Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/ee29a6-691d-4b0c-ad63-94c8254bd3b7/1/TBsMQJaQgJV_zO4fuKP7S7OL9dw.mft
File: TBsMQJaQgJV_zO4fuKP7S7OL9dw.mft (raw, json)
Hash identifier: qYvnHkR9u20DH7B9KGdduGhtICTP4si7J4P18+QA22E=
Subject key identifier: 3C:0B:81:64:D4:E5:85:A0:21:B5:16:FB:6F:62:C7:E7:21:CA:C3:AB
Authority key identifier: 4C:1B:0C:40:96:90:80:95:7F:CC:EE:1F:B8:A3:FB:4B:B3:8B:F5:DC
Certificate issuer: /CN=4c1b0c40969080957fccee1fb8a3fb4bb38bf5dc
Certificate serial: 019D288465409B454A333C42355372CBA10A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TBsMQJaQgJV_zO4fuKP7S7OL9dw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/ee29a6-691d-4b0c-ad63-94c8254bd3b7/1/TBsMQJaQgJV_zO4fuKP7S7OL9dw.mft
Manifest number: 1575
Signing time: Thu 26 Mar 2026 05:00:58 +0000
Manifest this update: Thu 26 Mar 2026 05:00:58 +0000
Manifest next update: Fri 27 Mar 2026 05:00:58 +0000
Files and hashes: 1: B0kfMqpAGqXnYaMTrQLvbBjvxOk.roa (hash: YEV3wXNHcOYmzWyvVh84es9QxYCJzyckUbH9jX+YQQA=)
2: TBsMQJaQgJV_zO4fuKP7S7OL9dw.crl (hash: ddXuAU/4Yq6CqgadbXRgwQoocQMLBL6mV1zoq8LKHnE=)
3: YA-H3bfE3r6ihPzDZtgenypbPbg.roa (hash: pUTlAIWeqA52q3MAJOIPYUZ8tJQ/eIlG+BT4v4cwsGM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/ee29a6-691d-4b0c-ad63-94c8254bd3b7/1/TBsMQJaQgJV_zO4fuKP7S7OL9dw.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/ee29a6-691d-4b0c-ad63-94c8254bd3b7/1/TBsMQJaQgJV_zO4fuKP7S7OL9dw.mft
rsync://rpki.ripe.net/repository/DEFAULT/TBsMQJaQgJV_zO4fuKP7S7OL9dw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:65:40:9b:45:4a:33:3c:42:35:53:72:cb:a1:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c1b0c40969080957fccee1fb8a3fb4bb38bf5dc
Validity
Not Before: Mar 26 05:00:58 2026 GMT
Not After : Mar 27 05:00:58 2026 GMT
Subject: CN=3c0b8164d4e585a021b516fb6f62c7e721cac3ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:2e:9d:10:fb:cd:90:11:93:d3:21:63:e0:08:
a0:3e:62:b4:fc:46:ec:e6:72:ad:7d:41:47:9d:06:
85:77:f2:4f:3e:92:64:42:00:25:41:b4:66:78:2f:
bf:8d:a2:71:31:7e:32:03:ee:8e:a9:a3:3e:1d:a8:
ed:11:62:5b:82:74:a9:63:42:87:e9:7b:ad:93:96:
46:7a:e9:3c:35:cb:88:61:80:5c:3c:56:b6:34:e5:
ab:b3:0f:10:36:8c:a3:70:f1:a0:8c:cd:d6:30:30:
cd:59:3c:34:7c:de:1c:7e:be:64:da:3a:a8:ef:c6:
7c:e2:34:f2:47:d7:fc:34:cc:da:7a:de:af:7b:e4:
49:a1:a0:5a:af:dd:c0:bd:65:60:3c:83:40:9d:70:
4a:a9:9c:1b:7b:a2:aa:98:32:90:c2:67:fd:ff:49:
c2:c4:bb:29:21:56:80:f5:57:8f:4c:39:f7:2f:68:
f5:ce:8e:8b:c8:24:90:5e:fe:70:b8:65:23:e1:97:
c7:be:79:42:ba:35:27:5a:c3:77:0b:62:36:9d:4c:
f3:97:e8:64:e0:1a:5b:e3:e7:ed:e8:53:bb:9a:49:
f5:0b:a2:1c:b0:4f:33:2f:e8:f8:a6:ab:7b:ff:81:
31:3c:5f:c8:04:fc:ca:e6:3a:bb:f7:bf:6a:c8:7f:
b6:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:0B:81:64:D4:E5:85:A0:21:B5:16:FB:6F:62:C7:E7:21:CA:C3:AB
X509v3 Authority Key Identifier:
keyid:4C:1B:0C:40:96:90:80:95:7F:CC:EE:1F:B8:A3:FB:4B:B3:8B:F5:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TBsMQJaQgJV_zO4fuKP7S7OL9dw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/ee29a6-691d-4b0c-ad63-94c8254bd3b7/1/TBsMQJaQgJV_zO4fuKP7S7OL9dw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/ee29a6-691d-4b0c-ad63-94c8254bd3b7/1/TBsMQJaQgJV_zO4fuKP7S7OL9dw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:5c:be:5d:cd:d7:92:d9:dd:11:a0:87:79:f4:9d:04:14:c1:
a0:50:ec:c3:f9:5e:54:75:cc:bf:67:2d:bc:18:35:22:ef:3b:
41:1a:6e:20:48:16:a7:97:22:2f:47:ce:85:55:82:6f:35:f6:
8d:2d:c2:76:89:23:2a:ae:69:f8:4f:ba:fc:a4:90:2a:b9:8c:
26:ef:2d:70:e8:dd:3b:37:89:a2:73:97:4e:b6:41:23:3a:8c:
ca:7b:b7:70:e2:24:5e:cf:4c:18:e8:7f:2d:73:d2:82:05:d8:
16:6d:69:b7:a8:d2:ab:d7:84:59:a2:64:52:20:68:ca:8b:53:
09:c1:7f:86:6d:83:5a:6b:69:f2:ef:5c:96:c9:88:79:b0:d3:
63:1d:69:33:fc:e3:35:a0:0b:15:c4:21:7d:c5:ff:b3:8f:f9:
b5:b5:75:c8:23:cb:a0:02:03:93:d6:be:fb:b2:a3:b6:e4:24:
f0:4d:63:cb:b3:d1:b3:a7:45:81:e6:d4:62:d9:fc:3e:0f:36:
55:60:e6:db:cc:dd:b3:40:34:35:32:ce:ca:e2:4b:14:93:f6:
cc:58:ea:74:55:be:e2:95:b9:e6:7e:db:cd:3f:ba:9a:95:c0:
eb:58:6e:d3:69:ef:85:17:68:82:ee:53:1d:06:a6:61:10:e1:
76:1a:73:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:14:42 2026 by rpki-client