Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/d95b2c-1e02-4e4e-8438-bbcae0df1f2f/1/tgtXTwPZiBVfRLossHvH37RXzw8.mft
File: tgtXTwPZiBVfRLossHvH37RXzw8.mft (raw, json)
Hash identifier: cfe34G3rFKyeZ0BeoqpLAMLAL2Yqe0UmbUElTfWTyQQ=
Subject key identifier: 87:A6:79:4C:CD:3B:5D:F8:9F:ED:84:37:FA:35:5C:E0:27:9B:0A:0D
Authority key identifier: B6:0B:57:4F:03:D9:88:15:5F:44:BA:2C:B0:7B:C7:DF:B4:57:CF:0F
Certificate issuer: /CN=b60b574f03d988155f44ba2cb07bc7dfb457cf0f
Certificate serial: 019D37F724B68D7BD549788CA627FE68CC2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tgtXTwPZiBVfRLossHvH37RXzw8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/d95b2c-1e02-4e4e-8438-bbcae0df1f2f/1/tgtXTwPZiBVfRLossHvH37RXzw8.mft
Manifest number: 1821
Signing time: Sun 29 Mar 2026 05:00:36 +0000
Manifest this update: Sun 29 Mar 2026 05:00:36 +0000
Manifest next update: Mon 30 Mar 2026 05:00:36 +0000
Files and hashes: 1: EPm1u1dJgYoTbNI80mTBhYkEcqs.roa (hash: KsEbKma2UWb8xEPEBQMHTxAAbTdu2Rgtnk9hAeBq/48=)
2: tgtXTwPZiBVfRLossHvH37RXzw8.crl (hash: YzZDH/+3ODBL9y+IacGds31cnFOziXAS+IsLcWdoEJ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/d95b2c-1e02-4e4e-8438-bbcae0df1f2f/1/tgtXTwPZiBVfRLossHvH37RXzw8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/d95b2c-1e02-4e4e-8438-bbcae0df1f2f/1/tgtXTwPZiBVfRLossHvH37RXzw8.mft
rsync://rpki.ripe.net/repository/DEFAULT/tgtXTwPZiBVfRLossHvH37RXzw8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:24:b6:8d:7b:d5:49:78:8c:a6:27:fe:68:cc:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b60b574f03d988155f44ba2cb07bc7dfb457cf0f
Validity
Not Before: Mar 29 05:00:36 2026 GMT
Not After : Mar 30 05:00:36 2026 GMT
Subject: CN=87a6794ccd3b5df89fed8437fa355ce0279b0a0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:b2:b5:d5:71:8a:2f:a8:9b:16:70:3c:ab:8b:
c7:7f:bf:b6:64:1b:3f:14:1d:82:78:b5:1d:60:e2:
c6:b2:2d:60:a1:57:35:2d:aa:ca:3f:15:da:32:80:
69:46:43:ec:8b:5f:39:b6:4f:9d:b1:48:dd:c9:18:
27:b8:6a:a4:2b:7d:7b:81:84:4c:da:d8:2e:ee:8f:
a0:bb:bf:cb:48:a1:0e:52:b2:06:51:8e:8a:38:3e:
b0:4a:af:d3:02:3d:73:47:dd:df:49:2d:89:e5:a1:
7e:33:4d:38:b9:5e:ec:e1:93:2e:db:af:5d:c5:41:
26:c6:1a:7e:9c:1e:05:7b:92:e8:15:a8:9c:f4:0e:
a1:b1:ec:03:61:8c:45:45:f6:74:c5:33:51:4c:8c:
dc:b2:d3:66:a0:7c:5c:03:ed:5a:70:3d:30:dd:eb:
40:af:25:1e:14:f6:f2:8e:4c:d0:15:db:85:25:35:
3a:9b:2e:21:f9:b4:81:d4:e8:ce:3a:1a:54:a8:e8:
b6:a9:95:01:ca:05:25:1f:d7:31:6b:90:4a:7a:d7:
3a:1d:3d:36:49:5e:4d:a1:9c:4a:fc:40:1d:44:6e:
5b:f0:20:d8:d1:43:e1:cd:18:28:39:46:01:51:c4:
5c:f6:5d:cf:e0:28:c5:f8:99:30:92:c4:76:c5:6b:
f2:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:A6:79:4C:CD:3B:5D:F8:9F:ED:84:37:FA:35:5C:E0:27:9B:0A:0D
X509v3 Authority Key Identifier:
keyid:B6:0B:57:4F:03:D9:88:15:5F:44:BA:2C:B0:7B:C7:DF:B4:57:CF:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tgtXTwPZiBVfRLossHvH37RXzw8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/d95b2c-1e02-4e4e-8438-bbcae0df1f2f/1/tgtXTwPZiBVfRLossHvH37RXzw8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/d95b2c-1e02-4e4e-8438-bbcae0df1f2f/1/tgtXTwPZiBVfRLossHvH37RXzw8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:1d:46:c1:8d:94:43:2a:ec:32:e1:fd:64:39:63:9d:10:13:
28:1b:db:8c:52:c8:78:6c:cb:e9:96:24:40:9a:00:d9:2d:59:
49:4a:e9:3b:27:cd:33:62:80:1d:23:e1:a6:d8:a7:3b:32:c0:
dd:b2:78:89:50:fd:15:d4:f7:b2:35:0f:99:ed:e8:16:35:49:
40:c4:a2:20:1a:c0:4f:2e:58:f6:e4:70:2b:ca:7c:97:18:d8:
3d:b7:ed:49:55:02:da:0d:e0:61:d1:dd:06:f9:9c:32:0f:78:
a9:a5:a1:4d:b4:9c:3f:d7:1f:6f:79:1b:96:b6:fa:2e:48:dd:
7b:3a:2b:3f:23:26:ca:8f:30:a0:f5:74:de:cb:45:fe:17:e5:
41:a2:79:d3:49:6b:96:e4:bb:33:80:e9:3f:40:b9:8b:cf:a9:
08:76:ca:b1:0d:85:8c:09:f2:31:c0:b1:98:f6:89:7a:90:43:
63:f5:ff:e4:24:de:76:66:8a:2a:8e:75:7f:af:f3:73:21:a9:
84:33:ae:79:d4:d2:e2:83:fe:b0:d5:10:cc:e5:01:f4:6a:68:
7e:b1:d5:8f:a2:79:97:f8:bc:8c:38:2a:6b:4f:8e:5d:61:09:
cf:43:4b:c8:c4:3f:b9:43:90:a4:f0:d9:03:dd:a8:62:73:da:
ee:6e:88:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:59:35 2026 by rpki-client