Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/eb/dbc472-6e0a-411c-af8f-0888eb42744c/1/TGr5hrJB2dJ-xySt-r8G1dIxeT8.mft
File: TGr5hrJB2dJ-xySt-r8G1dIxeT8.mft (raw, json)
Hash identifier: okXpmRjhw5VRM887kMXNaRdgSJX2ayH+pO+8tADra30=
Subject key identifier: 16:CD:A4:00:EA:60:D2:B8:06:03:A5:DD:A5:A2:65:26:5F:FD:78:EB
Authority key identifier: 4C:6A:F9:86:B2:41:D9:D2:7E:C7:24:AD:FA:BF:06:D5:D2:31:79:3F
Certificate issuer: /CN=4c6af986b241d9d27ec724adfabf06d5d231793f
Certificate serial: 01A11003E61B71A793C34500409408265B10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TGr5hrJB2dJ-xySt-r8G1dIxeT8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/dbc472-6e0a-411c-af8f-0888eb42744c/1/TGr5hrJB2dJ-xySt-r8G1dIxeT8.mft
Manifest number: 1740
Signing time: Tue 06 Oct 2026 07:00:53 +0000
Manifest this update: Tue 06 Oct 2026 07:00:53 +0000
Manifest next update: Wed 07 Oct 2026 07:00:53 +0000
Files and hashes: 1: TGr5hrJB2dJ-xySt-r8G1dIxeT8.crl (hash: DJhtY/Mw/v7m68i18dUs0PbKExDAO2Pba/kz3BTA728=)
2: uLeN3kY2ZRDo-2-B-T0hlmjh-nU.roa (hash: eLP3MmcrJSGHUuA9jj4PGJnAA+F8952d8mOEbR6//AA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/dbc472-6e0a-411c-af8f-0888eb42744c/1/TGr5hrJB2dJ-xySt-r8G1dIxeT8.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/dbc472-6e0a-411c-af8f-0888eb42744c/1/TGr5hrJB2dJ-xySt-r8G1dIxeT8.mft
rsync://rpki.ripe.net/repository/DEFAULT/TGr5hrJB2dJ-xySt-r8G1dIxeT8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 07:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:10:03:e6:1b:71:a7:93:c3:45:00:40:94:08:26:5b:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c6af986b241d9d27ec724adfabf06d5d231793f
Validity
Not Before: Oct 6 07:00:53 2026 GMT
Not After : Oct 7 07:00:53 2026 GMT
Subject: CN=16cda400ea60d2b80603a5dda5a265265ffd78eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:60:5f:91:5f:42:09:25:0a:1e:c5:28:b1:29:
08:54:6c:f4:5a:53:f2:74:3c:9c:b4:04:ae:08:5e:
3f:62:b2:3a:33:f5:e4:eb:bc:a7:00:c7:0c:d5:8f:
5d:6a:9d:1d:84:a5:ac:6b:5d:e0:8d:af:bb:97:03:
6c:74:3b:69:fb:fa:76:18:ef:7c:67:dc:58:35:6e:
50:89:20:6b:04:d0:3a:a2:be:4f:25:47:72:74:49:
4b:4f:a7:77:d7:8a:2c:82:12:bd:ff:5a:36:e4:cb:
d0:6b:c3:01:34:27:6a:3e:09:a0:ab:f9:6b:ff:4b:
56:cd:0e:ad:4c:79:e1:13:de:6a:d3:4c:be:cd:3a:
98:af:52:37:fb:28:b2:9f:2a:d0:8a:f4:4a:88:34:
9c:94:fc:c4:06:02:53:7d:0a:d3:4d:25:f2:63:01:
10:49:f2:ab:60:2a:5c:d3:4f:10:c3:5b:c4:a4:9f:
8c:17:d3:80:66:f1:af:8e:1a:f6:3c:a6:aa:86:48:
9b:3f:e1:2c:8a:17:71:0c:ee:9a:82:96:32:bd:2e:
9f:d1:aa:06:1f:0e:06:92:93:1b:b7:fa:8d:76:5f:
12:35:7b:58:2f:84:c0:70:f1:69:a5:ba:10:ac:d9:
df:d3:13:ba:92:b8:c1:e0:f1:6e:6c:1f:b3:ee:30:
72:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:CD:A4:00:EA:60:D2:B8:06:03:A5:DD:A5:A2:65:26:5F:FD:78:EB
X509v3 Authority Key Identifier:
keyid:4C:6A:F9:86:B2:41:D9:D2:7E:C7:24:AD:FA:BF:06:D5:D2:31:79:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TGr5hrJB2dJ-xySt-r8G1dIxeT8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/dbc472-6e0a-411c-af8f-0888eb42744c/1/TGr5hrJB2dJ-xySt-r8G1dIxeT8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/dbc472-6e0a-411c-af8f-0888eb42744c/1/TGr5hrJB2dJ-xySt-r8G1dIxeT8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:bd:01:11:3e:f0:ff:60:fa:6c:8e:0b:7c:0c:ce:88:44:6b:
81:d8:f3:29:28:11:d6:aa:49:bb:67:78:a6:27:1d:77:76:2e:
3d:3f:2c:97:c6:9f:3d:d1:3c:9f:f6:b7:16:08:59:5f:a8:62:
f2:d4:20:07:fe:ad:c7:4e:79:5a:17:3d:49:b9:b1:b1:23:51:
37:17:6d:c0:cf:51:5b:0f:6a:9e:df:56:ee:5f:66:d7:3a:ae:
f3:f0:28:88:df:2e:b7:dc:8b:d4:5a:77:11:08:be:b0:4a:61:
81:03:79:fe:98:03:49:d1:39:9e:7d:f7:9a:db:cf:71:b5:a0:
cb:cc:a3:94:ab:8f:e6:dc:51:ca:74:52:92:b9:6a:6a:ab:97:
19:57:d6:b2:fa:17:30:aa:7c:09:61:8e:a0:95:b9:b1:d3:a5:
21:d9:99:6f:b3:cb:63:08:89:e0:47:15:91:3d:09:46:8d:ab:
c8:e6:6c:2b:2c:05:9a:7e:d6:ea:85:0e:b7:37:d4:a0:34:12:
94:d7:a0:bf:87:c3:e9:06:3c:e2:cd:31:72:f5:20:46:20:53:
f4:a4:26:02:17:ef:53:8d:79:5c:9a:da:b0:0a:26:48:0e:d1:
98:46:43:dd:ae:db:83:36:19:08:3a:c2:3f:50:6d:9c:2a:1b:
3b:9e:46:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 14:41:23 2026 by rpki-client