Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/d95b2c-1e02-4e4e-8438-bbcae0df1f2f/1/tgtXTwPZiBVfRLossHvH37RXzw8.mft
File: tgtXTwPZiBVfRLossHvH37RXzw8.mft (raw, json)
Hash identifier: czQACzWHYlGVIuuIWJ6rW+cIxXxI7haGCusYdzOFnUA=
Subject key identifier: 77:06:2D:59:6B:F2:DA:FC:56:76:10:48:7A:3F:8C:CC:E8:9D:A8:64
Authority key identifier: B6:0B:57:4F:03:D9:88:15:5F:44:BA:2C:B0:7B:C7:DF:B4:57:CF:0F
Certificate issuer: /CN=b60b574f03d988155f44ba2cb07bc7dfb457cf0f
Certificate serial: 019D26961BA27F0AF87A8AD6E9969A246BC1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tgtXTwPZiBVfRLossHvH37RXzw8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/d95b2c-1e02-4e4e-8438-bbcae0df1f2f/1/tgtXTwPZiBVfRLossHvH37RXzw8.mft
Manifest number: 1818
Signing time: Wed 25 Mar 2026 20:01:04 +0000
Manifest this update: Wed 25 Mar 2026 20:01:04 +0000
Manifest next update: Thu 26 Mar 2026 20:01:04 +0000
Files and hashes: 1: EPm1u1dJgYoTbNI80mTBhYkEcqs.roa (hash: KsEbKma2UWb8xEPEBQMHTxAAbTdu2Rgtnk9hAeBq/48=)
2: tgtXTwPZiBVfRLossHvH37RXzw8.crl (hash: /741Yz0eIjUZFL833diLmV1b3NYUBmEqkWItaNpya7Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/d95b2c-1e02-4e4e-8438-bbcae0df1f2f/1/tgtXTwPZiBVfRLossHvH37RXzw8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/d95b2c-1e02-4e4e-8438-bbcae0df1f2f/1/tgtXTwPZiBVfRLossHvH37RXzw8.mft
rsync://rpki.ripe.net/repository/DEFAULT/tgtXTwPZiBVfRLossHvH37RXzw8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 20:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:96:1b:a2:7f:0a:f8:7a:8a:d6:e9:96:9a:24:6b:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b60b574f03d988155f44ba2cb07bc7dfb457cf0f
Validity
Not Before: Mar 25 20:01:04 2026 GMT
Not After : Mar 26 20:01:04 2026 GMT
Subject: CN=77062d596bf2dafc567610487a3f8ccce89da864
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:e0:94:5a:5a:e7:32:2f:d2:d7:dc:c9:cf:a4:
a7:d3:76:ea:21:fa:37:00:97:ce:1e:40:43:10:cc:
d7:53:b1:d9:ba:52:c0:23:de:9a:0a:e0:15:2d:0c:
63:26:24:a1:f4:0d:8f:8e:55:dc:55:b0:8f:43:3f:
ab:95:96:30:af:70:d2:00:be:54:2c:c1:f5:60:e9:
85:07:b6:15:cb:33:6b:60:1f:a9:90:e7:17:1d:a2:
b4:75:bc:ae:61:0e:c0:10:b3:82:70:59:e4:1d:44:
8b:84:0b:ae:9b:19:00:ba:35:65:c5:99:4e:7b:0d:
4d:bd:bc:44:5d:c7:94:26:bf:56:df:79:7c:ef:a5:
af:b7:a5:21:ef:c5:00:93:0e:63:b7:ba:39:2b:55:
15:5c:1a:0e:0e:5a:3d:ae:83:7b:78:9b:11:9e:17:
a1:6c:b5:10:d8:2b:ec:6d:d5:6d:cd:ab:ac:a0:2e:
6d:dd:57:fc:43:c3:f0:f7:00:ed:c1:34:24:4d:1c:
21:df:4a:7b:fd:7d:59:d9:75:8a:05:ed:19:d6:cc:
57:47:f6:3e:16:26:90:a9:8a:5d:db:ee:21:02:10:
96:42:f1:29:f7:78:02:ed:ce:c2:e5:42:69:74:b0:
f7:6a:94:c7:b2:43:fa:2a:fc:06:f0:79:29:44:64:
49:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:06:2D:59:6B:F2:DA:FC:56:76:10:48:7A:3F:8C:CC:E8:9D:A8:64
X509v3 Authority Key Identifier:
keyid:B6:0B:57:4F:03:D9:88:15:5F:44:BA:2C:B0:7B:C7:DF:B4:57:CF:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tgtXTwPZiBVfRLossHvH37RXzw8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/d95b2c-1e02-4e4e-8438-bbcae0df1f2f/1/tgtXTwPZiBVfRLossHvH37RXzw8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/d95b2c-1e02-4e4e-8438-bbcae0df1f2f/1/tgtXTwPZiBVfRLossHvH37RXzw8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:05:4d:28:95:7d:96:48:0a:41:99:a3:b7:c8:99:9b:81:b7:
fe:2f:a9:81:99:c7:2d:50:f3:8a:48:5e:3c:39:94:ae:92:0c:
b7:31:4d:1a:30:96:a1:f9:1e:1a:69:78:be:68:b3:93:7f:be:
e4:08:24:2b:4f:e9:22:d0:f2:78:6a:76:d0:9a:a6:3b:bb:52:
8b:28:18:30:fa:8c:af:dd:82:68:f1:e3:ed:44:05:27:56:28:
ff:75:1c:ef:c1:ea:ac:be:b2:11:3b:0f:43:dc:d4:66:e3:bd:
77:a0:91:de:af:20:9e:dc:34:cb:7e:10:bc:f7:71:04:ba:82:
da:c5:8d:91:46:c7:5d:44:6a:ac:d7:8a:01:29:e1:0e:32:37:
45:44:51:97:1e:08:43:1d:81:79:8a:d5:ba:84:76:f2:26:74:
38:e7:8a:d1:81:ed:ee:b9:9a:41:66:4a:73:b0:01:55:9a:bb:
d0:20:88:a1:a3:d5:3d:47:63:00:89:3d:1f:27:bd:7d:e8:35:
a5:c7:32:6b:10:5f:b5:d3:9f:f5:94:ab:d3:bf:59:85:64:0c:
91:81:43:bd:24:02:ee:e9:7e:71:86:9c:bb:60:59:87:2d:71:
d2:67:8d:52:52:14:8e:ca:46:87:35:de:7b:b6:ba:98:29:8d:
b0:d9:5a:12
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mlhuifwr4eorW6ZaaJGvBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI2MGI1NzRmMDNkOTg4MTU1ZjQ0YmEyY2IwN2JjN2RmYjQ1
N2NmMGYwHhcNMjYwMzI1MjAwMTA0WhcNMjYwMzI2MjAwMTA0WjAzMTEwLwYDVQQD
Eyg3NzA2MmQ1OTZiZjJkYWZjNTY3NjEwNDg3YTNmOGNjY2U4OWRhODY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr+CUWlrnMi/S19zJz6Sn03bqIfo3
AJfOHkBDEMzXU7HZulLAI96aCuAVLQxjJiSh9A2PjlXcVbCPQz+rlZYwr3DSAL5U
LMH1YOmFB7YVyzNrYB+pkOcXHaK0dbyuYQ7AELOCcFnkHUSLhAuumxkAujVlxZlO
ew1NvbxEXceUJr9W33l876Wvt6Uh78UAkw5jt7o5K1UVXBoODlo9roN7eJsRnheh
bLUQ2CvsbdVtzausoC5t3Vf8Q8Pw9wDtwTQkTRwh30p7/X1Z2XWKBe0Z1sxXR/Y+
FiaQqYpd2+4hAhCWQvEp93gC7c7C5UJpdLD3apTHskP6KvwG8HkpRGRJWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHcGLVlr8tr8VnYQSHo/jMzonahkMB8GA1UdIwQY
MBaAFLYLV08D2YgVX0S6LLB7x9+0V88PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdGd0WFR3UFppQlZmUkxvc3NIdkgzN1JYenc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC9kOTViMmMtMWUwMi00ZTRlLTg0Mzgt
YmJjYWUwZGYxZjJmLzEvdGd0WFR3UFppQlZmUkxvc3NIdkgzN1JYenc4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC9kOTViMmMtMWUwMi00ZTRlLTg0MzgtYmJjYWUwZGYxZjJm
LzEvdGd0WFR3UFppQlZmUkxvc3NIdkgzN1JYenc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdAVNKJV9
lkgKQZmjt8iZm4G3/i+pgZnHLVDzikhePDmUrpIMtzFNGjCWofkeGml4vmizk3++
5AgkK0/pItDyeGp20JqmO7tSiygYMPqMr92CaPHj7UQFJ1Yo/3Uc78HqrL6yETsP
Q9zUZuO9d6CR3q8gntw0y34QvPdxBLqC2sWNkUbHXURqrNeKASnhDjI3RURRlx4I
Qx2BeYrVuoR28iZ0OOeK0YHt7rmaQWZKc7ABVZq70CCIoaPVPUdjAIk9Hye9feg1
pccyaxBftdOf9ZSr079ZhWQMkYFDvSQC7ul+cYacu2BZhy1x0meNUlIUjspGhzXe
e7a6mCmNsNlaEg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 06:40:22 2026 by rpki-client