Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/3768ac-ba49-443a-8a12-6f7c72f1c5e9/1/TgcXrm2hIbzPb3U9IFt520x0qtw.mft
File: TgcXrm2hIbzPb3U9IFt520x0qtw.mft (raw, json)
Hash identifier: 0hdAhasrxOvSIQbB+w2XRvcaUZ8cfvAvoGXNnIw6L0Q=
Subject key identifier: 76:27:A4:AF:12:FB:28:8B:50:07:C2:14:1C:A7:81:7D:57:B9:9C:4E
Authority key identifier: 4E:07:17:AE:6D:A1:21:BC:CF:6F:75:3D:20:5B:79:DB:4C:74:AA:DC
Certificate issuer: /CN=4e0717ae6da121bccf6f753d205b79db4c74aadc
Certificate serial: 019EB87CDEE2F16A603B3008899476548426
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TgcXrm2hIbzPb3U9IFt520x0qtw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/3768ac-ba49-443a-8a12-6f7c72f1c5e9/1/TgcXrm2hIbzPb3U9IFt520x0qtw.mft
Manifest number: AB
Signing time: Thu 11 Jun 2026 21:00:51 +0000
Manifest this update: Thu 11 Jun 2026 21:00:51 +0000
Manifest next update: Fri 12 Jun 2026 21:00:51 +0000
Files and hashes: 1: PMUh_CeB1kKvaGLeBJYIic294CY.roa (hash: +eBM0O7yXapPeEEFqL/YF99B3PHfAKw0Egv5IPFdGT4=)
2: TgcXrm2hIbzPb3U9IFt520x0qtw.crl (hash: HPmwLrhCd+uuRTqzgS/0h5PB4YGbE3AEQpejO/TJ/9k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/3768ac-ba49-443a-8a12-6f7c72f1c5e9/1/TgcXrm2hIbzPb3U9IFt520x0qtw.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/3768ac-ba49-443a-8a12-6f7c72f1c5e9/1/TgcXrm2hIbzPb3U9IFt520x0qtw.mft
rsync://rpki.ripe.net/repository/DEFAULT/TgcXrm2hIbzPb3U9IFt520x0qtw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 20:26:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b8:7c:de:e2:f1:6a:60:3b:30:08:89:94:76:54:84:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e0717ae6da121bccf6f753d205b79db4c74aadc
Validity
Not Before: Jun 11 21:00:51 2026 GMT
Not After : Jun 12 21:00:51 2026 GMT
Subject: CN=7627a4af12fb288b5007c2141ca7817d57b99c4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:7b:a7:55:96:ab:d1:11:6f:84:9a:9a:ab:52:
60:64:eb:9a:b5:d1:67:36:25:7b:82:fa:90:24:b2:
6f:ea:a0:b8:2a:72:7c:f7:dd:9f:d6:31:49:15:7b:
2b:c5:2b:22:8b:cd:89:0f:37:fe:e7:1d:0d:42:1c:
e7:84:d1:83:f6:46:a4:86:88:11:21:41:17:41:8d:
cd:97:6e:8d:74:5c:6b:68:2e:33:ee:d2:3f:6e:ee:
86:74:c8:05:b3:23:8a:d3:38:69:29:87:82:2c:e5:
7d:54:34:d8:34:4b:14:35:4c:b9:90:98:96:b1:10:
6e:11:90:73:97:52:ff:f8:f9:b1:33:27:fd:83:0b:
38:77:a9:12:bb:e4:ff:1c:f9:aa:78:be:08:f9:d3:
40:fe:2f:2a:ba:1b:35:6a:02:af:a0:55:de:73:fd:
bd:78:20:e6:c2:ab:74:06:0f:f8:61:e9:ee:cb:3b:
6a:66:5a:b5:82:73:5c:3b:a8:a1:53:6c:9a:c3:75:
0c:68:57:0a:e5:9a:d5:47:d9:98:6a:71:52:0b:a7:
37:9d:be:e9:80:d7:34:a2:e3:d9:c9:00:f5:8e:08:
04:3c:3b:4d:b3:ce:86:d3:5b:d1:4d:66:44:bf:ae:
70:2c:36:22:47:7a:d1:41:9f:40:f5:d3:e0:17:3f:
ad:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:27:A4:AF:12:FB:28:8B:50:07:C2:14:1C:A7:81:7D:57:B9:9C:4E
X509v3 Authority Key Identifier:
keyid:4E:07:17:AE:6D:A1:21:BC:CF:6F:75:3D:20:5B:79:DB:4C:74:AA:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TgcXrm2hIbzPb3U9IFt520x0qtw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/3768ac-ba49-443a-8a12-6f7c72f1c5e9/1/TgcXrm2hIbzPb3U9IFt520x0qtw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/3768ac-ba49-443a-8a12-6f7c72f1c5e9/1/TgcXrm2hIbzPb3U9IFt520x0qtw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:cf:db:d4:24:c2:bb:3d:bd:94:c6:7c:56:a8:85:eb:59:bd:
dd:63:ce:52:0b:04:b5:d3:3f:17:b9:a7:d2:e4:27:06:cc:4a:
2e:79:f1:ee:21:6c:f4:f2:7a:a8:71:67:b1:90:44:92:01:29:
d2:97:24:20:0b:39:9d:3c:27:40:66:e0:f6:11:86:c6:f6:6e:
dc:0f:69:9d:f3:26:03:69:cf:b0:1f:02:b9:a0:96:3c:4e:6a:
c6:e5:02:c3:b8:1f:81:1c:79:12:0e:32:37:c7:1c:8b:3d:03:
b7:9b:1f:f0:03:e4:d9:f4:d1:1f:04:7e:23:56:f8:11:9b:e4:
53:89:f4:ad:46:36:45:bd:fc:89:88:9d:e6:48:cd:fb:7f:8d:
9b:bc:9b:72:f3:ab:e4:db:e6:1e:bb:83:a6:0a:a4:4c:61:7c:
c3:78:d4:01:93:e7:95:da:19:a1:84:05:e9:bc:00:11:69:4f:
9d:03:aa:99:db:6c:dc:40:5e:6b:77:8a:e7:3f:83:75:e2:d7:
9f:cf:88:9e:5d:65:94:51:47:9f:9e:8b:68:27:b5:0b:90:92:
4b:ef:97:69:fd:f0:15:53:73:74:f8:af:4c:c0:71:20:32:87:
97:e5:e1:fc:e4:74:84:be:75:1f:4a:97:44:14:03:df:4f:6f:
cf:54:e4:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 23:33:08 2026 by rpki-client