Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/39/cb3e6b-a444-49dd-9f64-17c12273c54a/1/TgoZ1Iw1R8Ktufjv_erGrZ5PnRk.mft
File: TgoZ1Iw1R8Ktufjv_erGrZ5PnRk.mft (raw, json)
Hash identifier: uBtRBjMyhJpMATCR4zQp5JIu/yRItHjJGdcKfcVIPJk=
Subject key identifier: FC:64:0E:18:C7:6E:6C:EF:13:12:6B:2D:39:86:6E:A3:FC:C2:54:E0
Authority key identifier: 4E:0A:19:D4:8C:35:47:C2:AD:B9:F8:EF:FD:EA:C6:AD:9E:4F:9D:19
Certificate issuer: /CN=4e0a19d48c3547c2adb9f8effdeac6ad9e4f9d19
Certificate serial: 01A1250B6D215D7517638F3C8AA2B2AEA284
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TgoZ1Iw1R8Ktufjv_erGrZ5PnRk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/cb3e6b-a444-49dd-9f64-17c12273c54a/1/TgoZ1Iw1R8Ktufjv_erGrZ5PnRk.mft
Manifest number: 1125
Signing time: Sat 10 Oct 2026 09:01:08 +0000
Manifest this update: Sat 10 Oct 2026 09:01:08 +0000
Manifest next update: Sun 11 Oct 2026 09:01:08 +0000
Files and hashes: 1: TgoZ1Iw1R8Ktufjv_erGrZ5PnRk.crl (hash: q9unyEs5xsTqS5qw/fOroIDtm1rxjksjAUGodF2sDCQ=)
2: mYEf7RuSo0e-j7rjPL7Q9zNgxFc.roa (hash: cGf42p5lM09FOWIL9NbqXkxRKlJYCNacEJNXdW+oi2c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/cb3e6b-a444-49dd-9f64-17c12273c54a/1/TgoZ1Iw1R8Ktufjv_erGrZ5PnRk.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/cb3e6b-a444-49dd-9f64-17c12273c54a/1/TgoZ1Iw1R8Ktufjv_erGrZ5PnRk.mft
rsync://rpki.ripe.net/repository/DEFAULT/TgoZ1Iw1R8Ktufjv_erGrZ5PnRk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 09:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:25:0b:6d:21:5d:75:17:63:8f:3c:8a:a2:b2:ae:a2:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e0a19d48c3547c2adb9f8effdeac6ad9e4f9d19
Validity
Not Before: Oct 10 09:01:08 2026 GMT
Not After : Oct 11 09:01:08 2026 GMT
Subject: CN=fc640e18c76e6cef13126b2d39866ea3fcc254e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:3b:d4:c3:2f:4b:60:98:bd:f9:55:27:a8:e7:
1a:ba:b9:77:14:fa:46:ad:23:d4:90:f5:42:c4:84:
70:55:4a:e4:76:50:c4:57:eb:af:87:c7:aa:45:f6:
32:ce:90:53:2b:6c:ad:61:5f:d1:49:f5:60:aa:01:
a9:5b:b1:2f:41:22:49:ae:32:57:f0:4c:69:ad:cd:
16:c3:03:b9:60:d5:10:43:9f:54:c2:cd:08:d4:6b:
1a:b7:cb:64:89:43:56:81:2b:fa:a0:87:65:0d:42:
19:80:3e:9c:e6:15:64:ca:22:2c:9f:e6:7e:d3:ec:
68:5f:6a:57:33:50:e3:91:cc:4b:88:1d:ee:ff:0d:
2d:6a:4e:c7:44:1f:8b:0e:68:0a:76:58:67:89:f6:
3e:64:bf:05:24:a3:a9:a9:8b:07:5a:52:b1:83:20:
fb:0e:63:f3:0f:2a:ba:b2:89:4a:eb:f4:85:8a:fe:
47:de:fb:4a:61:0c:b9:9d:8c:66:93:7e:93:af:83:
71:20:b8:dd:84:47:db:8a:00:2c:6b:f8:01:64:18:
cb:3f:08:42:b7:b7:e3:95:78:19:ae:0b:4f:4f:90:
9c:7c:2e:16:59:11:ad:80:0c:87:55:d8:97:ca:08:
c7:f5:d2:73:be:a7:10:e9:63:03:f4:90:86:d5:e8:
df:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:64:0E:18:C7:6E:6C:EF:13:12:6B:2D:39:86:6E:A3:FC:C2:54:E0
X509v3 Authority Key Identifier:
keyid:4E:0A:19:D4:8C:35:47:C2:AD:B9:F8:EF:FD:EA:C6:AD:9E:4F:9D:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TgoZ1Iw1R8Ktufjv_erGrZ5PnRk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/cb3e6b-a444-49dd-9f64-17c12273c54a/1/TgoZ1Iw1R8Ktufjv_erGrZ5PnRk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/cb3e6b-a444-49dd-9f64-17c12273c54a/1/TgoZ1Iw1R8Ktufjv_erGrZ5PnRk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:5c:75:c5:07:32:c8:6b:fa:a1:f3:b8:d9:16:77:ff:4b:91:
d5:a1:98:09:72:28:4c:71:d5:fe:3f:44:64:05:19:7e:c9:59:
24:f9:ae:95:e4:18:7c:aa:75:c8:bf:b6:c1:59:35:a6:3f:6c:
c2:60:a3:a3:cd:ea:b7:1d:0b:c3:5a:8a:5b:e5:a1:1f:0e:9d:
ac:2d:cf:5d:37:9c:35:c1:6c:db:de:25:9e:c0:f2:c1:0c:2e:
6b:ff:a6:47:77:7b:09:f8:2b:d0:7b:bf:e0:80:4b:46:8f:5e:
2b:fb:49:40:9d:5f:3d:0b:c8:7d:21:ff:94:25:38:dc:35:9b:
db:7f:4e:0e:77:3a:73:20:6a:06:46:fb:b2:03:87:c8:38:77:
7e:ee:2e:00:e9:df:44:38:6a:4a:34:23:6a:4e:b7:2e:aa:11:
94:a4:74:61:2b:7b:b1:b4:7f:9e:c7:54:2c:6e:d8:84:af:68:
f7:81:de:2e:72:40:0a:dd:62:07:fd:cb:4d:e0:98:d0:8f:cb:
bc:8e:38:46:24:78:f9:58:5e:d8:67:69:3f:dc:58:03:f7:da:
15:e8:65:00:fc:36:47:83:83:eb:a1:2e:29:b2:87:1c:fe:84:
d7:4f:fb:5f:48:84:d3:56:18:46:06:38:11:3f:5f:88:49:3d:
1d:36:e6:14
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaElC20hXXUXY488iqKyrqKEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRlMGExOWQ0OGMzNTQ3YzJhZGI5ZjhlZmZkZWFjNmFkOWU0
ZjlkMTkwHhcNMjYxMDEwMDkwMTA4WhcNMjYxMDExMDkwMTA4WjAzMTEwLwYDVQQD
EyhmYzY0MGUxOGM3NmU2Y2VmMTMxMjZiMmQzOTg2NmVhM2ZjYzI1NGUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyTvUwy9LYJi9+VUnqOcaurl3FPpG
rSPUkPVCxIRwVUrkdlDEV+uvh8eqRfYyzpBTK2ytYV/RSfVgqgGpW7EvQSJJrjJX
8Exprc0WwwO5YNUQQ59Uws0I1Gsat8tkiUNWgSv6oIdlDUIZgD6c5hVkyiIsn+Z+
0+xoX2pXM1DjkcxLiB3u/w0tak7HRB+LDmgKdlhnifY+ZL8FJKOpqYsHWlKxgyD7
DmPzDyq6solK6/SFiv5H3vtKYQy5nYxmk36Tr4NxILjdhEfbigAsa/gBZBjLPwhC
t7fjlXgZrgtPT5CcfC4WWRGtgAyHVdiXygjH9dJzvqcQ6WMD9JCG1ejfzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPxkDhjHbmzvExJrLTmGbqP8wlTgMB8GA1UdIwQY
MBaAFE4KGdSMNUfCrbn47/3qxq2eT50ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVGdvWjFJdzFSOEt0dWZqdl9lckdyWjVQblJrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS9jYjNlNmItYTQ0NC00OWRkLTlmNjQt
MTdjMTIyNzNjNTRhLzEvVGdvWjFJdzFSOEt0dWZqdl9lckdyWjVQblJrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOS9jYjNlNmItYTQ0NC00OWRkLTlmNjQtMTdjMTIyNzNjNTRh
LzEvVGdvWjFJdzFSOEt0dWZqdl9lckdyWjVQblJrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsVx1xQcy
yGv6ofO42RZ3/0uR1aGYCXIoTHHV/j9EZAUZfslZJPmuleQYfKp1yL+2wVk1pj9s
wmCjo83qtx0Lw1qKW+WhHw6drC3PXTecNcFs294lnsDywQwua/+mR3d7Cfgr0Hu/
4IBLRo9eK/tJQJ1fPQvIfSH/lCU43DWb239ODnc6cyBqBkb7sgOHyDh3fu4uAOnf
RDhqSjQjak63LqoRlKR0YSt7sbR/nsdULG7YhK9o94HeLnJACt1iB/3LTeCY0I/L
vI44RiR4+Vhe2GdpP9xYA/faFehlAPw2R4OD66EuKbKHHP6E10/7X0iE01YYRgY4
ET9fiEk9HTbmFA==
-----END CERTIFICATE-----
Generated at Sat Oct 10 14:25:19 2026 by rpki-client