Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a1/e4e696-9d78-414c-af40-cf56c66a0ac0/1/TJMhPYj6h060Rg4sXPG7GpHakHg.mft
File: TJMhPYj6h060Rg4sXPG7GpHakHg.mft (raw, json)
Hash identifier: c9G3+mO587lb+lWNkdqt213Oa5gEH5Eb6oCizIAi6FE=
Subject key identifier: 30:82:EB:8C:09:33:13:14:97:FB:72:7B:8B:E0:F0:2E:CB:90:7A:DE
Authority key identifier: 4C:93:21:3D:88:FA:87:4E:B4:46:0E:2C:5C:F1:BB:1A:91:DA:90:78
Certificate issuer: /CN=4c93213d88fa874eb4460e2c5cf1bb1a91da9078
Certificate serial: 01A0D314F177A914184B62CE1474E01395F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TJMhPYj6h060Rg4sXPG7GpHakHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/e4e696-9d78-414c-af40-cf56c66a0ac0/1/TJMhPYj6h060Rg4sXPG7GpHakHg.mft
Manifest number: 1A6F
Signing time: Thu 24 Sep 2026 11:02:40 +0000
Manifest this update: Thu 24 Sep 2026 11:02:40 +0000
Manifest next update: Fri 25 Sep 2026 11:02:40 +0000
Files and hashes: 1: 1SMtyrFP6eFZxMb7PZMbKYGMJi8.roa (hash: XxgHh0JzLHhNi3/TyAFFwO5EFUtAwR/nBi3ICijq0Hg=)
2: TJMhPYj6h060Rg4sXPG7GpHakHg.crl (hash: KFGImw0vJsqXpX7NZok0rcrkQN38AmWtsd5Wnluo14Q=)
3: Xb_xBMYO16QsavZuo57UMH_pTFY.asa (hash: pTF5yNZXnsPsUoT0zDPJu+l24+9PSGN9YfP8M+7/BDA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/e4e696-9d78-414c-af40-cf56c66a0ac0/1/TJMhPYj6h060Rg4sXPG7GpHakHg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/e4e696-9d78-414c-af40-cf56c66a0ac0/1/TJMhPYj6h060Rg4sXPG7GpHakHg.mft
rsync://rpki.ripe.net/repository/DEFAULT/TJMhPYj6h060Rg4sXPG7GpHakHg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 11:02:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:14:f1:77:a9:14:18:4b:62:ce:14:74:e0:13:95:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c93213d88fa874eb4460e2c5cf1bb1a91da9078
Validity
Not Before: Sep 24 11:02:40 2026 GMT
Not After : Sep 25 11:02:40 2026 GMT
Subject: CN=3082eb8c0933131497fb727b8be0f02ecb907ade
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ce:15:7a:e7:70:8b:b0:26:1d:e0:70:9f:b8:
e6:a3:93:d8:d9:fb:41:11:9b:94:35:58:82:17:9c:
1e:11:47:f9:24:85:c4:e1:f9:47:06:d5:0e:23:1f:
09:09:f2:b5:73:52:e3:05:96:99:31:5a:22:21:86:
ec:d3:37:b5:1b:97:12:ba:be:d8:bc:3e:4f:50:8b:
cf:1f:c3:81:0a:06:f8:55:72:68:dd:ff:21:6b:ca:
a9:6b:5f:a1:9c:3a:d7:0c:38:1c:d5:5d:96:0b:08:
df:f0:d0:6e:ec:ea:ea:de:29:d0:e6:c5:72:c1:fb:
54:32:ca:8d:bf:b7:f5:1b:ab:4d:ed:eb:22:1e:67:
cd:73:fe:f6:49:66:76:72:55:23:e3:6f:7a:bc:1e:
29:c6:6c:f8:a1:c1:97:fd:b7:0f:f2:30:75:8f:50:
9a:ad:3f:59:25:b2:67:df:70:d0:e1:16:4d:dc:09:
3a:c7:cc:ec:b2:32:c6:5e:74:96:4b:7f:21:97:76:
d3:9e:d3:95:8e:45:f4:4d:bf:47:23:a9:2d:62:4a:
0d:31:71:85:c4:a3:49:89:34:f1:af:70:ef:5f:df:
c3:ee:3b:9b:f0:87:16:1b:32:be:6a:b9:01:51:15:
22:cd:b2:fc:cd:ce:e0:f0:4c:db:cd:ca:a0:e7:53:
bc:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:82:EB:8C:09:33:13:14:97:FB:72:7B:8B:E0:F0:2E:CB:90:7A:DE
X509v3 Authority Key Identifier:
keyid:4C:93:21:3D:88:FA:87:4E:B4:46:0E:2C:5C:F1:BB:1A:91:DA:90:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TJMhPYj6h060Rg4sXPG7GpHakHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/e4e696-9d78-414c-af40-cf56c66a0ac0/1/TJMhPYj6h060Rg4sXPG7GpHakHg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/e4e696-9d78-414c-af40-cf56c66a0ac0/1/TJMhPYj6h060Rg4sXPG7GpHakHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:5e:ac:98:df:28:81:32:fa:c1:ea:fb:d8:50:18:35:9d:dc:
c8:3b:b2:e5:86:70:7d:d6:f8:0d:3e:4d:b4:73:aa:41:f5:e5:
97:a2:6e:06:48:41:42:2e:04:b4:4e:93:9f:8f:ec:d7:19:85:
6d:c9:4d:ff:33:b2:5a:9b:e9:4f:13:0a:39:79:aa:9d:31:09:
e4:7d:1e:88:a8:0b:ec:98:15:54:08:7b:80:29:82:ae:8a:15:
5f:0b:ab:3e:38:9b:bb:b5:63:cb:4f:74:2c:ab:1e:4d:7f:1a:
cf:87:ba:f8:e7:22:33:b4:61:05:74:68:49:4c:63:57:04:ed:
3c:d5:d6:65:ad:7d:6e:b7:e8:a1:5f:8f:51:da:11:d3:6d:c5:
0a:3f:62:f4:fe:2a:df:76:9a:73:c2:18:c9:fd:43:52:5f:ea:
36:2b:96:ae:cc:2d:51:bd:21:65:52:9a:86:4f:57:41:68:78:
a9:f9:b3:38:2f:38:d8:72:6a:ba:6d:77:74:b5:19:4c:e1:64:
f1:91:79:63:53:2b:86:32:73:3a:b3:9d:0c:e0:d7:02:2c:e4:
3a:46:86:bc:cb:80:02:dc:db:9b:5d:a7:65:7e:46:46:f9:9b:
f6:2a:92:89:48:1f:09:8a:37:2e:34:3a:05:2f:25:f1:8a:06:
72:14:05:fd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDTFPF3qRQYS2LOFHTgE5X1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjOTMyMTNkODhmYTg3NGViNDQ2MGUyYzVjZjFiYjFhOTFk
YTkwNzgwHhcNMjYwOTI0MTEwMjQwWhcNMjYwOTI1MTEwMjQwWjAzMTEwLwYDVQQD
EygzMDgyZWI4YzA5MzMxMzE0OTdmYjcyN2I4YmUwZjAyZWNiOTA3YWRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo84Veudwi7AmHeBwn7jmo5PY2ftB
EZuUNViCF5weEUf5JIXE4flHBtUOIx8JCfK1c1LjBZaZMVoiIYbs0ze1G5cSur7Y
vD5PUIvPH8OBCgb4VXJo3f8ha8qpa1+hnDrXDDgc1V2WCwjf8NBu7Orq3inQ5sVy
wftUMsqNv7f1G6tN7esiHmfNc/72SWZ2clUj4296vB4pxmz4ocGX/bcP8jB1j1Ca
rT9ZJbJn33DQ4RZN3Ak6x8zssjLGXnSWS38hl3bTntOVjkX0Tb9HI6ktYkoNMXGF
xKNJiTTxr3DvX9/D7jub8IcWGzK+arkBURUizbL8zc7g8Ezbzcqg51O8EwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDCC64wJMxMUl/tye4vg8C7LkHreMB8GA1UdIwQY
MBaAFEyTIT2I+odOtEYOLFzxuxqR2pB4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVEpNaFBZajZoMDYwUmc0c1hQRzdHcEhha0hnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS9lNGU2OTYtOWQ3OC00MTRjLWFmNDAt
Y2Y1NmM2NmEwYWMwLzEvVEpNaFBZajZoMDYwUmc0c1hQRzdHcEhha0hnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMS9lNGU2OTYtOWQ3OC00MTRjLWFmNDAtY2Y1NmM2NmEwYWMw
LzEvVEpNaFBZajZoMDYwUmc0c1hQRzdHcEhha0hnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApl6smN8o
gTL6wer72FAYNZ3cyDuy5YZwfdb4DT5NtHOqQfXll6JuBkhBQi4EtE6Tn4/s1xmF
bclN/zOyWpvpTxMKOXmqnTEJ5H0eiKgL7JgVVAh7gCmCrooVXwurPjibu7Vjy090
LKseTX8az4e6+OciM7RhBXRoSUxjVwTtPNXWZa19brfooV+PUdoR023FCj9i9P4q
33aac8IYyf1DUl/qNiuWrswtUb0hZVKahk9XQWh4qfmzOC842HJqum13dLUZTOFk
8ZF5Y1MrhjJzOrOdDODXAizkOkaGvMuAAtzbm12nZX5GRvmb9iqSiUgfCYo3LjQ6
BS8l8YoGchQF/Q==
-----END CERTIFICATE-----
Generated at Thu Sep 24 19:53:58 2026 by rpki-client