Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/be/b8e773-4e71-4d09-b74a-b27f552672e0/1/TjwBugxcvyCuPpPKPTeeYt9clZo.mft
File: TjwBugxcvyCuPpPKPTeeYt9clZo.mft (raw, json)
Hash identifier: e1OxQ2CNpW4No6aWLYRmH5qIVxgUey4Zb5Po4p3KXPg=
Subject key identifier: 34:A2:42:07:06:A3:40:E2:8F:84:92:D6:61:DF:71:A9:D8:19:A4:05
Authority key identifier: 4E:3C:01:BA:0C:5C:BF:20:AE:3E:93:CA:3D:37:9E:62:DF:5C:95:9A
Certificate issuer: /CN=4e3c01ba0c5cbf20ae3e93ca3d379e62df5c959a
Certificate serial: 01A1065BF69D45D61D6FCF08CC1389EE715F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TjwBugxcvyCuPpPKPTeeYt9clZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/b8e773-4e71-4d09-b74a-b27f552672e0/1/TjwBugxcvyCuPpPKPTeeYt9clZo.mft
Manifest number: 1A88
Signing time: Sun 04 Oct 2026 10:00:52 +0000
Manifest this update: Sun 04 Oct 2026 10:00:52 +0000
Manifest next update: Mon 05 Oct 2026 10:00:52 +0000
Files and hashes: 1: FjQD5obfjitF4TyVNiOnrUuu6ko.roa (hash: 4qN5nXtzPSFJUF4nfX9RAWVMRw9xA5tlQvP0vuood6U=)
2: TjwBugxcvyCuPpPKPTeeYt9clZo.crl (hash: LKDgqx0EW/sWdPfazj5zQ9rwoPrW9jE1+UBWK6cU3oc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/b8e773-4e71-4d09-b74a-b27f552672e0/1/TjwBugxcvyCuPpPKPTeeYt9clZo.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/b8e773-4e71-4d09-b74a-b27f552672e0/1/TjwBugxcvyCuPpPKPTeeYt9clZo.mft
rsync://rpki.ripe.net/repository/DEFAULT/TjwBugxcvyCuPpPKPTeeYt9clZo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 10:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:06:5b:f6:9d:45:d6:1d:6f:cf:08:cc:13:89:ee:71:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e3c01ba0c5cbf20ae3e93ca3d379e62df5c959a
Validity
Not Before: Oct 4 10:00:52 2026 GMT
Not After : Oct 5 10:00:52 2026 GMT
Subject: CN=34a2420706a340e28f8492d661df71a9d819a405
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:3f:cc:aa:19:c9:e6:99:71:4e:2c:73:b2:7b:
45:04:5e:34:d0:4f:a5:81:63:87:b6:a4:1a:42:ba:
93:a8:21:ad:6f:20:4c:0e:1e:c8:c7:ea:5b:c7:0d:
85:a6:1a:e6:61:2a:cc:27:03:1e:c9:9b:99:8e:95:
e3:b3:2e:11:ae:30:4c:32:12:b2:cb:e7:27:36:6a:
bd:bf:0d:f3:87:b4:51:52:0b:49:7b:01:4e:87:79:
d9:f6:cb:c1:0c:0c:c9:61:a2:ca:30:47:93:e3:f2:
25:b3:56:ae:fa:75:b7:45:58:bb:60:11:9a:7a:c0:
cd:97:33:bb:22:cc:2a:ab:a5:20:fc:f8:5a:55:2e:
d8:af:71:e3:15:11:cd:19:ff:61:02:75:dd:cf:7e:
90:7a:06:3c:94:0c:26:79:99:04:a7:10:26:f8:bf:
1a:1b:53:33:b3:f2:01:ab:22:b2:75:74:b8:16:49:
15:21:88:f3:50:2e:5b:e8:13:c6:bc:b0:4b:1d:f3:
97:7f:b9:eb:ae:27:aa:23:03:4a:9a:f0:d3:d5:45:
74:09:2d:4e:e0:89:18:bb:0b:21:83:11:c5:f4:66:
54:31:b6:a3:b8:b3:0e:bc:49:ed:83:cf:b5:93:81:
a0:b2:89:f9:41:90:90:9a:09:1a:b5:a0:a1:63:b2:
aa:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:A2:42:07:06:A3:40:E2:8F:84:92:D6:61:DF:71:A9:D8:19:A4:05
X509v3 Authority Key Identifier:
keyid:4E:3C:01:BA:0C:5C:BF:20:AE:3E:93:CA:3D:37:9E:62:DF:5C:95:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TjwBugxcvyCuPpPKPTeeYt9clZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b8e773-4e71-4d09-b74a-b27f552672e0/1/TjwBugxcvyCuPpPKPTeeYt9clZo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b8e773-4e71-4d09-b74a-b27f552672e0/1/TjwBugxcvyCuPpPKPTeeYt9clZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:db:72:83:9d:ea:83:c7:13:46:c7:ab:32:60:5c:2d:bb:30:
ef:bb:37:fc:c6:e5:1c:64:f1:e2:45:f1:97:52:b3:f3:8c:92:
b0:f1:27:fa:ff:f6:53:4e:d9:b6:81:ff:e6:e7:d5:db:02:12:
b9:23:13:27:74:75:c3:99:5f:81:4e:71:75:47:c3:1d:13:ea:
8d:96:e9:5c:86:d7:bc:8b:8f:5e:50:bc:80:6e:b7:af:04:84:
7d:45:d7:58:73:9c:a2:0f:2f:1b:33:4d:c0:b5:c0:c3:be:53:
25:2b:94:3d:cb:3a:c6:26:34:fe:be:31:a8:d2:6c:24:b8:f7:
a9:25:a7:10:d0:ea:b2:14:d1:cc:aa:cc:3a:bd:9e:89:db:04:
cd:c1:5e:0a:14:9e:be:5f:a0:5d:84:15:64:e5:09:bf:33:9c:
9b:7a:8c:c4:c7:e3:33:5f:4a:f7:ba:23:18:11:f9:63:51:b9:
0f:b6:dd:6f:d3:0a:58:74:21:7b:83:05:8a:48:29:b3:bd:f0:
4c:7e:b0:77:76:0b:7e:e7:16:fd:65:f4:54:80:8b:28:e7:64:
b1:ad:5f:99:2b:ff:9d:0c:43:55:b3:d7:d4:e1:aa:81:c4:c4:
d8:39:87:9b:f9:66:1d:f4:dc:c3:a2:7e:21:0f:5b:ec:67:3e:
84:e5:3b:49
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEGW/adRdYdb88IzBOJ7nFfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRlM2MwMWJhMGM1Y2JmMjBhZTNlOTNjYTNkMzc5ZTYyZGY1
Yzk1OWEwHhcNMjYxMDA0MTAwMDUyWhcNMjYxMDA1MTAwMDUyWjAzMTEwLwYDVQQD
EygzNGEyNDIwNzA2YTM0MGUyOGY4NDkyZDY2MWRmNzFhOWQ4MTlhNDA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnj/MqhnJ5plxTixzsntFBF400E+l
gWOHtqQaQrqTqCGtbyBMDh7Ix+pbxw2FphrmYSrMJwMeyZuZjpXjsy4RrjBMMhKy
y+cnNmq9vw3zh7RRUgtJewFOh3nZ9svBDAzJYaLKMEeT4/Ils1au+nW3RVi7YBGa
esDNlzO7Iswqq6Ug/PhaVS7Yr3HjFRHNGf9hAnXdz36QegY8lAwmeZkEpxAm+L8a
G1Mzs/IBqyKydXS4FkkVIYjzUC5b6BPGvLBLHfOXf7nrrieqIwNKmvDT1UV0CS1O
4IkYuwshgxHF9GZUMbajuLMOvEntg8+1k4Ggson5QZCQmgkataChY7KqJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDSiQgcGo0Dij4SS1mHfcanYGaQFMB8GA1UdIwQY
MBaAFE48AboMXL8grj6Tyj03nmLfXJWaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVGp3QnVneGN2eUN1UHBQS1BUZWVZdDljbFpvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS9iOGU3NzMtNGU3MS00ZDA5LWI3NGEt
YjI3ZjU1MjY3MmUwLzEvVGp3QnVneGN2eUN1UHBQS1BUZWVZdDljbFpvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS9iOGU3NzMtNGU3MS00ZDA5LWI3NGEtYjI3ZjU1MjY3MmUw
LzEvVGp3QnVneGN2eUN1UHBQS1BUZWVZdDljbFpvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAattyg53q
g8cTRserMmBcLbsw77s3/MblHGTx4kXxl1Kz84ySsPEn+v/2U07ZtoH/5ufV2wIS
uSMTJ3R1w5lfgU5xdUfDHRPqjZbpXIbXvIuPXlC8gG63rwSEfUXXWHOcog8vGzNN
wLXAw75TJSuUPcs6xiY0/r4xqNJsJLj3qSWnENDqshTRzKrMOr2eidsEzcFeChSe
vl+gXYQVZOUJvzOcm3qMxMfjM19K97ojGBH5Y1G5D7bdb9MKWHQhe4MFikgps73w
TH6wd3YLfucW/WX0VICLKOdksa1fmSv/nQxDVbPX1OGqgcTE2DmHm/lmHfTcw6J+
IQ9b7Gc+hOU7SQ==
-----END CERTIFICATE-----
Generated at Sun Oct 4 19:04:54 2026 by rpki-client