Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/39/2b38b3-12f1-4242-adae-b7d1cac51e0c/1/TJETJOhpvEyl7IutDT3f9oVEGXk.mft
File: TJETJOhpvEyl7IutDT3f9oVEGXk.mft (raw, json)
Hash identifier: 1cx176ZFOY5dtQMYjNl8gWVwZ07NgI1jHIaOc6RCW1s=
Subject key identifier: 3D:40:63:59:B6:61:56:C8:AA:B8:1E:00:F4:E1:61:B6:A9:09:1E:26
Authority key identifier: 4C:91:13:24:E8:69:BC:4C:A5:EC:8B:AD:0D:3D:DF:F6:85:44:19:79
Certificate issuer: /CN=4c911324e869bc4ca5ec8bad0d3ddff685441979
Certificate serial: 01A15288FAAA1C12030B888DE327C90DE71B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TJETJOhpvEyl7IutDT3f9oVEGXk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/2b38b3-12f1-4242-adae-b7d1cac51e0c/1/TJETJOhpvEyl7IutDT3f9oVEGXk.mft
Manifest number: 1AB6
Signing time: Mon 19 Oct 2026 05:01:11 +0000
Manifest this update: Mon 19 Oct 2026 05:01:11 +0000
Manifest next update: Tue 20 Oct 2026 05:01:11 +0000
Files and hashes: 1: DfRI4dovSnMSIcVz_GFD0L7vBIw.roa (hash: kG8QsSLcBHIkntfvUqxfKD4RZMhBctOildhkIA33eIw=)
2: TJETJOhpvEyl7IutDT3f9oVEGXk.crl (hash: kNVvmitbOt52PCrvgWgHqkfSYYkO3F757CAf2Z8NmG0=)
3: oE6QS3Q6uaxGz3Cm7YOOUEm6M9s.roa (hash: gHUoKUVYSCToS8vVN5V7q87OQVYzxsOvUwmEfqESOxI=)
4: qSNYJ-9hvnj2oMFvdiXLbxjhOwk.roa (hash: bfBTAvujo01mv5S6EOQahz4Gss8vRe5ZhsQN9X0Csy4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/2b38b3-12f1-4242-adae-b7d1cac51e0c/1/TJETJOhpvEyl7IutDT3f9oVEGXk.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/2b38b3-12f1-4242-adae-b7d1cac51e0c/1/TJETJOhpvEyl7IutDT3f9oVEGXk.mft
rsync://rpki.ripe.net/repository/DEFAULT/TJETJOhpvEyl7IutDT3f9oVEGXk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 02:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:52:88:fa:aa:1c:12:03:0b:88:8d:e3:27:c9:0d:e7:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c911324e869bc4ca5ec8bad0d3ddff685441979
Validity
Not Before: Oct 19 05:01:11 2026 GMT
Not After : Oct 20 05:01:11 2026 GMT
Subject: CN=3d406359b66156c8aab81e00f4e161b6a9091e26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:6a:ec:9e:9b:51:5f:bd:ff:1c:b1:90:e1:0d:
ff:62:36:d8:99:55:5f:94:60:ec:53:d0:38:13:52:
49:00:83:ac:22:79:d9:1f:f5:1d:61:8c:d7:11:f1:
84:42:69:f4:d8:b5:9f:79:d8:c4:45:0b:99:11:19:
b5:36:37:c3:9e:d5:eb:6e:6a:03:b1:c5:4b:89:4a:
de:c7:42:c0:f1:75:3f:9c:08:9f:e9:b3:36:6c:c3:
93:1b:7e:a0:67:68:fa:44:df:8f:35:10:be:7b:f5:
33:db:93:08:3e:10:d9:50:0d:c5:52:28:7c:b2:fb:
5d:d5:a7:a3:d4:7b:61:0d:f0:a1:40:bf:52:63:eb:
2c:3c:c0:57:8d:c2:51:69:dd:ca:e6:5b:62:a7:47:
d6:58:a2:d8:d1:78:77:f2:3e:79:a6:94:6c:be:cc:
75:4d:0a:90:0f:58:c7:5c:5e:73:2c:23:22:ff:70:
7b:8b:5c:db:2a:ab:1b:9f:b9:77:ca:b7:a0:e8:18:
07:13:f2:49:f3:49:5f:7c:14:80:c8:4c:dc:40:e2:
45:02:ef:3c:f7:c0:87:ce:fc:15:d9:93:6b:49:42:
94:4e:84:85:db:a8:8d:af:4e:a4:3a:cc:b8:b4:56:
fb:eb:f0:5a:c6:45:35:ac:9f:6a:44:dd:57:c7:28:
2b:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:40:63:59:B6:61:56:C8:AA:B8:1E:00:F4:E1:61:B6:A9:09:1E:26
X509v3 Authority Key Identifier:
keyid:4C:91:13:24:E8:69:BC:4C:A5:EC:8B:AD:0D:3D:DF:F6:85:44:19:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TJETJOhpvEyl7IutDT3f9oVEGXk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/2b38b3-12f1-4242-adae-b7d1cac51e0c/1/TJETJOhpvEyl7IutDT3f9oVEGXk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/2b38b3-12f1-4242-adae-b7d1cac51e0c/1/TJETJOhpvEyl7IutDT3f9oVEGXk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:70:09:eb:be:de:4f:8d:79:80:ec:15:55:8c:b0:a3:3a:43:
fe:a3:02:05:de:69:09:1a:04:b4:ec:48:4b:7a:d2:5b:b8:8c:
ed:87:34:51:1d:73:7b:d0:bf:18:bf:38:eb:1f:cf:24:aa:55:
91:07:f4:28:b2:2c:a0:4c:2d:c6:ad:55:bf:3a:b9:00:f9:da:
45:60:ae:e1:ed:fe:7e:25:a8:de:c6:0a:03:69:ba:0c:94:b4:
22:a9:94:35:60:19:9b:07:2a:fb:69:de:d0:38:37:eb:c1:8a:
51:8a:67:a7:0e:83:3f:7c:28:c1:1f:f6:99:a0:1c:9b:f8:ec:
bb:17:35:db:d5:f0:1b:a6:dc:ee:d0:9f:f7:fe:ac:b8:fe:26:
f8:e2:5c:03:3c:b1:88:76:62:06:35:cb:c8:68:77:f2:c0:af:
86:df:9e:6a:8b:ab:15:90:7c:d3:1c:6b:1c:b1:01:95:bc:54:
c7:8c:2b:16:2e:5d:c1:6e:6d:57:2f:a6:6c:ea:7b:12:34:5c:
0c:f5:a2:35:e3:bd:c5:32:8c:48:b2:02:90:92:b3:95:05:05:
ad:2e:2d:dd:aa:ad:c1:8d:ba:f3:23:55:4d:f4:3b:67:c6:17:
44:90:2d:63:4e:67:10:9a:8e:f7:2e:c7:eb:d2:cb:95:40:6c:
cc:69:7d:ad
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFSiPqqHBIDC4iN4yfJDecbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjOTExMzI0ZTg2OWJjNGNhNWVjOGJhZDBkM2RkZmY2ODU0
NDE5NzkwHhcNMjYxMDE5MDUwMTExWhcNMjYxMDIwMDUwMTExWjAzMTEwLwYDVQQD
EygzZDQwNjM1OWI2NjE1NmM4YWFiODFlMDBmNGUxNjFiNmE5MDkxZTI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsWrsnptRX73/HLGQ4Q3/YjbYmVVf
lGDsU9A4E1JJAIOsInnZH/UdYYzXEfGEQmn02LWfedjERQuZERm1NjfDntXrbmoD
scVLiUrex0LA8XU/nAif6bM2bMOTG36gZ2j6RN+PNRC+e/Uz25MIPhDZUA3FUih8
svtd1aej1HthDfChQL9SY+ssPMBXjcJRad3K5ltip0fWWKLY0Xh38j55ppRsvsx1
TQqQD1jHXF5zLCMi/3B7i1zbKqsbn7l3yreg6BgHE/JJ80lffBSAyEzcQOJFAu88
98CHzvwV2ZNrSUKUToSF26iNr06kOsy4tFb76/BaxkU1rJ9qRN1XxygrDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD1AY1m2YVbIqrgeAPThYbapCR4mMB8GA1UdIwQY
MBaAFEyREyToabxMpeyLrQ093/aFRBl5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVEpFVEpPaHB2RXlsN0l1dERUM2Y5b1ZFR1hrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS8yYjM4YjMtMTJmMS00MjQyLWFkYWUt
YjdkMWNhYzUxZTBjLzEvVEpFVEpPaHB2RXlsN0l1dERUM2Y5b1ZFR1hrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOS8yYjM4YjMtMTJmMS00MjQyLWFkYWUtYjdkMWNhYzUxZTBj
LzEvVEpFVEpPaHB2RXlsN0l1dERUM2Y5b1ZFR1hrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGXAJ677e
T415gOwVVYywozpD/qMCBd5pCRoEtOxIS3rSW7iM7Yc0UR1ze9C/GL846x/PJKpV
kQf0KLIsoEwtxq1Vvzq5APnaRWCu4e3+fiWo3sYKA2m6DJS0IqmUNWAZmwcq+2ne
0Dg368GKUYpnpw6DP3wowR/2maAcm/jsuxc129XwG6bc7tCf9/6suP4m+OJcAzyx
iHZiBjXLyGh38sCvht+eaourFZB80xxrHLEBlbxUx4wrFi5dwW5tVy+mbOp7EjRc
DPWiNeO9xTKMSLICkJKzlQUFrS4t3aqtwY268yNVTfQ7Z8YXRJAtY05nEJqO9y7H
69LLlUBszGl9rQ==
-----END CERTIFICATE-----
Generated at Mon Oct 19 07:39:23 2026 by rpki-client