Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/0caa6d-109e-45f3-a932-475c5c91f474/1/tGTgryi3VcTsiAENlCmGl9GIOTM.mft
File: tGTgryi3VcTsiAENlCmGl9GIOTM.mft (raw, json)
Hash identifier: xQ7Fgaiavl7+FgacXA8YDmdppSI55r6jpOMbQT14ny4=
Subject key identifier: 98:A1:B3:A1:20:B7:23:3A:94:FF:1C:B7:91:EF:60:53:A2:2E:90:22
Authority key identifier: B4:64:E0:AF:28:B7:55:C4:EC:88:01:0D:94:29:86:97:D1:88:39:33
Certificate issuer: /CN=b464e0af28b755c4ec88010d94298697d1883933
Certificate serial: 019E1F483875B700EB5A7D4068BB2839BB17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tGTgryi3VcTsiAENlCmGl9GIOTM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/0caa6d-109e-45f3-a932-475c5c91f474/1/tGTgryi3VcTsiAENlCmGl9GIOTM.mft
Manifest number: 0ACB
Signing time: Wed 13 May 2026 03:01:27 +0000
Manifest this update: Wed 13 May 2026 03:01:27 +0000
Manifest next update: Thu 14 May 2026 03:01:27 +0000
Files and hashes: 1: dT7xB_AVDGhZ5iHb3OqIlsrmGmQ.roa (hash: 9I6NB6tgwzenrbz6TZapLlG56NaY3o8KJFSGZlT7HFk=)
2: s1suhFRxtQqXFfjNjSFyRNz1-dY.roa (hash: B73+BcivVDYXNoW7reCUol9H0cBeuwXyj3jXoDEGt/E=)
3: tGTgryi3VcTsiAENlCmGl9GIOTM.crl (hash: cW66dZW6bkGxQQOKBC6PKjXquXKwlJK7nH5GWAMA6NI=)
4: urEWBZOnm7WKMhvQTm1izzcCYag.roa (hash: FEAeulBV1KrK3TH9JavCA4eeT7PWhs/mcBsPYnO8hB8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/0caa6d-109e-45f3-a932-475c5c91f474/1/tGTgryi3VcTsiAENlCmGl9GIOTM.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/0caa6d-109e-45f3-a932-475c5c91f474/1/tGTgryi3VcTsiAENlCmGl9GIOTM.mft
rsync://rpki.ripe.net/repository/DEFAULT/tGTgryi3VcTsiAENlCmGl9GIOTM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:48:38:75:b7:00:eb:5a:7d:40:68:bb:28:39:bb:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b464e0af28b755c4ec88010d94298697d1883933
Validity
Not Before: May 13 03:01:27 2026 GMT
Not After : May 14 03:01:27 2026 GMT
Subject: CN=98a1b3a120b7233a94ff1cb791ef6053a22e9022
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:c5:b3:6c:94:ba:cc:f1:23:28:90:5f:45:79:
39:b4:25:fc:53:19:68:d8:43:0a:63:dd:05:41:0f:
36:5c:49:85:cc:09:89:e2:bd:47:4a:ef:24:10:6e:
1a:f1:05:b6:4f:49:26:dc:bc:67:40:3c:68:a8:06:
41:9c:c3:5f:f4:ac:d3:19:7f:f5:1d:e5:da:b6:ab:
d5:c1:a4:8d:e8:85:8b:e0:75:ff:07:49:dd:be:77:
8f:9e:3d:27:96:31:2f:77:f2:15:fc:17:90:11:3b:
09:77:bf:b9:87:20:7c:8d:50:85:96:f2:bd:00:aa:
c3:b1:f3:37:7b:19:58:40:62:a2:db:d4:6c:ad:60:
2f:7f:08:d8:cf:f2:64:de:d2:b7:91:ec:f4:8b:f9:
60:62:0d:e0:33:f3:0e:97:e9:85:8b:b4:77:ea:23:
93:44:ce:b9:8b:19:00:c4:c3:00:71:dd:06:e7:44:
52:cc:2c:1d:65:90:b9:50:28:99:cc:47:d4:61:77:
99:09:2a:9f:e2:2d:97:31:60:c9:db:1f:f0:0d:61:
da:87:43:7a:99:74:84:da:04:db:7c:58:3b:92:d1:
26:ac:6a:df:eb:7d:e2:98:5d:b2:37:3d:a6:17:ed:
b4:fa:c5:62:16:dd:02:21:bb:14:13:0f:be:01:d6:
9c:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:A1:B3:A1:20:B7:23:3A:94:FF:1C:B7:91:EF:60:53:A2:2E:90:22
X509v3 Authority Key Identifier:
keyid:B4:64:E0:AF:28:B7:55:C4:EC:88:01:0D:94:29:86:97:D1:88:39:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tGTgryi3VcTsiAENlCmGl9GIOTM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/0caa6d-109e-45f3-a932-475c5c91f474/1/tGTgryi3VcTsiAENlCmGl9GIOTM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/0caa6d-109e-45f3-a932-475c5c91f474/1/tGTgryi3VcTsiAENlCmGl9GIOTM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:b3:3d:77:8a:8e:6a:21:7d:92:ec:e4:ce:c2:3a:4d:e6:6d:
be:15:a3:cc:bd:8a:73:35:8d:85:8d:ea:53:78:73:03:df:41:
19:11:4e:7d:94:db:67:97:86:29:45:c7:59:d1:0d:5c:8b:72:
fc:f8:e8:d9:5d:82:95:78:db:cd:e2:3f:4f:4e:66:b3:bd:76:
9d:f6:37:18:52:e7:24:ef:8b:d9:84:3f:d8:39:28:48:96:1a:
86:00:63:4a:5d:0d:8e:08:e3:36:46:c8:a9:47:0a:2d:1e:27:
c8:f2:62:2e:33:06:b8:53:18:c1:ca:51:0a:c5:e0:bf:0e:01:
28:3c:b4:8c:de:cd:5f:79:bf:57:da:2f:9d:cc:58:f7:33:f0:
6e:42:54:82:4a:73:72:a4:29:e7:9f:a6:eb:3a:03:92:92:62:
c5:df:b7:fe:c1:67:00:bb:5e:c0:e5:c4:f2:7f:cc:3e:f9:c0:
e7:76:cd:e7:25:e9:85:9b:32:47:06:5d:66:49:ea:9c:49:ed:
e7:44:57:c1:e0:be:96:8f:bf:20:28:49:a1:d4:f0:30:69:4c:
10:d4:94:c5:dd:1d:43:b4:34:09:43:c0:c6:59:4f:5c:40:c4:
bb:4d:34:a6:cc:1d:8c:e7:2a:9c:dc:f9:e7:a8:4b:56:cd:1a:
0a:d8:d5:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:05:35 2026 by rpki-client