Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/39/cb3e6b-a444-49dd-9f64-17c12273c54a/1/TgoZ1Iw1R8Ktufjv_erGrZ5PnRk.mft
File: TgoZ1Iw1R8Ktufjv_erGrZ5PnRk.mft (raw, json)
Hash identifier: hCy2DMzK6BkgL44YuBLzefDp1ZLajBnntOKSFa8KVxE=
Subject key identifier: 78:4C:66:8F:2C:F8:30:8F:61:F8:33:B3:F8:A0:B6:A0:A8:C6:18:1B
Authority key identifier: 4E:0A:19:D4:8C:35:47:C2:AD:B9:F8:EF:FD:EA:C6:AD:9E:4F:9D:19
Certificate issuer: /CN=4e0a19d48c3547c2adb9f8effdeac6ad9e4f9d19
Certificate serial: 01A17BF332FD32FEA989365F9FF7440AFA20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TgoZ1Iw1R8Ktufjv_erGrZ5PnRk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/cb3e6b-a444-49dd-9f64-17c12273c54a/1/TgoZ1Iw1R8Ktufjv_erGrZ5PnRk.mft
Manifest number: 1152
Signing time: Tue 27 Oct 2026 06:01:38 +0000
Manifest this update: Tue 27 Oct 2026 06:01:38 +0000
Manifest next update: Wed 28 Oct 2026 06:01:38 +0000
Files and hashes: 1: TgoZ1Iw1R8Ktufjv_erGrZ5PnRk.crl (hash: yV0ssl07utJm75zXswl5kRLVcXokJJ8SJbSi4DQ/WMQ=)
2: mYEf7RuSo0e-j7rjPL7Q9zNgxFc.roa (hash: cGf42p5lM09FOWIL9NbqXkxRKlJYCNacEJNXdW+oi2c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/cb3e6b-a444-49dd-9f64-17c12273c54a/1/TgoZ1Iw1R8Ktufjv_erGrZ5PnRk.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/cb3e6b-a444-49dd-9f64-17c12273c54a/1/TgoZ1Iw1R8Ktufjv_erGrZ5PnRk.mft
rsync://rpki.ripe.net/repository/DEFAULT/TgoZ1Iw1R8Ktufjv_erGrZ5PnRk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 06:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7b:f3:32:fd:32:fe:a9:89:36:5f:9f:f7:44:0a:fa:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e0a19d48c3547c2adb9f8effdeac6ad9e4f9d19
Validity
Not Before: Oct 27 06:01:38 2026 GMT
Not After : Oct 28 06:01:38 2026 GMT
Subject: CN=784c668f2cf8308f61f833b3f8a0b6a0a8c6181b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:70:3e:a0:66:fc:0a:44:b7:d1:f0:94:3b:ee:
7b:4d:16:cc:40:25:99:e0:19:5c:af:55:5c:3a:60:
d6:f2:0b:68:12:3f:00:ac:1b:06:df:3b:3c:94:76:
9e:04:56:62:9f:f4:26:1f:f4:db:45:cd:88:12:6f:
18:42:d5:1e:64:45:c5:30:99:32:0a:24:7d:8e:74:
e6:d6:6f:09:06:dd:9c:a7:30:c5:a8:40:1c:cb:b6:
8e:fe:dd:e6:1f:b0:8d:18:69:50:c5:49:cd:9a:3f:
59:84:7f:65:d7:df:3f:3d:3f:ba:f4:e3:2b:a5:f9:
6f:fd:45:5b:29:88:6b:2b:08:f4:c3:e1:dc:3b:02:
14:b0:8f:dc:d9:57:1f:07:44:66:6c:59:c1:ae:15:
0b:a5:cb:ca:9a:97:d0:78:54:a8:72:02:f1:53:06:
5d:cd:c6:bc:85:c8:fc:01:be:8f:61:96:49:f8:a6:
51:d0:3a:fb:d8:08:e0:8a:2c:d6:01:07:d9:9c:ed:
cc:a8:60:38:34:46:1e:82:63:c5:74:74:43:d7:71:
bd:8e:69:ea:f2:7c:ab:f6:c5:70:c0:2c:3d:11:4f:
6f:d3:38:1d:84:e8:1d:a9:d4:c5:75:2f:24:5c:1f:
61:e4:c7:b2:25:46:78:4d:ce:2a:a8:f3:9e:fc:1a:
06:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:4C:66:8F:2C:F8:30:8F:61:F8:33:B3:F8:A0:B6:A0:A8:C6:18:1B
X509v3 Authority Key Identifier:
keyid:4E:0A:19:D4:8C:35:47:C2:AD:B9:F8:EF:FD:EA:C6:AD:9E:4F:9D:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TgoZ1Iw1R8Ktufjv_erGrZ5PnRk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/cb3e6b-a444-49dd-9f64-17c12273c54a/1/TgoZ1Iw1R8Ktufjv_erGrZ5PnRk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/cb3e6b-a444-49dd-9f64-17c12273c54a/1/TgoZ1Iw1R8Ktufjv_erGrZ5PnRk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:66:30:d0:5e:3b:70:6e:d7:8a:ec:b5:d2:da:83:1e:95:a3:
37:ea:27:2a:85:2f:56:43:78:fa:36:0c:2a:ba:54:d0:dc:76:
5c:a7:da:2b:d7:57:f7:53:d7:f2:3f:af:fe:40:77:49:a0:09:
99:3f:d7:07:cf:8f:25:59:36:05:76:0a:91:39:c3:1c:17:64:
91:be:15:02:6c:34:3c:36:99:39:bc:53:f9:2b:e2:dc:94:cd:
60:77:c8:99:71:e0:c3:d1:43:fb:a8:17:a6:bd:bc:17:d8:3c:
00:43:d1:df:49:23:ad:d9:48:05:03:81:f6:16:e4:a2:8b:3e:
98:c4:d8:30:60:7b:9b:25:ee:bf:6f:0f:5f:20:6c:10:e8:6c:
3a:1b:e5:92:d4:9a:05:62:b2:6e:13:dc:06:d2:6e:bd:b3:04:
3a:37:48:e9:25:0c:94:d2:9c:f1:35:4d:a4:7c:f3:be:13:28:
b6:d7:a6:44:19:59:72:54:bd:dc:62:36:b4:9d:b3:79:b3:70:
f3:48:57:d7:8a:d1:e2:a6:81:1e:16:b5:ad:f9:bd:de:db:a5:
d9:10:02:65:1a:cb:23:ff:0d:66:0e:14:e9:c6:31:0d:5d:a3:
2d:01:ff:39:f6:45:a4:a7:6c:ba:e2:39:b3:aa:c1:09:e1:af:
22:85:c4:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 17:21:59 2026 by rpki-client