Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/39/2b38b3-12f1-4242-adae-b7d1cac51e0c/1/TJETJOhpvEyl7IutDT3f9oVEGXk.mft
File: TJETJOhpvEyl7IutDT3f9oVEGXk.mft (raw, json)
Hash identifier: bEFDIhhYqmmbX9HnD1qDNqgYM82CttFIjxmrsP3jGLI=
Subject key identifier: 83:E9:9B:CB:70:D8:06:31:6A:E9:84:6D:74:76:20:8A:59:0E:97:73
Authority key identifier: 4C:91:13:24:E8:69:BC:4C:A5:EC:8B:AD:0D:3D:DF:F6:85:44:19:79
Certificate issuer: /CN=4c911324e869bc4ca5ec8bad0d3ddff685441979
Certificate serial: 01A0D314F5E0A5A40988A26E59B905661B7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TJETJOhpvEyl7IutDT3f9oVEGXk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/2b38b3-12f1-4242-adae-b7d1cac51e0c/1/TJETJOhpvEyl7IutDT3f9oVEGXk.mft
Manifest number: 1A74
Signing time: Thu 24 Sep 2026 11:02:41 +0000
Manifest this update: Thu 24 Sep 2026 11:02:41 +0000
Manifest next update: Fri 25 Sep 2026 11:02:41 +0000
Files and hashes: 1: DfRI4dovSnMSIcVz_GFD0L7vBIw.roa (hash: kG8QsSLcBHIkntfvUqxfKD4RZMhBctOildhkIA33eIw=)
2: TJETJOhpvEyl7IutDT3f9oVEGXk.crl (hash: HmFVf48tvgrniyF/tPLDI2mFfihCZn4bsjRjhoSQW6M=)
3: oE6QS3Q6uaxGz3Cm7YOOUEm6M9s.roa (hash: gHUoKUVYSCToS8vVN5V7q87OQVYzxsOvUwmEfqESOxI=)
4: qSNYJ-9hvnj2oMFvdiXLbxjhOwk.roa (hash: bfBTAvujo01mv5S6EOQahz4Gss8vRe5ZhsQN9X0Csy4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/2b38b3-12f1-4242-adae-b7d1cac51e0c/1/TJETJOhpvEyl7IutDT3f9oVEGXk.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/2b38b3-12f1-4242-adae-b7d1cac51e0c/1/TJETJOhpvEyl7IutDT3f9oVEGXk.mft
rsync://rpki.ripe.net/repository/DEFAULT/TJETJOhpvEyl7IutDT3f9oVEGXk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 11:02:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:14:f5:e0:a5:a4:09:88:a2:6e:59:b9:05:66:1b:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c911324e869bc4ca5ec8bad0d3ddff685441979
Validity
Not Before: Sep 24 11:02:41 2026 GMT
Not After : Sep 25 11:02:41 2026 GMT
Subject: CN=83e99bcb70d806316ae9846d7476208a590e9773
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:7a:24:c9:c2:8d:63:c1:d1:d3:05:57:32:fd:
3a:b2:a7:a5:df:88:07:23:f2:25:ad:36:47:2a:3d:
ad:90:f2:14:b6:e6:26:9f:08:62:df:16:eb:b8:85:
da:cc:21:50:94:cb:28:15:27:67:a8:79:d8:97:de:
84:f4:e1:51:df:81:78:47:99:cd:b8:11:39:b4:60:
7e:27:43:35:37:76:71:e6:be:a5:61:07:5d:0a:a3:
91:e4:68:2f:75:8a:94:96:3a:9e:b2:6d:75:56:2d:
db:b5:7d:8e:cf:0d:aa:f2:a6:05:a4:21:d3:f0:df:
42:5f:64:f4:a4:96:4d:fd:f5:85:a5:83:81:9a:78:
35:12:73:a0:c7:0a:d1:df:64:f5:1b:f9:bd:a8:d2:
e9:64:3f:51:3e:51:91:d4:3b:f6:88:8b:1f:98:ad:
f1:3c:c4:3c:13:b1:d0:95:b1:3d:1b:da:29:a8:de:
eb:ed:04:2b:f5:e1:37:fb:25:f9:ea:7b:86:f8:a6:
8b:2e:26:2b:1d:85:a9:81:f4:ac:7a:62:5a:1c:09:
24:2a:22:85:42:50:70:3a:15:21:ee:a7:20:39:35:
ff:c8:b1:08:eb:de:eb:3d:8c:06:ed:da:ec:af:20:
23:a8:d4:c5:52:d3:d1:aa:a5:5e:5a:ab:d5:88:8c:
7f:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:E9:9B:CB:70:D8:06:31:6A:E9:84:6D:74:76:20:8A:59:0E:97:73
X509v3 Authority Key Identifier:
keyid:4C:91:13:24:E8:69:BC:4C:A5:EC:8B:AD:0D:3D:DF:F6:85:44:19:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TJETJOhpvEyl7IutDT3f9oVEGXk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/2b38b3-12f1-4242-adae-b7d1cac51e0c/1/TJETJOhpvEyl7IutDT3f9oVEGXk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/2b38b3-12f1-4242-adae-b7d1cac51e0c/1/TJETJOhpvEyl7IutDT3f9oVEGXk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:fb:81:0a:ef:18:15:3f:17:34:f3:a6:a2:2f:ae:c3:3f:1e:
bb:f6:93:8f:3b:67:c0:6c:2e:88:79:c2:b9:25:dd:a2:b3:9f:
f2:13:7c:e1:53:0f:e3:df:cc:41:c1:74:ea:0d:d1:03:5b:94:
f8:1c:00:72:f0:66:2e:62:e1:2a:9a:3e:5c:c2:fc:02:ac:33:
a4:d1:51:55:a3:30:cf:da:c6:e8:5d:67:d2:73:0e:b6:ed:8e:
9d:8d:d3:6d:35:7c:bb:1f:8b:9b:24:f2:a7:32:ad:4d:e7:08:
97:1e:18:72:ee:e0:b8:50:7f:8c:1a:67:68:c2:ba:48:6c:75:
77:37:10:16:66:78:32:1a:30:2a:51:a6:b8:57:03:d1:ad:53:
1b:cc:49:3a:03:d1:ec:75:84:69:bf:6f:02:55:f4:17:f2:39:
e0:4e:da:35:37:03:fd:65:30:c8:45:db:4e:71:2e:94:75:1e:
b0:36:3c:d7:9e:6b:d6:90:e4:31:b7:55:52:6f:1b:22:6a:3c:
a7:a4:d3:63:99:32:a1:52:24:10:8a:43:b6:fc:82:15:f9:56:
74:02:eb:8b:1b:5a:cb:5c:00:b5:60:b1:af:2f:11:e6:b0:e3:
50:61:a6:88:93:6e:d1:bc:c5:85:58:68:e6:17:68:e9:30:a8:
5b:88:b1:6c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDTFPXgpaQJiKJuWbkFZht6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjOTExMzI0ZTg2OWJjNGNhNWVjOGJhZDBkM2RkZmY2ODU0
NDE5NzkwHhcNMjYwOTI0MTEwMjQxWhcNMjYwOTI1MTEwMjQxWjAzMTEwLwYDVQQD
Eyg4M2U5OWJjYjcwZDgwNjMxNmFlOTg0NmQ3NDc2MjA4YTU5MGU5NzczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwHokycKNY8HR0wVXMv06sqel34gH
I/IlrTZHKj2tkPIUtuYmnwhi3xbruIXazCFQlMsoFSdnqHnYl96E9OFR34F4R5nN
uBE5tGB+J0M1N3Zx5r6lYQddCqOR5GgvdYqUljqesm11Vi3btX2Ozw2q8qYFpCHT
8N9CX2T0pJZN/fWFpYOBmng1EnOgxwrR32T1G/m9qNLpZD9RPlGR1Dv2iIsfmK3x
PMQ8E7HQlbE9G9opqN7r7QQr9eE3+yX56nuG+KaLLiYrHYWpgfSsemJaHAkkKiKF
QlBwOhUh7qcgOTX/yLEI697rPYwG7drsryAjqNTFUtPRqqVeWqvViIx/ewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIPpm8tw2AYxaumEbXR2IIpZDpdzMB8GA1UdIwQY
MBaAFEyREyToabxMpeyLrQ093/aFRBl5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVEpFVEpPaHB2RXlsN0l1dERUM2Y5b1ZFR1hrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS8yYjM4YjMtMTJmMS00MjQyLWFkYWUt
YjdkMWNhYzUxZTBjLzEvVEpFVEpPaHB2RXlsN0l1dERUM2Y5b1ZFR1hrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOS8yYjM4YjMtMTJmMS00MjQyLWFkYWUtYjdkMWNhYzUxZTBj
LzEvVEpFVEpPaHB2RXlsN0l1dERUM2Y5b1ZFR1hrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIPuBCu8Y
FT8XNPOmoi+uwz8eu/aTjztnwGwuiHnCuSXdorOf8hN84VMP49/MQcF06g3RA1uU
+BwAcvBmLmLhKpo+XML8AqwzpNFRVaMwz9rG6F1n0nMOtu2OnY3TbTV8ux+LmyTy
pzKtTecIlx4Ycu7guFB/jBpnaMK6SGx1dzcQFmZ4MhowKlGmuFcD0a1TG8xJOgPR
7HWEab9vAlX0F/I54E7aNTcD/WUwyEXbTnEulHUesDY8155r1pDkMbdVUm8bImo8
p6TTY5kyoVIkEIpDtvyCFflWdALrixtay1wAtWCxry8R5rDjUGGmiJNu0bzFhVho
5hdo6TCoW4ixbA==
-----END CERTIFICATE-----
Generated at Thu Sep 24 17:48:25 2026 by rpki-client