Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e2/a98fc7-7935-4eae-962a-461ab0ecee01/1/TXCvGpmIbJEB0TX1S9K97zWLJm4.mft
File: TXCvGpmIbJEB0TX1S9K97zWLJm4.mft (raw, json)
Hash identifier: 22sLb0WQn8b3/WZDRTb2b7H/Op2Zk3cJ7glmgPtjHQo=
Subject key identifier: DA:03:E3:89:29:19:C5:24:68:A0:1D:A2:4B:25:E1:04:A4:60:D2:79
Authority key identifier: 4D:70:AF:1A:99:88:6C:91:01:D1:35:F5:4B:D2:BD:EF:35:8B:26:6E
Certificate issuer: /CN=4d70af1a99886c9101d135f54bd2bdef358b266e
Certificate serial: 01A1DCB92E20AF0C4E5F6551D2C8C9D46E5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TXCvGpmIbJEB0TX1S9K97zWLJm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/a98fc7-7935-4eae-962a-461ab0ecee01/1/TXCvGpmIbJEB0TX1S9K97zWLJm4.mft
Manifest number: 11DC
Signing time: Sun 15 Nov 2026 01:01:25 +0000
Manifest this update: Sun 15 Nov 2026 01:01:25 +0000
Manifest next update: Mon 16 Nov 2026 01:01:25 +0000
Files and hashes: 1: 0tktadOdx4n8mac4w9y4uxxnQb4.roa (hash: n46RKOzZ9/eSRXSwMZil9zlLwS3ZgBVtTMxO4eNCf08=)
2: AzQxJhJ4Z1TEqxs8ToOa3faLKx8.roa (hash: aCSm8m0t4y+fvwbcBrYNhHamTehxOv4Ukp4HETVoDPE=)
3: IZQtORr-3U05VM82NLGSac5kUKo.roa (hash: vKvrHvX6TuHXpl6ZvCaEsWmF+MUfHlyXbUCXrMpEZ9U=)
4: TXCvGpmIbJEB0TX1S9K97zWLJm4.crl (hash: ymw61HXGTXAfUE0UtEz6329xXaeWpF+kglkVyxn+s7o=)
5: rd1TYdEXPHhLUYvq912Q58Dh15E.roa (hash: ged8RYg6t00YYbjATYOf0qeEgk1jUhkA3s1XP4KCL6s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/a98fc7-7935-4eae-962a-461ab0ecee01/1/TXCvGpmIbJEB0TX1S9K97zWLJm4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/a98fc7-7935-4eae-962a-461ab0ecee01/1/TXCvGpmIbJEB0TX1S9K97zWLJm4.mft
rsync://rpki.ripe.net/repository/DEFAULT/TXCvGpmIbJEB0TX1S9K97zWLJm4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 01:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dc:b9:2e:20:af:0c:4e:5f:65:51:d2:c8:c9:d4:6e:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d70af1a99886c9101d135f54bd2bdef358b266e
Validity
Not Before: Nov 15 01:01:25 2026 GMT
Not After : Nov 16 01:01:25 2026 GMT
Subject: CN=da03e3892919c52468a01da24b25e104a460d279
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:61:ff:69:9e:49:b3:f0:b7:a4:b1:ae:b3:18:
d8:97:45:11:33:cd:83:e6:ea:b0:6b:e0:3e:21:46:
90:98:1e:11:f4:5e:08:e5:26:c8:d8:ee:a8:8d:25:
01:d9:2e:72:72:db:2b:70:63:ec:95:71:9e:25:15:
c3:e0:29:a5:15:08:49:d8:ff:db:97:cc:21:33:ab:
69:72:f9:da:47:97:07:37:5f:8d:6f:f8:60:fe:fc:
e4:ca:65:84:b9:54:33:b6:a7:e7:a1:5c:b4:58:6c:
fc:06:84:3a:f9:e3:a6:50:83:00:d8:1b:7d:35:72:
5d:ea:2e:97:fb:fd:13:1f:56:60:6c:fc:29:ce:ee:
73:04:60:3c:8d:cd:c6:ad:8b:52:a5:fe:24:76:2e:
e5:b1:6e:ff:96:26:a0:12:bb:67:be:f1:b9:7d:55:
38:67:99:f0:27:27:9e:82:90:fa:d9:af:38:21:34:
1b:95:e4:a6:64:ec:0a:fb:ae:a7:6b:49:28:b3:97:
33:3e:35:4a:71:c3:1c:e7:16:9e:d9:95:9e:24:09:
d3:52:65:53:37:72:a0:27:ba:35:34:f2:50:5d:91:
aa:e2:9b:25:0a:79:81:47:fc:14:7c:dd:74:ee:3d:
7d:9f:0f:8e:d0:38:45:32:8c:b7:af:68:a0:d2:5d:
d4:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:03:E3:89:29:19:C5:24:68:A0:1D:A2:4B:25:E1:04:A4:60:D2:79
X509v3 Authority Key Identifier:
keyid:4D:70:AF:1A:99:88:6C:91:01:D1:35:F5:4B:D2:BD:EF:35:8B:26:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TXCvGpmIbJEB0TX1S9K97zWLJm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a98fc7-7935-4eae-962a-461ab0ecee01/1/TXCvGpmIbJEB0TX1S9K97zWLJm4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a98fc7-7935-4eae-962a-461ab0ecee01/1/TXCvGpmIbJEB0TX1S9K97zWLJm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:20:cc:15:d1:b3:6f:15:0c:40:53:4a:cc:fa:f3:e7:66:9e:
a9:9d:cf:3e:1d:6a:21:ed:34:57:49:21:8a:d9:40:09:78:0e:
5a:4f:28:c8:dd:a4:66:27:70:fd:c1:20:c6:23:37:44:cc:50:
73:75:f6:bf:b2:de:6c:55:cb:ef:57:29:b1:6c:5b:16:81:89:
e5:f5:e6:8f:14:a3:a0:c5:14:0c:4f:35:0d:b5:a9:4f:28:8c:
24:61:63:02:73:88:69:91:42:9f:3e:59:84:8f:17:7e:30:59:
4d:31:8b:2e:79:fe:67:02:aa:4e:2d:78:ec:7e:19:00:ff:5d:
4b:c5:9b:f3:14:7c:a5:6e:c9:e1:ab:b5:6b:0b:3d:c6:97:5b:
99:41:8d:8b:39:18:d1:de:1a:61:f7:df:4c:5a:49:ac:69:c4:
d7:49:cc:17:c9:a4:13:c4:37:56:a3:e7:be:dc:ca:08:5b:75:
bb:d2:c0:76:ac:84:22:89:bc:83:05:d9:78:05:cc:ea:32:58:
14:4c:00:8c:dd:b5:60:7d:c3:b0:7c:aa:c7:e8:ce:de:68:e4:
96:35:ba:41:b6:d8:70:41:1f:94:c5:7e:af:c9:1d:9c:f3:fd:
1d:12:15:c3:c2:51:1e:c4:4a:9a:1f:8e:81:9d:80:af:a5:53:
12:f4:e1:98
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHcuS4grwxOX2VR0sjJ1G5aMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRkNzBhZjFhOTk4ODZjOTEwMWQxMzVmNTRiZDJiZGVmMzU4
YjI2NmUwHhcNMjYxMTE1MDEwMTI1WhcNMjYxMTE2MDEwMTI1WjAzMTEwLwYDVQQD
EyhkYTAzZTM4OTI5MTljNTI0NjhhMDFkYTI0YjI1ZTEwNGE0NjBkMjc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAumH/aZ5Js/C3pLGusxjYl0URM82D
5uqwa+A+IUaQmB4R9F4I5SbI2O6ojSUB2S5yctsrcGPslXGeJRXD4CmlFQhJ2P/b
l8whM6tpcvnaR5cHN1+Nb/hg/vzkymWEuVQztqfnoVy0WGz8BoQ6+eOmUIMA2Bt9
NXJd6i6X+/0TH1ZgbPwpzu5zBGA8jc3GrYtSpf4kdi7lsW7/liagErtnvvG5fVU4
Z5nwJyeegpD62a84ITQbleSmZOwK+66na0kos5czPjVKccMc5xae2ZWeJAnTUmVT
N3KgJ7o1NPJQXZGq4pslCnmBR/wUfN107j19nw+O0DhFMoy3r2ig0l3UqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNoD44kpGcUkaKAdoksl4QSkYNJ5MB8GA1UdIwQY
MBaAFE1wrxqZiGyRAdE19UvSve81iyZuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVFhDdkdwbUliSkVCMFRYMVM5Szk3eldMSm00LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi9hOThmYzctNzkzNS00ZWFlLTk2MmEt
NDYxYWIwZWNlZTAxLzEvVFhDdkdwbUliSkVCMFRYMVM5Szk3eldMSm00Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi9hOThmYzctNzkzNS00ZWFlLTk2MmEtNDYxYWIwZWNlZTAx
LzEvVFhDdkdwbUliSkVCMFRYMVM5Szk3eldMSm00LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOiDMFdGz
bxUMQFNKzPrz52aeqZ3PPh1qIe00V0khitlACXgOWk8oyN2kZidw/cEgxiM3RMxQ
c3X2v7LebFXL71cpsWxbFoGJ5fXmjxSjoMUUDE81DbWpTyiMJGFjAnOIaZFCnz5Z
hI8XfjBZTTGLLnn+ZwKqTi147H4ZAP9dS8Wb8xR8pW7J4au1aws9xpdbmUGNizkY
0d4aYfffTFpJrGnE10nMF8mkE8Q3VqPnvtzKCFt1u9LAdqyEIom8gwXZeAXM6jJY
FEwAjN21YH3DsHyqx+jO3mjkljW6QbbYcEEflMV+r8kdnPP9HRIVw8JRHsRKmh+O
gZ2Ar6VTEvThmA==
-----END CERTIFICATE-----
Generated at Sun Nov 15 10:38:33 2026 by rpki-client