Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9a/0caa6d-109e-45f3-a932-475c5c91f474/1/tGTgryi3VcTsiAENlCmGl9GIOTM.mft
File: tGTgryi3VcTsiAENlCmGl9GIOTM.mft (raw, json)
Hash identifier: 4Rm5B7dw/5ETy3hNmYFSHia5zmYuFKYifIG+5R7Y04U=
Subject key identifier: 4B:29:16:0F:B8:CD:4F:72:D7:B3:3A:FC:63:74:06:E9:4F:6A:B3:36
Authority key identifier: B4:64:E0:AF:28:B7:55:C4:EC:88:01:0D:94:29:86:97:D1:88:39:33
Certificate issuer: /CN=b464e0af28b755c4ec88010d94298697d1883933
Certificate serial: 01A0DA5F56D201AC0FE8699241964BCBD994
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tGTgryi3VcTsiAENlCmGl9GIOTM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/0caa6d-109e-45f3-a932-475c5c91f474/1/tGTgryi3VcTsiAENlCmGl9GIOTM.mft
Manifest number: 0C35
Signing time: Fri 25 Sep 2026 21:01:16 +0000
Manifest this update: Fri 25 Sep 2026 21:01:16 +0000
Manifest next update: Sat 26 Sep 2026 21:01:16 +0000
Files and hashes: 1: dT7xB_AVDGhZ5iHb3OqIlsrmGmQ.roa (hash: 9I6NB6tgwzenrbz6TZapLlG56NaY3o8KJFSGZlT7HFk=)
2: s1suhFRxtQqXFfjNjSFyRNz1-dY.roa (hash: B73+BcivVDYXNoW7reCUol9H0cBeuwXyj3jXoDEGt/E=)
3: tGTgryi3VcTsiAENlCmGl9GIOTM.crl (hash: SQZAA4tG4gzWxL2f9qMW7Ubn53Gt9/4DXhfnx20JuQc=)
4: urEWBZOnm7WKMhvQTm1izzcCYag.roa (hash: FEAeulBV1KrK3TH9JavCA4eeT7PWhs/mcBsPYnO8hB8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/0caa6d-109e-45f3-a932-475c5c91f474/1/tGTgryi3VcTsiAENlCmGl9GIOTM.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/0caa6d-109e-45f3-a932-475c5c91f474/1/tGTgryi3VcTsiAENlCmGl9GIOTM.mft
rsync://rpki.ripe.net/repository/DEFAULT/tGTgryi3VcTsiAENlCmGl9GIOTM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 21:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:da:5f:56:d2:01:ac:0f:e8:69:92:41:96:4b:cb:d9:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b464e0af28b755c4ec88010d94298697d1883933
Validity
Not Before: Sep 25 21:01:16 2026 GMT
Not After : Sep 26 21:01:16 2026 GMT
Subject: CN=4b29160fb8cd4f72d7b33afc637406e94f6ab336
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:56:fa:95:24:57:c5:66:f7:65:98:4b:0c:a5:
3a:95:65:33:4e:91:ed:e1:35:1a:10:4a:68:83:d8:
62:fd:a0:1a:c6:b8:bb:7a:dd:5e:c3:f2:29:36:0e:
b8:2a:c4:52:03:10:e0:19:6a:0a:60:ae:c1:c1:b8:
61:7f:56:5f:be:dc:a5:8c:ad:b2:8d:10:3e:c1:27:
61:51:c5:56:71:ac:72:4e:3d:42:fc:5d:ed:1f:56:
c9:0c:c0:7f:d9:a7:9e:ae:ed:9e:6a:38:1e:e2:00:
12:e8:68:13:2d:04:6d:dd:f1:6f:c7:22:5c:3d:c1:
f3:c0:50:15:7b:dd:09:61:68:37:44:43:2e:c1:79:
d5:a3:5d:47:fd:ec:8a:7a:2c:c0:08:dc:cb:1d:41:
9d:42:d8:ea:42:91:61:42:38:0d:46:3f:93:f9:c9:
3d:3b:73:5d:60:9f:9f:91:2f:49:47:39:04:a7:59:
cd:dd:50:12:b8:4a:e4:03:77:95:79:e0:86:ef:d0:
48:fa:f7:1f:0e:4e:8d:9c:68:10:99:aa:9c:93:28:
ad:5b:39:6c:08:98:6e:5d:38:67:14:79:6d:cc:c3:
2d:db:fa:1c:7f:14:1d:92:0a:82:83:00:2d:51:7c:
46:8d:22:3f:13:26:5a:3a:9d:48:59:ac:38:1f:24:
07:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:29:16:0F:B8:CD:4F:72:D7:B3:3A:FC:63:74:06:E9:4F:6A:B3:36
X509v3 Authority Key Identifier:
keyid:B4:64:E0:AF:28:B7:55:C4:EC:88:01:0D:94:29:86:97:D1:88:39:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tGTgryi3VcTsiAENlCmGl9GIOTM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/0caa6d-109e-45f3-a932-475c5c91f474/1/tGTgryi3VcTsiAENlCmGl9GIOTM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/0caa6d-109e-45f3-a932-475c5c91f474/1/tGTgryi3VcTsiAENlCmGl9GIOTM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:88:a9:d4:d0:81:e2:3e:7d:80:63:10:5e:d7:0f:59:fe:dc:
2d:1c:b8:34:09:86:3a:fc:fa:3f:e6:a6:9e:cf:07:cc:81:e8:
b2:0d:3c:b2:01:8b:35:c0:5c:33:3a:63:b9:e4:8a:f6:62:b0:
c8:6d:34:72:e4:d4:e9:1a:9b:e0:59:99:d1:54:e7:e3:83:8b:
73:f2:55:3b:96:32:aa:2c:8d:75:60:02:c4:5c:25:d2:e1:44:
17:a1:94:43:b7:08:48:a7:c2:8b:4d:68:32:4d:86:d8:d7:38:
f9:89:05:f9:b5:12:dc:d6:07:79:dd:b5:8d:6a:c9:ce:7b:5e:
78:1f:9b:a1:43:d5:74:8e:1e:2d:09:f1:e2:04:12:5b:9b:f4:
69:21:ff:3b:48:4e:b8:53:11:49:ec:e5:a1:8f:55:95:72:08:
3b:b8:99:d4:92:c7:23:1c:d4:5c:25:ae:ca:24:69:dd:6e:ba:
54:b3:f1:63:4c:5d:7a:22:2d:a7:d0:85:1e:c9:45:37:18:fc:
12:e9:b7:b4:de:76:b0:ab:90:00:1a:f9:c1:27:1f:f0:27:4a:
3b:6f:25:87:5c:4a:eb:02:93:ae:b8:85:74:aa:64:52:dc:8e:
17:15:93:5a:23:b0:e9:78:15:e3:ef:5a:18:e4:10:29:f7:89:
a3:c7:6a:ec
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDaX1bSAawP6GmSQZZLy9mUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0NjRlMGFmMjhiNzU1YzRlYzg4MDEwZDk0Mjk4Njk3ZDE4
ODM5MzMwHhcNMjYwOTI1MjEwMTE2WhcNMjYwOTI2MjEwMTE2WjAzMTEwLwYDVQQD
Eyg0YjI5MTYwZmI4Y2Q0ZjcyZDdiMzNhZmM2Mzc0MDZlOTRmNmFiMzM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjlb6lSRXxWb3ZZhLDKU6lWUzTpHt
4TUaEEpog9hi/aAaxri7et1ew/IpNg64KsRSAxDgGWoKYK7Bwbhhf1ZfvtyljK2y
jRA+wSdhUcVWcaxyTj1C/F3tH1bJDMB/2aeeru2eajge4gAS6GgTLQRt3fFvxyJc
PcHzwFAVe90JYWg3REMuwXnVo11H/eyKeizACNzLHUGdQtjqQpFhQjgNRj+T+ck9
O3NdYJ+fkS9JRzkEp1nN3VASuErkA3eVeeCG79BI+vcfDk6NnGgQmaqckyitWzls
CJhuXThnFHltzMMt2/ocfxQdkgqCgwAtUXxGjSI/EyZaOp1IWaw4HyQHvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEspFg+4zU9y17M6/GN0BulParM2MB8GA1UdIwQY
MBaAFLRk4K8ot1XE7IgBDZQphpfRiDkzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdEdUZ3J5aTNWY1RzaUFFTmxDbUdsOUdJT1RNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS8wY2FhNmQtMTA5ZS00NWYzLWE5MzIt
NDc1YzVjOTFmNDc0LzEvdEdUZ3J5aTNWY1RzaUFFTmxDbUdsOUdJT1RNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85YS8wY2FhNmQtMTA5ZS00NWYzLWE5MzItNDc1YzVjOTFmNDc0
LzEvdEdUZ3J5aTNWY1RzaUFFTmxDbUdsOUdJT1RNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAr4ip1NCB
4j59gGMQXtcPWf7cLRy4NAmGOvz6P+amns8HzIHosg08sgGLNcBcMzpjueSK9mKw
yG00cuTU6Rqb4FmZ0VTn44OLc/JVO5YyqiyNdWACxFwl0uFEF6GUQ7cISKfCi01o
Mk2G2Nc4+YkF+bUS3NYHed21jWrJznteeB+boUPVdI4eLQnx4gQSW5v0aSH/O0hO
uFMRSezloY9VlXIIO7iZ1JLHIxzUXCWuyiRp3W66VLPxY0xdeiItp9CFHslFNxj8
Eum3tN52sKuQABr5wScf8CdKO28lh1xK6wKTrriFdKpkUtyOFxWTWiOw6XgV4+9a
GOQQKfeJo8dq7A==
-----END CERTIFICATE-----
Generated at Sat Sep 26 07:12:49 2026 by rpki-client