Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dc/559d63-afb3-41aa-b216-92f03d3dd412/1/tvPx-G3UyqCws3yYuhKCUKpJR0U.mft
File: tvPx-G3UyqCws3yYuhKCUKpJR0U.mft (raw, json)
Hash identifier: fCrCdbVrfUW5eg/AGyB3xRSvuRBY/RNpI367548TtG0=
Subject key identifier: 89:4C:B9:5A:E1:AF:60:1A:E1:BB:25:50:AE:E9:AF:AB:B0:83:0C:C0
Authority key identifier: B6:F3:F1:F8:6D:D4:CA:A0:B0:B3:7C:98:BA:12:82:50:AA:49:47:45
Certificate issuer: /CN=b6f3f1f86dd4caa0b0b37c98ba128250aa494745
Certificate serial: 01A0908E3E1066EA9196D8D3368E70010EDE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tvPx-G3UyqCws3yYuhKCUKpJR0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/559d63-afb3-41aa-b216-92f03d3dd412/1/tvPx-G3UyqCws3yYuhKCUKpJR0U.mft
Manifest number: 45
Signing time: Fri 11 Sep 2026 13:00:36 +0000
Manifest this update: Fri 11 Sep 2026 13:00:36 +0000
Manifest next update: Sat 12 Sep 2026 13:00:36 +0000
Files and hashes: 1: Du0TfAsYdMk0CJ2zqvUFpo0-qyQ.roa (hash: 9sKSx901oDe++es16PvLgOI1pRTpkLDtrTtxAUjUzXA=)
2: GRZQfICaPZkmlWt-Zi18iyQthto.roa (hash: 5+2pbzTpQ4n5mUGa2nh7fMPzxd0iARQ9e60Moilj36g=)
3: tvPx-G3UyqCws3yYuhKCUKpJR0U.crl (hash: 4kfkM5UYjeXBaAVfB7msp3VlifOSKsY0S/PFbE2gNpQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/559d63-afb3-41aa-b216-92f03d3dd412/1/tvPx-G3UyqCws3yYuhKCUKpJR0U.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/559d63-afb3-41aa-b216-92f03d3dd412/1/tvPx-G3UyqCws3yYuhKCUKpJR0U.mft
rsync://rpki.ripe.net/repository/DEFAULT/tvPx-G3UyqCws3yYuhKCUKpJR0U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:90:8e:3e:10:66:ea:91:96:d8:d3:36:8e:70:01:0e:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6f3f1f86dd4caa0b0b37c98ba128250aa494745
Validity
Not Before: Sep 11 13:00:36 2026 GMT
Not After : Sep 12 13:00:36 2026 GMT
Subject: CN=894cb95ae1af601ae1bb2550aee9afabb0830cc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:82:40:0b:a7:9e:b8:69:32:ad:c0:ad:27:13:
5a:5f:d7:6f:35:ce:95:42:03:bb:e5:28:5f:c7:b3:
61:0c:4d:6a:07:43:51:d0:90:3a:16:db:13:3b:87:
8a:d7:cc:01:1b:73:4a:86:91:e1:72:a8:00:62:e5:
51:bf:74:9b:c7:7e:60:e6:6e:ab:78:9e:9c:50:ba:
80:2c:d8:86:fb:0d:3b:f3:bb:dc:df:53:4f:90:13:
10:ac:e7:5d:91:d4:7d:5e:87:03:a2:fa:f0:53:ec:
b8:54:21:f2:f7:df:75:f0:32:6f:1d:bb:ec:2e:c3:
69:8e:05:8e:2f:5c:a0:a8:b6:5b:f0:4d:e7:33:ea:
17:d3:16:c8:2b:a6:dd:3f:2d:3a:6c:e9:58:53:10:
19:13:42:65:e5:bd:10:7d:d5:64:0b:78:8e:f1:de:
12:68:3a:8f:f0:5d:93:c5:7d:bf:c2:1e:54:b8:1f:
c5:5c:a4:33:2b:1a:9c:ea:b7:32:6b:5b:a5:ab:b0:
7f:0f:08:ec:d5:29:a1:96:fa:23:e5:f4:b7:69:7f:
3a:c3:e8:bf:67:39:5a:37:5f:5f:39:e4:a9:27:39:
07:ff:50:b1:f9:b6:95:f5:ce:65:83:af:44:5b:c8:
cd:56:c1:73:3b:69:be:7a:c6:cc:f5:ff:a1:f9:1b:
57:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:4C:B9:5A:E1:AF:60:1A:E1:BB:25:50:AE:E9:AF:AB:B0:83:0C:C0
X509v3 Authority Key Identifier:
keyid:B6:F3:F1:F8:6D:D4:CA:A0:B0:B3:7C:98:BA:12:82:50:AA:49:47:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tvPx-G3UyqCws3yYuhKCUKpJR0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/559d63-afb3-41aa-b216-92f03d3dd412/1/tvPx-G3UyqCws3yYuhKCUKpJR0U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/559d63-afb3-41aa-b216-92f03d3dd412/1/tvPx-G3UyqCws3yYuhKCUKpJR0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:65:cf:f5:4a:7c:3c:9d:70:77:df:ac:60:fe:96:52:8f:3f:
fc:ca:c0:e8:55:93:c1:19:2a:81:47:8a:b1:fa:20:e0:bc:b6:
a9:6e:fc:56:80:bf:22:83:62:c0:03:0f:3f:51:7e:46:eb:82:
0b:23:df:10:22:fe:49:e5:29:8b:0a:44:03:fa:f2:1e:c4:0f:
d3:16:69:6e:df:48:83:e7:43:be:11:46:62:48:4f:de:33:4e:
a7:57:a6:4d:ab:7d:4f:4c:60:1c:80:03:1d:95:7a:1c:8b:92:
f5:61:3a:6e:05:3d:fa:10:ba:bd:3a:c8:d3:7d:07:69:6c:ad:
34:8a:3d:52:4e:ab:d6:6d:6a:e3:2a:f4:e2:9f:53:73:ed:12:
ad:76:fa:20:d7:fc:10:e1:46:34:3f:be:df:29:6c:8b:d8:44:
16:59:ab:66:72:c1:20:1d:ce:73:2f:e6:bf:44:e7:4e:9e:86:
ab:f2:71:55:c0:83:61:af:15:09:66:16:49:55:cf:80:b4:a7:
c6:12:19:df:e5:30:83:b7:3d:f5:e9:95:a5:c7:46:c7:96:be:
44:0d:39:ea:2a:80:78:b0:5c:2c:8d:4f:9a:4e:8d:c1:6c:e9:
bd:53:46:03:0a:7b:a0:2c:82:a8:a2:b0:a2:9e:66:c0:31:d5:
fd:ce:08:86
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCQjj4QZuqRltjTNo5wAQ7eMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI2ZjNmMWY4NmRkNGNhYTBiMGIzN2M5OGJhMTI4MjUwYWE0
OTQ3NDUwHhcNMjYwOTExMTMwMDM2WhcNMjYwOTEyMTMwMDM2WjAzMTEwLwYDVQQD
Eyg4OTRjYjk1YWUxYWY2MDFhZTFiYjI1NTBhZWU5YWZhYmIwODMwY2MwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArYJAC6eeuGkyrcCtJxNaX9dvNc6V
QgO75Shfx7NhDE1qB0NR0JA6FtsTO4eK18wBG3NKhpHhcqgAYuVRv3Sbx35g5m6r
eJ6cULqALNiG+w0787vc31NPkBMQrOddkdR9XocDovrwU+y4VCHy99918DJvHbvs
LsNpjgWOL1ygqLZb8E3nM+oX0xbIK6bdPy06bOlYUxAZE0Jl5b0QfdVkC3iO8d4S
aDqP8F2TxX2/wh5UuB/FXKQzKxqc6rcya1ulq7B/Dwjs1Smhlvoj5fS3aX86w+i/
ZzlaN19fOeSpJzkH/1Cx+baV9c5lg69EW8jNVsFzO2m+esbM9f+h+RtXlQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIlMuVrhr2Aa4bslUK7pr6uwgwzAMB8GA1UdIwQY
MBaAFLbz8fht1MqgsLN8mLoSglCqSUdFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdHZQeC1HM1V5cUN3czN5WXVoS0NVS3BKUjBVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy81NTlkNjMtYWZiMy00MWFhLWIyMTYt
OTJmMDNkM2RkNDEyLzEvdHZQeC1HM1V5cUN3czN5WXVoS0NVS3BKUjBVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYy81NTlkNjMtYWZiMy00MWFhLWIyMTYtOTJmMDNkM2RkNDEy
LzEvdHZQeC1HM1V5cUN3czN5WXVoS0NVS3BKUjBVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO2XP9Up8
PJ1wd9+sYP6WUo8//MrA6FWTwRkqgUeKsfog4Ly2qW78VoC/IoNiwAMPP1F+RuuC
CyPfECL+SeUpiwpEA/ryHsQP0xZpbt9Ig+dDvhFGYkhP3jNOp1emTat9T0xgHIAD
HZV6HIuS9WE6bgU9+hC6vTrI030HaWytNIo9Uk6r1m1q4yr04p9Tc+0SrXb6INf8
EOFGND++3ylsi9hEFlmrZnLBIB3Ocy/mv0TnTp6Gq/JxVcCDYa8VCWYWSVXPgLSn
xhIZ3+Uwg7c99emVpcdGx5a+RA056iqAeLBcLI1Pmk6NwWzpvVNGAwp7oCyCqKKw
op5mwDHV/c4Ihg==
-----END CERTIFICATE-----
Generated at Fri Sep 11 14:46:12 2026 by rpki-client