Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cf/ee29a6-691d-4b0c-ad63-94c8254bd3b7/1/TBsMQJaQgJV_zO4fuKP7S7OL9dw.mft
File: TBsMQJaQgJV_zO4fuKP7S7OL9dw.mft (raw, json)
Hash identifier: QcYhOjPoJbdGYrOLErtC9ufM5NAUpZmu/aTIm5yAW2I=
Subject key identifier: 99:FD:57:58:04:F7:97:86:5F:1F:FB:3D:D7:DE:51:55:D5:6F:31:FB
Authority key identifier: 4C:1B:0C:40:96:90:80:95:7F:CC:EE:1F:B8:A3:FB:4B:B3:8B:F5:DC
Certificate issuer: /CN=4c1b0c40969080957fccee1fb8a3fb4bb38bf5dc
Certificate serial: 01A0D1244698CBDE26908AD14E6F39F8DF4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TBsMQJaQgJV_zO4fuKP7S7OL9dw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/ee29a6-691d-4b0c-ad63-94c8254bd3b7/1/TBsMQJaQgJV_zO4fuKP7S7OL9dw.mft
Manifest number: 175A
Signing time: Thu 24 Sep 2026 02:00:10 +0000
Manifest this update: Thu 24 Sep 2026 02:00:10 +0000
Manifest next update: Fri 25 Sep 2026 02:00:10 +0000
Files and hashes: 1: B0kfMqpAGqXnYaMTrQLvbBjvxOk.roa (hash: YEV3wXNHcOYmzWyvVh84es9QxYCJzyckUbH9jX+YQQA=)
2: TBsMQJaQgJV_zO4fuKP7S7OL9dw.crl (hash: GL/SeHPkzo1xH0xyIIXJwZVydTl0PeGPb3TegVCuzzc=)
3: YA-H3bfE3r6ihPzDZtgenypbPbg.roa (hash: pUTlAIWeqA52q3MAJOIPYUZ8tJQ/eIlG+BT4v4cwsGM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/ee29a6-691d-4b0c-ad63-94c8254bd3b7/1/TBsMQJaQgJV_zO4fuKP7S7OL9dw.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/ee29a6-691d-4b0c-ad63-94c8254bd3b7/1/TBsMQJaQgJV_zO4fuKP7S7OL9dw.mft
rsync://rpki.ripe.net/repository/DEFAULT/TBsMQJaQgJV_zO4fuKP7S7OL9dw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d1:24:46:98:cb:de:26:90:8a:d1:4e:6f:39:f8:df:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c1b0c40969080957fccee1fb8a3fb4bb38bf5dc
Validity
Not Before: Sep 24 02:00:10 2026 GMT
Not After : Sep 25 02:00:10 2026 GMT
Subject: CN=99fd575804f797865f1ffb3dd7de5155d56f31fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:93:aa:70:36:69:b3:1b:5d:2b:df:ce:77:f0:
78:91:cd:a6:29:98:7a:c5:e8:82:4c:74:85:e6:29:
a0:a4:26:03:15:6b:cc:19:34:a6:80:10:20:ee:e1:
ea:27:20:db:6e:02:7b:fb:52:54:35:ed:54:88:2f:
ac:c6:f0:ee:00:29:61:9e:42:45:ca:31:7a:8b:4d:
25:4b:49:bf:14:60:80:15:46:46:a0:cb:e2:74:dd:
ae:a6:16:3c:62:d0:c4:47:e3:ef:32:5c:e7:ad:f0:
e2:05:98:0e:66:c5:6c:4f:cf:4c:46:dc:4c:be:cb:
51:cf:31:c4:72:76:b0:a9:a9:30:40:c3:99:8f:80:
e0:76:23:83:1d:c4:08:3e:ac:94:c7:6a:99:2b:aa:
73:c6:49:0e:10:cc:56:22:43:f7:02:78:69:62:5c:
f2:72:f0:20:3a:d2:10:8f:9f:65:e8:c0:57:39:da:
b9:1e:ee:2f:c3:07:7d:70:9b:2a:09:34:f9:c0:b1:
71:02:55:07:1d:5a:08:91:48:d1:f2:a0:16:43:82:
60:d5:1c:4e:14:21:3e:59:b3:6c:11:1f:bc:9a:18:
f9:ed:89:0b:4c:25:ba:2c:5f:83:49:b4:83:de:23:
46:09:0a:41:0f:e4:ad:e8:7f:15:be:de:43:cd:4c:
51:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:FD:57:58:04:F7:97:86:5F:1F:FB:3D:D7:DE:51:55:D5:6F:31:FB
X509v3 Authority Key Identifier:
keyid:4C:1B:0C:40:96:90:80:95:7F:CC:EE:1F:B8:A3:FB:4B:B3:8B:F5:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TBsMQJaQgJV_zO4fuKP7S7OL9dw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/ee29a6-691d-4b0c-ad63-94c8254bd3b7/1/TBsMQJaQgJV_zO4fuKP7S7OL9dw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/ee29a6-691d-4b0c-ad63-94c8254bd3b7/1/TBsMQJaQgJV_zO4fuKP7S7OL9dw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:12:18:d7:a9:b5:67:74:86:26:26:c2:21:b5:d8:08:d9:92:
ee:0e:7a:fd:46:b2:fa:b3:f8:45:ba:5e:bf:88:e7:30:99:a6:
55:25:6e:05:d7:14:97:b2:88:34:96:05:f5:9d:7d:01:aa:6d:
2e:7e:4a:14:d3:15:1a:e1:ba:1a:5d:5f:13:7e:3e:4b:c6:a2:
8c:0a:b8:4b:d3:7d:29:95:0a:0d:50:d5:ed:34:9c:7e:d7:6e:
5c:93:7b:77:2f:1e:97:dd:c8:c3:65:ed:74:8d:fe:32:c5:a2:
78:b5:79:c1:c3:fd:b4:58:ab:d8:b6:18:91:a2:97:20:ed:f3:
1f:5e:75:3a:0f:c7:63:fb:e0:13:4d:ae:da:01:51:57:08:34:
67:dc:ab:08:c9:c1:fc:79:4a:77:3c:bf:51:f5:6a:ed:5b:f9:
79:08:86:08:b6:3e:3b:f7:e6:03:76:04:0a:39:c9:69:66:8c:
d1:24:ce:b5:46:1b:e1:b1:08:dd:b2:0e:3b:fd:de:8d:9b:36:
86:f5:88:d7:7f:b5:56:6c:81:52:a0:71:85:d6:ea:66:5e:66:
99:2f:0a:db:8a:20:fe:6b:42:ed:c3:77:52:35:71:15:69:67:
80:9c:dc:ef:18:ba:02:86:0f:50:dd:d9:79:7d:7b:fa:7b:9b:
a5:aa:aa:cd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDRJEaYy94mkIrRTm85+N9NMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjMWIwYzQwOTY5MDgwOTU3ZmNjZWUxZmI4YTNmYjRiYjM4
YmY1ZGMwHhcNMjYwOTI0MDIwMDEwWhcNMjYwOTI1MDIwMDEwWjAzMTEwLwYDVQQD
Eyg5OWZkNTc1ODA0Zjc5Nzg2NWYxZmZiM2RkN2RlNTE1NWQ1NmYzMWZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu5OqcDZpsxtdK9/Od/B4kc2mKZh6
xeiCTHSF5imgpCYDFWvMGTSmgBAg7uHqJyDbbgJ7+1JUNe1UiC+sxvDuAClhnkJF
yjF6i00lS0m/FGCAFUZGoMvidN2uphY8YtDER+PvMlznrfDiBZgOZsVsT89MRtxM
vstRzzHEcnawqakwQMOZj4DgdiODHcQIPqyUx2qZK6pzxkkOEMxWIkP3AnhpYlzy
cvAgOtIQj59l6MBXOdq5Hu4vwwd9cJsqCTT5wLFxAlUHHVoIkUjR8qAWQ4Jg1RxO
FCE+WbNsER+8mhj57YkLTCW6LF+DSbSD3iNGCQpBD+St6H8Vvt5DzUxR0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJn9V1gE95eGXx/7PdfeUVXVbzH7MB8GA1UdIwQY
MBaAFEwbDECWkICVf8zuH7ij+0uzi/XcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVEJzTVFKYVFnSlZfek80ZnVLUDdTN09MOWR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi9lZTI5YTYtNjkxZC00YjBjLWFkNjMt
OTRjODI1NGJkM2I3LzEvVEJzTVFKYVFnSlZfek80ZnVLUDdTN09MOWR3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZi9lZTI5YTYtNjkxZC00YjBjLWFkNjMtOTRjODI1NGJkM2I3
LzEvVEJzTVFKYVFnSlZfek80ZnVLUDdTN09MOWR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACRIY16m1
Z3SGJibCIbXYCNmS7g56/Uay+rP4Rbpev4jnMJmmVSVuBdcUl7KINJYF9Z19Aapt
Ln5KFNMVGuG6Gl1fE34+S8aijAq4S9N9KZUKDVDV7TScftduXJN7dy8el93Iw2Xt
dI3+MsWieLV5wcP9tFir2LYYkaKXIO3zH151Og/HY/vgE02u2gFRVwg0Z9yrCMnB
/HlKdzy/UfVq7Vv5eQiGCLY+O/fmA3YECjnJaWaM0STOtUYb4bEI3bIOO/3ejZs2
hvWI13+1VmyBUqBxhdbqZl5mmS8K24og/mtC7cN3UjVxFWlngJzc7xi6AoYPUN3Z
eX17+nubpaqqzQ==
-----END CERTIFICATE-----
Generated at Thu Sep 24 08:46:06 2026 by rpki-client