Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/d95b2c-1e02-4e4e-8438-bbcae0df1f2f/1/tgtXTwPZiBVfRLossHvH37RXzw8.mft
File: tgtXTwPZiBVfRLossHvH37RXzw8.mft (raw, json)
Hash identifier: Ly0ZTO3fYxonsDVcgWCMfFptM7e7OieTKGAv0BAEYvk=
Subject key identifier: FF:DE:55:6D:CA:B8:72:A7:3E:26:06:D8:45:90:28:C4:B6:96:EB:82
Authority key identifier: B6:0B:57:4F:03:D9:88:15:5F:44:BA:2C:B0:7B:C7:DF:B4:57:CF:0F
Certificate issuer: /CN=b60b574f03d988155f44ba2cb07bc7dfb457cf0f
Certificate serial: 019FA3E0C526B325443EBB77C4A6923AB835
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tgtXTwPZiBVfRLossHvH37RXzw8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/d95b2c-1e02-4e4e-8438-bbcae0df1f2f/1/tgtXTwPZiBVfRLossHvH37RXzw8.mft
Manifest number: 1962
Signing time: Mon 27 Jul 2026 14:00:44 +0000
Manifest this update: Mon 27 Jul 2026 14:00:44 +0000
Manifest next update: Tue 28 Jul 2026 14:00:44 +0000
Files and hashes: 1: EPm1u1dJgYoTbNI80mTBhYkEcqs.roa (hash: KsEbKma2UWb8xEPEBQMHTxAAbTdu2Rgtnk9hAeBq/48=)
2: tgtXTwPZiBVfRLossHvH37RXzw8.crl (hash: kEjQsbB6R9i6Pwnnu5vGJoRPbkmnwALS5+nGk841aFI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/d95b2c-1e02-4e4e-8438-bbcae0df1f2f/1/tgtXTwPZiBVfRLossHvH37RXzw8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/d95b2c-1e02-4e4e-8438-bbcae0df1f2f/1/tgtXTwPZiBVfRLossHvH37RXzw8.mft
rsync://rpki.ripe.net/repository/DEFAULT/tgtXTwPZiBVfRLossHvH37RXzw8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 13:48:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a3:e0:c5:26:b3:25:44:3e:bb:77:c4:a6:92:3a:b8:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b60b574f03d988155f44ba2cb07bc7dfb457cf0f
Validity
Not Before: Jul 27 14:00:44 2026 GMT
Not After : Jul 28 14:00:44 2026 GMT
Subject: CN=ffde556dcab872a73e2606d8459028c4b696eb82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:1c:44:02:ef:ea:d9:55:c8:4a:27:24:0a:73:
c3:c2:2b:f1:da:45:ea:17:5c:9a:81:6e:a9:ae:75:
48:10:59:cc:1c:ba:bc:ce:23:ea:7d:a6:97:93:f8:
80:2b:d4:f7:5a:54:56:ee:79:35:b4:65:f8:cd:c2:
eb:6f:04:7b:b0:c2:6c:28:d0:8e:95:b3:c5:ea:f8:
61:79:79:0a:6b:95:07:13:7e:e1:16:cb:1e:1c:05:
73:0d:94:fb:23:c7:05:78:73:d2:fc:74:63:1b:5d:
8f:b8:23:8b:8e:cb:5e:7b:a1:8f:98:dd:a3:f4:d0:
36:3c:f0:f2:63:f6:09:eb:9f:7e:20:05:45:19:0d:
e4:68:bc:8f:70:15:c4:78:83:f8:94:90:fc:20:79:
5a:0a:c3:df:af:c6:ba:46:33:0e:43:74:13:ae:29:
e1:28:4a:29:db:70:df:b4:f4:27:41:db:42:32:e9:
16:3c:4d:26:e1:e5:1b:f9:7b:f1:19:0d:15:29:69:
65:31:68:d1:90:29:a8:3d:94:ff:d1:34:7b:d8:b4:
2e:fc:29:f1:df:58:67:e3:d6:82:8e:43:5c:94:6a:
93:1c:23:67:94:99:57:33:79:5c:34:a8:4a:32:93:
0e:3a:65:fb:4d:04:74:90:fb:60:05:de:06:18:28:
a3:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:DE:55:6D:CA:B8:72:A7:3E:26:06:D8:45:90:28:C4:B6:96:EB:82
X509v3 Authority Key Identifier:
keyid:B6:0B:57:4F:03:D9:88:15:5F:44:BA:2C:B0:7B:C7:DF:B4:57:CF:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tgtXTwPZiBVfRLossHvH37RXzw8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/d95b2c-1e02-4e4e-8438-bbcae0df1f2f/1/tgtXTwPZiBVfRLossHvH37RXzw8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/d95b2c-1e02-4e4e-8438-bbcae0df1f2f/1/tgtXTwPZiBVfRLossHvH37RXzw8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:0c:2c:07:e0:8c:b1:d8:10:b0:51:be:f1:ba:87:ef:47:d2:
00:28:61:dd:bd:1b:3c:11:28:69:c4:c3:1a:3f:9b:c1:4c:43:
a6:04:bf:24:73:e1:bc:5b:aa:3b:34:7c:f4:d3:58:e6:d2:d6:
01:94:68:be:c0:f7:37:d6:4a:7d:64:d8:c1:48:41:4e:2f:75:
89:f4:ac:20:92:3a:ee:31:b7:4f:90:cc:e9:f6:02:e0:fc:51:
15:74:66:b9:25:39:a4:f9:c9:07:56:0a:2c:4b:6f:b0:f3:88:
c3:ab:23:2e:43:5b:ad:42:49:af:cf:f4:c8:07:fa:f3:85:9a:
8c:1d:4f:28:91:8d:f5:e8:01:ea:f6:26:16:e1:8c:3c:e4:61:
12:6d:ae:74:52:07:ec:7a:1c:2f:a3:b7:6c:cd:c4:2f:3f:17:
b4:e3:9f:ba:81:da:e4:0d:06:5b:c3:d0:14:29:fe:a0:b5:de:
d2:10:8e:56:30:40:7e:a8:97:5d:b6:d1:5c:37:84:f0:26:86:
03:5b:de:8f:17:2b:d8:9e:02:22:05:c6:91:fe:d3:7c:51:2f:
0e:62:ed:02:ab:ea:fe:ae:e5:02:10:b1:94:77:04:d2:fe:89:
0e:3b:e5:83:3c:50:79:7e:6e:03:08:04:32:1a:e3:91:a2:80:
e5:af:c2:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 18:19:05 2026 by rpki-client