Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/ee29a6-691d-4b0c-ad63-94c8254bd3b7/1/TBsMQJaQgJV_zO4fuKP7S7OL9dw.mft
File: TBsMQJaQgJV_zO4fuKP7S7OL9dw.mft (raw, json)
Hash identifier: RF12k3QQsVbESW7GdTAY5A40uer7W+tFZKtplljNTqc=
Subject key identifier: 54:2D:AC:D1:90:B9:C9:16:66:C3:FB:29:96:07:75:B1:D1:C0:FE:3F
Authority key identifier: 4C:1B:0C:40:96:90:80:95:7F:CC:EE:1F:B8:A3:FB:4B:B3:8B:F5:DC
Certificate issuer: /CN=4c1b0c40969080957fccee1fb8a3fb4bb38bf5dc
Certificate serial: 019F90907623D6FDAE2BF66B6B8D7775643A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TBsMQJaQgJV_zO4fuKP7S7OL9dw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/ee29a6-691d-4b0c-ad63-94c8254bd3b7/1/TBsMQJaQgJV_zO4fuKP7S7OL9dw.mft
Manifest number: 16B4
Signing time: Thu 23 Jul 2026 20:00:14 +0000
Manifest this update: Thu 23 Jul 2026 20:00:14 +0000
Manifest next update: Fri 24 Jul 2026 20:00:14 +0000
Files and hashes: 1: B0kfMqpAGqXnYaMTrQLvbBjvxOk.roa (hash: YEV3wXNHcOYmzWyvVh84es9QxYCJzyckUbH9jX+YQQA=)
2: TBsMQJaQgJV_zO4fuKP7S7OL9dw.crl (hash: 6AdHW+CzfyIg344swk9uWD4CF7NWLF41XfLClB1rB58=)
3: YA-H3bfE3r6ihPzDZtgenypbPbg.roa (hash: pUTlAIWeqA52q3MAJOIPYUZ8tJQ/eIlG+BT4v4cwsGM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/ee29a6-691d-4b0c-ad63-94c8254bd3b7/1/TBsMQJaQgJV_zO4fuKP7S7OL9dw.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/ee29a6-691d-4b0c-ad63-94c8254bd3b7/1/TBsMQJaQgJV_zO4fuKP7S7OL9dw.mft
rsync://rpki.ripe.net/repository/DEFAULT/TBsMQJaQgJV_zO4fuKP7S7OL9dw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:90:76:23:d6:fd:ae:2b:f6:6b:6b:8d:77:75:64:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c1b0c40969080957fccee1fb8a3fb4bb38bf5dc
Validity
Not Before: Jul 23 20:00:14 2026 GMT
Not After : Jul 24 20:00:14 2026 GMT
Subject: CN=542dacd190b9c91666c3fb29960775b1d1c0fe3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c6:23:74:5d:4e:39:fa:7a:fa:e1:f7:f1:49:
1b:14:4e:ee:80:d0:a6:97:f1:60:97:33:87:ba:c5:
60:1c:57:61:d8:c8:17:d4:23:bf:05:fb:1a:47:9e:
08:11:52:93:f1:c4:5d:d8:11:0f:1d:e7:00:6d:22:
2b:fa:67:07:ae:38:51:6c:96:e9:e9:84:34:02:4c:
30:be:3c:1b:95:48:32:60:b5:b3:be:d8:66:e0:1c:
ea:57:ca:1b:17:74:38:83:52:26:c5:ff:8e:60:d1:
90:a1:f0:54:e9:fc:04:f3:07:49:e1:35:7e:71:90:
5f:75:31:c7:7a:3f:cf:71:4f:8e:81:35:d8:28:2c:
12:b5:bf:f9:57:a7:29:03:a2:5a:b1:54:9a:21:2a:
74:45:6b:93:c2:3e:2b:f2:6f:b2:9a:d8:7c:9a:ee:
15:31:58:99:f5:5f:36:25:f0:bd:13:eb:cf:df:ed:
78:0e:90:0c:f6:17:77:0c:7a:f5:34:60:78:10:82:
56:26:d4:08:cc:b8:4c:3a:c2:63:5f:55:3f:e5:63:
94:f6:a8:92:64:f9:a3:97:69:54:cf:0d:77:ba:31:
4d:14:f7:b0:54:8c:bc:5b:98:3b:3f:3d:4c:c3:8a:
43:27:d3:63:7e:9f:03:e3:32:1a:98:82:fa:2a:b8:
27:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:2D:AC:D1:90:B9:C9:16:66:C3:FB:29:96:07:75:B1:D1:C0:FE:3F
X509v3 Authority Key Identifier:
keyid:4C:1B:0C:40:96:90:80:95:7F:CC:EE:1F:B8:A3:FB:4B:B3:8B:F5:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TBsMQJaQgJV_zO4fuKP7S7OL9dw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/ee29a6-691d-4b0c-ad63-94c8254bd3b7/1/TBsMQJaQgJV_zO4fuKP7S7OL9dw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/ee29a6-691d-4b0c-ad63-94c8254bd3b7/1/TBsMQJaQgJV_zO4fuKP7S7OL9dw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:22:db:fb:f4:8b:7d:21:80:55:d6:f5:72:16:bd:11:6d:cf:
ed:11:5f:a8:0a:c9:47:90:45:a8:38:d1:9d:97:51:41:09:c3:
0c:2c:37:d9:9d:9e:9e:0c:9a:7a:46:2e:d1:a3:15:33:d4:c0:
f1:c0:f5:a5:b3:d8:07:68:64:3e:b0:8e:f7:3c:f4:03:7a:a9:
3b:98:bf:2a:1d:1e:3b:9a:c2:1a:8f:06:68:2d:c8:1b:d3:c7:
91:c4:d8:9d:f5:10:4d:c8:8c:0c:bb:cc:40:67:c8:fb:37:21:
e0:5d:c8:fc:60:14:46:37:22:52:49:79:2b:d5:98:f0:eb:f6:
da:f6:0a:04:ca:76:b1:aa:28:75:71:d5:7d:87:46:c9:db:df:
26:48:d4:6f:32:73:36:8e:bd:fa:ae:6d:fd:b0:a1:52:38:64:
81:ac:1a:fc:be:e7:25:1b:85:ef:5e:0d:d5:21:b6:d1:57:f5:
12:96:d3:6a:05:43:d7:55:1c:8c:23:0a:e6:dd:e7:00:f8:e1:
6c:20:80:f0:ab:2a:24:34:20:4a:18:5a:8d:5d:9e:69:fc:e8:
9e:3b:22:26:78:e8:1b:6a:52:6c:ae:a7:1a:1a:7e:9a:fe:c1:
39:73:c6:b1:11:db:97:5e:95:9b:67:d5:8d:3d:f5:36:70:5e:
25:79:64:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:46:55 2026 by rpki-client