Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fe/795ed9-8fad-4c44-8583-06ca709a3c59/1/tcsrXq88wV3Us7I62LlHKlJAwDs.mft
File: tcsrXq88wV3Us7I62LlHKlJAwDs.mft (raw, json)
Hash identifier: s0TqmvgKwniRrxOocgD4qTvSFztPpCQqbLzci6DdZEI=
Subject key identifier: 19:04:32:AA:0D:37:7A:48:A5:E6:B8:DD:B7:39:4D:0C:D2:15:64:C6
Authority key identifier: B5:CB:2B:5E:AF:3C:C1:5D:D4:B3:B2:3A:D8:B9:47:2A:52:40:C0:3B
Certificate issuer: /CN=b5cb2b5eaf3cc15dd4b3b23ad8b9472a5240c03b
Certificate serial: 01A0D796473CF0FDE5104CE8CCA283B331C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tcsrXq88wV3Us7I62LlHKlJAwDs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/795ed9-8fad-4c44-8583-06ca709a3c59/1/tcsrXq88wV3Us7I62LlHKlJAwDs.mft
Manifest number: 0452
Signing time: Fri 25 Sep 2026 08:02:24 +0000
Manifest this update: Fri 25 Sep 2026 08:02:24 +0000
Manifest next update: Sat 26 Sep 2026 08:02:24 +0000
Files and hashes: 1: GJGcFx0xGAuamOa3lmo_7TyCIas.roa (hash: qw0UBzd9Mkc6V2U3rQ/Tp5ymNOy4O3f5at2SdO5Hyh4=)
2: JD-_RMbQpF-pKZOnXs4mYFjjidQ.roa (hash: kFiezG9HvRIWsHO1y6hBEeY1FqGlLKVulu5N0PlRmH8=)
3: mOOpQixSR_G0BkBLz_pfNJqCpPc.roa (hash: J7597tV7KTTIerXR1FKozSh7ddWeTNBPbVoOCxMRSXM=)
4: tcsrXq88wV3Us7I62LlHKlJAwDs.crl (hash: sxvcdm6PTJmL6SvuYXSEZ5upH+GQn6qkPklzBlAUVbs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/795ed9-8fad-4c44-8583-06ca709a3c59/1/tcsrXq88wV3Us7I62LlHKlJAwDs.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/795ed9-8fad-4c44-8583-06ca709a3c59/1/tcsrXq88wV3Us7I62LlHKlJAwDs.mft
rsync://rpki.ripe.net/repository/DEFAULT/tcsrXq88wV3Us7I62LlHKlJAwDs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d7:96:47:3c:f0:fd:e5:10:4c:e8:cc:a2:83:b3:31:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5cb2b5eaf3cc15dd4b3b23ad8b9472a5240c03b
Validity
Not Before: Sep 25 08:02:24 2026 GMT
Not After : Sep 26 08:02:24 2026 GMT
Subject: CN=190432aa0d377a48a5e6b8ddb7394d0cd21564c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:bb:f9:d8:d4:a8:a0:b9:17:68:d8:83:e4:89:
00:58:90:e1:0d:26:be:0f:d0:91:0f:9f:78:84:03:
d1:0d:9e:f8:8e:4f:df:9d:fe:64:9a:1d:bb:b7:18:
72:c9:19:6c:87:d2:bc:e8:c1:eb:a0:c1:03:08:da:
48:5b:53:4d:9b:a7:8e:95:c8:03:cc:d2:c9:26:dc:
87:6a:17:b3:81:6c:ef:da:e7:e7:cf:56:c0:99:82:
74:ac:b6:5b:5a:d0:f0:d5:9c:eb:78:4c:87:90:ec:
6b:67:1f:66:29:16:81:9f:8b:3d:24:5e:36:2a:18:
59:7f:c8:6b:5b:59:15:62:7f:49:bc:a1:a8:f7:90:
03:0a:78:9b:23:17:18:e2:1a:7a:5b:b0:2c:80:e0:
6b:2c:03:a5:e6:6e:01:85:3a:dd:5b:e5:54:b8:0d:
cf:ba:07:48:7b:b6:b6:07:4c:b3:32:d6:ae:aa:2c:
88:ba:87:ea:69:2b:24:59:f0:2c:06:e3:84:6a:99:
f9:d0:10:64:0f:f8:92:00:fe:ef:96:ae:66:1c:a7:
a2:ec:49:4c:51:60:e5:f7:dc:cd:76:c6:c0:ff:9d:
e8:e7:56:6b:c8:40:d4:f7:6f:e2:47:c6:da:45:3f:
54:b8:a7:c4:6f:68:06:3d:35:d5:f5:5f:12:8a:89:
00:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:04:32:AA:0D:37:7A:48:A5:E6:B8:DD:B7:39:4D:0C:D2:15:64:C6
X509v3 Authority Key Identifier:
keyid:B5:CB:2B:5E:AF:3C:C1:5D:D4:B3:B2:3A:D8:B9:47:2A:52:40:C0:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tcsrXq88wV3Us7I62LlHKlJAwDs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/795ed9-8fad-4c44-8583-06ca709a3c59/1/tcsrXq88wV3Us7I62LlHKlJAwDs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/795ed9-8fad-4c44-8583-06ca709a3c59/1/tcsrXq88wV3Us7I62LlHKlJAwDs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:f6:d5:b7:e2:53:c1:71:13:d2:00:b5:b8:ed:46:47:b3:b2:
c4:8c:74:b0:8b:45:ca:c6:03:2b:23:b1:2c:c8:ff:46:c1:cb:
3d:cb:f9:af:3c:cb:24:93:e2:fe:05:33:47:2f:a2:77:82:26:
86:e9:61:ad:f6:0e:87:0e:59:98:5a:b7:62:bd:b6:89:9f:62:
e0:8c:90:3f:df:18:e1:dd:bc:3a:de:2e:98:d0:5a:b5:bc:2d:
39:b1:f0:b3:c7:84:4b:75:d7:38:2c:2a:72:bf:74:c4:13:22:
1a:7c:13:78:b4:89:03:8e:76:63:44:e8:24:ba:cd:43:1b:3c:
88:5e:27:ef:f0:8c:ff:10:fd:eb:f9:6f:7f:f3:f8:64:7c:44:
0e:e8:ba:d9:35:b0:ee:6a:fd:8f:46:fe:bd:07:bb:ce:86:b1:
24:d3:74:d2:2c:e5:ec:60:1c:c6:95:ec:f4:1d:da:46:87:a6:
12:fc:b2:a6:46:83:9d:c2:f9:37:e9:72:71:bb:25:ba:72:cf:
d8:fd:97:c0:56:4c:59:63:0d:c3:c9:e0:12:ad:4a:3f:9d:fd:
c7:3a:91:a7:b0:76:3a:a0:d7:e8:74:f5:c0:f6:cd:cc:f0:d6:
6c:13:c5:ee:23:46:49:f9:24:b8:35:78:39:3d:39:b5:24:b3:
1b:bf:d6:d6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDXlkc88P3lEEzozKKDszHAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1Y2IyYjVlYWYzY2MxNWRkNGIzYjIzYWQ4Yjk0NzJhNTI0
MGMwM2IwHhcNMjYwOTI1MDgwMjI0WhcNMjYwOTI2MDgwMjI0WjAzMTEwLwYDVQQD
EygxOTA0MzJhYTBkMzc3YTQ4YTVlNmI4ZGRiNzM5NGQwY2QyMTU2NGM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxrv52NSooLkXaNiD5IkAWJDhDSa+
D9CRD594hAPRDZ74jk/fnf5kmh27txhyyRlsh9K86MHroMEDCNpIW1NNm6eOlcgD
zNLJJtyHahezgWzv2ufnz1bAmYJ0rLZbWtDw1ZzreEyHkOxrZx9mKRaBn4s9JF42
KhhZf8hrW1kVYn9JvKGo95ADCnibIxcY4hp6W7AsgOBrLAOl5m4BhTrdW+VUuA3P
ugdIe7a2B0yzMtauqiyIuofqaSskWfAsBuOEapn50BBkD/iSAP7vlq5mHKei7ElM
UWDl99zNdsbA/53o51ZryEDU92/iR8baRT9UuKfEb2gGPTXV9V8SiokAYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBkEMqoNN3pIpea43bc5TQzSFWTGMB8GA1UdIwQY
MBaAFLXLK16vPMFd1LOyOti5RypSQMA7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdGNzclhxODh3VjNVczdJNjJMbEhLbEpBd0RzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS83OTVlZDktOGZhZC00YzQ0LTg1ODMt
MDZjYTcwOWEzYzU5LzEvdGNzclhxODh3VjNVczdJNjJMbEhLbEpBd0RzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS83OTVlZDktOGZhZC00YzQ0LTg1ODMtMDZjYTcwOWEzYzU5
LzEvdGNzclhxODh3VjNVczdJNjJMbEhLbEpBd0RzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT/bVt+JT
wXET0gC1uO1GR7OyxIx0sItFysYDKyOxLMj/RsHLPcv5rzzLJJPi/gUzRy+id4Im
hulhrfYOhw5ZmFq3Yr22iZ9i4IyQP98Y4d28Ot4umNBatbwtObHws8eES3XXOCwq
cr90xBMiGnwTeLSJA452Y0ToJLrNQxs8iF4n7/CM/xD96/lvf/P4ZHxEDui62TWw
7mr9j0b+vQe7zoaxJNN00izl7GAcxpXs9B3aRoemEvyypkaDncL5N+lycbslunLP
2P2XwFZMWWMNw8ngEq1KP539xzqRp7B2OqDX6HT1wPbNzPDWbBPF7iNGSfkkuDV4
OT05tSSzG7/W1g==
-----END CERTIFICATE-----
Generated at Fri Sep 25 16:39:53 2026 by rpki-client