Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3a/3768ac-ba49-443a-8a12-6f7c72f1c5e9/1/TgcXrm2hIbzPb3U9IFt520x0qtw.mft
File: TgcXrm2hIbzPb3U9IFt520x0qtw.mft (raw, json)
Hash identifier: zh7LkE18DEkhqiGXnZnO2Z/F+Cv/Sznmodj2K3HIJoM=
Subject key identifier: D3:2C:BB:CE:0D:76:92:D1:B9:F8:E3:30:F0:97:1F:1A:90:9E:92:A8
Authority key identifier: 4E:07:17:AE:6D:A1:21:BC:CF:6F:75:3D:20:5B:79:DB:4C:74:AA:DC
Certificate issuer: /CN=4e0717ae6da121bccf6f753d205b79db4c74aadc
Certificate serial: 01A17D3C9737A4FAB39C250A5D3AED2FFD49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TgcXrm2hIbzPb3U9IFt520x0qtw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/3768ac-ba49-443a-8a12-6f7c72f1c5e9/1/TgcXrm2hIbzPb3U9IFt520x0qtw.mft
Manifest number: 021A
Signing time: Tue 27 Oct 2026 12:01:25 +0000
Manifest this update: Tue 27 Oct 2026 12:01:25 +0000
Manifest next update: Wed 28 Oct 2026 12:01:25 +0000
Files and hashes: 1: PMUh_CeB1kKvaGLeBJYIic294CY.roa (hash: +eBM0O7yXapPeEEFqL/YF99B3PHfAKw0Egv5IPFdGT4=)
2: TgcXrm2hIbzPb3U9IFt520x0qtw.crl (hash: i2G3hxH+J50X9VvmBMEciFigm7RK44rlmlREM+yoNW8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/3768ac-ba49-443a-8a12-6f7c72f1c5e9/1/TgcXrm2hIbzPb3U9IFt520x0qtw.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/3768ac-ba49-443a-8a12-6f7c72f1c5e9/1/TgcXrm2hIbzPb3U9IFt520x0qtw.mft
rsync://rpki.ripe.net/repository/DEFAULT/TgcXrm2hIbzPb3U9IFt520x0qtw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 12:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7d:3c:97:37:a4:fa:b3:9c:25:0a:5d:3a:ed:2f:fd:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e0717ae6da121bccf6f753d205b79db4c74aadc
Validity
Not Before: Oct 27 12:01:25 2026 GMT
Not After : Oct 28 12:01:25 2026 GMT
Subject: CN=d32cbbce0d7692d1b9f8e330f0971f1a909e92a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:49:2a:63:b0:4a:86:c5:98:5f:b1:ee:c0:75:
8c:9e:f9:cd:12:5a:1d:19:78:1d:27:8c:05:8b:0e:
63:41:78:c9:33:0c:9d:d3:b4:3c:2f:64:3a:a5:67:
09:3f:71:99:16:c4:fa:43:e0:25:db:95:01:22:d8:
8e:4d:e2:8f:0f:e0:08:d3:f6:77:22:8f:ae:08:85:
19:21:bd:a4:90:aa:51:6c:59:41:4f:bd:5c:56:ee:
97:28:c2:9a:30:22:0c:04:39:6c:c2:3c:75:0f:d8:
56:c1:0a:d5:2f:4f:8a:28:af:52:ae:40:d7:d4:34:
a8:ef:fa:e7:b9:7d:1e:2a:e1:3c:15:cb:a8:10:4e:
22:2e:41:d3:11:9d:fe:d6:08:9a:11:eb:b7:f9:83:
56:7a:ef:ee:be:cc:f7:2e:1d:fb:d1:83:01:f9:4c:
d7:a0:11:a4:a6:29:ad:b0:39:e5:8b:74:fb:26:8f:
25:f5:18:ec:69:10:02:8a:0a:8d:1e:fe:c7:76:3a:
8f:34:8b:11:a3:b7:8d:2f:74:dc:c4:cf:e3:54:a1:
dc:96:64:9d:49:db:04:52:de:44:7c:92:34:c7:bf:
af:0a:4a:4d:e8:4b:f9:36:1d:02:75:e5:9c:d1:20:
cb:f0:4b:1f:f2:fc:29:9f:b7:69:f2:a9:96:c0:ad:
1f:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:2C:BB:CE:0D:76:92:D1:B9:F8:E3:30:F0:97:1F:1A:90:9E:92:A8
X509v3 Authority Key Identifier:
keyid:4E:07:17:AE:6D:A1:21:BC:CF:6F:75:3D:20:5B:79:DB:4C:74:AA:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TgcXrm2hIbzPb3U9IFt520x0qtw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/3768ac-ba49-443a-8a12-6f7c72f1c5e9/1/TgcXrm2hIbzPb3U9IFt520x0qtw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/3768ac-ba49-443a-8a12-6f7c72f1c5e9/1/TgcXrm2hIbzPb3U9IFt520x0qtw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:f7:85:1c:0c:38:94:da:9d:bb:2c:b2:11:f1:a7:b3:48:ef:
5d:9c:7e:b3:b3:b1:87:d1:9a:c8:07:f4:6e:0d:1e:36:59:c7:
07:76:97:fb:e0:7c:43:9b:2e:c2:f7:75:b6:8a:8c:c0:0b:a0:
af:01:51:c3:a1:4b:c4:f0:6d:12:87:e6:95:03:80:cc:1c:f1:
43:7c:c7:20:c0:41:18:25:bc:d3:d3:82:83:5e:19:d3:ec:a1:
06:46:0b:e3:79:a6:8b:1d:a7:a1:a8:fc:2a:c1:85:cb:74:f5:
2d:22:3c:f6:2b:c4:30:2b:f0:a1:40:17:01:86:da:2b:ce:b8:
c5:88:32:94:53:55:fd:04:4d:39:80:f8:e7:13:da:42:54:64:
f3:8e:81:e7:1f:b8:73:cf:5b:54:7f:da:61:42:58:6e:75:f5:
6c:a7:58:a1:3e:68:75:00:cd:2a:47:e2:bf:6e:31:4c:65:30:
a8:c1:3e:6c:67:1c:69:4e:e6:c6:41:91:79:41:e3:93:21:b7:
b5:49:f6:38:23:a5:25:8f:8b:97:c3:4d:d1:76:87:36:70:b5:
98:b7:7c:b5:c9:7c:3e:37:61:48:10:a9:a4:84:cc:1c:52:4d:
39:b7:df:73:db:ee:86:d9:11:55:eb:79:cc:2f:60:db:57:fb:
ea:b7:fc:87
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF9PJc3pPqznCUKXTrtL/1JMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRlMDcxN2FlNmRhMTIxYmNjZjZmNzUzZDIwNWI3OWRiNGM3
NGFhZGMwHhcNMjYxMDI3MTIwMTI1WhcNMjYxMDI4MTIwMTI1WjAzMTEwLwYDVQQD
EyhkMzJjYmJjZTBkNzY5MmQxYjlmOGUzMzBmMDk3MWYxYTkwOWU5MmE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArUkqY7BKhsWYX7HuwHWMnvnNElod
GXgdJ4wFiw5jQXjJMwyd07Q8L2Q6pWcJP3GZFsT6Q+Al25UBItiOTeKPD+AI0/Z3
Io+uCIUZIb2kkKpRbFlBT71cVu6XKMKaMCIMBDlswjx1D9hWwQrVL0+KKK9SrkDX
1DSo7/rnuX0eKuE8FcuoEE4iLkHTEZ3+1giaEeu3+YNWeu/uvsz3Lh370YMB+UzX
oBGkpimtsDnli3T7Jo8l9RjsaRACigqNHv7HdjqPNIsRo7eNL3TcxM/jVKHclmSd
SdsEUt5EfJI0x7+vCkpN6Ev5Nh0CdeWc0SDL8Esf8vwpn7dp8qmWwK0f3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNMsu84NdpLRufjjMPCXHxqQnpKoMB8GA1UdIwQY
MBaAFE4HF65toSG8z291PSBbedtMdKrcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVGdjWHJtMmhJYnpQYjNVOUlGdDUyMHgwcXR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS8zNzY4YWMtYmE0OS00NDNhLThhMTIt
NmY3YzcyZjFjNWU5LzEvVGdjWHJtMmhJYnpQYjNVOUlGdDUyMHgwcXR3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYS8zNzY4YWMtYmE0OS00NDNhLThhMTItNmY3YzcyZjFjNWU5
LzEvVGdjWHJtMmhJYnpQYjNVOUlGdDUyMHgwcXR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXPeFHAw4
lNqduyyyEfGns0jvXZx+s7Oxh9GayAf0bg0eNlnHB3aX++B8Q5suwvd1toqMwAug
rwFRw6FLxPBtEofmlQOAzBzxQ3zHIMBBGCW809OCg14Z0+yhBkYL43mmix2noaj8
KsGFy3T1LSI89ivEMCvwoUAXAYbaK864xYgylFNV/QRNOYD45xPaQlRk846B5x+4
c89bVH/aYUJYbnX1bKdYoT5odQDNKkfiv24xTGUwqME+bGccaU7mxkGReUHjkyG3
tUn2OCOlJY+Ll8NN0XaHNnC1mLd8tcl8PjdhSBCppITMHFJNObffc9vuhtkRVet5
zC9g21f76rf8hw==
-----END CERTIFICATE-----
Generated at Tue Oct 27 18:51:15 2026 by rpki-client