Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3a/3768ac-ba49-443a-8a12-6f7c72f1c5e9/1/TgcXrm2hIbzPb3U9IFt520x0qtw.mft
File: TgcXrm2hIbzPb3U9IFt520x0qtw.mft (raw, json)
Hash identifier: F4cG5oIrck2dJ/Vk6tAOEGvzJp2B0gsIDPHO9P8DMQY=
Subject key identifier: E5:BC:36:A2:57:4E:EE:E3:9E:EB:07:19:B8:45:E1:CD:96:75:D0:BB
Authority key identifier: 4E:07:17:AE:6D:A1:21:BC:CF:6F:75:3D:20:5B:79:DB:4C:74:AA:DC
Certificate issuer: /CN=4e0717ae6da121bccf6f753d205b79db4c74aadc
Certificate serial: 01A08BD5C607AA24AB4CF70C6DE4F920B8B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TgcXrm2hIbzPb3U9IFt520x0qtw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/3768ac-ba49-443a-8a12-6f7c72f1c5e9/1/TgcXrm2hIbzPb3U9IFt520x0qtw.mft
Manifest number: 019D
Signing time: Thu 10 Sep 2026 15:00:37 +0000
Manifest this update: Thu 10 Sep 2026 15:00:37 +0000
Manifest next update: Fri 11 Sep 2026 15:00:37 +0000
Files and hashes: 1: PMUh_CeB1kKvaGLeBJYIic294CY.roa (hash: +eBM0O7yXapPeEEFqL/YF99B3PHfAKw0Egv5IPFdGT4=)
2: TgcXrm2hIbzPb3U9IFt520x0qtw.crl (hash: odotWZPDmmyCpnDCEQf/f1EIx6h4/dre+dOxsS71Au8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/3768ac-ba49-443a-8a12-6f7c72f1c5e9/1/TgcXrm2hIbzPb3U9IFt520x0qtw.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/3768ac-ba49-443a-8a12-6f7c72f1c5e9/1/TgcXrm2hIbzPb3U9IFt520x0qtw.mft
rsync://rpki.ripe.net/repository/DEFAULT/TgcXrm2hIbzPb3U9IFt520x0qtw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:d5:c6:07:aa:24:ab:4c:f7:0c:6d:e4:f9:20:b8:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e0717ae6da121bccf6f753d205b79db4c74aadc
Validity
Not Before: Sep 10 15:00:37 2026 GMT
Not After : Sep 11 15:00:37 2026 GMT
Subject: CN=e5bc36a2574eeee39eeb0719b845e1cd9675d0bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:12:b9:5d:ef:56:5b:52:e8:1b:1c:36:10:49:
10:11:ca:a2:8f:d7:70:f1:87:87:df:0e:92:e0:d1:
15:a1:c2:87:9e:1e:73:8e:21:0c:2c:2a:61:16:2d:
70:71:2b:22:40:bf:f1:15:a7:7c:c7:d2:6c:c7:78:
57:b3:9c:53:4f:f5:0b:bc:68:7e:e5:03:98:38:9a:
14:b0:d1:0f:56:93:d3:94:33:50:3d:ea:cb:e3:46:
35:64:54:60:21:03:43:c0:45:19:c2:f9:b4:3d:99:
f3:26:84:fb:00:17:01:08:a3:0b:5e:07:f0:67:c8:
b3:39:04:8d:99:01:7c:b5:ea:ca:ab:c9:d9:4f:af:
cb:c6:40:f2:6c:f1:ca:71:63:61:09:36:5b:c1:06:
71:e8:be:5a:bb:a2:58:ff:c1:cf:fd:3e:a2:e9:a9:
85:1f:13:2b:af:3a:3e:62:7c:5e:fe:54:01:57:75:
39:85:3d:b1:5a:a1:59:1b:91:42:69:ca:49:86:c9:
bd:05:56:e1:53:4d:26:ac:30:55:30:14:1d:0c:b8:
cd:43:f1:58:99:fd:45:3c:ff:e5:4f:07:2d:a4:92:
5d:83:84:2f:aa:68:b0:6a:c1:32:f2:45:cf:1c:12:
1f:36:b9:51:66:7a:6b:47:72:ea:11:28:39:83:6d:
3e:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:BC:36:A2:57:4E:EE:E3:9E:EB:07:19:B8:45:E1:CD:96:75:D0:BB
X509v3 Authority Key Identifier:
keyid:4E:07:17:AE:6D:A1:21:BC:CF:6F:75:3D:20:5B:79:DB:4C:74:AA:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TgcXrm2hIbzPb3U9IFt520x0qtw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/3768ac-ba49-443a-8a12-6f7c72f1c5e9/1/TgcXrm2hIbzPb3U9IFt520x0qtw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/3768ac-ba49-443a-8a12-6f7c72f1c5e9/1/TgcXrm2hIbzPb3U9IFt520x0qtw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:85:09:2a:9a:81:45:95:06:cd:fc:04:c9:74:be:fd:bc:11:
3d:f9:3f:0c:bf:c4:27:c8:d1:32:03:4e:36:4c:b5:f8:bf:37:
1c:7a:d4:3f:37:26:0f:17:fe:5a:6e:4f:8f:61:99:fd:14:f6:
36:a6:ba:82:3b:bb:ed:29:58:2a:b3:f8:18:81:fc:af:01:b9:
04:91:c4:c7:68:1c:0f:ab:46:9f:d1:f8:d6:0f:35:eb:ea:20:
59:de:45:bb:3d:18:ff:58:ff:26:49:87:43:fc:1f:08:88:39:
3d:b8:bd:98:94:af:ae:ab:32:f7:95:ea:60:11:b6:52:73:05:
9b:a5:94:f7:35:ba:73:3d:96:39:d9:65:37:a5:5b:b1:db:bc:
ca:34:7d:8b:5d:fc:59:11:f5:1b:95:76:0d:21:4d:ab:05:85:
35:6d:71:f5:04:07:ec:0b:de:54:83:96:f5:6b:32:2c:dc:e5:
ed:e7:e1:30:c0:32:cd:83:53:e4:ad:a4:81:84:ea:60:37:eb:
00:56:89:c0:38:2c:75:b6:54:0e:47:25:c1:12:58:36:3e:f7:
2f:b8:b8:19:b3:7d:d7:d4:ba:e5:ea:a3:be:7e:e9:d0:ae:7c:
a8:05:56:26:d0:87:18:a9:cd:a0:dd:f8:b8:93:be:27:d9:ad:
66:09:ec:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 19:20:47 2026 by rpki-client