Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/76/6c7970-8cf8-4d3a-a230-d62e585c8161/1/tjrC5OTds-VAdW8XqpcNSoowqFw.mft
File: tjrC5OTds-VAdW8XqpcNSoowqFw.mft (raw, json)
Hash identifier: xomb28l2mjwpw0W9LFFbMMht21h56sB5ji77YPbeoVM=
Subject key identifier: A8:2B:07:64:77:EA:F7:29:A7:BF:42:EF:FE:BB:21:79:46:AC:02:09
Authority key identifier: B6:3A:C2:E4:E4:DD:B3:E5:40:75:6F:17:AA:97:0D:4A:8A:30:A8:5C
Certificate issuer: /CN=b63ac2e4e4ddb3e540756f17aa970d4a8a30a85c
Certificate serial: 01A16E367DF1C2FEE47B8ADD5C29DD855E3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tjrC5OTds-VAdW8XqpcNSoowqFw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/6c7970-8cf8-4d3a-a230-d62e585c8161/1/tjrC5OTds-VAdW8XqpcNSoowqFw.mft
Manifest number: 01CA
Signing time: Sat 24 Oct 2026 14:00:27 +0000
Manifest this update: Sat 24 Oct 2026 14:00:27 +0000
Manifest next update: Sun 25 Oct 2026 14:00:27 +0000
Files and hashes: 1: 3PEhY1Ws9IOo3cWNjYy5yOIjYaE.roa (hash: T/g5YfW0+zaGcZZDm52y51nspj0qwZi0sWsHMlKk/KI=)
2: GpwRgxH1rh6kYkbCLIqnbXHV5yc.roa (hash: /8lkVZUXTI5q0RD+ogbND16CeygsTyvjGJNPFWulD2U=)
3: tjrC5OTds-VAdW8XqpcNSoowqFw.crl (hash: ZRS6CK6zMvTnyMofF0Hs+evXLzkCBsUN4lx+Zcb+WN8=)
4: yZTKv672wHWKq63aWh-emOtWdus.roa (hash: 6Vhx+7brYUgL5kFF6TZGOji3UDVZOaK3kwdHUUol5S8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/6c7970-8cf8-4d3a-a230-d62e585c8161/1/tjrC5OTds-VAdW8XqpcNSoowqFw.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/6c7970-8cf8-4d3a-a230-d62e585c8161/1/tjrC5OTds-VAdW8XqpcNSoowqFw.mft
rsync://rpki.ripe.net/repository/DEFAULT/tjrC5OTds-VAdW8XqpcNSoowqFw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 12:48:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:6e:36:7d:f1:c2:fe:e4:7b:8a:dd:5c:29:dd:85:5e:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b63ac2e4e4ddb3e540756f17aa970d4a8a30a85c
Validity
Not Before: Oct 24 14:00:27 2026 GMT
Not After : Oct 25 14:00:27 2026 GMT
Subject: CN=a82b076477eaf729a7bf42effebb217946ac0209
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:4b:2c:6a:e7:c9:74:21:15:d9:1e:0a:38:62:
12:3c:b3:be:13:c4:c3:6e:66:10:d8:a7:bd:51:58:
6a:a4:c4:ad:27:4b:b7:1d:8b:f0:e4:f3:69:3f:11:
b2:54:13:81:ea:c0:cf:f8:38:1d:ad:f9:94:5e:9b:
38:03:2e:af:d1:7d:37:7b:f9:66:8d:c5:a1:c2:bd:
06:2c:71:ef:f0:1d:8b:ab:d0:ad:24:7f:b0:95:35:
04:2f:b0:5e:94:2b:3f:4b:8e:a1:76:35:43:0b:d2:
16:62:b7:6e:d2:f9:f5:06:a0:9c:50:16:ab:33:bd:
d0:1f:27:57:35:78:36:f5:d0:73:38:29:d7:56:69:
bc:1e:f0:f3:e9:b0:3d:26:f1:db:6d:b8:a6:f6:c2:
d3:1f:07:a8:6a:39:94:65:3b:0b:87:46:49:3f:fc:
3c:29:ee:c3:7d:27:e6:99:94:28:8d:ef:6e:16:ff:
4a:2a:fd:ff:6c:c3:0b:00:34:d6:cb:24:dc:d0:0a:
2c:92:4c:d1:5a:2c:ec:17:96:70:fa:5a:8c:19:b0:
ba:e4:cc:e7:72:1d:ad:e4:c0:df:d6:54:ea:a0:de:
d8:ed:4b:27:0f:2c:79:8d:e0:a4:14:4f:4b:57:52:
7d:91:be:f8:37:0d:9f:7e:93:73:7a:52:9b:58:04:
50:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:2B:07:64:77:EA:F7:29:A7:BF:42:EF:FE:BB:21:79:46:AC:02:09
X509v3 Authority Key Identifier:
keyid:B6:3A:C2:E4:E4:DD:B3:E5:40:75:6F:17:AA:97:0D:4A:8A:30:A8:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tjrC5OTds-VAdW8XqpcNSoowqFw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/6c7970-8cf8-4d3a-a230-d62e585c8161/1/tjrC5OTds-VAdW8XqpcNSoowqFw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/6c7970-8cf8-4d3a-a230-d62e585c8161/1/tjrC5OTds-VAdW8XqpcNSoowqFw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:eb:23:32:6a:05:79:6e:1a:f4:b9:83:c4:c6:04:f1:53:c8:
b8:20:11:f9:d8:f6:64:19:e0:71:47:fc:0f:ea:44:de:0f:c8:
4a:f6:9c:46:1a:e2:d7:61:86:ee:9f:09:e3:38:4a:ef:9e:6d:
3b:f0:1e:6a:a7:2b:d2:ee:6b:bd:2a:3e:e9:70:d7:bd:83:76:
30:2b:8c:ab:fc:81:e1:71:fe:21:38:de:7b:86:9d:1e:3c:bc:
7b:37:53:0d:19:cd:3d:4b:d0:43:22:99:40:02:31:ed:c2:a0:
7e:c9:b1:27:15:a7:ab:3b:9b:50:35:a0:0d:f8:84:4d:6b:7c:
80:bd:a1:4a:d4:75:16:55:26:4a:0e:86:ca:9a:d0:50:4d:26:
71:81:2e:ed:9d:bd:cf:fb:16:a0:d4:41:c6:f6:21:38:68:cb:
fc:a8:f6:87:b7:f5:c4:20:c6:c3:3f:5a:94:87:c0:01:a9:d4:
91:8d:39:19:c2:25:cf:10:2f:c1:49:3b:d0:09:fe:b5:9c:08:
13:ac:0e:64:ef:21:37:f3:0d:e3:b0:53:c1:29:c2:8c:c1:11:
ff:28:3a:25:1c:29:f2:91:a1:9d:3f:d8:23:23:b8:5b:56:38:
34:9e:19:f1:b4:f2:1d:87:49:15:f1:5a:b8:09:fc:34:2e:ad:
d1:62:0f:75
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFuNn3xwv7ke4rdXCndhV48MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI2M2FjMmU0ZTRkZGIzZTU0MDc1NmYxN2FhOTcwZDRhOGEz
MGE4NWMwHhcNMjYxMDI0MTQwMDI3WhcNMjYxMDI1MTQwMDI3WjAzMTEwLwYDVQQD
EyhhODJiMDc2NDc3ZWFmNzI5YTdiZjQyZWZmZWJiMjE3OTQ2YWMwMjA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtkssaufJdCEV2R4KOGISPLO+E8TD
bmYQ2Ke9UVhqpMStJ0u3HYvw5PNpPxGyVBOB6sDP+DgdrfmUXps4Ay6v0X03e/lm
jcWhwr0GLHHv8B2Lq9CtJH+wlTUEL7BelCs/S46hdjVDC9IWYrdu0vn1BqCcUBar
M73QHydXNXg29dBzOCnXVmm8HvDz6bA9JvHbbbim9sLTHweoajmUZTsLh0ZJP/w8
Ke7DfSfmmZQoje9uFv9KKv3/bMMLADTWyyTc0AoskkzRWizsF5Zw+lqMGbC65Mzn
ch2t5MDf1lTqoN7Y7UsnDyx5jeCkFE9LV1J9kb74Nw2ffpNzelKbWARQywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKgrB2R36vcpp79C7/67IXlGrAIJMB8GA1UdIwQY
MBaAFLY6wuTk3bPlQHVvF6qXDUqKMKhcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdGpyQzVPVGRzLVZBZFc4WHFwY05Tb293cUZ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni82Yzc5NzAtOGNmOC00ZDNhLWEyMzAt
ZDYyZTU4NWM4MTYxLzEvdGpyQzVPVGRzLVZBZFc4WHFwY05Tb293cUZ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ni82Yzc5NzAtOGNmOC00ZDNhLWEyMzAtZDYyZTU4NWM4MTYx
LzEvdGpyQzVPVGRzLVZBZFc4WHFwY05Tb293cUZ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN+sjMmoF
eW4a9LmDxMYE8VPIuCAR+dj2ZBngcUf8D+pE3g/ISvacRhri12GG7p8J4zhK755t
O/Aeaqcr0u5rvSo+6XDXvYN2MCuMq/yB4XH+ITjee4adHjy8ezdTDRnNPUvQQyKZ
QAIx7cKgfsmxJxWnqzubUDWgDfiETWt8gL2hStR1FlUmSg6GyprQUE0mcYEu7Z29
z/sWoNRBxvYhOGjL/Kj2h7f1xCDGwz9alIfAAanUkY05GcIlzxAvwUk70An+tZwI
E6wOZO8hN/MN47BTwSnCjMER/yg6JRwp8pGhnT/YIyO4W1Y4NJ4Z8bTyHYdJFfFa
uAn8NC6t0WIPdQ==
-----END CERTIFICATE-----
Generated at Sat Oct 24 18:43:55 2026 by rpki-client