Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9d/6e9dfd-ce47-4e61-a315-e5aa74700f9d/1/TGHRGEebUiLvD4ZBZ8rFtMB8whk.mft
File: TGHRGEebUiLvD4ZBZ8rFtMB8whk.mft (raw, json)
Hash identifier: 85zGzh5EMzm75ffp90gI71h7+CiFw1EIGIqoumS2ZTo=
Subject key identifier: 72:9A:9B:50:2F:C0:48:EB:11:B1:F7:2C:29:61:E1:D5:1C:4A:8C:4C
Authority key identifier: 4C:61:D1:18:47:9B:52:22:EF:0F:86:41:67:CA:C5:B4:C0:7C:C2:19
Certificate issuer: /CN=4c61d118479b5222ef0f864167cac5b4c07cc219
Certificate serial: 01A08A55792E27ECE80E3B207602F03504D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TGHRGEebUiLvD4ZBZ8rFtMB8whk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/6e9dfd-ce47-4e61-a315-e5aa74700f9d/1/TGHRGEebUiLvD4ZBZ8rFtMB8whk.mft
Manifest number: 1A48
Signing time: Thu 10 Sep 2026 08:00:52 +0000
Manifest this update: Thu 10 Sep 2026 08:00:52 +0000
Manifest next update: Fri 11 Sep 2026 08:00:52 +0000
Files and hashes: 1: TGHRGEebUiLvD4ZBZ8rFtMB8whk.crl (hash: ZOKSrBZJn0Cl1kcoG68IKdyBXgHaKRoQX7BosbSjLRc=)
2: gAYzl20xItIY_WqWVJ6f2CElDXs.roa (hash: 1hpv0IAqRBDo5f2z8yJyt+CBplx7y1IUryRuOQtPjKE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/6e9dfd-ce47-4e61-a315-e5aa74700f9d/1/TGHRGEebUiLvD4ZBZ8rFtMB8whk.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/6e9dfd-ce47-4e61-a315-e5aa74700f9d/1/TGHRGEebUiLvD4ZBZ8rFtMB8whk.mft
rsync://rpki.ripe.net/repository/DEFAULT/TGHRGEebUiLvD4ZBZ8rFtMB8whk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 08:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:55:79:2e:27:ec:e8:0e:3b:20:76:02:f0:35:04:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c61d118479b5222ef0f864167cac5b4c07cc219
Validity
Not Before: Sep 10 08:00:52 2026 GMT
Not After : Sep 11 08:00:52 2026 GMT
Subject: CN=729a9b502fc048eb11b1f72c2961e1d51c4a8c4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:72:36:73:2b:6b:f4:54:4c:fb:1d:5f:a5:b4:
ae:3d:70:b6:fa:8b:ae:db:d7:1b:30:69:65:08:44:
89:60:71:ba:35:b7:c4:1d:99:d2:94:c6:3a:db:5f:
bf:22:df:9a:f7:39:c7:41:86:c8:5f:df:df:be:82:
46:b6:e6:84:48:80:3a:0b:29:57:d0:61:b9:5d:a2:
79:63:f6:09:01:eb:4e:18:83:dc:f3:1f:f4:1e:75:
66:9b:ee:9e:fc:93:23:12:ca:41:fb:ff:d9:cb:3f:
32:b6:85:bc:aa:b6:4f:55:64:30:34:65:09:b3:83:
58:2b:b9:39:66:c6:d3:a1:d4:c9:93:d9:03:a8:0f:
7b:ff:cc:07:9a:20:52:c2:08:e4:7d:e0:b3:31:9c:
54:7d:c0:da:d8:e1:04:02:99:94:2c:ce:23:0e:77:
27:80:88:13:08:9c:e0:85:a7:5c:4b:34:55:a2:8a:
51:28:25:42:46:f9:88:89:df:cb:15:47:02:b0:f0:
ce:e8:f0:d1:4e:d8:84:4d:16:93:6c:f3:96:80:f8:
35:fe:dc:11:d5:db:fc:71:4f:f9:05:a3:57:b7:03:
57:d4:66:2e:36:97:77:91:23:51:e7:c3:e3:dd:bb:
85:32:92:c7:e2:c9:e9:42:87:f7:5b:15:0a:df:67:
21:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:9A:9B:50:2F:C0:48:EB:11:B1:F7:2C:29:61:E1:D5:1C:4A:8C:4C
X509v3 Authority Key Identifier:
keyid:4C:61:D1:18:47:9B:52:22:EF:0F:86:41:67:CA:C5:B4:C0:7C:C2:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TGHRGEebUiLvD4ZBZ8rFtMB8whk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/6e9dfd-ce47-4e61-a315-e5aa74700f9d/1/TGHRGEebUiLvD4ZBZ8rFtMB8whk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/6e9dfd-ce47-4e61-a315-e5aa74700f9d/1/TGHRGEebUiLvD4ZBZ8rFtMB8whk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:f5:9d:30:28:90:53:1e:6c:b5:94:5d:6e:7b:d4:27:66:d2:
ef:3c:c7:63:95:9b:7d:33:94:c3:4c:e2:ae:de:a6:89:52:d4:
d7:a3:f6:82:49:3b:1c:4e:5c:43:3a:26:8d:ff:6b:62:17:b9:
0d:ec:9d:73:c2:b1:a6:c4:d7:6c:72:26:d5:52:bd:a1:cc:12:
d0:38:90:4b:95:39:91:fe:94:4f:27:ab:fe:8f:91:de:a5:47:
46:3f:e7:be:13:dc:13:4c:06:5f:7e:63:75:1e:57:a6:4b:23:
ca:8e:3f:04:01:ca:79:08:ee:7c:78:18:d3:5a:2a:17:6d:df:
53:f2:37:bb:a6:dc:16:ab:73:3d:55:c3:6b:3f:31:aa:9d:e9:
a7:3a:7c:70:ca:14:18:49:75:2c:82:53:9c:96:0f:60:81:ca:
0e:31:0c:a5:9f:ef:08:91:3d:8e:bd:cd:7f:32:c8:3f:37:9b:
59:e5:2d:34:fe:bc:73:89:cb:13:be:ec:de:1f:ce:ff:06:0a:
24:fa:e2:a6:6e:dc:cf:84:fc:ed:99:b8:a6:17:93:25:2c:2e:
6b:bf:6b:8d:d4:27:82:8d:ec:26:fc:68:48:68:3b:86:67:6c:
46:a7:e7:d4:3c:b9:af:d7:a8:6b:2d:b6:04:75:12:e0:a9:47:
24:c1:72:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 19:01:37 2026 by rpki-client