Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d8/d95b2c-1e02-4e4e-8438-bbcae0df1f2f/1/tgtXTwPZiBVfRLossHvH37RXzw8.mft
File: tgtXTwPZiBVfRLossHvH37RXzw8.mft (raw, json)
Hash identifier: CfeJSZDcEPd+VGig11+NY/8/gC9GKnL0UgsxxD29wjw=
Subject key identifier: 72:16:94:63:A2:63:AA:AF:B0:DD:09:BC:29:6A:EC:66:BA:30:9C:21
Authority key identifier: B6:0B:57:4F:03:D9:88:15:5F:44:BA:2C:B0:7B:C7:DF:B4:57:CF:0F
Certificate issuer: /CN=b60b574f03d988155f44ba2cb07bc7dfb457cf0f
Certificate serial: 01A17D0580257D67D788F889F06EB11F92C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tgtXTwPZiBVfRLossHvH37RXzw8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/d95b2c-1e02-4e4e-8438-bbcae0df1f2f/1/tgtXTwPZiBVfRLossHvH37RXzw8.mft
Manifest number: 1A57
Signing time: Tue 27 Oct 2026 11:01:14 +0000
Manifest this update: Tue 27 Oct 2026 11:01:14 +0000
Manifest next update: Wed 28 Oct 2026 11:01:14 +0000
Files and hashes: 1: EPm1u1dJgYoTbNI80mTBhYkEcqs.roa (hash: KsEbKma2UWb8xEPEBQMHTxAAbTdu2Rgtnk9hAeBq/48=)
2: tgtXTwPZiBVfRLossHvH37RXzw8.crl (hash: vfPOwTNHkM+QBiBIj8bLi6Z8b0Z+eXGxssMAw6X+l5k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/d95b2c-1e02-4e4e-8438-bbcae0df1f2f/1/tgtXTwPZiBVfRLossHvH37RXzw8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/d95b2c-1e02-4e4e-8438-bbcae0df1f2f/1/tgtXTwPZiBVfRLossHvH37RXzw8.mft
rsync://rpki.ripe.net/repository/DEFAULT/tgtXTwPZiBVfRLossHvH37RXzw8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7d:05:80:25:7d:67:d7:88:f8:89:f0:6e:b1:1f:92:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b60b574f03d988155f44ba2cb07bc7dfb457cf0f
Validity
Not Before: Oct 27 11:01:14 2026 GMT
Not After : Oct 28 11:01:14 2026 GMT
Subject: CN=72169463a263aaafb0dd09bc296aec66ba309c21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:cd:89:96:58:94:31:f0:8f:9f:d6:40:2f:ad:
65:3b:e9:51:07:40:91:75:61:0f:5f:af:53:e9:b8:
82:6f:c6:54:de:ff:5a:90:ea:80:40:e2:d9:e8:a4:
24:a3:4d:3c:71:ce:73:26:b6:dd:3b:90:2f:c2:e2:
91:23:3b:ae:b7:4e:26:2e:01:0e:ca:83:17:8e:85:
ae:44:fb:55:f7:75:fa:df:ba:bb:7e:24:54:ff:ab:
6a:16:6f:7b:a2:6d:b1:59:73:e8:e4:e9:e8:52:cf:
f8:8e:de:25:7d:b4:f6:06:b6:59:29:9f:bb:25:06:
9f:6b:8a:70:b8:f6:83:36:9e:21:ed:4c:59:f9:10:
f1:0b:2c:df:25:1e:25:9d:56:89:5f:03:4a:78:59:
34:5a:c1:a7:48:b0:8a:f9:57:8c:58:ae:51:c8:a8:
79:39:dc:e2:a8:43:f5:fb:61:94:92:37:54:95:96:
73:84:ed:24:ba:20:8a:ed:4e:1f:07:4e:05:28:fd:
94:62:22:f5:17:f8:4c:04:14:13:37:b8:b7:fa:68:
2b:7e:a8:75:0a:8f:7e:81:3b:2e:33:f5:03:3b:81:
8f:61:b0:8c:8a:71:dd:3a:ce:d5:60:dc:9b:67:66:
42:52:3f:bb:eb:27:ae:b7:7d:33:cc:8f:43:a2:5e:
ba:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:16:94:63:A2:63:AA:AF:B0:DD:09:BC:29:6A:EC:66:BA:30:9C:21
X509v3 Authority Key Identifier:
keyid:B6:0B:57:4F:03:D9:88:15:5F:44:BA:2C:B0:7B:C7:DF:B4:57:CF:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tgtXTwPZiBVfRLossHvH37RXzw8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/d95b2c-1e02-4e4e-8438-bbcae0df1f2f/1/tgtXTwPZiBVfRLossHvH37RXzw8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/d95b2c-1e02-4e4e-8438-bbcae0df1f2f/1/tgtXTwPZiBVfRLossHvH37RXzw8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:6a:e8:8c:19:7f:16:ba:69:80:6f:0f:1b:a5:ee:1f:01:ad:
bc:bc:2a:74:ef:35:4c:71:51:48:0a:e1:73:05:fc:93:56:40:
7e:53:ee:29:05:9a:e8:17:8f:a9:d0:2f:54:55:66:a2:23:5a:
20:d2:1b:d4:5f:b8:81:6d:4c:69:50:6f:5c:3b:1d:72:9c:5b:
21:cb:8d:94:8a:12:c8:92:e8:77:a7:66:b5:ee:6b:b7:d7:78:
7b:37:fc:bc:72:5f:a0:7b:03:96:d8:99:d9:44:6b:d6:f3:1a:
d9:58:07:e8:0b:fd:71:fb:cd:b9:aa:37:fe:79:aa:ec:50:f6:
da:5b:75:10:44:5a:50:d2:d9:cc:07:1f:dc:82:9f:f8:54:f5:
29:80:9e:75:e3:33:e5:62:91:91:83:93:e0:e7:c8:5a:a3:f0:
d9:94:52:9a:6e:46:46:e8:75:3d:72:95:4d:4d:d8:7d:6e:a0:
38:7b:09:fd:1d:1e:16:d2:6d:3e:89:4b:af:be:18:1c:59:a1:
1c:90:de:a1:0c:48:79:42:06:a2:c8:d5:f9:e5:ea:5b:d3:d9:
54:b8:42:b6:e6:79:ce:69:aa:8d:a8:79:cc:16:43:17:7c:63:
ff:33:e2:a7:2f:ee:6b:4c:40:ee:db:2b:0f:dc:82:ba:a9:82:
a4:56:7c:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 15:29:09 2026 by rpki-client