Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/6e9dfd-ce47-4e61-a315-e5aa74700f9d/1/TGHRGEebUiLvD4ZBZ8rFtMB8whk.mft
File: TGHRGEebUiLvD4ZBZ8rFtMB8whk.mft (raw, json)
Hash identifier: qrGAW8F6kTSjbkbgMioI9tR4zcRfji/nDqSsESJRbHQ=
Subject key identifier: 1B:BD:06:01:D3:1F:08:23:46:E3:3A:AE:2B:5E:AD:96:C4:EE:3B:58
Authority key identifier: 4C:61:D1:18:47:9B:52:22:EF:0F:86:41:67:CA:C5:B4:C0:7C:C2:19
Certificate issuer: /CN=4c61d118479b5222ef0f864167cac5b4c07cc219
Certificate serial: 019D273AC47FAD8D1F011D5621948E101730
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TGHRGEebUiLvD4ZBZ8rFtMB8whk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/6e9dfd-ce47-4e61-a315-e5aa74700f9d/1/TGHRGEebUiLvD4ZBZ8rFtMB8whk.mft
Manifest number: 1887
Signing time: Wed 25 Mar 2026 23:00:55 +0000
Manifest this update: Wed 25 Mar 2026 23:00:55 +0000
Manifest next update: Thu 26 Mar 2026 23:00:55 +0000
Files and hashes: 1: TGHRGEebUiLvD4ZBZ8rFtMB8whk.crl (hash: OAGqffbuGEhdES/d1rdXT15Hw8+2kDdSFDoccOxbaYs=)
2: gAYzl20xItIY_WqWVJ6f2CElDXs.roa (hash: 1hpv0IAqRBDo5f2z8yJyt+CBplx7y1IUryRuOQtPjKE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/6e9dfd-ce47-4e61-a315-e5aa74700f9d/1/TGHRGEebUiLvD4ZBZ8rFtMB8whk.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/6e9dfd-ce47-4e61-a315-e5aa74700f9d/1/TGHRGEebUiLvD4ZBZ8rFtMB8whk.mft
rsync://rpki.ripe.net/repository/DEFAULT/TGHRGEebUiLvD4ZBZ8rFtMB8whk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:c4:7f:ad:8d:1f:01:1d:56:21:94:8e:10:17:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c61d118479b5222ef0f864167cac5b4c07cc219
Validity
Not Before: Mar 25 23:00:55 2026 GMT
Not After : Mar 26 23:00:55 2026 GMT
Subject: CN=1bbd0601d31f082346e33aae2b5ead96c4ee3b58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:af:7f:9b:19:24:4c:7c:ba:89:d3:58:5e:73:
50:14:d7:de:7e:b4:9f:75:de:2f:61:55:10:c3:13:
ef:12:e9:f2:9d:4a:d7:38:f6:20:06:0f:17:af:35:
77:e3:05:d4:d9:4b:70:be:a0:53:bc:b2:88:56:d1:
dd:06:bb:d4:4a:d5:c9:f8:d2:d6:15:90:dd:81:4f:
0b:4c:37:79:9b:ec:9e:6f:de:8f:bb:61:30:98:d0:
ff:9d:1d:5c:af:6b:98:e3:5a:92:74:f4:a0:19:66:
37:d1:c1:6d:71:86:cc:ff:68:b3:1e:23:fb:61:69:
ec:56:e9:a5:2f:4e:fb:83:59:1f:91:3c:a8:a4:75:
c3:b6:63:7d:0f:33:8b:a7:91:c9:c6:b0:f2:85:b1:
a6:96:e5:f9:44:97:1b:e1:4f:a6:26:b8:41:01:f6:
bf:51:86:20:98:db:bd:24:12:a9:dd:72:d6:4a:0e:
0d:b1:a4:0d:11:a1:09:fa:53:29:92:bc:e7:e7:1f:
4f:d7:9d:d9:e9:b0:41:4b:05:20:5e:7b:7a:e0:ca:
bd:b1:8b:16:b8:37:c0:db:84:3f:08:0e:9d:f7:00:
a3:cd:72:e4:ff:be:82:0c:f9:b3:e5:a6:0d:44:79:
96:28:ff:83:a6:b8:25:18:5c:36:a6:f3:ee:16:d9:
80:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:BD:06:01:D3:1F:08:23:46:E3:3A:AE:2B:5E:AD:96:C4:EE:3B:58
X509v3 Authority Key Identifier:
keyid:4C:61:D1:18:47:9B:52:22:EF:0F:86:41:67:CA:C5:B4:C0:7C:C2:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TGHRGEebUiLvD4ZBZ8rFtMB8whk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/6e9dfd-ce47-4e61-a315-e5aa74700f9d/1/TGHRGEebUiLvD4ZBZ8rFtMB8whk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/6e9dfd-ce47-4e61-a315-e5aa74700f9d/1/TGHRGEebUiLvD4ZBZ8rFtMB8whk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:9a:79:1e:be:3b:56:a0:1b:1d:53:3c:be:49:e9:ec:e6:40:
c0:c5:4b:45:be:46:7c:ef:3c:5f:6d:cd:82:4f:c0:89:66:60:
e3:33:b3:a2:15:7a:d9:a1:19:0e:11:6e:d3:84:4c:4a:ad:cc:
92:dd:93:da:13:8f:31:97:71:56:00:a7:fc:54:8d:a1:87:b1:
ae:82:87:36:8e:52:98:c9:a4:a4:e5:e6:08:5b:6e:21:44:17:
ba:b4:2c:6b:ab:64:da:c6:b5:d8:61:92:22:0f:86:38:ef:89:
9e:3d:ef:0f:46:b9:ec:1b:e5:26:b0:97:65:ab:a4:ce:42:4c:
91:81:36:87:43:66:e0:ae:d3:5c:47:6d:70:64:77:43:85:14:
cb:bf:fa:e3:a0:4d:9c:a5:9a:d2:0a:06:30:3f:96:56:f4:3c:
60:80:79:fe:1f:f8:03:08:70:04:cc:d8:ae:d6:f2:bd:a7:e2:
24:34:cf:f8:b4:19:ba:70:fd:c4:4f:b4:5c:ca:01:7a:8b:73:
88:74:a0:5e:19:b4:d5:08:9a:56:be:5f:a4:2c:19:7a:47:6c:
b3:65:c9:81:b2:08:35:8e:20:71:99:f6:10:ec:00:df:b1:78:
cd:ed:28:92:35:97:fe:b6:c4:44:62:75:19:09:c6:a5:65:29:
cb:42:39:d8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nOsR/rY0fAR1WIZSOEBcwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjNjFkMTE4NDc5YjUyMjJlZjBmODY0MTY3Y2FjNWI0YzA3
Y2MyMTkwHhcNMjYwMzI1MjMwMDU1WhcNMjYwMzI2MjMwMDU1WjAzMTEwLwYDVQQD
EygxYmJkMDYwMWQzMWYwODIzNDZlMzNhYWUyYjVlYWQ5NmM0ZWUzYjU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxK9/mxkkTHy6idNYXnNQFNfefrSf
dd4vYVUQwxPvEunynUrXOPYgBg8XrzV34wXU2UtwvqBTvLKIVtHdBrvUStXJ+NLW
FZDdgU8LTDd5m+yeb96Pu2EwmND/nR1cr2uY41qSdPSgGWY30cFtcYbM/2izHiP7
YWnsVumlL077g1kfkTyopHXDtmN9DzOLp5HJxrDyhbGmluX5RJcb4U+mJrhBAfa/
UYYgmNu9JBKp3XLWSg4NsaQNEaEJ+lMpkrzn5x9P153Z6bBBSwUgXnt64Mq9sYsW
uDfA24Q/CA6d9wCjzXLk/76CDPmz5aYNRHmWKP+DprglGFw2pvPuFtmAQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBu9BgHTHwgjRuM6riterZbE7jtYMB8GA1UdIwQY
MBaAFExh0RhHm1Ii7w+GQWfKxbTAfMIZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVEdIUkdFZWJVaUx2RDRaQlo4ckZ0TUI4d2hrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZC82ZTlkZmQtY2U0Ny00ZTYxLWEzMTUt
ZTVhYTc0NzAwZjlkLzEvVEdIUkdFZWJVaUx2RDRaQlo4ckZ0TUI4d2hrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZC82ZTlkZmQtY2U0Ny00ZTYxLWEzMTUtZTVhYTc0NzAwZjlk
LzEvVEdIUkdFZWJVaUx2RDRaQlo4ckZ0TUI4d2hrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAipp5Hr47
VqAbHVM8vknp7OZAwMVLRb5GfO88X23Ngk/AiWZg4zOzohV62aEZDhFu04RMSq3M
kt2T2hOPMZdxVgCn/FSNoYexroKHNo5SmMmkpOXmCFtuIUQXurQsa6tk2sa12GGS
Ig+GOO+Jnj3vD0a57BvlJrCXZaukzkJMkYE2h0Nm4K7TXEdtcGR3Q4UUy7/646BN
nKWa0goGMD+WVvQ8YIB5/h/4AwhwBMzYrtbyvafiJDTP+LQZunD9xE+0XMoBeotz
iHSgXhm01QiaVr5fpCwZekdss2XJgbIINY4gcZn2EOwA37F4ze0okjWX/rbERGJ1
GQnGpWUpy0I52A==
-----END CERTIFICATE-----
Generated at Thu Mar 26 09:47:01 2026 by rpki-client