Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3a/3768ac-ba49-443a-8a12-6f7c72f1c5e9/1/TgcXrm2hIbzPb3U9IFt520x0qtw.mft
File: TgcXrm2hIbzPb3U9IFt520x0qtw.mft (raw, json)
Hash identifier: RA+fze2EeqCIsqXja+Vo2OhL3mKkN/GqweIPQZdGhgE=
Subject key identifier: 05:83:4A:78:9C:AC:0B:EE:23:6F:C0:D3:F4:66:B5:EB:03:FC:3B:E5
Authority key identifier: 4E:07:17:AE:6D:A1:21:BC:CF:6F:75:3D:20:5B:79:DB:4C:74:AA:DC
Certificate issuer: /CN=4e0717ae6da121bccf6f753d205b79db4c74aadc
Certificate serial: 01A0DB03CFD7850C2AD71357A19074202B5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TgcXrm2hIbzPb3U9IFt520x0qtw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/3768ac-ba49-443a-8a12-6f7c72f1c5e9/1/TgcXrm2hIbzPb3U9IFt520x0qtw.mft
Manifest number: 01C6
Signing time: Sat 26 Sep 2026 00:00:55 +0000
Manifest this update: Sat 26 Sep 2026 00:00:55 +0000
Manifest next update: Sun 27 Sep 2026 00:00:55 +0000
Files and hashes: 1: PMUh_CeB1kKvaGLeBJYIic294CY.roa (hash: +eBM0O7yXapPeEEFqL/YF99B3PHfAKw0Egv5IPFdGT4=)
2: TgcXrm2hIbzPb3U9IFt520x0qtw.crl (hash: pqfeWdMdIpKWaNKlna2QTwFtfQWq7PrjBYGy5b7dmdU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/3768ac-ba49-443a-8a12-6f7c72f1c5e9/1/TgcXrm2hIbzPb3U9IFt520x0qtw.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/3768ac-ba49-443a-8a12-6f7c72f1c5e9/1/TgcXrm2hIbzPb3U9IFt520x0qtw.mft
rsync://rpki.ripe.net/repository/DEFAULT/TgcXrm2hIbzPb3U9IFt520x0qtw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 00:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:db:03:cf:d7:85:0c:2a:d7:13:57:a1:90:74:20:2b:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e0717ae6da121bccf6f753d205b79db4c74aadc
Validity
Not Before: Sep 26 00:00:55 2026 GMT
Not After : Sep 27 00:00:55 2026 GMT
Subject: CN=05834a789cac0bee236fc0d3f466b5eb03fc3be5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:b7:39:b0:37:b7:8e:7a:81:c6:a8:36:cc:b2:
89:49:84:d5:21:1f:5f:f5:af:97:88:04:64:3b:89:
58:16:5e:0f:83:41:73:e9:97:50:a5:c6:6d:3e:83:
db:c6:e6:73:f7:90:36:71:af:a0:62:85:0d:5d:47:
2b:a0:b5:ca:77:d1:57:48:b9:29:c7:cb:92:70:ea:
2d:40:f8:f4:29:43:91:e8:af:c8:69:7c:90:f5:76:
a2:e0:45:aa:44:0d:6f:d5:c5:90:b4:20:d8:df:53:
a1:51:a6:29:70:16:5c:5c:c7:f0:0c:15:68:84:c7:
b8:66:b8:0d:49:55:3a:a9:11:75:65:35:b2:fd:7f:
fc:25:9b:b8:98:b9:66:04:8c:8c:6e:87:af:15:5f:
89:d7:c4:58:44:22:4c:d5:69:85:ad:47:9c:37:fe:
9d:ab:cd:92:23:22:c5:1c:10:8f:f6:90:24:ba:31:
c9:c7:cf:de:c6:75:ea:fd:8c:a1:a0:c2:64:ca:05:
3f:c3:f8:b8:2c:e9:38:89:2a:c5:0c:22:fe:ec:8d:
b8:78:79:71:dc:66:72:8b:5c:91:b6:ff:d0:5e:7a:
fd:3b:f2:86:0f:9f:d0:15:10:c0:c6:3e:da:0f:91:
f5:e7:ff:53:d7:24:74:07:2e:4c:34:4c:0e:1b:a5:
62:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:83:4A:78:9C:AC:0B:EE:23:6F:C0:D3:F4:66:B5:EB:03:FC:3B:E5
X509v3 Authority Key Identifier:
keyid:4E:07:17:AE:6D:A1:21:BC:CF:6F:75:3D:20:5B:79:DB:4C:74:AA:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TgcXrm2hIbzPb3U9IFt520x0qtw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/3768ac-ba49-443a-8a12-6f7c72f1c5e9/1/TgcXrm2hIbzPb3U9IFt520x0qtw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/3768ac-ba49-443a-8a12-6f7c72f1c5e9/1/TgcXrm2hIbzPb3U9IFt520x0qtw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:1f:6f:c9:25:98:1e:fb:f0:bd:69:09:6f:6a:8f:00:2a:9a:
20:d5:0b:71:d4:00:eb:69:cf:20:99:45:12:ad:29:92:5c:32:
11:5d:30:09:d7:cc:63:29:e2:cf:7f:e1:5e:88:2e:a3:39:84:
d6:cd:e3:bb:8c:cb:26:24:85:04:ec:13:f1:0f:92:66:81:aa:
1f:22:e0:4c:8e:92:2b:d1:ca:55:e9:13:fa:1e:5c:99:b0:1d:
89:83:24:ab:4f:0f:ec:54:4d:af:c3:4a:f6:7e:32:af:5e:fb:
17:31:70:cd:3d:be:26:bf:02:e5:1c:4a:58:30:17:31:53:1a:
ed:18:cf:f1:29:ad:80:a5:08:77:3f:aa:44:db:d3:6e:f6:f3:
f8:bf:98:10:de:2f:7b:7f:ad:3f:4c:76:d0:e2:77:31:95:d9:
79:66:c7:d5:88:be:06:40:3f:ee:af:eb:62:f5:1f:e1:3b:26:
35:e7:ba:d5:a8:a2:b3:49:af:9b:47:10:52:35:58:84:81:3c:
4b:04:46:31:80:0d:74:c9:c0:59:d0:55:b8:f0:44:ce:00:6e:
30:11:d6:78:d0:81:c4:38:1e:1a:3d:c3:51:ad:88:48:a8:80:
dd:be:9a:f3:1d:7c:71:8b:29:a0:72:54:6f:0e:cb:56:60:22:
85:e2:ff:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 08:50:30 2026 by rpki-client