Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b4/d5e3cc-c1cd-4d68-bec3-1b08f7f5015d/1/Tg854squjizxS8xBsj88huGnIPg.mft
File: Tg854squjizxS8xBsj88huGnIPg.mft (raw, json)
Hash identifier: /EMRFrmC84Bo5saCMjd0x6ma4QfCY0wM79h8O9BUMIg=
Subject key identifier: 26:14:38:CF:78:77:F1:D9:F5:F6:F0:96:6B:06:71:67:03:A1:1B:F2
Authority key identifier: 4E:0F:39:E2:CA:AE:8E:2C:F1:4B:CC:41:B2:3F:3C:86:E1:A7:20:F8
Certificate issuer: /CN=4e0f39e2caae8e2cf14bcc41b23f3c86e1a720f8
Certificate serial: 01A0ED0B276FCE9076AB658D59107792054E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tg854squjizxS8xBsj88huGnIPg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/d5e3cc-c1cd-4d68-bec3-1b08f7f5015d/1/Tg854squjizxS8xBsj88huGnIPg.mft
Manifest number: 1A7E
Signing time: Tue 29 Sep 2026 12:02:06 +0000
Manifest this update: Tue 29 Sep 2026 12:02:06 +0000
Manifest next update: Wed 30 Sep 2026 12:02:06 +0000
Files and hashes: 1: Q_cKojzZsCR7sHqcACX5_Xsszdg.roa (hash: 13DJN0AYMyq7FKRePbvdklWh/SNv0jTV2Z45dv8uucM=)
2: RBXH0ektt1CQc3W3hp-LoPyoFDI.roa (hash: n7TnoGzFQ9ajRDTZ9C84X5KWHPVtB0cd7T1ju2YPzsI=)
3: Tg854squjizxS8xBsj88huGnIPg.crl (hash: fE/rhtoU9+2fmSvkGC8DJHggxoCPYN/D6fQxb/ux+pY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/d5e3cc-c1cd-4d68-bec3-1b08f7f5015d/1/Tg854squjizxS8xBsj88huGnIPg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/d5e3cc-c1cd-4d68-bec3-1b08f7f5015d/1/Tg854squjizxS8xBsj88huGnIPg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tg854squjizxS8xBsj88huGnIPg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 08:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ed:0b:27:6f:ce:90:76:ab:65:8d:59:10:77:92:05:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e0f39e2caae8e2cf14bcc41b23f3c86e1a720f8
Validity
Not Before: Sep 29 12:02:06 2026 GMT
Not After : Sep 30 12:02:06 2026 GMT
Subject: CN=261438cf7877f1d9f5f6f0966b06716703a11bf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:b0:20:d3:b3:6a:4a:56:98:2b:d7:d7:68:ba:
63:72:3d:a6:9e:01:65:70:67:5f:c7:09:c8:ec:79:
b2:fb:fb:73:b0:4e:e9:a1:5f:27:61:f5:ea:82:c1:
78:b9:e2:18:d4:24:10:61:66:fe:0a:39:2d:e7:9c:
26:03:84:4e:50:32:b7:b0:a1:8a:0c:35:b9:80:a0:
a6:7e:02:b7:0f:20:63:b7:dd:5a:0c:30:99:db:5a:
cb:a0:91:f3:6b:9e:e7:71:ca:bb:df:f5:90:d8:ad:
e2:04:2d:6f:e2:ff:9f:a7:1a:90:04:97:d2:af:b6:
c2:ef:50:3a:bb:e0:4c:15:b5:c9:ca:82:a9:6e:27:
3b:9d:17:ed:fa:52:98:c6:45:11:da:69:ce:34:28:
3e:ec:81:3b:b9:8a:be:ea:a0:81:8b:e3:e1:64:ac:
64:0c:26:a4:a8:34:27:ea:cb:f6:ce:f6:d1:5d:08:
09:a6:ac:7e:d4:ae:77:17:2a:69:f7:5e:dc:68:76:
55:85:b5:5d:c6:4f:55:15:1f:bd:f3:2a:b4:34:db:
fb:f8:12:7c:2d:af:5f:02:d2:bc:72:76:3a:1d:5b:
27:ae:63:fc:38:ff:a8:43:17:22:f7:9f:c8:81:b9:
3f:f8:4c:c6:28:36:b7:6d:11:92:8c:7b:23:d5:c9:
f1:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:14:38:CF:78:77:F1:D9:F5:F6:F0:96:6B:06:71:67:03:A1:1B:F2
X509v3 Authority Key Identifier:
keyid:4E:0F:39:E2:CA:AE:8E:2C:F1:4B:CC:41:B2:3F:3C:86:E1:A7:20:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tg854squjizxS8xBsj88huGnIPg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d5e3cc-c1cd-4d68-bec3-1b08f7f5015d/1/Tg854squjizxS8xBsj88huGnIPg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d5e3cc-c1cd-4d68-bec3-1b08f7f5015d/1/Tg854squjizxS8xBsj88huGnIPg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:cb:fb:02:d6:cf:63:80:26:8a:2d:b7:55:7a:5c:97:d5:fa:
4c:7a:d0:22:85:65:fb:3b:eb:4f:e4:43:47:b3:9f:7c:8a:d6:
69:10:37:2b:f8:36:2f:61:d2:e5:37:97:1c:4f:f0:40:f8:ff:
eb:4f:5f:0b:fa:56:4e:c2:4f:3f:f2:b6:e8:95:0f:e2:34:74:
31:f0:5c:3b:ce:ea:3b:44:e5:d1:c4:a3:01:19:89:8a:10:55:
81:7d:38:38:f1:f0:aa:01:6c:c8:ff:df:14:be:0b:1d:7a:d7:
87:d7:2c:6a:6b:3b:7e:0b:04:a6:b1:29:3e:d1:de:5f:39:1a:
59:95:b5:64:79:65:45:e4:ff:4c:ec:22:69:52:67:1f:da:be:
49:36:82:23:1d:04:73:83:15:af:e3:d2:cd:1b:40:3e:c7:50:
f8:d3:12:84:f5:d7:e3:d6:ce:4e:47:5c:c9:9f:bc:db:b3:e7:
dc:ad:29:da:bd:36:1a:44:46:27:48:7b:49:e9:06:f2:db:9b:
72:22:85:1e:f0:c5:84:ad:73:96:36:06:3c:3e:15:9c:ff:f7:
51:9d:df:c0:f1:04:40:24:76:08:b4:ff:b7:3b:75:c8:15:9d:
1f:ce:6d:02:6d:1a:02:94:c8:78:21:39:ce:c4:ba:fd:b1:2d:
0f:40:58:5f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDtCydvzpB2q2WNWRB3kgVOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRlMGYzOWUyY2FhZThlMmNmMTRiY2M0MWIyM2YzYzg2ZTFh
NzIwZjgwHhcNMjYwOTI5MTIwMjA2WhcNMjYwOTMwMTIwMjA2WjAzMTEwLwYDVQQD
EygyNjE0MzhjZjc4NzdmMWQ5ZjVmNmYwOTY2YjA2NzE2NzAzYTExYmYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkrAg07NqSlaYK9fXaLpjcj2mngFl
cGdfxwnI7Hmy+/tzsE7poV8nYfXqgsF4ueIY1CQQYWb+Cjkt55wmA4ROUDK3sKGK
DDW5gKCmfgK3DyBjt91aDDCZ21rLoJHza57nccq73/WQ2K3iBC1v4v+fpxqQBJfS
r7bC71A6u+BMFbXJyoKpbic7nRft+lKYxkUR2mnONCg+7IE7uYq+6qCBi+PhZKxk
DCakqDQn6sv2zvbRXQgJpqx+1K53Fypp917caHZVhbVdxk9VFR+98yq0NNv7+BJ8
La9fAtK8cnY6HVsnrmP8OP+oQxci95/Igbk/+EzGKDa3bRGSjHsj1cnxOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCYUOM94d/HZ9fbwlmsGcWcDoRvyMB8GA1UdIwQY
MBaAFE4POeLKro4s8UvMQbI/PIbhpyD4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVGc4NTRzcXVqaXp4Uzh4QnNqODhodUduSVBnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC9kNWUzY2MtYzFjZC00ZDY4LWJlYzMt
MWIwOGY3ZjUwMTVkLzEvVGc4NTRzcXVqaXp4Uzh4QnNqODhodUduSVBnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNC9kNWUzY2MtYzFjZC00ZDY4LWJlYzMtMWIwOGY3ZjUwMTVk
LzEvVGc4NTRzcXVqaXp4Uzh4QnNqODhodUduSVBnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARMv7AtbP
Y4Amii23VXpcl9X6THrQIoVl+zvrT+RDR7OffIrWaRA3K/g2L2HS5TeXHE/wQPj/
609fC/pWTsJPP/K26JUP4jR0MfBcO87qO0Tl0cSjARmJihBVgX04OPHwqgFsyP/f
FL4LHXrXh9csams7fgsEprEpPtHeXzkaWZW1ZHllReT/TOwiaVJnH9q+STaCIx0E
c4MVr+PSzRtAPsdQ+NMShPXX49bOTkdcyZ+827Pn3K0p2r02GkRGJ0h7SekG8tub
ciKFHvDFhK1zljYGPD4VnP/3UZ3fwPEEQCR2CLT/tzt1yBWdH85tAm0aApTIeCE5
zsS6/bEtD0BYXw==
-----END CERTIFICATE-----
Generated at Tue Sep 29 15:33:07 2026 by rpki-client