Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d7/151c6c-617c-4643-9f6e-69809d8b9c20/1/TMxgSVsqNNiSEcwceVJOq2G6FlY.mft
File: TMxgSVsqNNiSEcwceVJOq2G6FlY.mft (raw, json)
Hash identifier: RxKPQISQZ0Lmxg4XG88GcDOoos6pINJGYZ/oPK8Wo8E=
Subject key identifier: C7:26:76:E5:19:31:B7:4C:EC:73:17:C2:80:F0:34:29:F0:07:B1:B5
Authority key identifier: 4C:CC:60:49:5B:2A:34:D8:92:11:CC:1C:79:52:4E:AB:61:BA:16:56
Certificate issuer: /CN=4ccc60495b2a34d89211cc1c79524eab61ba1656
Certificate serial: 01A17770668C607AD71965CEDAEC99C88DBA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TMxgSVsqNNiSEcwceVJOq2G6FlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/151c6c-617c-4643-9f6e-69809d8b9c20/1/TMxgSVsqNNiSEcwceVJOq2G6FlY.mft
Manifest number: 1AC4
Signing time: Mon 26 Oct 2026 09:00:17 +0000
Manifest this update: Mon 26 Oct 2026 09:00:17 +0000
Manifest next update: Tue 27 Oct 2026 09:00:17 +0000
Files and hashes: 1: EuzrvuKdTBEUT1iTSTu2oWpyl08.roa (hash: 6lfE37g+270FUBODA6XRsyANZt1xmAjhCCTH8Dga4fo=)
2: HKK9g6Hqt_cBY1AbSvefDUFZRlo.roa (hash: MqB9AcT2/OThR4+/4lhCs0wiEEPqRX8xFMsmjXA2ijw=)
3: L2kVxbfcMS2nv-PBLG1ThCSQCJM.roa (hash: vnnfABGEtbcmc5yS9HseTFPLNWl4SZGd7BuXLhUduKk=)
4: OBx05QEiDP1Vr5e_268J9tar1QE.roa (hash: TIpDQvAlekr1QcZvuTryLbf0wSjkmsau0xJ8uS3rJTc=)
5: TMxgSVsqNNiSEcwceVJOq2G6FlY.crl (hash: lze248mPYkVVe8JgiBR6B8OLG0LNm8eTb3M3gUNVwe0=)
6: aJ9nGingvVJG2rrpEQGIL8zeAfM.roa (hash: TBYvSsMt/clFuSfyvBUudu0SSYbKGlrFpuon89ZE5XU=)
7: bq_R2KuxT4atP4GNyi-WGk7ZHgI.roa (hash: ukHJbM0cPkDakME1wOGsLKMQaAIR4oQCPsvSvUhBbpE=)
8: lVdGF_smtjS2TJKO4-LgPM2UQ68.roa (hash: PODlANzvqjtbQ7kYZBP4/mKZdgr3aujboqFbWAkNa1o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/151c6c-617c-4643-9f6e-69809d8b9c20/1/TMxgSVsqNNiSEcwceVJOq2G6FlY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/151c6c-617c-4643-9f6e-69809d8b9c20/1/TMxgSVsqNNiSEcwceVJOq2G6FlY.mft
rsync://rpki.ripe.net/repository/DEFAULT/TMxgSVsqNNiSEcwceVJOq2G6FlY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 02:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:77:70:66:8c:60:7a:d7:19:65:ce:da:ec:99:c8:8d:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ccc60495b2a34d89211cc1c79524eab61ba1656
Validity
Not Before: Oct 26 09:00:17 2026 GMT
Not After : Oct 27 09:00:17 2026 GMT
Subject: CN=c72676e51931b74cec7317c280f03429f007b1b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:98:6f:81:72:db:1e:aa:c7:b8:b6:fc:b7:00:
94:13:8e:0a:56:cd:0a:17:26:b9:ef:43:72:7c:17:
1c:fe:91:3b:63:55:91:62:55:3b:45:e7:c1:3a:6e:
71:8a:53:ed:33:da:2c:f6:04:d7:d9:d2:12:17:7f:
e4:0e:4b:94:89:d8:79:36:9a:0e:af:9f:6b:4d:95:
10:c0:6e:99:38:12:47:a3:59:05:75:87:cd:90:86:
07:3e:41:a2:d6:f8:0a:1a:72:52:56:a7:57:84:86:
c0:ae:fd:f0:bc:bc:70:5e:a2:b1:3a:c8:04:2e:6b:
f5:11:cf:56:4c:17:33:63:8e:bc:c6:cf:cd:8a:0f:
03:8d:cc:6d:45:38:f7:5d:8a:09:0b:c8:bb:bc:fb:
3e:4e:73:18:81:38:d4:4b:39:a6:2f:5d:12:ca:7a:
bc:60:f4:9b:14:6f:a1:1d:d1:da:f7:a3:df:38:f1:
5d:68:00:27:be:5b:8e:af:62:1f:01:73:7c:5f:8e:
c6:aa:ff:de:a3:f8:1d:06:ab:55:d8:48:71:ee:41:
d7:39:c7:82:2b:79:59:f6:c6:66:ab:a5:f1:38:54:
8c:bd:e3:e7:2e:04:b7:f9:e9:28:34:e3:19:63:04:
ce:ae:12:b8:11:a8:13:6b:92:7a:0f:1b:7f:35:c3:
d1:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:26:76:E5:19:31:B7:4C:EC:73:17:C2:80:F0:34:29:F0:07:B1:B5
X509v3 Authority Key Identifier:
keyid:4C:CC:60:49:5B:2A:34:D8:92:11:CC:1C:79:52:4E:AB:61:BA:16:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TMxgSVsqNNiSEcwceVJOq2G6FlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/151c6c-617c-4643-9f6e-69809d8b9c20/1/TMxgSVsqNNiSEcwceVJOq2G6FlY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/151c6c-617c-4643-9f6e-69809d8b9c20/1/TMxgSVsqNNiSEcwceVJOq2G6FlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:c3:ad:a1:4d:c2:5b:36:37:5f:38:b0:f8:25:48:be:cc:cd:
69:de:6c:1e:ff:75:32:fa:06:e0:8d:8e:34:94:b7:a6:22:39:
b7:bd:12:c6:43:47:c3:91:9c:a5:e3:26:a5:0b:ad:88:c3:2c:
c5:29:69:da:c5:f1:ba:18:9a:41:6b:8e:07:00:56:fc:e4:2d:
ad:10:e2:4b:c2:02:4f:b9:41:24:20:b0:89:c7:c0:49:06:50:
05:23:28:c5:85:33:8f:ce:18:fe:23:57:ad:da:17:ee:dd:8b:
26:ad:4f:a8:9a:5d:93:fb:b8:71:92:34:7b:eb:07:7f:7e:35:
af:11:5d:28:a4:f1:fd:fa:58:64:74:71:11:5a:74:7b:33:31:
f1:51:93:7b:6f:ff:50:81:30:83:7d:53:11:6f:ab:7e:4d:59:
f2:ad:31:24:0d:b4:85:82:e8:cc:6a:f3:bd:1b:2f:c9:16:10:
58:0c:36:80:96:1b:9d:60:e3:1d:0a:74:bc:a1:7e:45:25:b4:
c7:d3:96:27:36:86:c0:d9:4c:23:2e:2d:66:a6:c8:69:ee:b6:
95:a6:48:ae:94:e0:14:00:e1:28:5b:09:45:a5:24:2c:5b:64:
5f:c8:70:74:52:c5:6a:82:0a:5f:7a:69:ee:12:c5:95:83:91:
18:44:cb:ba
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF3cGaMYHrXGWXO2uyZyI26MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjY2M2MDQ5NWIyYTM0ZDg5MjExY2MxYzc5NTI0ZWFiNjFi
YTE2NTYwHhcNMjYxMDI2MDkwMDE3WhcNMjYxMDI3MDkwMDE3WjAzMTEwLwYDVQQD
EyhjNzI2NzZlNTE5MzFiNzRjZWM3MzE3YzI4MGYwMzQyOWYwMDdiMWI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx5hvgXLbHqrHuLb8twCUE44KVs0K
Fya570NyfBcc/pE7Y1WRYlU7RefBOm5xilPtM9os9gTX2dISF3/kDkuUidh5NpoO
r59rTZUQwG6ZOBJHo1kFdYfNkIYHPkGi1vgKGnJSVqdXhIbArv3wvLxwXqKxOsgE
Lmv1Ec9WTBczY468xs/Nig8DjcxtRTj3XYoJC8i7vPs+TnMYgTjUSzmmL10Synq8
YPSbFG+hHdHa96PfOPFdaAAnvluOr2IfAXN8X47Gqv/eo/gdBqtV2Ehx7kHXOceC
K3lZ9sZmq6XxOFSMvePnLgS3+ekoNOMZYwTOrhK4EagTa5J6Dxt/NcPR8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMcmduUZMbdM7HMXwoDwNCnwB7G1MB8GA1UdIwQY
MBaAFEzMYElbKjTYkhHMHHlSTqthuhZWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVE14Z1NWc3FOTmlTRWN3Y2VWSk9xMkc2RmxZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy8xNTFjNmMtNjE3Yy00NjQzLTlmNmUt
Njk4MDlkOGI5YzIwLzEvVE14Z1NWc3FOTmlTRWN3Y2VWSk9xMkc2RmxZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy8xNTFjNmMtNjE3Yy00NjQzLTlmNmUtNjk4MDlkOGI5YzIw
LzEvVE14Z1NWc3FOTmlTRWN3Y2VWSk9xMkc2RmxZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbcOtoU3C
WzY3Xziw+CVIvszNad5sHv91MvoG4I2ONJS3piI5t70SxkNHw5GcpeMmpQutiMMs
xSlp2sXxuhiaQWuOBwBW/OQtrRDiS8ICT7lBJCCwicfASQZQBSMoxYUzj84Y/iNX
rdoX7t2LJq1PqJpdk/u4cZI0e+sHf341rxFdKKTx/fpYZHRxEVp0ezMx8VGTe2//
UIEwg31TEW+rfk1Z8q0xJA20hYLozGrzvRsvyRYQWAw2gJYbnWDjHQp0vKF+RSW0
x9OWJzaGwNlMIy4tZqbIae62laZIrpTgFADhKFsJRaUkLFtkX8hwdFLFaoIKX3pp
7hLFlYORGETLug==
-----END CERTIFICATE-----
Generated at Mon Oct 26 12:46:47 2026 by rpki-client