Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3a/4448a7-1ac1-46ad-a727-d96393af2f20/1/TGtjcblFo16d8wj_Q4A-JheFEGk.mft
File: TGtjcblFo16d8wj_Q4A-JheFEGk.mft (raw, json)
Hash identifier: LPElQGx7gOo07EzgSTB++fwlp7P2gzzdSCSe/TfFC8E=
Subject key identifier: A8:59:39:11:D9:18:8A:6E:EF:56:7A:68:B3:62:B4:52:DB:B2:7C:EF
Authority key identifier: 4C:6B:63:71:B9:45:A3:5E:9D:F3:08:FF:43:80:3E:26:17:85:10:69
Certificate issuer: /CN=4c6b6371b945a35e9df308ff43803e2617851069
Certificate serial: 01A0E8C14BEB884E44A6F6A058F0CBF2178A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TGtjcblFo16d8wj_Q4A-JheFEGk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/4448a7-1ac1-46ad-a727-d96393af2f20/1/TGtjcblFo16d8wj_Q4A-JheFEGk.mft
Manifest number: 152E
Signing time: Mon 28 Sep 2026 16:02:56 +0000
Manifest this update: Mon 28 Sep 2026 16:02:56 +0000
Manifest next update: Tue 29 Sep 2026 16:02:56 +0000
Files and hashes: 1: SFGE70vQYmz_oKTtZMgB-YKUyZc.roa (hash: lZ0OnAmHAxbwpz0Bf+bKQq6tPOf7KpsPHIF+YP1ggzc=)
2: TGtjcblFo16d8wj_Q4A-JheFEGk.crl (hash: 0PiH/QPpPFLfc5MiwHiKI2dURuQM6/Qhip2cpG/7iFk=)
3: eHNuPU6iYgVIfZ9NIp8A3552y-I.roa (hash: AOM1Ajc5ONgwd+E4wuOhZtP8/uws9RFZszPyOYWcL2Q=)
4: vP7G0LDj9js2uqV_dVx329H3yeM.roa (hash: fyHdxLq/9tcpLwgIyk0ErgVx3QqPOxT/MFLUCo0yJ0g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/4448a7-1ac1-46ad-a727-d96393af2f20/1/TGtjcblFo16d8wj_Q4A-JheFEGk.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/4448a7-1ac1-46ad-a727-d96393af2f20/1/TGtjcblFo16d8wj_Q4A-JheFEGk.mft
rsync://rpki.ripe.net/repository/DEFAULT/TGtjcblFo16d8wj_Q4A-JheFEGk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 16:02:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e8:c1:4b:eb:88:4e:44:a6:f6:a0:58:f0:cb:f2:17:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c6b6371b945a35e9df308ff43803e2617851069
Validity
Not Before: Sep 28 16:02:56 2026 GMT
Not After : Sep 29 16:02:56 2026 GMT
Subject: CN=a8593911d9188a6eef567a68b362b452dbb27cef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:7d:57:25:4b:de:52:bd:bb:d0:84:84:c4:00:
8b:08:95:af:8f:86:cc:e2:6e:61:40:ce:e3:41:0e:
1a:7b:cc:d6:dc:c5:49:b6:7b:20:75:3f:07:ba:4c:
9e:01:23:d9:7b:78:de:8e:8e:76:b0:16:df:14:4b:
b0:b9:20:76:ae:9c:42:a2:30:f8:fb:89:ad:a0:a6:
17:9e:7e:d3:56:68:99:b2:8d:0c:b0:a0:89:56:47:
18:d4:c2:8e:08:b5:eb:81:2c:f8:06:cb:a4:03:e0:
bb:e7:63:27:b7:db:f5:12:b6:b2:72:22:a5:6c:ed:
a8:3e:0d:68:d9:25:bb:3b:f4:22:89:a7:c6:84:4d:
87:79:6f:59:96:5f:77:3f:9b:8a:db:84:7f:fd:d8:
00:ee:72:26:6e:d6:43:89:a6:0b:21:d8:89:2f:e9:
95:8c:c0:7a:4d:7f:58:b2:7d:85:36:d9:3c:2b:d9:
8d:78:d6:17:2a:a7:9e:29:e6:b2:27:7c:f8:f6:36:
06:32:28:f3:2c:68:bf:ac:31:b8:7a:f6:44:ec:c4:
5e:74:76:76:1c:d8:94:ef:53:00:48:59:7b:56:f5:
63:69:92:e3:c5:4c:02:45:7c:ef:92:57:2e:29:f0:
76:3f:e0:43:8c:6a:32:e4:38:da:30:0e:de:81:7d:
d7:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:59:39:11:D9:18:8A:6E:EF:56:7A:68:B3:62:B4:52:DB:B2:7C:EF
X509v3 Authority Key Identifier:
keyid:4C:6B:63:71:B9:45:A3:5E:9D:F3:08:FF:43:80:3E:26:17:85:10:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TGtjcblFo16d8wj_Q4A-JheFEGk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/4448a7-1ac1-46ad-a727-d96393af2f20/1/TGtjcblFo16d8wj_Q4A-JheFEGk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/4448a7-1ac1-46ad-a727-d96393af2f20/1/TGtjcblFo16d8wj_Q4A-JheFEGk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:4f:dd:f4:76:37:43:6b:c1:cf:86:69:69:de:b7:77:37:14:
42:41:9e:f4:77:3c:5a:05:46:d3:ed:2c:1b:ae:a3:b4:d9:a5:
6d:0f:1b:0b:9c:7b:9d:02:b4:6c:fa:8b:af:f0:2b:13:8f:6d:
3b:c3:22:12:c2:aa:72:45:44:16:a2:2f:08:5d:fb:ea:1f:e4:
d4:3f:10:21:fe:06:23:ae:18:3e:a4:02:bb:1a:de:a6:16:65:
ed:5d:6b:66:55:f5:3c:d1:40:bc:c7:0c:18:d6:72:f4:99:c1:
20:8c:81:5f:78:22:22:53:4a:5a:39:43:1c:6b:f8:90:b0:8d:
71:e6:aa:d5:01:63:9a:06:5a:52:85:24:bf:76:31:b6:b9:bf:
a3:71:73:2b:b9:44:84:1f:45:f8:36:79:a3:16:76:21:5c:66:
92:4e:8b:19:d7:e6:20:a0:0a:9a:69:2d:53:9c:ed:f2:af:cd:
9b:ac:65:d9:f8:17:03:fa:10:f7:78:2f:39:cc:d4:f4:26:3e:
41:20:f3:35:cb:a4:ba:95:d1:dc:10:1c:d7:f6:a5:8d:eb:c8:
dd:93:22:28:6d:be:73:f0:3e:3b:40:d3:1d:d7:95:64:4a:59:
8c:76:1e:bb:98:dc:3c:bd:60:b2:0c:de:58:a9:5a:f5:bc:6d:
9d:08:e6:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 04:16:53 2026 by rpki-client