Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/3768ac-ba49-443a-8a12-6f7c72f1c5e9/1/TgcXrm2hIbzPb3U9IFt520x0qtw.mft
File: TgcXrm2hIbzPb3U9IFt520x0qtw.mft (raw, json)
Hash identifier: XmPasOjX9iywVgn6FqeQLuZG9KwhowegtMcdpAlpSGw=
Subject key identifier: ED:35:13:4E:39:DE:A3:BA:95:E7:FE:9C:45:FA:A7:1B:21:CC:1D:3D
Authority key identifier: 4E:07:17:AE:6D:A1:21:BC:CF:6F:75:3D:20:5B:79:DB:4C:74:AA:DC
Certificate issuer: /CN=4e0717ae6da121bccf6f753d205b79db4c74aadc
Certificate serial: 019FA03AF9DEFEFA724A878BCF42204C5914
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TgcXrm2hIbzPb3U9IFt520x0qtw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/3768ac-ba49-443a-8a12-6f7c72f1c5e9/1/TgcXrm2hIbzPb3U9IFt520x0qtw.mft
Manifest number: 0123
Signing time: Sun 26 Jul 2026 21:00:47 +0000
Manifest this update: Sun 26 Jul 2026 21:00:47 +0000
Manifest next update: Mon 27 Jul 2026 21:00:47 +0000
Files and hashes: 1: PMUh_CeB1kKvaGLeBJYIic294CY.roa (hash: +eBM0O7yXapPeEEFqL/YF99B3PHfAKw0Egv5IPFdGT4=)
2: TgcXrm2hIbzPb3U9IFt520x0qtw.crl (hash: 6fLeaALAbAOv9z596RK2qhgTgzji9SZaQEM7kklXTS4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/3768ac-ba49-443a-8a12-6f7c72f1c5e9/1/TgcXrm2hIbzPb3U9IFt520x0qtw.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/3768ac-ba49-443a-8a12-6f7c72f1c5e9/1/TgcXrm2hIbzPb3U9IFt520x0qtw.mft
rsync://rpki.ripe.net/repository/DEFAULT/TgcXrm2hIbzPb3U9IFt520x0qtw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 21:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a0:3a:f9:de:fe:fa:72:4a:87:8b:cf:42:20:4c:59:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e0717ae6da121bccf6f753d205b79db4c74aadc
Validity
Not Before: Jul 26 21:00:47 2026 GMT
Not After : Jul 27 21:00:47 2026 GMT
Subject: CN=ed35134e39dea3ba95e7fe9c45faa71b21cc1d3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:37:8a:15:d3:3d:68:9f:6f:68:58:70:f2:fe:
eb:47:3a:f3:6c:83:25:07:fa:c8:5c:35:85:95:9b:
3a:37:04:1b:1b:c8:01:cb:b7:19:47:7a:ed:46:c3:
3b:5c:94:cf:ed:e1:d5:9c:63:84:91:06:10:e5:a4:
e1:6e:87:a3:7e:55:04:2c:30:c7:25:45:55:41:96:
9a:f7:6b:06:92:43:22:40:dd:60:f0:4e:d3:13:f2:
43:34:79:22:64:18:2c:97:4f:e8:93:e2:a3:80:6e:
e3:4f:e9:80:9a:42:e9:9d:6f:13:a6:d7:ad:07:d5:
ba:a8:2f:08:5d:a1:c5:50:91:24:10:69:a8:02:d5:
a1:77:32:29:7f:c5:7c:a5:41:7c:a2:4d:05:41:7d:
55:ea:75:ea:2b:1a:1b:3b:69:ad:df:9a:77:fd:f8:
64:4c:bf:bf:c8:77:99:f0:b7:a9:a2:3d:f9:b1:83:
5e:d1:c6:e6:1c:9a:ef:88:07:44:25:ad:96:94:09:
78:a9:c2:27:08:99:3b:78:11:5a:01:01:d0:70:1b:
b5:21:f5:82:82:38:9e:e8:cd:1a:96:01:51:9b:fc:
e2:64:78:24:4e:be:8d:a2:ff:a0:84:43:39:b6:0b:
8f:60:ca:5b:12:96:e0:17:85:53:b4:37:bc:a3:0f:
c8:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:35:13:4E:39:DE:A3:BA:95:E7:FE:9C:45:FA:A7:1B:21:CC:1D:3D
X509v3 Authority Key Identifier:
keyid:4E:07:17:AE:6D:A1:21:BC:CF:6F:75:3D:20:5B:79:DB:4C:74:AA:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TgcXrm2hIbzPb3U9IFt520x0qtw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/3768ac-ba49-443a-8a12-6f7c72f1c5e9/1/TgcXrm2hIbzPb3U9IFt520x0qtw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/3768ac-ba49-443a-8a12-6f7c72f1c5e9/1/TgcXrm2hIbzPb3U9IFt520x0qtw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:fb:54:34:0c:bf:a4:2d:d0:1c:ca:e6:13:9d:72:c2:1f:20:
78:53:df:07:3f:59:0c:42:15:48:5f:15:83:d2:97:5f:13:77:
35:b0:d1:2f:cb:7c:e4:b6:c9:65:66:f4:ca:0e:f1:9f:e8:5b:
90:65:0b:83:54:e9:f0:75:9f:4e:9b:f6:60:54:77:1b:a2:14:
56:a9:46:90:65:f5:be:2c:b2:62:97:ec:f5:6b:14:a4:53:1d:
81:6c:bc:74:a6:cd:b0:88:5e:8f:e2:cc:d3:c3:c6:c4:1a:fd:
84:c6:ff:96:d1:2c:82:cb:0b:02:9a:bc:b5:fa:a5:53:22:c6:
2a:e4:c3:c7:a2:ca:f0:19:bf:23:2d:a5:6f:c6:00:60:4f:58:
f8:44:8e:ef:9e:5e:b7:b6:11:b7:89:fa:4b:7a:9a:3d:46:15:
f1:3a:b0:ff:30:5d:c3:7c:95:b8:8c:0b:c9:01:5a:bd:eb:2e:
a7:4a:9c:e1:0e:c0:df:20:d5:d5:da:30:95:d0:70:42:a1:83:
4c:0d:db:8a:d5:b0:81:d6:87:a4:1f:c5:b8:10:78:e4:6a:10:
36:80:1b:0c:f2:f7:72:10:8f:43:08:79:08:56:fe:5d:50:6f:
b8:13:2c:13:b0:36:42:f5:9d:08:09:ef:8b:43:73:51:f3:41:
9d:aa:6c:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 05:42:44 2026 by rpki-client