Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cc/f67177-78d5-4388-a21a-28263656c6de/1/tIGEVJ4S6ZNL_7dhW8o9DCVoE2A.mft
File: tIGEVJ4S6ZNL_7dhW8o9DCVoE2A.mft (raw, json)
Hash identifier: as1ApBopPSoDTsMESPcIJV+J6+QGJt9WvfXCda88xDI=
Subject key identifier: 18:20:ED:2B:60:73:3B:13:09:76:7A:05:7C:15:DB:5F:5B:01:24:21
Authority key identifier: B4:81:84:54:9E:12:E9:93:4B:FF:B7:61:5B:CA:3D:0C:25:68:13:60
Certificate issuer: /CN=b48184549e12e9934bffb7615bca3d0c25681360
Certificate serial: 01A0DC4E326A0D98FC65AA9558EEEBE596A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tIGEVJ4S6ZNL_7dhW8o9DCVoE2A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/f67177-78d5-4388-a21a-28263656c6de/1/tIGEVJ4S6ZNL_7dhW8o9DCVoE2A.mft
Manifest number: 1A73
Signing time: Sat 26 Sep 2026 06:01:47 +0000
Manifest this update: Sat 26 Sep 2026 06:01:47 +0000
Manifest next update: Sun 27 Sep 2026 06:01:47 +0000
Files and hashes: 1: tIGEVJ4S6ZNL_7dhW8o9DCVoE2A.crl (hash: rRUZIEBrdmTQIraX526evidxEjU9uZ2e2d+5PsdUd1s=)
2: tuDCv4lvmfDzJRQ3OOYakiJXpLk.roa (hash: B9WwSI4TdVDoQmekvK0lWtI32JXbnkCFS/fzwW4JyBM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/f67177-78d5-4388-a21a-28263656c6de/1/tIGEVJ4S6ZNL_7dhW8o9DCVoE2A.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/f67177-78d5-4388-a21a-28263656c6de/1/tIGEVJ4S6ZNL_7dhW8o9DCVoE2A.mft
rsync://rpki.ripe.net/repository/DEFAULT/tIGEVJ4S6ZNL_7dhW8o9DCVoE2A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dc:4e:32:6a:0d:98:fc:65:aa:95:58:ee:eb:e5:96:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b48184549e12e9934bffb7615bca3d0c25681360
Validity
Not Before: Sep 26 06:01:47 2026 GMT
Not After : Sep 27 06:01:47 2026 GMT
Subject: CN=1820ed2b60733b1309767a057c15db5f5b012421
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:aa:fc:f2:56:cf:ac:3b:b4:7e:27:c4:18:54:
f9:3b:3d:9d:8b:2a:62:db:6d:3c:af:0d:bb:fc:d2:
ab:02:1f:d2:8a:ad:4e:9b:37:cd:86:1d:c2:08:98:
64:d4:40:23:79:38:c1:9a:d6:e5:95:f3:2e:18:9d:
1b:bc:90:f5:62:eb:4d:81:2f:d5:57:5d:6a:d1:4a:
7b:72:ee:8a:77:14:15:d0:d5:ab:e1:6b:64:45:ae:
8c:56:75:3c:14:66:99:a5:17:df:85:b1:2e:2a:95:
d2:7f:3f:e5:64:4b:a2:95:1a:90:05:7e:f7:51:85:
a5:67:3d:b5:de:11:a3:b8:72:81:10:73:1b:e3:cb:
54:12:eb:72:d7:8c:52:22:31:b8:c2:98:33:c5:54:
ad:0e:27:a0:e8:8e:c5:86:bb:5c:c2:15:15:0c:3a:
eb:88:3c:9d:18:4b:6c:f5:c5:77:b7:97:94:2b:ca:
3e:8f:0b:df:88:c5:5c:e9:9c:7f:d9:db:02:45:a0:
dd:e7:d6:45:73:02:a2:8f:07:ad:e9:18:ec:44:f0:
50:73:37:9c:42:76:5b:e4:85:c1:5f:7d:cc:13:63:
e6:e7:a0:4b:1d:d6:70:f0:51:14:af:04:d6:65:8b:
58:a5:3b:73:0a:0c:4f:00:86:a8:11:17:1e:45:ca:
73:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:20:ED:2B:60:73:3B:13:09:76:7A:05:7C:15:DB:5F:5B:01:24:21
X509v3 Authority Key Identifier:
keyid:B4:81:84:54:9E:12:E9:93:4B:FF:B7:61:5B:CA:3D:0C:25:68:13:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tIGEVJ4S6ZNL_7dhW8o9DCVoE2A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f67177-78d5-4388-a21a-28263656c6de/1/tIGEVJ4S6ZNL_7dhW8o9DCVoE2A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f67177-78d5-4388-a21a-28263656c6de/1/tIGEVJ4S6ZNL_7dhW8o9DCVoE2A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:e1:c7:9b:ff:43:72:5b:ac:0c:98:8f:be:24:6a:41:c2:9a:
a3:6b:9d:e2:d1:9c:c7:50:04:a1:2f:3d:de:72:7d:95:0c:33:
da:ca:c8:27:9f:d2:1a:9d:08:85:36:a3:92:86:24:57:aa:c1:
6e:b6:b6:ce:46:ea:20:25:dc:5a:57:bb:b4:43:71:43:9c:a7:
e9:dd:64:35:c2:90:01:ff:d6:45:25:b0:23:73:76:aa:cf:fd:
a6:62:45:48:56:6b:77:08:c7:60:28:0a:e6:c5:78:76:83:7e:
74:3d:29:19:eb:65:8b:de:35:8f:c8:d8:53:c0:3f:f5:09:2b:
c2:d9:99:d1:e6:1b:6a:b9:ae:9c:40:14:84:c8:a1:b3:a5:96:
d0:82:5b:49:d2:8e:58:86:2a:8a:ea:80:f7:1b:38:bc:56:05:
db:18:e5:9f:28:59:27:ca:d5:2a:ad:9f:01:0e:24:32:11:9b:
9d:ca:7f:38:74:fa:f4:ab:6b:5e:b8:cc:57:24:53:35:cd:b1:
80:6a:5d:67:50:fa:a3:b1:71:19:57:54:3d:9c:7c:84:33:31:
16:2e:59:bd:83:66:26:bc:6f:fa:65:a6:5c:f3:62:37:8f:0a:
2c:68:7c:99:76:59:56:6c:6c:e7:a2:de:48:59:3c:56:29:83:
7c:f9:e6:f8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDcTjJqDZj8ZaqVWO7r5ZapMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0ODE4NDU0OWUxMmU5OTM0YmZmYjc2MTViY2EzZDBjMjU2
ODEzNjAwHhcNMjYwOTI2MDYwMTQ3WhcNMjYwOTI3MDYwMTQ3WjAzMTEwLwYDVQQD
EygxODIwZWQyYjYwNzMzYjEzMDk3NjdhMDU3YzE1ZGI1ZjViMDEyNDIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA76r88lbPrDu0fifEGFT5Oz2diypi
2208rw27/NKrAh/Siq1OmzfNhh3CCJhk1EAjeTjBmtbllfMuGJ0bvJD1YutNgS/V
V11q0Up7cu6KdxQV0NWr4WtkRa6MVnU8FGaZpRffhbEuKpXSfz/lZEuilRqQBX73
UYWlZz213hGjuHKBEHMb48tUEuty14xSIjG4wpgzxVStDieg6I7FhrtcwhUVDDrr
iDydGEts9cV3t5eUK8o+jwvfiMVc6Zx/2dsCRaDd59ZFcwKijwet6RjsRPBQczec
QnZb5IXBX33ME2Pm56BLHdZw8FEUrwTWZYtYpTtzCgxPAIaoERceRcpzJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBgg7StgczsTCXZ6BXwV219bASQhMB8GA1UdIwQY
MBaAFLSBhFSeEumTS/+3YVvKPQwlaBNgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdElHRVZKNFM2Wk5MXzdkaFc4bzlEQ1ZvRTJBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy9mNjcxNzctNzhkNS00Mzg4LWEyMWEt
MjgyNjM2NTZjNmRlLzEvdElHRVZKNFM2Wk5MXzdkaFc4bzlEQ1ZvRTJBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy9mNjcxNzctNzhkNS00Mzg4LWEyMWEtMjgyNjM2NTZjNmRl
LzEvdElHRVZKNFM2Wk5MXzdkaFc4bzlEQ1ZvRTJBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAveHHm/9D
clusDJiPviRqQcKao2ud4tGcx1AEoS893nJ9lQwz2srIJ5/SGp0IhTajkoYkV6rB
bra2zkbqICXcWle7tENxQ5yn6d1kNcKQAf/WRSWwI3N2qs/9pmJFSFZrdwjHYCgK
5sV4doN+dD0pGetli941j8jYU8A/9QkrwtmZ0eYbarmunEAUhMihs6WW0IJbSdKO
WIYqiuqA9xs4vFYF2xjlnyhZJ8rVKq2fAQ4kMhGbncp/OHT69KtrXrjMVyRTNc2x
gGpdZ1D6o7FxGVdUPZx8hDMxFi5ZvYNmJrxv+mWmXPNiN48KLGh8mXZZVmxs56Le
SFk8VimDfPnm+A==
-----END CERTIFICATE-----
Generated at Sat Sep 26 10:48:16 2026 by rpki-client