Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9a/0caa6d-109e-45f3-a932-475c5c91f474/1/tGTgryi3VcTsiAENlCmGl9GIOTM.mft
File: tGTgryi3VcTsiAENlCmGl9GIOTM.mft (raw, json)
Hash identifier: tJwPsY1ibS3kGA+/w5TUHn6AVJpLJOfuELbQUdKHFL4=
Subject key identifier: CC:A1:B9:84:87:7C:58:AD:42:68:01:D8:BC:BA:37:5E:8E:1D:20:3B
Authority key identifier: B4:64:E0:AF:28:B7:55:C4:EC:88:01:0D:94:29:86:97:D1:88:39:33
Certificate issuer: /CN=b464e0af28b755c4ec88010d94298697d1883933
Certificate serial: 01A08B3101722D97A38F64C0A6EBA2D41D4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tGTgryi3VcTsiAENlCmGl9GIOTM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/0caa6d-109e-45f3-a932-475c5c91f474/1/tGTgryi3VcTsiAENlCmGl9GIOTM.mft
Manifest number: 0C0C
Signing time: Thu 10 Sep 2026 12:00:39 +0000
Manifest this update: Thu 10 Sep 2026 12:00:39 +0000
Manifest next update: Fri 11 Sep 2026 12:00:39 +0000
Files and hashes: 1: dT7xB_AVDGhZ5iHb3OqIlsrmGmQ.roa (hash: 9I6NB6tgwzenrbz6TZapLlG56NaY3o8KJFSGZlT7HFk=)
2: s1suhFRxtQqXFfjNjSFyRNz1-dY.roa (hash: B73+BcivVDYXNoW7reCUol9H0cBeuwXyj3jXoDEGt/E=)
3: tGTgryi3VcTsiAENlCmGl9GIOTM.crl (hash: jTVauB5S2Fzq/5meE2rK2fn+Kuz6whDGYFVM8R7nAkE=)
4: urEWBZOnm7WKMhvQTm1izzcCYag.roa (hash: FEAeulBV1KrK3TH9JavCA4eeT7PWhs/mcBsPYnO8hB8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/0caa6d-109e-45f3-a932-475c5c91f474/1/tGTgryi3VcTsiAENlCmGl9GIOTM.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/0caa6d-109e-45f3-a932-475c5c91f474/1/tGTgryi3VcTsiAENlCmGl9GIOTM.mft
rsync://rpki.ripe.net/repository/DEFAULT/tGTgryi3VcTsiAENlCmGl9GIOTM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 12:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:31:01:72:2d:97:a3:8f:64:c0:a6:eb:a2:d4:1d:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b464e0af28b755c4ec88010d94298697d1883933
Validity
Not Before: Sep 10 12:00:39 2026 GMT
Not After : Sep 11 12:00:39 2026 GMT
Subject: CN=cca1b984877c58ad426801d8bcba375e8e1d203b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:57:96:da:63:7e:f2:8b:4c:21:3b:eb:79:4e:
7a:77:7e:e0:41:41:a5:a8:05:a5:2b:17:e3:bc:53:
b3:aa:d6:dc:35:01:b5:e8:89:06:87:d6:a3:11:66:
cf:16:44:02:d1:a5:91:f9:e8:9f:43:d0:35:16:a4:
f0:d0:5f:f5:2f:3d:b6:ef:8b:b5:7f:00:cd:b8:61:
7d:ac:2d:61:1c:61:3b:f3:a0:3a:cd:a0:c2:59:f1:
b9:61:f8:3a:05:f1:92:31:06:8e:bc:df:0c:c8:38:
77:c0:92:db:cc:a4:1e:e9:97:f3:31:57:30:d7:57:
40:d2:c3:c3:d0:5c:8d:78:49:6c:21:c4:72:21:bb:
4f:7f:6a:89:3b:bb:ab:9a:81:10:9b:64:21:b0:36:
0a:35:cf:a2:d4:89:eb:a1:e4:2e:eb:80:d4:f7:5f:
73:4f:f5:40:ec:3e:dd:0b:45:f5:3e:bb:a8:d0:87:
a8:9c:1f:2e:50:d2:1c:7e:75:7f:2a:5e:1e:bc:20:
8c:96:88:bf:8c:db:d9:05:88:e4:24:4e:c0:b9:61:
1e:33:44:09:1c:25:65:63:39:1d:b6:d3:1b:a6:54:
f6:21:15:87:ce:73:89:5c:ad:4a:5e:a0:98:54:5a:
d1:d4:87:a1:28:39:bc:df:13:10:b3:f2:98:41:56:
21:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:A1:B9:84:87:7C:58:AD:42:68:01:D8:BC:BA:37:5E:8E:1D:20:3B
X509v3 Authority Key Identifier:
keyid:B4:64:E0:AF:28:B7:55:C4:EC:88:01:0D:94:29:86:97:D1:88:39:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tGTgryi3VcTsiAENlCmGl9GIOTM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/0caa6d-109e-45f3-a932-475c5c91f474/1/tGTgryi3VcTsiAENlCmGl9GIOTM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/0caa6d-109e-45f3-a932-475c5c91f474/1/tGTgryi3VcTsiAENlCmGl9GIOTM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:10:1c:05:3f:7e:55:2d:45:61:1b:7a:47:58:f2:91:98:f1:
80:4a:4b:7e:0f:c5:cf:85:23:86:6c:1f:93:a3:c8:23:60:0d:
31:6e:6e:bf:5d:5a:67:3e:6f:5f:19:e5:d4:8e:45:c8:13:35:
df:71:15:95:79:dd:82:78:1a:94:42:47:0b:ad:3d:7f:86:6e:
00:f8:23:98:a7:f4:68:4a:b8:ca:fb:35:46:ea:dc:8f:7b:9c:
e1:c5:53:1b:77:8a:4a:c5:cb:91:98:cb:6f:36:49:39:b7:89:
af:60:f5:f0:22:ac:58:2c:49:d5:bd:99:4b:16:7a:d7:4a:c9:
c9:db:22:a7:b7:24:9f:4f:81:29:98:79:53:11:21:0e:af:fc:
e9:98:c5:5f:6b:b5:41:fe:5a:bc:15:d1:26:62:22:c3:c8:d1:
1e:b9:6b:c3:af:7d:d3:77:bf:94:04:da:a0:cd:0e:00:47:15:
bd:7f:02:c2:69:77:fc:43:5b:70:dc:16:46:f3:2c:f4:d1:c8:
04:3b:75:3f:38:31:18:7e:b7:2d:95:c8:e0:77:70:ee:ea:1e:
7e:0c:b4:00:dd:61:c5:89:a5:d2:c8:de:37:29:67:68:bf:1f:
d0:7b:a1:bd:8e:be:ae:de:ab:d6:ea:77:60:d6:ee:48:d4:8d:
a2:4d:75:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 18:27:49 2026 by rpki-client