri 27 Mar 2026 05:01:13 +0000
Files and hashes: 1: 4rWRMTAx37_lQCzr5hcZsju6dqw.roa (hash: W2xQvjb4BYluc6hJ83tM86YR+fMCZk+Sc0Dq669prBQ=)
2: TPzH4BfCyfdjLacpNHa7fkowNlo.crl (hash: JpV/4rmFFp4DsY6Z0+kbo8YYMJhTn71NMXIEN+ffGKo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/bbedbe-8821-4bd8-bbcc-3adf9b61347d/1/TPzH4BfCyfdjLacpNHa7fkowNlo.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/bbedbe-8821-4bd8-bbcc-3adf9b61347d/1/TPzH4BfCyfdjLacpNHa7fkowNlo.mft
rsync://rpki.ripe.net/repository/DEFAULT/TPzH4BfCyfdjLacpNHa7fkowNlo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 05:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:a1:7c:7d:a6:72:21:bc:60:8d:55:65:55:3b:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cfcc7e017c2c9f7632da7293476bb7e4a30365a
Validity
Not Before: Mar 26 05:01:13 2026 GMT
Not After : Mar 27 05:01:13 2026 GMT
Subject: CN=4ced33939cfc739ebbf917c9910d74c2072d1c21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:10:04:42:ff:b6:91:05:80:49:04:66:8d:49:
c5:06:72:88:91:78:b4:41:19:be:c4:e1:8e:c4:99:
07:d9:1d:e4:f0:ad:c5:10:52:c0:5c:5f:e7:97:72:
89:fe:7e:12:3b:39:f5:82:60:40:37:86:46:fc:56:
2f:0f:83:74:3c:f7:bc:ad:c7:6f:c9:b9:e6:e3:1e:
80:8b:fb:fa:48:ec:ea:af:08:57:5a:b1:2e:bb:60:
7b:38:ec:81:3a:cb:63:b3:24:4d:23:01:1e:39:60:
c6:44:85:ba:b3:15:38:6e:cc:b5:9e:22:c8:eb:6d:
c8:ad:46:72:df:b8:be:36:74:1e:af:a6:5e:15:9d:
0c:11:28:37:69:1d:4e:a7:e6:bb:42:15:09:9f:42:
a4:88:35:74:69:9a:05:f0:b8:05:a6:08:04:93:26:
97:5c:8e:d1:4f:bc:97:2a:01:85:bb:4e:b4:f9:ce:
35:2d:c9:2e:27:f6:67:24:22:cc:6b:20:ff:0c:af:
06:9a:df:49:74:69:42:ce:c0:6e:7a:98:fe:e6:3d:
ed:bf:e8:07:a6:a7:97:74:ce:db:bb:72:d4:54:84:
89:c2:63:c7:93:6b:bc:78:a3:2d:a7:d5:2d:f2:c6:
88:29:a1:14:ff:ed:8d:ab:42:71:1c:c8:fd:5a:6c:
79:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:ED:33:93:9C:FC:73:9E:BB:F9:17:C9:91:0D:74:C2:07:2D:1C:21
X509v3 Authority Key Identifier:
keyid:4C:FC:C7:E0:17:C2:C9:F7:63:2D:A7:29:34:76:BB:7E:4A:30:36:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TPzH4BfCyfdjLacpNHa7fkowNlo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/bbedbe-8821-4bd8-bbcc-3adf9b61347d/1/TPzH4BfCyfdjLacpNHa7fkowNlo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/bbedbe-8821-4bd8-bbcc-3adf9b61347d/1/TPzH4BfCyfdjLacpNHa7fkowNlo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:86:a2:6b:2e:57:c5:5e:97:22:aa:74:3f:c9:c6:fb:88:a4:
34:9e:40:46:c6:dc:bb:88:ce:16:47:b3:96:23:8b:0c:2f:ea:
c7:a7:63:09:7c:e7:7f:85:1d:1c:29:2b:31:a4:1b:67:28:fc:
9b:3b:fb:00:a1:49:10:49:a0:ba:56:90:a4:03:26:8b:41:0c:
8c:01:ca:84:d9:e4:10:93:0d:a9:6e:12:f1:47:d2:62:0a:c5:
26:5a:5c:b5:6d:18:44:68:d0:a4:29:90:5f:8b:fa:af:82:08:
55:1c:0f:94:09:fb:0d:80:84:51:f8:60:c3:1c:62:7f:b0:3f:
a4:89:d1:a2:c0:8b:01:b2:c5:a0:9a:8b:bd:b1:70:12:c8:f7:
98:78:8a:e1:09:3e:c2:0c:ef:c3:94:70:e6:ae:26:ac:19:b1:
8b:95:05:6e:07:bd:e6:03:e0:bd:e3:15:41:9e:d6:4a:79:a2:
c3:59:13:79:10:ab:74:a5:fe:70:f9:20:dd:2d:3c:4c:70:b6:
81:6e:24:08:91:c6:1e:eb:fd:1f:be:ec:f2:c1:f2:94:c7:3d:
09:f2:01:ee:e9:af:1a:b3:ae:3b:e9:7e:75:b2:5e:39:81:1b:
bc:9e:d7:36:0f:f8:65:9a:21:07:eb:9b:00:48:b7:9c:3f:32:
68:3a:c9:2c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ohKF8faZyIbxgjVVlVTtAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjZmNjN2UwMTdjMmM5Zjc2MzJkYTcyOTM0NzZiYjdlNGEz
MDM2NWEwHhcNMjYwMzI2MDUwMTEzWhcNMjYwMzI3MDUwMTEzWjAzMTEwLwYDVQQD
Eyg0Y2VkMzM5MzljZmM3MzllYmJmOTE3Yzk5MTBkNzRjMjA3MmQxYzIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsBAEQv+2kQWASQRmjUnFBnKIkXi0
QRm+xOGOxJkH2R3k8K3FEFLAXF/nl3KJ/n4SOzn1gmBAN4ZG/FYvD4N0PPe8rcdv
ybnm4x6Ai/v6SOzqrwhXWrEuu2B7OOyBOstjsyRNIwEeOWDGRIW6sxU4bsy1niLI
623IrUZy37i+NnQer6ZeFZ0MESg3aR1Op+a7QhUJn0KkiDV0aZoF8LgFpggEkyaX
XI7RT7yXKgGFu060+c41LckuJ/ZnJCLMayD/DK8Gmt9JdGlCzsBuepj+5j3tv+gH
pqeXdM7bu3LUVISJwmPHk2u8eKMtp9Ut8saIKaEU/+2Nq0JxHMj9Wmx5ewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEztM5Oc/HOeu/kXyZENdMIHLRwhMB8GA1UdIwQY
MBaAFEz8x+AXwsn3Yy2nKTR2u35KMDZaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVFB6SDRCZkN5ZmRqTGFjcE5IYTdma293TmxvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy9iYmVkYmUtODgyMS00YmQ4LWJiY2Mt
M2FkZjliNjEzNDdkLzEvVFB6SDRCZkN5ZmRqTGFjcE5IYTdma293TmxvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNy9iYmVkYmUtODgyMS00YmQ4LWJiY2MtM2FkZjliNjEzNDdk
LzEvVFB6SDRCZkN5ZmRqTGFjcE5IYTdma293TmxvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIIaiay5X
xV6XIqp0P8nG+4ikNJ5ARsbcu4jOFkezliOLDC/qx6djCXznf4UdHCkrMaQbZyj8
mzv7AKFJEEmgulaQpAMmi0EMjAHKhNnkEJMNqW4S8UfSYgrFJlpctW0YRGjQpCmQ
X4v6r4IIVRwPlAn7DYCEUfhgwxxif7A/pInRosCLAbLFoJqLvbFwEsj3mHiK4Qk+
wgzvw5Rw5q4mrBmxi5UFbge95gPgveMVQZ7WSnmiw1kTeRCrdKX+cPkg3S08THC2
gW4kCJHGHuv9H77s8sHylMc9CfIB7umvGrOuO+l+dbJeOYEbvJ7XNg/4ZZohB+ub
AEi3nD8yaDrJLA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 13:28:59 2026 by rpki-client