Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3a/4448a7-1ac1-46ad-a727-d96393af2f20/1/TGtjcblFo16d8wj_Q4A-JheFEGk.mft
File: TGtjcblFo16d8wj_Q4A-JheFEGk.mft (raw, json)
Hash identifier: BMhwZ402Fadj00XMrg44z7j0eHHYlvp4FDQI92MFngw=
Subject key identifier: 58:AA:B1:60:62:9B:B8:40:6C:3D:09:18:3F:78:6A:A0:5F:1D:0C:B2
Authority key identifier: 4C:6B:63:71:B9:45:A3:5E:9D:F3:08:FF:43:80:3E:26:17:85:10:69
Certificate issuer: /CN=4c6b6371b945a35e9df308ff43803e2617851069
Certificate serial: 01A14B3DAAC11680D0D1763E20674714D057
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TGtjcblFo16d8wj_Q4A-JheFEGk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/4448a7-1ac1-46ad-a727-d96393af2f20/1/TGtjcblFo16d8wj_Q4A-JheFEGk.mft
Manifest number: 1561
Signing time: Sat 17 Oct 2026 19:01:34 +0000
Manifest this update: Sat 17 Oct 2026 19:01:34 +0000
Manifest next update: Sun 18 Oct 2026 19:01:34 +0000
Files and hashes: 1: SFGE70vQYmz_oKTtZMgB-YKUyZc.roa (hash: lZ0OnAmHAxbwpz0Bf+bKQq6tPOf7KpsPHIF+YP1ggzc=)
2: TGtjcblFo16d8wj_Q4A-JheFEGk.crl (hash: uVP8QPpghRZ1J9JutQAjSK2mVTk6xiFpP4SFd6s5gNM=)
3: eHNuPU6iYgVIfZ9NIp8A3552y-I.roa (hash: AOM1Ajc5ONgwd+E4wuOhZtP8/uws9RFZszPyOYWcL2Q=)
4: vP7G0LDj9js2uqV_dVx329H3yeM.roa (hash: fyHdxLq/9tcpLwgIyk0ErgVx3QqPOxT/MFLUCo0yJ0g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/4448a7-1ac1-46ad-a727-d96393af2f20/1/TGtjcblFo16d8wj_Q4A-JheFEGk.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/4448a7-1ac1-46ad-a727-d96393af2f20/1/TGtjcblFo16d8wj_Q4A-JheFEGk.mft
rsync://rpki.ripe.net/repository/DEFAULT/TGtjcblFo16d8wj_Q4A-JheFEGk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Oct 2026 14:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:4b:3d:aa:c1:16:80:d0:d1:76:3e:20:67:47:14:d0:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c6b6371b945a35e9df308ff43803e2617851069
Validity
Not Before: Oct 17 19:01:34 2026 GMT
Not After : Oct 18 19:01:34 2026 GMT
Subject: CN=58aab160629bb8406c3d09183f786aa05f1d0cb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:92:4f:6a:f2:ed:68:3c:60:48:3b:c5:a3:a4:
e1:dd:55:64:77:4a:5d:ec:e0:15:86:57:ff:c6:9e:
2e:ae:02:c3:0b:c4:03:d1:90:c9:59:b3:74:bf:48:
8f:13:6a:20:67:34:9a:7a:f2:c9:d5:d1:d5:1f:8d:
06:27:b6:73:8a:97:42:43:b1:12:78:fe:c1:4e:1b:
0e:6f:20:6f:22:57:92:50:df:5a:e2:4d:42:32:c1:
f9:77:89:79:bc:7f:af:51:26:14:da:a5:f0:ad:64:
8c:4d:64:8b:c6:e3:21:a4:e4:c6:7f:cc:50:d1:73:
2c:7e:3f:a8:23:36:b9:f0:94:f2:54:91:a9:e5:4a:
8e:2e:83:9b:4a:45:62:a7:83:59:7c:ba:87:01:45:
86:4b:5f:ac:f7:83:df:ad:b2:74:8f:91:45:bb:78:
45:6e:a7:25:5a:f6:fa:c5:eb:33:90:18:d9:ab:32:
a6:65:30:a7:a7:f0:a1:8f:52:01:94:bd:c6:3b:8c:
4f:85:c5:96:bb:7a:b2:e6:c6:84:93:a3:49:e4:6f:
00:fb:6d:60:0c:af:b6:b7:8d:1b:dc:86:a7:6f:48:
da:e3:f3:be:84:d0:5f:23:16:c8:8e:bf:4e:cb:fe:
5a:b3:ce:4e:9d:12:a8:75:d1:07:e1:66:8c:25:d0:
cd:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:AA:B1:60:62:9B:B8:40:6C:3D:09:18:3F:78:6A:A0:5F:1D:0C:B2
X509v3 Authority Key Identifier:
keyid:4C:6B:63:71:B9:45:A3:5E:9D:F3:08:FF:43:80:3E:26:17:85:10:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TGtjcblFo16d8wj_Q4A-JheFEGk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/4448a7-1ac1-46ad-a727-d96393af2f20/1/TGtjcblFo16d8wj_Q4A-JheFEGk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/4448a7-1ac1-46ad-a727-d96393af2f20/1/TGtjcblFo16d8wj_Q4A-JheFEGk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:15:01:9c:6d:9a:40:86:d5:36:3f:90:30:4e:a0:f9:45:51:
fe:a7:10:89:e2:bc:66:83:ef:14:47:5b:a2:52:c1:80:3c:43:
cc:31:40:2d:41:64:57:05:65:00:ea:c4:98:25:c1:5d:23:4b:
1c:13:b5:fe:96:aa:77:3c:76:f9:d7:dd:b8:d8:e7:da:fc:a2:
ac:b2:65:2d:b0:de:5c:d5:7c:65:e3:e0:25:94:a1:e3:a1:a2:
0d:fa:fd:09:10:ba:b1:37:13:67:00:a6:45:95:c3:24:21:e6:
c0:57:0f:d8:fd:a7:13:c4:a7:6d:fa:c2:4f:46:4c:87:35:9c:
7c:b3:15:b6:93:c0:fd:93:b6:cb:63:0a:88:fb:02:3a:60:56:
e9:07:9c:4a:06:d3:97:f0:53:a2:35:c8:20:25:59:83:09:8a:
de:d5:bf:3f:2e:f1:1a:18:ca:e0:b3:aa:82:d2:f6:9f:ae:e5:
cd:15:74:90:59:e3:78:5d:8e:cf:c9:f8:97:de:8c:3f:98:1b:
d4:98:bb:76:6b:ab:41:fc:4a:00:2d:2c:00:67:59:df:50:06:
9e:68:55:eb:96:0a:e6:eb:78:1d:a9:a6:73:67:62:aa:c2:2d:
66:a9:eb:92:11:f0:63:43:25:9c:30:12:10:ab:a6:5f:15:0f:
00:21:41:10
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFLParBFoDQ0XY+IGdHFNBXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjNmI2MzcxYjk0NWEzNWU5ZGYzMDhmZjQzODAzZTI2MTc4
NTEwNjkwHhcNMjYxMDE3MTkwMTM0WhcNMjYxMDE4MTkwMTM0WjAzMTEwLwYDVQQD
Eyg1OGFhYjE2MDYyOWJiODQwNmMzZDA5MTgzZjc4NmFhMDVmMWQwY2IyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsJJPavLtaDxgSDvFo6Th3VVkd0pd
7OAVhlf/xp4urgLDC8QD0ZDJWbN0v0iPE2ogZzSaevLJ1dHVH40GJ7ZzipdCQ7ES
eP7BThsObyBvIleSUN9a4k1CMsH5d4l5vH+vUSYU2qXwrWSMTWSLxuMhpOTGf8xQ
0XMsfj+oIza58JTyVJGp5UqOLoObSkVip4NZfLqHAUWGS1+s94PfrbJ0j5FFu3hF
bqclWvb6xeszkBjZqzKmZTCnp/Chj1IBlL3GO4xPhcWWu3qy5saEk6NJ5G8A+21g
DK+2t40b3Ianb0ja4/O+hNBfIxbIjr9Oy/5as85OnRKoddEH4WaMJdDNLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFiqsWBim7hAbD0JGD94aqBfHQyyMB8GA1UdIwQY
MBaAFExrY3G5RaNenfMI/0OAPiYXhRBpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVEd0amNibEZvMTZkOHdqX1E0QS1KaGVGRUdrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS80NDQ4YTctMWFjMS00NmFkLWE3Mjct
ZDk2MzkzYWYyZjIwLzEvVEd0amNibEZvMTZkOHdqX1E0QS1KaGVGRUdrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYS80NDQ4YTctMWFjMS00NmFkLWE3MjctZDk2MzkzYWYyZjIw
LzEvVEd0amNibEZvMTZkOHdqX1E0QS1KaGVGRUdrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApBUBnG2a
QIbVNj+QME6g+UVR/qcQieK8ZoPvFEdbolLBgDxDzDFALUFkVwVlAOrEmCXBXSNL
HBO1/paqdzx2+dfduNjn2vyirLJlLbDeXNV8ZePgJZSh46GiDfr9CRC6sTcTZwCm
RZXDJCHmwFcP2P2nE8SnbfrCT0ZMhzWcfLMVtpPA/ZO2y2MKiPsCOmBW6QecSgbT
l/BTojXIICVZgwmK3tW/Py7xGhjK4LOqgtL2n67lzRV0kFnjeF2Oz8n4l96MP5gb
1Ji7dmurQfxKAC0sAGdZ31AGnmhV65YK5ut4Hammc2diqsItZqnrkhHwY0MlnDAS
EKumXxUPACFBEA==
-----END CERTIFICATE-----
Generated at Sat Oct 17 23:52:56 2026 by rpki-client