Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3a/3768ac-ba49-443a-8a12-6f7c72f1c5e9/1/TgcXrm2hIbzPb3U9IFt520x0qtw.mft
File: TgcXrm2hIbzPb3U9IFt520x0qtw.mft (raw, json)
Hash identifier: OwYEleQvz4pYehXxFIhId4DmtQ9kPY7d1Wi2UvrmRjA=
Subject key identifier: 77:09:12:3B:E2:71:CA:02:90:BE:9B:22:49:5F:6F:D9:45:6A:91:32
Authority key identifier: 4E:07:17:AE:6D:A1:21:BC:CF:6F:75:3D:20:5B:79:DB:4C:74:AA:DC
Certificate issuer: /CN=4e0717ae6da121bccf6f753d205b79db4c74aadc
Certificate serial: 01A17F2A9C75A74BEEC0DB4AB5F4D4FACAA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TgcXrm2hIbzPb3U9IFt520x0qtw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/3768ac-ba49-443a-8a12-6f7c72f1c5e9/1/TgcXrm2hIbzPb3U9IFt520x0qtw.mft
Manifest number: 021B
Signing time: Tue 27 Oct 2026 21:01:01 +0000
Manifest this update: Tue 27 Oct 2026 21:01:01 +0000
Manifest next update: Wed 28 Oct 2026 21:01:01 +0000
Files and hashes: 1: PMUh_CeB1kKvaGLeBJYIic294CY.roa (hash: +eBM0O7yXapPeEEFqL/YF99B3PHfAKw0Egv5IPFdGT4=)
2: TgcXrm2hIbzPb3U9IFt520x0qtw.crl (hash: kXO8T68SqAIIXSUeGbyGDl1vPevumq3BKZMYDaOQTR4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/3768ac-ba49-443a-8a12-6f7c72f1c5e9/1/TgcXrm2hIbzPb3U9IFt520x0qtw.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/3768ac-ba49-443a-8a12-6f7c72f1c5e9/1/TgcXrm2hIbzPb3U9IFt520x0qtw.mft
rsync://rpki.ripe.net/repository/DEFAULT/TgcXrm2hIbzPb3U9IFt520x0qtw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 21:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7f:2a:9c:75:a7:4b:ee:c0:db:4a:b5:f4:d4:fa:ca:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e0717ae6da121bccf6f753d205b79db4c74aadc
Validity
Not Before: Oct 27 21:01:01 2026 GMT
Not After : Oct 28 21:01:01 2026 GMT
Subject: CN=7709123be271ca0290be9b22495f6fd9456a9132
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:44:dc:ed:95:b1:20:41:bc:2b:86:11:5d:6a:
75:85:e3:74:5b:e2:8a:5d:b8:62:79:85:ee:d3:c3:
77:11:89:06:59:b6:46:42:a5:5e:0d:da:88:a1:c1:
28:e1:ed:8d:55:f3:0c:3e:cf:89:4d:ab:fc:95:2a:
4f:f0:59:5b:f1:c5:a8:1a:53:28:64:54:33:8a:3b:
07:e4:5b:77:2f:f1:04:42:61:9d:13:52:3e:e2:f4:
d2:0f:42:1c:22:7a:64:4e:7a:95:8b:ab:a2:3c:fc:
ff:dc:d5:04:c5:61:e6:12:83:7c:b4:f9:05:1f:12:
c1:d7:26:d9:c6:7e:38:c8:46:df:f3:05:ba:29:e5:
30:38:1a:5b:9e:1e:ab:a4:69:3a:29:b1:c8:c7:2e:
d3:38:47:6e:d6:18:ef:db:3b:f8:3d:ea:55:a3:ac:
a0:3f:4c:9d:7d:e1:80:93:9b:93:c9:97:c5:6b:60:
ff:b1:b9:84:c7:99:c2:6d:6b:46:4b:dd:df:9f:4f:
0a:86:c7:85:4b:81:60:0d:19:98:97:a0:67:47:0b:
98:bd:e3:ad:9a:dc:bc:c2:8c:9c:9a:15:fe:6a:21:
84:e2:0e:72:70:10:c7:2a:e1:a2:35:86:34:fa:90:
14:73:3a:31:6b:de:2c:04:50:35:fc:ac:bc:de:a5:
05:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:09:12:3B:E2:71:CA:02:90:BE:9B:22:49:5F:6F:D9:45:6A:91:32
X509v3 Authority Key Identifier:
keyid:4E:07:17:AE:6D:A1:21:BC:CF:6F:75:3D:20:5B:79:DB:4C:74:AA:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TgcXrm2hIbzPb3U9IFt520x0qtw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/3768ac-ba49-443a-8a12-6f7c72f1c5e9/1/TgcXrm2hIbzPb3U9IFt520x0qtw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/3768ac-ba49-443a-8a12-6f7c72f1c5e9/1/TgcXrm2hIbzPb3U9IFt520x0qtw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:b2:a1:b0:12:7c:e2:e0:b3:89:e4:8a:07:e0:db:f7:6f:76:
5e:79:3c:cd:79:ca:f0:7d:7e:eb:94:e3:1e:5d:8c:8b:8a:cc:
17:d8:ce:92:dc:79:d7:e1:2a:4c:39:31:c0:9e:7e:02:ac:7b:
82:43:ad:8f:0d:a1:29:c1:a7:16:42:f1:81:bc:bc:19:dd:91:
eb:54:0f:14:e3:37:b4:37:56:af:c8:18:72:39:0b:84:74:6a:
ab:36:1e:52:19:b6:16:2e:67:b7:46:b7:e5:f1:27:c7:20:78:
e0:1a:34:be:1d:d8:a8:1e:82:bb:ba:dd:8b:43:47:73:d9:70:
00:90:c5:45:7c:88:72:19:9e:16:23:fb:37:02:b0:6d:6a:ac:
c6:87:02:a2:50:79:83:84:d1:b0:32:56:a7:68:b2:3a:d3:d8:
a6:77:69:c4:90:53:b5:2b:07:12:6c:4e:59:a6:ca:52:18:fa:
c1:83:9c:a0:68:ab:b6:a4:98:b5:a5:25:9c:19:e6:0e:20:1a:
d5:ee:70:ec:d1:c1:5e:1e:52:e8:b7:af:e0:08:c0:ef:62:27:
84:16:7c:0d:4d:1c:d7:e1:33:11:57:b7:50:23:a1:fe:dc:63:
60:19:c5:9a:b7:aa:c2:5e:a9:72:98:3d:a6:e9:ba:d1:5e:d7:
1e:54:32:bd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF/Kpx1p0vuwNtKtfTU+sqjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRlMDcxN2FlNmRhMTIxYmNjZjZmNzUzZDIwNWI3OWRiNGM3
NGFhZGMwHhcNMjYxMDI3MjEwMTAxWhcNMjYxMDI4MjEwMTAxWjAzMTEwLwYDVQQD
Eyg3NzA5MTIzYmUyNzFjYTAyOTBiZTliMjI0OTVmNmZkOTQ1NmE5MTMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqETc7ZWxIEG8K4YRXWp1heN0W+KK
XbhieYXu08N3EYkGWbZGQqVeDdqIocEo4e2NVfMMPs+JTav8lSpP8Flb8cWoGlMo
ZFQzijsH5Ft3L/EEQmGdE1I+4vTSD0IcInpkTnqVi6uiPPz/3NUExWHmEoN8tPkF
HxLB1ybZxn44yEbf8wW6KeUwOBpbnh6rpGk6KbHIxy7TOEdu1hjv2zv4PepVo6yg
P0ydfeGAk5uTyZfFa2D/sbmEx5nCbWtGS93fn08KhseFS4FgDRmYl6BnRwuYveOt
mty8woycmhX+aiGE4g5ycBDHKuGiNYY0+pAUczoxa94sBFA1/Ky83qUFdwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHcJEjviccoCkL6bIklfb9lFapEyMB8GA1UdIwQY
MBaAFE4HF65toSG8z291PSBbedtMdKrcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVGdjWHJtMmhJYnpQYjNVOUlGdDUyMHgwcXR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS8zNzY4YWMtYmE0OS00NDNhLThhMTIt
NmY3YzcyZjFjNWU5LzEvVGdjWHJtMmhJYnpQYjNVOUlGdDUyMHgwcXR3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYS8zNzY4YWMtYmE0OS00NDNhLThhMTItNmY3YzcyZjFjNWU5
LzEvVGdjWHJtMmhJYnpQYjNVOUlGdDUyMHgwcXR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABbKhsBJ8
4uCzieSKB+Db9292Xnk8zXnK8H1+65TjHl2Mi4rMF9jOktx51+EqTDkxwJ5+Aqx7
gkOtjw2hKcGnFkLxgby8Gd2R61QPFOM3tDdWr8gYcjkLhHRqqzYeUhm2Fi5nt0a3
5fEnxyB44Bo0vh3YqB6Cu7rdi0NHc9lwAJDFRXyIchmeFiP7NwKwbWqsxocColB5
g4TRsDJWp2iyOtPYpndpxJBTtSsHEmxOWabKUhj6wYOcoGirtqSYtaUlnBnmDiAa
1e5w7NHBXh5S6Lev4AjA72InhBZ8DU0c1+EzEVe3UCOh/txjYBnFmreqwl6pcpg9
pum60V7XHlQyvQ==
-----END CERTIFICATE-----
Generated at Wed Oct 28 05:27:42 2026 by rpki-client