Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/0caa6d-109e-45f3-a932-475c5c91f474/1/tGTgryi3VcTsiAENlCmGl9GIOTM.mft
File: tGTgryi3VcTsiAENlCmGl9GIOTM.mft (raw, json)
Hash identifier: QxQq7YnpNcl4beWuK1Z4KKD22peLx6SPG8ZNOWNmtfE=
Subject key identifier: 07:E8:5A:62:69:97:06:7D:77:76:C7:92:75:66:3F:AB:ED:BA:62:05
Authority key identifier: B4:64:E0:AF:28:B7:55:C4:EC:88:01:0D:94:29:86:97:D1:88:39:33
Certificate issuer: /CN=b464e0af28b755c4ec88010d94298697d1883933
Certificate serial: 019DCE2BBE44D03D58905B358F0B83A1EE66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tGTgryi3VcTsiAENlCmGl9GIOTM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/0caa6d-109e-45f3-a932-475c5c91f474/1/tGTgryi3VcTsiAENlCmGl9GIOTM.mft
Manifest number: 0AA1
Signing time: Mon 27 Apr 2026 09:01:06 +0000
Manifest this update: Mon 27 Apr 2026 09:01:06 +0000
Manifest next update: Tue 28 Apr 2026 09:01:06 +0000
Files and hashes: 1: dT7xB_AVDGhZ5iHb3OqIlsrmGmQ.roa (hash: 9I6NB6tgwzenrbz6TZapLlG56NaY3o8KJFSGZlT7HFk=)
2: s1suhFRxtQqXFfjNjSFyRNz1-dY.roa (hash: B73+BcivVDYXNoW7reCUol9H0cBeuwXyj3jXoDEGt/E=)
3: tGTgryi3VcTsiAENlCmGl9GIOTM.crl (hash: Kuh3KYQWWovWbmsrnzuRhrM5DEfxl/oDyriY8FNotLg=)
4: urEWBZOnm7WKMhvQTm1izzcCYag.roa (hash: FEAeulBV1KrK3TH9JavCA4eeT7PWhs/mcBsPYnO8hB8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/0caa6d-109e-45f3-a932-475c5c91f474/1/tGTgryi3VcTsiAENlCmGl9GIOTM.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/0caa6d-109e-45f3-a932-475c5c91f474/1/tGTgryi3VcTsiAENlCmGl9GIOTM.mft
rsync://rpki.ripe.net/repository/DEFAULT/tGTgryi3VcTsiAENlCmGl9GIOTM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ce:2b:be:44:d0:3d:58:90:5b:35:8f:0b:83:a1:ee:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b464e0af28b755c4ec88010d94298697d1883933
Validity
Not Before: Apr 27 09:01:06 2026 GMT
Not After : Apr 28 09:01:06 2026 GMT
Subject: CN=07e85a626997067d7776c79275663fabedba6205
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:a7:1c:29:0b:4b:b6:59:ab:25:4b:0a:b8:0e:
aa:6d:ba:7c:41:9a:07:d7:6f:ab:e8:a8:9d:23:0c:
dd:9f:3a:ba:80:ff:b7:3e:3d:13:d3:35:da:ee:06:
d9:98:f2:80:66:a8:4d:90:e3:12:b5:a7:0c:e0:e2:
ec:3d:89:ce:4f:59:ba:87:7b:fe:57:e1:79:6c:53:
18:2b:a0:f2:32:10:7f:c8:c2:89:3a:a6:17:e0:7a:
ae:74:d1:8c:e6:f5:ad:1a:67:e7:86:b0:bb:ca:d2:
aa:c4:02:48:11:3f:36:e6:5a:e4:ec:bb:3c:71:d9:
31:f7:bb:6a:d3:1b:61:29:26:f8:a3:d7:94:98:77:
68:36:69:a6:c5:ad:04:6c:2c:21:51:d9:ca:c8:07:
f1:dc:ec:7a:b1:93:70:25:bc:03:c7:10:68:a6:60:
84:0c:da:6b:a0:c1:a2:1d:e9:58:4a:58:64:93:0a:
f1:68:2a:51:2e:91:5c:07:53:91:a8:43:06:3d:c9:
7d:45:ef:52:25:06:cb:a0:fb:7a:0a:a9:f9:1b:0b:
84:1b:9f:1a:00:c9:12:20:a0:76:d2:98:39:8d:ee:
1d:e9:b6:87:6c:ed:17:b9:78:1e:07:31:ff:48:32:
f7:44:b9:e7:19:ae:8f:24:31:da:3b:e9:66:9d:e4:
85:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:E8:5A:62:69:97:06:7D:77:76:C7:92:75:66:3F:AB:ED:BA:62:05
X509v3 Authority Key Identifier:
keyid:B4:64:E0:AF:28:B7:55:C4:EC:88:01:0D:94:29:86:97:D1:88:39:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tGTgryi3VcTsiAENlCmGl9GIOTM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/0caa6d-109e-45f3-a932-475c5c91f474/1/tGTgryi3VcTsiAENlCmGl9GIOTM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/0caa6d-109e-45f3-a932-475c5c91f474/1/tGTgryi3VcTsiAENlCmGl9GIOTM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:4b:d9:aa:50:4d:a6:7f:c2:05:da:fa:d7:82:6b:6d:de:42:
b1:50:62:bf:00:a5:dc:21:ed:1f:83:f1:42:f5:df:77:e4:17:
c4:86:31:a1:e5:32:95:62:e9:91:f4:ac:4f:a9:3b:8c:e5:99:
1a:ba:30:03:c5:04:d7:cd:5e:8e:dc:a4:a7:f5:46:04:6c:ba:
18:3f:08:78:0f:20:7d:62:0a:61:ae:89:05:43:27:bc:1e:60:
a0:03:e5:f7:88:e7:56:c0:7a:3c:de:d0:4d:31:c1:c9:eb:a3:
a6:e7:4f:b1:1d:b6:cf:61:2b:2e:ef:5b:6a:83:b3:b5:6d:b4:
02:23:9e:c0:1a:d7:2c:cb:a9:1e:b3:89:8e:a8:58:16:3e:22:
f6:54:2f:99:80:5a:ad:cf:e6:eb:df:e8:6c:40:96:96:97:b4:
55:28:ee:72:93:e4:f1:c5:7b:14:c8:6e:01:51:dd:52:06:e2:
19:1c:6a:a9:c5:8a:a1:63:4b:ba:1a:a8:6f:f2:ad:e9:4d:48:
54:8e:28:2e:cf:7c:62:fa:fd:8a:eb:98:06:49:62:68:3d:cd:
42:03:29:22:42:13:4f:d7:37:60:08:06:14:42:17:3d:9c:c3:
ad:72:1b:21:03:b7:a6:87:9a:64:23:25:c1:ce:b9:97:0a:dd:
79:99:fb:e5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3OK75E0D1YkFs1jwuDoe5mMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0NjRlMGFmMjhiNzU1YzRlYzg4MDEwZDk0Mjk4Njk3ZDE4
ODM5MzMwHhcNMjYwNDI3MDkwMTA2WhcNMjYwNDI4MDkwMTA2WjAzMTEwLwYDVQQD
EygwN2U4NWE2MjY5OTcwNjdkNzc3NmM3OTI3NTY2M2ZhYmVkYmE2MjA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlaccKQtLtlmrJUsKuA6qbbp8QZoH
12+r6KidIwzdnzq6gP+3Pj0T0zXa7gbZmPKAZqhNkOMStacM4OLsPYnOT1m6h3v+
V+F5bFMYK6DyMhB/yMKJOqYX4HqudNGM5vWtGmfnhrC7ytKqxAJIET825lrk7Ls8
cdkx97tq0xthKSb4o9eUmHdoNmmmxa0EbCwhUdnKyAfx3Ox6sZNwJbwDxxBopmCE
DNproMGiHelYSlhkkwrxaCpRLpFcB1ORqEMGPcl9Re9SJQbLoPt6Cqn5GwuEG58a
AMkSIKB20pg5je4d6baHbO0XuXgeBzH/SDL3RLnnGa6PJDHaO+lmneSFdwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAfoWmJplwZ9d3bHknVmP6vtumIFMB8GA1UdIwQY
MBaAFLRk4K8ot1XE7IgBDZQphpfRiDkzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdEdUZ3J5aTNWY1RzaUFFTmxDbUdsOUdJT1RNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS8wY2FhNmQtMTA5ZS00NWYzLWE5MzIt
NDc1YzVjOTFmNDc0LzEvdEdUZ3J5aTNWY1RzaUFFTmxDbUdsOUdJT1RNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85YS8wY2FhNmQtMTA5ZS00NWYzLWE5MzItNDc1YzVjOTFmNDc0
LzEvdEdUZ3J5aTNWY1RzaUFFTmxDbUdsOUdJT1RNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ0vZqlBN
pn/CBdr614Jrbd5CsVBivwCl3CHtH4PxQvXfd+QXxIYxoeUylWLpkfSsT6k7jOWZ
GrowA8UE181ejtykp/VGBGy6GD8IeA8gfWIKYa6JBUMnvB5goAPl94jnVsB6PN7Q
TTHByeujpudPsR22z2ErLu9baoOztW20AiOewBrXLMupHrOJjqhYFj4i9lQvmYBa
rc/m69/obECWlpe0VSjucpPk8cV7FMhuAVHdUgbiGRxqqcWKoWNLuhqob/Kt6U1I
VI4oLs98Yvr9iuuYBkliaD3NQgMpIkITT9c3YAgGFEIXPZzDrXIbIQO3poeaZCMl
wc65lwrdeZn75Q==
-----END CERTIFICATE-----
Generated at Mon Apr 27 12:39:35 2026 by rpki-client