Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/ee29a6-691d-4b0c-ad63-94c8254bd3b7/1/TBsMQJaQgJV_zO4fuKP7S7OL9dw.mft
File: TBsMQJaQgJV_zO4fuKP7S7OL9dw.mft (raw, json)
Hash identifier: nywBKMaLbQ7IE10/lbJrAtgq4t1iIRrVpzmv2tN+YMU=
Subject key identifier: B2:A3:73:EC:9B:EC:BF:F0:57:78:3F:C1:39:C7:29:B9:FC:08:1A:70
Authority key identifier: 4C:1B:0C:40:96:90:80:95:7F:CC:EE:1F:B8:A3:FB:4B:B3:8B:F5:DC
Certificate issuer: /CN=4c1b0c40969080957fccee1fb8a3fb4bb38bf5dc
Certificate serial: 019E1DC79F092BBBCE64D4359745F78F3D39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TBsMQJaQgJV_zO4fuKP7S7OL9dw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/ee29a6-691d-4b0c-ad63-94c8254bd3b7/1/TBsMQJaQgJV_zO4fuKP7S7OL9dw.mft
Manifest number: 15F4
Signing time: Tue 12 May 2026 20:01:21 +0000
Manifest this update: Tue 12 May 2026 20:01:21 +0000
Manifest next update: Wed 13 May 2026 20:01:21 +0000
Files and hashes: 1: B0kfMqpAGqXnYaMTrQLvbBjvxOk.roa (hash: YEV3wXNHcOYmzWyvVh84es9QxYCJzyckUbH9jX+YQQA=)
2: TBsMQJaQgJV_zO4fuKP7S7OL9dw.crl (hash: M6KTe788erp2AwhxxOI18JtiJRN8YTri+n0t/nFcR30=)
3: YA-H3bfE3r6ihPzDZtgenypbPbg.roa (hash: pUTlAIWeqA52q3MAJOIPYUZ8tJQ/eIlG+BT4v4cwsGM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/ee29a6-691d-4b0c-ad63-94c8254bd3b7/1/TBsMQJaQgJV_zO4fuKP7S7OL9dw.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/ee29a6-691d-4b0c-ad63-94c8254bd3b7/1/TBsMQJaQgJV_zO4fuKP7S7OL9dw.mft
rsync://rpki.ripe.net/repository/DEFAULT/TBsMQJaQgJV_zO4fuKP7S7OL9dw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:c7:9f:09:2b:bb:ce:64:d4:35:97:45:f7:8f:3d:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c1b0c40969080957fccee1fb8a3fb4bb38bf5dc
Validity
Not Before: May 12 20:01:21 2026 GMT
Not After : May 13 20:01:21 2026 GMT
Subject: CN=b2a373ec9becbff057783fc139c729b9fc081a70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:b2:98:88:e7:d9:b3:c7:d7:b0:96:dd:68:d7:
f7:f3:b0:cc:0f:57:19:1c:c3:33:de:94:ac:99:5c:
05:1c:4b:ff:99:6f:b8:16:96:d3:0e:07:61:6b:e1:
cc:b0:97:1b:4c:25:8f:45:0c:99:77:a7:87:a8:20:
d8:61:06:75:b5:dc:da:90:6b:b1:7e:82:1c:e3:00:
eb:dd:50:f6:03:04:07:2e:9a:4d:1d:53:02:ba:f9:
88:6d:2b:7d:d9:3f:dd:2f:69:5e:1d:83:92:41:cc:
5f:d0:a4:0e:21:c4:1c:58:4e:c0:a5:87:3e:33:c2:
4c:01:99:24:47:8e:77:5b:fe:f6:73:53:4b:42:9c:
d8:6c:02:af:ed:d5:b2:fa:d3:d0:95:31:9b:8b:15:
8b:bd:c3:eb:9a:b7:33:cf:1d:ff:dd:62:fa:d2:95:
ae:d9:db:8b:c0:5b:3c:f3:f3:9b:7e:55:3e:fc:ea:
ed:6d:f3:ba:92:c9:64:08:59:67:1b:c4:f5:07:49:
d9:7f:95:a0:d6:3e:e4:11:40:de:d6:0e:e9:50:0f:
de:4b:dd:2f:72:40:bb:87:dd:e8:ff:b7:4a:bb:fd:
4e:49:6c:ac:82:85:38:94:1a:c2:6c:43:50:b8:ec:
d8:59:a6:ba:87:d5:69:8f:59:41:d7:e1:73:7c:dc:
a7:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:A3:73:EC:9B:EC:BF:F0:57:78:3F:C1:39:C7:29:B9:FC:08:1A:70
X509v3 Authority Key Identifier:
keyid:4C:1B:0C:40:96:90:80:95:7F:CC:EE:1F:B8:A3:FB:4B:B3:8B:F5:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TBsMQJaQgJV_zO4fuKP7S7OL9dw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/ee29a6-691d-4b0c-ad63-94c8254bd3b7/1/TBsMQJaQgJV_zO4fuKP7S7OL9dw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/ee29a6-691d-4b0c-ad63-94c8254bd3b7/1/TBsMQJaQgJV_zO4fuKP7S7OL9dw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:8b:2c:78:17:1f:3d:90:da:1e:2e:72:ae:91:60:31:25:44:
3d:ac:16:93:e8:6c:ff:1c:4a:a7:6f:10:b6:53:ca:b1:89:c0:
1e:de:c0:10:75:23:3c:ff:c4:f7:29:0b:76:f3:13:b0:0f:ec:
00:67:35:23:e5:e1:a8:b0:25:a6:3d:88:cf:b9:23:23:c5:ef:
c8:4e:fe:d9:f4:f6:e9:e3:af:ac:7c:4f:c8:94:80:3d:87:7b:
4b:83:43:aa:02:3e:35:63:1c:5e:3a:f6:bd:66:38:db:e2:a8:
d3:ce:ee:8d:49:0c:e7:7d:7a:86:01:b0:fc:b4:3e:da:76:5d:
c9:15:68:e3:bf:58:99:2b:80:b3:92:b5:04:aa:79:ee:da:3c:
36:56:2d:0f:45:ef:26:39:5d:ed:26:4b:1f:e4:e7:80:82:04:
0b:dd:94:83:d7:ca:ef:9a:38:06:03:4e:fe:05:e7:fb:b8:1b:
36:58:29:10:7e:42:54:83:9a:ed:c7:cf:f6:4a:c9:2f:86:88:
ee:8e:0c:28:e9:36:7a:93:80:86:e4:fe:57:ef:50:df:ff:29:
9c:47:f8:f8:8a:36:6b:cc:a1:00:f8:41:3a:b6:fd:9f:be:b6:
44:8d:38:54:1e:24:ab:c9:7e:6c:18:67:a4:9e:0c:54:ad:59:
37:39:0c:22
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4dx58JK7vOZNQ1l0X3jz05MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjMWIwYzQwOTY5MDgwOTU3ZmNjZWUxZmI4YTNmYjRiYjM4
YmY1ZGMwHhcNMjYwNTEyMjAwMTIxWhcNMjYwNTEzMjAwMTIxWjAzMTEwLwYDVQQD
EyhiMmEzNzNlYzliZWNiZmYwNTc3ODNmYzEzOWM3MjliOWZjMDgxYTcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0rKYiOfZs8fXsJbdaNf387DMD1cZ
HMMz3pSsmVwFHEv/mW+4FpbTDgdha+HMsJcbTCWPRQyZd6eHqCDYYQZ1tdzakGux
foIc4wDr3VD2AwQHLppNHVMCuvmIbSt92T/dL2leHYOSQcxf0KQOIcQcWE7ApYc+
M8JMAZkkR453W/72c1NLQpzYbAKv7dWy+tPQlTGbixWLvcPrmrczzx3/3WL60pWu
2duLwFs88/ObflU+/OrtbfO6kslkCFlnG8T1B0nZf5Wg1j7kEUDe1g7pUA/eS90v
ckC7h93o/7dKu/1OSWysgoU4lBrCbENQuOzYWaa6h9Vpj1lB1+FzfNynRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLKjc+yb7L/wV3g/wTnHKbn8CBpwMB8GA1UdIwQY
MBaAFEwbDECWkICVf8zuH7ij+0uzi/XcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVEJzTVFKYVFnSlZfek80ZnVLUDdTN09MOWR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi9lZTI5YTYtNjkxZC00YjBjLWFkNjMt
OTRjODI1NGJkM2I3LzEvVEJzTVFKYVFnSlZfek80ZnVLUDdTN09MOWR3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZi9lZTI5YTYtNjkxZC00YjBjLWFkNjMtOTRjODI1NGJkM2I3
LzEvVEJzTVFKYVFnSlZfek80ZnVLUDdTN09MOWR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAposseBcf
PZDaHi5yrpFgMSVEPawWk+hs/xxKp28QtlPKsYnAHt7AEHUjPP/E9ykLdvMTsA/s
AGc1I+XhqLAlpj2Iz7kjI8XvyE7+2fT26eOvrHxPyJSAPYd7S4NDqgI+NWMcXjr2
vWY42+Ko087ujUkM5316hgGw/LQ+2nZdyRVo479YmSuAs5K1BKp57to8NlYtD0Xv
Jjld7SZLH+TngIIEC92Ug9fK75o4BgNO/gXn+7gbNlgpEH5CVIOa7cfP9krJL4aI
7o4MKOk2epOAhuT+V+9Q3/8pnEf4+Io2a8yhAPhBOrb9n762RI04VB4kq8l+bBhn
pJ4MVK1ZNzkMIg==
-----END CERTIFICATE-----
Generated at Wed May 13 04:06:57 2026 by rpki-client