Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/cb3e6b-a444-49dd-9f64-17c12273c54a/1/TgoZ1Iw1R8Ktufjv_erGrZ5PnRk.mft
File: TgoZ1Iw1R8Ktufjv_erGrZ5PnRk.mft (raw, json)
Hash identifier: r0eXhh13M/LhByTbYZCVP4PqsfJyxm8Js7UFJHpr2uA=
Subject key identifier: 87:1F:C6:59:04:C3:5D:12:2C:5E:18:C4:24:D8:D1:3E:E7:45:5D:75
Authority key identifier: 4E:0A:19:D4:8C:35:47:C2:AD:B9:F8:EF:FD:EA:C6:AD:9E:4F:9D:19
Certificate issuer: /CN=4e0a19d48c3547c2adb9f8effdeac6ad9e4f9d19
Certificate serial: 019D2D3C48429C496813E8DD3FA66EDA1F29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TgoZ1Iw1R8Ktufjv_erGrZ5PnRk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/cb3e6b-a444-49dd-9f64-17c12273c54a/1/TgoZ1Iw1R8Ktufjv_erGrZ5PnRk.mft
Manifest number: 0F17
Signing time: Fri 27 Mar 2026 03:00:18 +0000
Manifest this update: Fri 27 Mar 2026 03:00:18 +0000
Manifest next update: Sat 28 Mar 2026 03:00:18 +0000
Files and hashes: 1: TgoZ1Iw1R8Ktufjv_erGrZ5PnRk.crl (hash: Ba9r8MeFBbjVTg7WJD8ksA9q+ibgkkBTkP+QAZRNuRY=)
2: mYEf7RuSo0e-j7rjPL7Q9zNgxFc.roa (hash: cGf42p5lM09FOWIL9NbqXkxRKlJYCNacEJNXdW+oi2c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/cb3e6b-a444-49dd-9f64-17c12273c54a/1/TgoZ1Iw1R8Ktufjv_erGrZ5PnRk.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/cb3e6b-a444-49dd-9f64-17c12273c54a/1/TgoZ1Iw1R8Ktufjv_erGrZ5PnRk.mft
rsync://rpki.ripe.net/repository/DEFAULT/TgoZ1Iw1R8Ktufjv_erGrZ5PnRk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 28 Mar 2026 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2d:3c:48:42:9c:49:68:13:e8:dd:3f:a6:6e:da:1f:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e0a19d48c3547c2adb9f8effdeac6ad9e4f9d19
Validity
Not Before: Mar 27 03:00:18 2026 GMT
Not After : Mar 28 03:00:18 2026 GMT
Subject: CN=871fc65904c35d122c5e18c424d8d13ee7455d75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:a3:02:44:c1:aa:15:ad:ef:b0:7d:8a:1c:05:
55:d8:02:98:b8:52:9f:43:86:9e:21:8c:01:82:4d:
59:ff:57:b1:5e:af:b5:18:3c:4c:67:93:02:8c:a1:
66:fe:28:6f:e2:e7:c4:33:d3:37:8f:79:86:20:23:
5e:57:82:80:be:46:ab:51:6d:33:60:84:d5:f1:81:
4c:96:81:7c:8b:5c:d5:06:8b:86:0f:59:50:ef:b2:
96:5a:71:7b:b5:ac:cc:8a:c2:a1:40:b4:a4:49:04:
57:0a:88:27:02:7c:f7:2b:24:a2:ab:b6:5f:35:eb:
2a:07:31:49:b4:2a:4a:f1:df:17:8c:d2:b7:17:cc:
03:e7:8a:4c:27:4b:1c:12:09:bd:ae:62:d7:01:97:
19:e7:49:bf:dd:5f:8c:6d:48:cc:e8:e7:ba:9a:e1:
16:11:13:1d:56:7b:4d:42:26:c6:19:2c:2d:a0:5e:
94:0a:e3:94:f0:27:65:0b:55:da:c8:0b:35:a5:53:
9d:c6:0a:ff:dc:40:65:2d:e0:ea:1b:a1:22:09:a9:
bd:b1:6d:d9:8e:68:34:70:fa:72:b7:91:42:c9:0e:
07:3f:97:59:e8:c9:3e:ca:0c:59:c1:60:2c:28:2a:
b2:62:cf:11:df:2e:a4:18:46:27:1a:35:c3:20:b8:
3f:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:1F:C6:59:04:C3:5D:12:2C:5E:18:C4:24:D8:D1:3E:E7:45:5D:75
X509v3 Authority Key Identifier:
keyid:4E:0A:19:D4:8C:35:47:C2:AD:B9:F8:EF:FD:EA:C6:AD:9E:4F:9D:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TgoZ1Iw1R8Ktufjv_erGrZ5PnRk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/cb3e6b-a444-49dd-9f64-17c12273c54a/1/TgoZ1Iw1R8Ktufjv_erGrZ5PnRk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/cb3e6b-a444-49dd-9f64-17c12273c54a/1/TgoZ1Iw1R8Ktufjv_erGrZ5PnRk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:94:ea:3b:6e:3d:f7:68:d1:fb:1b:3d:83:8e:ed:67:04:ca:
af:41:14:62:d8:79:f5:52:dd:23:7a:ce:07:8a:22:25:b8:d3:
54:a8:a0:aa:c2:d5:8a:0c:a6:23:7b:e5:64:e4:7b:37:c4:23:
85:8d:48:88:27:fe:7c:50:14:59:1f:22:71:39:e8:fe:4e:7f:
50:a3:2b:e1:0f:d0:71:b8:08:38:c8:f5:5c:b2:8d:31:73:87:
93:3c:59:07:bd:e3:a9:2b:b3:32:69:31:28:f3:77:a2:4f:54:
6e:dc:04:19:d0:7b:4b:33:15:11:58:b6:ad:0a:27:18:54:52:
e8:a0:47:0e:6f:76:c8:48:8f:37:48:1c:f6:ea:fb:ac:1e:45:
29:c7:a1:f4:af:b9:90:fb:e2:a4:65:d1:ad:74:a6:77:8a:6e:
f9:26:37:d9:da:35:12:f4:0d:3d:e2:ad:95:69:1c:78:80:fd:
7b:0f:5c:6b:c3:4e:a6:8b:04:9b:8f:96:40:02:28:95:55:cc:
3a:ca:b6:a4:7e:09:32:f9:87:ba:55:58:3c:2e:3a:39:ef:2b:
af:2a:d1:ff:61:5d:f0:df:da:67:59:a8:1d:3a:4c:de:4d:8f:
6a:20:6c:25:bc:a6:f3:3f:e3:b3:b7:95:05:6a:49:79:59:d0:
41:de:9d:b3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0tPEhCnEloE+jdP6Zu2h8pMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRlMGExOWQ0OGMzNTQ3YzJhZGI5ZjhlZmZkZWFjNmFkOWU0
ZjlkMTkwHhcNMjYwMzI3MDMwMDE4WhcNMjYwMzI4MDMwMDE4WjAzMTEwLwYDVQQD
Eyg4NzFmYzY1OTA0YzM1ZDEyMmM1ZTE4YzQyNGQ4ZDEzZWU3NDU1ZDc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjaMCRMGqFa3vsH2KHAVV2AKYuFKf
Q4aeIYwBgk1Z/1exXq+1GDxMZ5MCjKFm/ihv4ufEM9M3j3mGICNeV4KAvkarUW0z
YITV8YFMloF8i1zVBouGD1lQ77KWWnF7tazMisKhQLSkSQRXCognAnz3KySiq7Zf
NesqBzFJtCpK8d8XjNK3F8wD54pMJ0scEgm9rmLXAZcZ50m/3V+MbUjM6Oe6muEW
ERMdVntNQibGGSwtoF6UCuOU8CdlC1XayAs1pVOdxgr/3EBlLeDqG6EiCam9sW3Z
jmg0cPpyt5FCyQ4HP5dZ6Mk+ygxZwWAsKCqyYs8R3y6kGEYnGjXDILg/bQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIcfxlkEw10SLF4YxCTY0T7nRV11MB8GA1UdIwQY
MBaAFE4KGdSMNUfCrbn47/3qxq2eT50ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVGdvWjFJdzFSOEt0dWZqdl9lckdyWjVQblJrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS9jYjNlNmItYTQ0NC00OWRkLTlmNjQt
MTdjMTIyNzNjNTRhLzEvVGdvWjFJdzFSOEt0dWZqdl9lckdyWjVQblJrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOS9jYjNlNmItYTQ0NC00OWRkLTlmNjQtMTdjMTIyNzNjNTRh
LzEvVGdvWjFJdzFSOEt0dWZqdl9lckdyWjVQblJrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMJTqO249
92jR+xs9g47tZwTKr0EUYth59VLdI3rOB4oiJbjTVKigqsLVigymI3vlZOR7N8Qj
hY1IiCf+fFAUWR8icTno/k5/UKMr4Q/QcbgIOMj1XLKNMXOHkzxZB73jqSuzMmkx
KPN3ok9UbtwEGdB7SzMVEVi2rQonGFRS6KBHDm92yEiPN0gc9ur7rB5FKceh9K+5
kPvipGXRrXSmd4pu+SY32do1EvQNPeKtlWkceID9ew9ca8NOposEm4+WQAIolVXM
Osq2pH4JMvmHulVYPC46Oe8rryrR/2Fd8N/aZ1moHTpM3k2PaiBsJbym8z/js7eV
BWpJeVnQQd6dsw==
-----END CERTIFICATE-----
Generated at Fri Mar 27 06:21:23 2026 by rpki-client