Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6f/336084-d2cf-4346-a720-c4236465a10b/1/tGZGB9tMTT48FWLyjSDPuSMkGBA.mft
File: tGZGB9tMTT48FWLyjSDPuSMkGBA.mft (raw, json)
Hash identifier: OmY4sTS7ga6u7S8o+Pk9L/FnMxVpEdnSvi4XfKntTw8=
Subject key identifier: 17:B3:4B:E7:12:A6:64:BA:55:78:A1:7F:3C:5A:0D:95:A3:EB:3B:C2
Authority key identifier: B4:66:46:07:DB:4C:4D:3E:3C:15:62:F2:8D:20:CF:B9:23:24:18:10
Certificate issuer: /CN=b4664607db4c4d3e3c1562f28d20cfb923241810
Certificate serial: 01A0EDAFCB9D59E5C0A3479164719959675C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tGZGB9tMTT48FWLyjSDPuSMkGBA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/336084-d2cf-4346-a720-c4236465a10b/1/tGZGB9tMTT48FWLyjSDPuSMkGBA.mft
Manifest number: 011B
Signing time: Tue 29 Sep 2026 15:01:56 +0000
Manifest this update: Tue 29 Sep 2026 15:01:56 +0000
Manifest next update: Wed 30 Sep 2026 15:01:56 +0000
Files and hashes: 1: tGZGB9tMTT48FWLyjSDPuSMkGBA.crl (hash: le1SmIliMrG5lVolvVeneFRwo/dPTWAUYJ0bvegEzYY=)
2: ziWW6n1B_UZcXiD6pfKzphrsK3A.roa (hash: hLVr8gy4usgiH3/VrSF1XURRYPhpaPisnOC7F4Eq2L8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/336084-d2cf-4346-a720-c4236465a10b/1/tGZGB9tMTT48FWLyjSDPuSMkGBA.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/336084-d2cf-4346-a720-c4236465a10b/1/tGZGB9tMTT48FWLyjSDPuSMkGBA.mft
rsync://rpki.ripe.net/repository/DEFAULT/tGZGB9tMTT48FWLyjSDPuSMkGBA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 08:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ed:af:cb:9d:59:e5:c0:a3:47:91:64:71:99:59:67:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4664607db4c4d3e3c1562f28d20cfb923241810
Validity
Not Before: Sep 29 15:01:56 2026 GMT
Not After : Sep 30 15:01:56 2026 GMT
Subject: CN=17b34be712a664ba5578a17f3c5a0d95a3eb3bc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:57:51:ae:a7:dd:bd:42:f2:45:e5:13:07:52:
0c:16:9e:09:54:d4:32:75:a0:4e:d0:96:bc:15:65:
09:ee:9c:3c:64:41:b6:71:2b:71:5f:45:df:50:75:
b5:dd:6a:4a:39:55:90:01:1e:13:70:e8:83:c4:f5:
c1:61:cf:4b:d7:65:ed:3c:6a:2f:5e:3f:07:3b:56:
84:2f:03:46:39:62:a6:30:6e:12:9b:2d:9f:ea:80:
85:d6:ee:f4:15:47:48:43:6e:4b:ff:99:18:e6:b9:
59:20:03:7a:31:dc:0a:b4:c2:46:b2:e8:b8:8d:bc:
8a:86:aa:37:21:0a:b1:c0:70:07:07:1d:fd:4d:59:
b4:90:55:d9:73:29:a3:77:fb:b2:d6:22:01:58:a4:
c5:f4:f4:0e:df:d3:f0:1c:55:58:20:b4:a7:93:52:
87:7f:f2:8d:a8:a7:e8:9c:87:0e:82:5d:6d:38:79:
31:51:46:05:6c:30:c1:96:d3:49:c7:fc:4a:cf:79:
47:81:5f:3c:f3:2a:71:ec:ab:d9:3c:97:7b:75:6d:
77:ef:2f:b6:1d:15:76:ad:b9:d6:a9:19:39:04:e5:
9c:7f:7e:94:04:0b:7a:51:63:12:8e:ca:8f:ae:62:
6b:38:47:14:64:16:72:ce:4c:6a:fd:ce:95:c9:c0:
2e:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:B3:4B:E7:12:A6:64:BA:55:78:A1:7F:3C:5A:0D:95:A3:EB:3B:C2
X509v3 Authority Key Identifier:
keyid:B4:66:46:07:DB:4C:4D:3E:3C:15:62:F2:8D:20:CF:B9:23:24:18:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tGZGB9tMTT48FWLyjSDPuSMkGBA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/336084-d2cf-4346-a720-c4236465a10b/1/tGZGB9tMTT48FWLyjSDPuSMkGBA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/336084-d2cf-4346-a720-c4236465a10b/1/tGZGB9tMTT48FWLyjSDPuSMkGBA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:9a:10:40:00:5a:62:ec:11:a7:65:54:1e:d3:8e:15:15:13:
b6:99:b2:8c:2d:b6:0e:2b:1d:62:a3:cf:6c:7f:a1:2a:6d:4c:
20:ad:d9:2a:23:28:63:76:b4:d4:1c:47:4b:0c:c9:77:74:d6:
81:e9:f0:cb:3f:ea:f1:1b:d2:83:1c:0f:95:02:70:e4:8a:3f:
be:4c:94:15:d9:3b:c1:83:ce:04:3e:a1:15:97:73:70:27:05:
67:08:3d:68:6b:0b:1c:bf:4c:11:ca:aa:ca:bb:d9:25:4e:d3:
bd:fd:53:f7:54:6f:84:e5:30:be:32:aa:16:0d:78:4c:d5:21:
dd:2f:80:d5:d3:6f:93:79:ad:e7:2d:f9:2f:0f:ec:e3:50:23:
27:22:7c:c0:66:9a:af:74:20:cd:e9:7e:b1:2b:30:a9:01:ff:
47:d4:1d:8e:3b:17:79:95:0a:1e:22:04:e5:c6:3f:91:68:d3:
fc:09:44:b3:03:3d:8f:e7:10:ad:6f:c2:51:bb:03:5e:b5:f2:
82:47:74:c1:76:f6:1f:aa:8a:92:a5:c0:06:77:39:e3:42:e1:
88:6b:24:c7:6b:8d:62:14:07:4d:77:27:1f:7c:3b:40:02:49:
b6:a7:d1:db:ca:2f:eb:5b:7d:09:8d:54:af:f8:2e:65:d0:90:
f6:56:f9:ab
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDtr8udWeXAo0eRZHGZWWdcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0NjY0NjA3ZGI0YzRkM2UzYzE1NjJmMjhkMjBjZmI5MjMy
NDE4MTAwHhcNMjYwOTI5MTUwMTU2WhcNMjYwOTMwMTUwMTU2WjAzMTEwLwYDVQQD
EygxN2IzNGJlNzEyYTY2NGJhNTU3OGExN2YzYzVhMGQ5NWEzZWIzYmMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5VdRrqfdvULyReUTB1IMFp4JVNQy
daBO0Ja8FWUJ7pw8ZEG2cStxX0XfUHW13WpKOVWQAR4TcOiDxPXBYc9L12XtPGov
Xj8HO1aELwNGOWKmMG4Smy2f6oCF1u70FUdIQ25L/5kY5rlZIAN6MdwKtMJGsui4
jbyKhqo3IQqxwHAHBx39TVm0kFXZcymjd/uy1iIBWKTF9PQO39PwHFVYILSnk1KH
f/KNqKfonIcOgl1tOHkxUUYFbDDBltNJx/xKz3lHgV888ypx7KvZPJd7dW137y+2
HRV2rbnWqRk5BOWcf36UBAt6UWMSjsqPrmJrOEcUZBZyzkxq/c6VycAu3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBezS+cSpmS6VXihfzxaDZWj6zvCMB8GA1UdIwQY
MBaAFLRmRgfbTE0+PBVi8o0gz7kjJBgQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdEdaR0I5dE1UVDQ4RldMeWpTRFB1U01rR0JBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi8zMzYwODQtZDJjZi00MzQ2LWE3MjAt
YzQyMzY0NjVhMTBiLzEvdEdaR0I5dE1UVDQ4RldMeWpTRFB1U01rR0JBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Zi8zMzYwODQtZDJjZi00MzQ2LWE3MjAtYzQyMzY0NjVhMTBi
LzEvdEdaR0I5dE1UVDQ4RldMeWpTRFB1U01rR0JBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKJoQQABa
YuwRp2VUHtOOFRUTtpmyjC22DisdYqPPbH+hKm1MIK3ZKiMoY3a01BxHSwzJd3TW
genwyz/q8RvSgxwPlQJw5Io/vkyUFdk7wYPOBD6hFZdzcCcFZwg9aGsLHL9MEcqq
yrvZJU7Tvf1T91RvhOUwvjKqFg14TNUh3S+A1dNvk3mt5y35Lw/s41AjJyJ8wGaa
r3Qgzel+sSswqQH/R9QdjjsXeZUKHiIE5cY/kWjT/AlEswM9j+cQrW/CUbsDXrXy
gkd0wXb2H6qKkqXABnc540LhiGskx2uNYhQHTXcnH3w7QAJJtqfR28ov61t9CY1U
r/guZdCQ9lb5qw==
-----END CERTIFICATE-----
Generated at Tue Sep 29 19:20:35 2026 by rpki-client