Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/033e8b-bde1-4f90-baf5-23847a40d9e4/1/tg1sqV4ncPVTQNkJ7HyX7so_4g4.mft
File: tg1sqV4ncPVTQNkJ7HyX7so_4g4.mft (raw, json)
Hash identifier: 0JKXTxqZ7tewa26A9Cr3axEDatWn1ymjUn2XLuuQNbY=
Subject key identifier: 45:20:F8:62:F5:23:BA:5A:16:3F:55:25:66:24:A5:7D:87:8C:67:D3
Authority key identifier: B6:0D:6C:A9:5E:27:70:F5:53:40:D9:09:EC:7C:97:EE:CA:3F:E2:0E
Certificate issuer: /CN=b60d6ca95e2770f55340d909ec7c97eeca3fe20e
Certificate serial: 019D29296B023C2C96D9C8B000D48CA2696B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tg1sqV4ncPVTQNkJ7HyX7so_4g4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/033e8b-bde1-4f90-baf5-23847a40d9e4/1/tg1sqV4ncPVTQNkJ7HyX7so_4g4.mft
Manifest number: 1887
Signing time: Thu 26 Mar 2026 08:01:13 +0000
Manifest this update: Thu 26 Mar 2026 08:01:13 +0000
Manifest next update: Fri 27 Mar 2026 08:01:13 +0000
Files and hashes: 1: 0_bDufbDC749XM6FeQZedL-kk0k.roa (hash: g27LLjmMTEPKwmdpRxcxsvyxvSaT85tGJMHzBXS0Bvg=)
2: Et_E8L3JnyGGi7EORm0tAklWkLY.roa (hash: SpPpnnc6LbJxToXLzGDYpTEBRnHYaBTsGIvm0GxadyE=)
3: tg1sqV4ncPVTQNkJ7HyX7so_4g4.crl (hash: xOa4GIi6wpjtslasHxLB95kA0xqx8iwxBkSdheucVLc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/033e8b-bde1-4f90-baf5-23847a40d9e4/1/tg1sqV4ncPVTQNkJ7HyX7so_4g4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/033e8b-bde1-4f90-baf5-23847a40d9e4/1/tg1sqV4ncPVTQNkJ7HyX7so_4g4.mft
rsync://rpki.ripe.net/repository/DEFAULT/tg1sqV4ncPVTQNkJ7HyX7so_4g4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:29:6b:02:3c:2c:96:d9:c8:b0:00:d4:8c:a2:69:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b60d6ca95e2770f55340d909ec7c97eeca3fe20e
Validity
Not Before: Mar 26 08:01:13 2026 GMT
Not After : Mar 27 08:01:13 2026 GMT
Subject: CN=4520f862f523ba5a163f55256624a57d878c67d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:d6:34:0e:d4:dc:9e:fe:08:94:2f:08:a3:cf:
70:56:63:da:45:43:08:d1:ab:15:98:85:5a:ed:2f:
11:c3:31:7d:7a:84:7a:62:72:5e:7b:ff:d0:e1:8a:
3c:35:96:7d:a5:37:29:bc:29:c1:25:be:79:15:a0:
fc:50:95:61:78:4b:6d:e0:56:84:84:f2:97:47:e9:
53:dc:75:c4:23:ad:f8:f0:65:52:44:bc:5c:f7:07:
15:42:df:db:ef:19:21:e5:63:82:91:08:ed:04:22:
82:c7:dd:fe:7e:34:22:49:cb:d8:f3:e8:61:59:61:
4f:8d:00:91:5e:b8:3d:87:ef:a1:1f:d1:3b:b5:9a:
66:13:5c:9a:0b:30:d6:77:2b:94:0a:e2:78:f6:8a:
e0:2b:35:1c:17:e9:e9:75:91:00:74:46:0f:d1:25:
ca:16:2e:2b:65:22:bf:56:b5:92:ce:99:85:82:8b:
fe:cd:5b:35:07:b6:e6:3f:81:a8:d3:ef:55:4b:64:
1a:48:b6:71:da:cb:10:8c:31:cd:28:3e:73:1c:cd:
57:80:3a:26:6a:5d:5e:63:34:b9:34:6b:0c:ad:b1:
fe:62:d5:f9:6b:84:47:cc:0b:e6:32:6c:7a:7a:a6:
19:b2:a2:fb:7f:c3:c8:d5:e6:bf:bf:f4:00:d9:d4:
db:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:20:F8:62:F5:23:BA:5A:16:3F:55:25:66:24:A5:7D:87:8C:67:D3
X509v3 Authority Key Identifier:
keyid:B6:0D:6C:A9:5E:27:70:F5:53:40:D9:09:EC:7C:97:EE:CA:3F:E2:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tg1sqV4ncPVTQNkJ7HyX7so_4g4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/033e8b-bde1-4f90-baf5-23847a40d9e4/1/tg1sqV4ncPVTQNkJ7HyX7so_4g4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/033e8b-bde1-4f90-baf5-23847a40d9e4/1/tg1sqV4ncPVTQNkJ7HyX7so_4g4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:bd:33:da:8e:8b:3e:e1:c1:65:0b:3b:36:7a:92:a0:42:1d:
72:4e:f3:bc:ec:01:16:39:92:48:75:3e:ce:9b:53:e4:65:28:
3a:dc:3b:be:db:85:11:30:aa:a1:e3:8d:0f:aa:08:c5:c5:96:
70:eb:d3:19:07:16:64:69:28:21:df:73:c7:32:d4:ce:4a:ca:
66:85:94:37:5c:c3:db:68:52:12:d3:49:4f:7f:61:7c:ce:0d:
a2:66:5c:18:a4:6c:95:e2:c6:0c:88:c0:1b:f5:00:8c:13:b6:
23:e3:02:e3:99:01:be:9a:2a:72:49:34:fa:1d:fc:28:fe:5f:
da:21:a2:54:57:80:58:5c:c5:d5:29:6f:9c:e8:6e:7e:1d:c9:
62:25:31:f2:86:e0:c8:96:7c:72:73:f0:15:1a:7c:61:ba:ec:
02:8a:79:69:22:0a:f2:4d:ba:b9:f0:ab:95:63:f5:1b:13:27:
b8:af:0e:0a:9d:f4:fb:ab:72:15:cf:80:8e:c0:e6:bf:75:02:
78:d5:74:89:e6:f3:2e:7b:53:93:fa:19:7f:42:e5:8b:51:45:
79:ac:6c:d2:26:3c:92:7f:bc:fe:6e:b9:81:a6:2f:78:1d:81:
3f:f5:8d:c5:af:c3:f2:1a:04:7e:ce:92:03:2f:d3:93:ae:3a:
32:a4:80:c8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0pKWsCPCyW2ciwANSMomlrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI2MGQ2Y2E5NWUyNzcwZjU1MzQwZDkwOWVjN2M5N2VlY2Ez
ZmUyMGUwHhcNMjYwMzI2MDgwMTEzWhcNMjYwMzI3MDgwMTEzWjAzMTEwLwYDVQQD
Eyg0NTIwZjg2MmY1MjNiYTVhMTYzZjU1MjU2NjI0YTU3ZDg3OGM2N2QzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzdY0DtTcnv4IlC8Io89wVmPaRUMI
0asVmIVa7S8RwzF9eoR6YnJee//Q4Yo8NZZ9pTcpvCnBJb55FaD8UJVheEtt4FaE
hPKXR+lT3HXEI6348GVSRLxc9wcVQt/b7xkh5WOCkQjtBCKCx93+fjQiScvY8+hh
WWFPjQCRXrg9h++hH9E7tZpmE1yaCzDWdyuUCuJ49orgKzUcF+npdZEAdEYP0SXK
Fi4rZSK/VrWSzpmFgov+zVs1B7bmP4Go0+9VS2QaSLZx2ssQjDHNKD5zHM1XgDom
al1eYzS5NGsMrbH+YtX5a4RHzAvmMmx6eqYZsqL7f8PI1ea/v/QA2dTblQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEUg+GL1I7paFj9VJWYkpX2HjGfTMB8GA1UdIwQY
MBaAFLYNbKleJ3D1U0DZCex8l+7KP+IOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdGcxc3FWNG5jUFZUUU5rSjdIeVg3c29fNGc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy8wMzNlOGItYmRlMS00ZjkwLWJhZjUt
MjM4NDdhNDBkOWU0LzEvdGcxc3FWNG5jUFZUUU5rSjdIeVg3c29fNGc0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy8wMzNlOGItYmRlMS00ZjkwLWJhZjUtMjM4NDdhNDBkOWU0
LzEvdGcxc3FWNG5jUFZUUU5rSjdIeVg3c29fNGc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYr0z2o6L
PuHBZQs7NnqSoEIdck7zvOwBFjmSSHU+zptT5GUoOtw7vtuFETCqoeOND6oIxcWW
cOvTGQcWZGkoId9zxzLUzkrKZoWUN1zD22hSEtNJT39hfM4NomZcGKRsleLGDIjA
G/UAjBO2I+MC45kBvpoqckk0+h38KP5f2iGiVFeAWFzF1SlvnOhufh3JYiUx8obg
yJZ8cnPwFRp8YbrsAop5aSIK8k26ufCrlWP1GxMnuK8OCp30+6tyFc+AjsDmv3UC
eNV0iebzLntTk/oZf0Lli1FFeaxs0iY8kn+8/m65gaYveB2BP/WNxa/D8hoEfs6S
Ay/Tk646MqSAyA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 11:11:37 2026 by rpki-client