Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5b/5c92d1-41e5-443e-a250-01baf78ec73f/1/tjIe6_T5W-n4Hw8jP4nzYC0vAHQ.mft
File: tjIe6_T5W-n4Hw8jP4nzYC0vAHQ.mft (raw, json)
Hash identifier: GamvghV+L8Ws12QzLzWVs1GzKrHq4VXLocVBQO68zNY=
Subject key identifier: 87:5D:59:44:90:FB:34:23:EA:3B:15:CC:4D:7A:98:74:AB:85:7B:22
Authority key identifier: B6:32:1E:EB:F4:F9:5B:E9:F8:1F:0F:23:3F:89:F3:60:2D:2F:00:74
Certificate issuer: /CN=b6321eebf4f95be9f81f0f233f89f3602d2f0074
Certificate serial: 01A17A0448F024A2C3F76777FEFD3BE02BF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tjIe6_T5W-n4Hw8jP4nzYC0vAHQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/5c92d1-41e5-443e-a250-01baf78ec73f/1/tjIe6_T5W-n4Hw8jP4nzYC0vAHQ.mft
Manifest number: 17B0
Signing time: Mon 26 Oct 2026 21:01:03 +0000
Manifest this update: Mon 26 Oct 2026 21:01:03 +0000
Manifest next update: Tue 27 Oct 2026 21:01:03 +0000
Files and hashes: 1: PeFK_yeJmAggBubY51FT5ExR7yY.roa (hash: kZM9hfI1X20jdNyqPobjCTSrN0qe4fcSM/JWGaBh8YA=)
2: XiIDJMPchO2MVQJnr2v3LL6-fD0.roa (hash: +0DK4fXLVL2er4TUt0Ah7Mip7BfbX2JKpUWdTlpILkM=)
3: tjIe6_T5W-n4Hw8jP4nzYC0vAHQ.crl (hash: GiOrS8OtXNMQ5b245Y0XNuhheVkcDueFd9AafCQmMoA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/5c92d1-41e5-443e-a250-01baf78ec73f/1/tjIe6_T5W-n4Hw8jP4nzYC0vAHQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/5c92d1-41e5-443e-a250-01baf78ec73f/1/tjIe6_T5W-n4Hw8jP4nzYC0vAHQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/tjIe6_T5W-n4Hw8jP4nzYC0vAHQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7a:04:48:f0:24:a2:c3:f7:67:77:fe:fd:3b:e0:2b:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6321eebf4f95be9f81f0f233f89f3602d2f0074
Validity
Not Before: Oct 26 21:01:03 2026 GMT
Not After : Oct 27 21:01:03 2026 GMT
Subject: CN=875d594490fb3423ea3b15cc4d7a9874ab857b22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:fd:50:5d:74:9f:bc:05:af:4d:0e:8a:ab:0f:
85:99:b8:4d:4d:34:62:1f:d8:af:0f:a9:7a:99:f6:
3c:48:dc:b0:71:32:56:f4:35:68:7f:ad:81:e4:2d:
e8:f6:ca:56:7b:d3:ed:d0:60:8b:c1:29:a9:d4:a0:
dd:4a:15:97:ed:e2:35:af:ea:ae:b3:69:8b:b8:d8:
6a:bc:03:88:d3:f1:07:90:49:1c:fb:87:95:ef:a4:
ad:bf:c7:f0:01:eb:6b:74:ea:15:cd:09:d5:3f:2e:
8e:3a:35:62:f7:90:be:eb:95:38:45:5c:95:9b:8d:
9c:1c:d2:cd:cc:f9:fd:ec:0d:e2:b6:48:a7:b9:8a:
32:5c:a9:f3:3a:51:5e:d6:0c:6c:73:c5:98:86:31:
5b:47:79:12:b9:a4:84:cd:39:10:0c:02:58:1a:6c:
d1:8c:fc:59:e7:54:ee:a8:1d:45:85:49:9c:a2:82:
93:09:0c:e1:e3:5a:ba:b2:74:da:35:34:b8:ba:35:
68:2b:d9:7d:3e:e0:d8:61:5d:47:72:58:5e:51:f1:
4c:89:06:22:aa:dd:e4:76:21:79:b5:d0:f0:c9:5d:
59:34:c0:21:81:49:81:dd:9f:f9:78:90:ff:5d:06:
a1:b1:77:86:39:5b:45:d8:4d:f1:86:a9:db:0e:de:
bd:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:5D:59:44:90:FB:34:23:EA:3B:15:CC:4D:7A:98:74:AB:85:7B:22
X509v3 Authority Key Identifier:
keyid:B6:32:1E:EB:F4:F9:5B:E9:F8:1F:0F:23:3F:89:F3:60:2D:2F:00:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tjIe6_T5W-n4Hw8jP4nzYC0vAHQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5c92d1-41e5-443e-a250-01baf78ec73f/1/tjIe6_T5W-n4Hw8jP4nzYC0vAHQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5c92d1-41e5-443e-a250-01baf78ec73f/1/tjIe6_T5W-n4Hw8jP4nzYC0vAHQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:68:56:86:dd:d7:2b:94:f4:29:c0:a5:60:8a:71:64:a7:e2:
7d:4e:98:39:72:00:58:4c:38:21:bf:ff:98:68:26:a7:24:61:
84:5e:1e:db:7d:94:7f:17:9a:fe:79:26:83:bc:a2:65:98:30:
51:07:c4:07:5d:47:76:55:d9:31:e0:a4:e2:b0:33:5b:26:5f:
b4:37:a3:d2:bc:08:67:87:9c:b2:ff:d4:cf:5a:99:b6:8b:fb:
fe:0f:2b:11:63:3a:ed:d2:b1:23:82:6a:6a:21:4e:ac:6d:c3:
7b:a2:a3:69:20:8c:01:14:e0:de:71:67:2c:57:fa:89:66:7c:
69:9f:ef:9c:f2:36:e5:ca:67:34:46:c9:01:5e:2a:9e:a7:62:
32:c9:4a:a0:50:d8:ce:6c:c5:d8:22:8e:d1:46:59:ef:d9:54:
28:d1:b7:6a:58:46:52:c8:69:51:b4:f0:72:ca:29:57:69:cb:
0f:11:29:6c:f3:8c:7e:32:7f:d1:eb:ed:e5:bf:ce:17:14:54:
2a:55:06:2b:de:f7:2f:56:a3:09:4c:36:b3:dd:5f:71:1a:44:
ef:3b:81:a8:bd:68:39:98:ba:55:2a:d6:6d:6e:00:5d:d7:4e:
68:3c:a6:e6:cc:1c:59:ca:8d:bf:00:d8:bd:f8:cf:f1:e7:32:
ba:a9:a5:35
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF6BEjwJKLD92d3/v074CvyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI2MzIxZWViZjRmOTViZTlmODFmMGYyMzNmODlmMzYwMmQy
ZjAwNzQwHhcNMjYxMDI2MjEwMTAzWhcNMjYxMDI3MjEwMTAzWjAzMTEwLwYDVQQD
Eyg4NzVkNTk0NDkwZmIzNDIzZWEzYjE1Y2M0ZDdhOTg3NGFiODU3YjIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1v1QXXSfvAWvTQ6Kqw+FmbhNTTRi
H9ivD6l6mfY8SNywcTJW9DVof62B5C3o9spWe9Pt0GCLwSmp1KDdShWX7eI1r+qu
s2mLuNhqvAOI0/EHkEkc+4eV76Stv8fwAetrdOoVzQnVPy6OOjVi95C+65U4RVyV
m42cHNLNzPn97A3itkinuYoyXKnzOlFe1gxsc8WYhjFbR3kSuaSEzTkQDAJYGmzR
jPxZ51TuqB1FhUmcooKTCQzh41q6snTaNTS4ujVoK9l9PuDYYV1HclheUfFMiQYi
qt3kdiF5tdDwyV1ZNMAhgUmB3Z/5eJD/XQahsXeGOVtF2E3xhqnbDt69cwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIddWUSQ+zQj6jsVzE16mHSrhXsiMB8GA1UdIwQY
MBaAFLYyHuv0+Vvp+B8PIz+J82AtLwB0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdGpJZTZfVDVXLW40SHc4alA0bnpZQzB2QUhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi81YzkyZDEtNDFlNS00NDNlLWEyNTAt
MDFiYWY3OGVjNzNmLzEvdGpJZTZfVDVXLW40SHc4alA0bnpZQzB2QUhRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi81YzkyZDEtNDFlNS00NDNlLWEyNTAtMDFiYWY3OGVjNzNm
LzEvdGpJZTZfVDVXLW40SHc4alA0bnpZQzB2QUhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxGhWht3X
K5T0KcClYIpxZKfifU6YOXIAWEw4Ib//mGgmpyRhhF4e232Ufxea/nkmg7yiZZgw
UQfEB11HdlXZMeCk4rAzWyZftDej0rwIZ4ecsv/Uz1qZtov7/g8rEWM67dKxI4Jq
aiFOrG3De6KjaSCMARTg3nFnLFf6iWZ8aZ/vnPI25cpnNEbJAV4qnqdiMslKoFDY
zmzF2CKO0UZZ79lUKNG3alhGUshpUbTwcsopV2nLDxEpbPOMfjJ/0evt5b/OFxRU
KlUGK973L1ajCUw2s91fcRpE7zuBqL1oOZi6VSrWbW4AXddOaDym5swcWcqNvwDY
vfjP8ecyuqmlNQ==
-----END CERTIFICATE-----
Generated at Tue Oct 27 01:50:42 2026 by rpki-client