Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/3768ac-ba49-443a-8a12-6f7c72f1c5e9/1/TgcXrm2hIbzPb3U9IFt520x0qtw.mft
File: TgcXrm2hIbzPb3U9IFt520x0qtw.mft (raw, json)
Hash identifier: lFFLsqSefgb8hMZuEn459J/9n8PeZFb+wmZttVM8qqc=
Subject key identifier: D1:26:0C:0A:11:FD:48:D1:25:FC:08:84:B2:5A:77:22:20:DC:1F:B9
Authority key identifier: 4E:07:17:AE:6D:A1:21:BC:CF:6F:75:3D:20:5B:79:DB:4C:74:AA:DC
Certificate issuer: /CN=4e0717ae6da121bccf6f753d205b79db4c74aadc
Certificate serial: 019FABD0E6204E741BE2657D8F75C3E4D3B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TgcXrm2hIbzPb3U9IFt520x0qtw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/3768ac-ba49-443a-8a12-6f7c72f1c5e9/1/TgcXrm2hIbzPb3U9IFt520x0qtw.mft
Manifest number: 0129
Signing time: Wed 29 Jul 2026 03:00:22 +0000
Manifest this update: Wed 29 Jul 2026 03:00:22 +0000
Manifest next update: Thu 30 Jul 2026 03:00:22 +0000
Files and hashes: 1: PMUh_CeB1kKvaGLeBJYIic294CY.roa (hash: +eBM0O7yXapPeEEFqL/YF99B3PHfAKw0Egv5IPFdGT4=)
2: TgcXrm2hIbzPb3U9IFt520x0qtw.crl (hash: zux8ZQzC1zmPMWRfdALJCAKyKha/RNLrzThDTIIgoF4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/3768ac-ba49-443a-8a12-6f7c72f1c5e9/1/TgcXrm2hIbzPb3U9IFt520x0qtw.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/3768ac-ba49-443a-8a12-6f7c72f1c5e9/1/TgcXrm2hIbzPb3U9IFt520x0qtw.mft
rsync://rpki.ripe.net/repository/DEFAULT/TgcXrm2hIbzPb3U9IFt520x0qtw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:d0:e6:20:4e:74:1b:e2:65:7d:8f:75:c3:e4:d3:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e0717ae6da121bccf6f753d205b79db4c74aadc
Validity
Not Before: Jul 29 03:00:22 2026 GMT
Not After : Jul 30 03:00:22 2026 GMT
Subject: CN=d1260c0a11fd48d125fc0884b25a772220dc1fb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:4f:f2:2c:20:81:bc:30:98:59:97:0d:5a:58:
53:bc:d5:6b:cd:b8:97:69:6e:03:cd:b3:06:8c:93:
14:ee:9c:78:b2:3c:e0:15:3b:db:e0:9e:d2:c9:a7:
46:99:4e:69:fd:8c:2d:16:37:f5:dc:8f:86:02:40:
fc:98:0b:36:95:be:c1:6a:ff:30:52:75:4f:5d:ca:
58:aa:d4:9e:e9:88:aa:da:a5:dd:8f:fb:b3:20:be:
55:85:b4:81:ac:a3:06:21:4e:43:93:77:5f:78:0a:
fa:6e:e7:b6:22:51:d4:b3:30:9f:1b:43:94:0e:b1:
e3:81:f3:be:10:06:ed:65:09:ec:56:cb:c4:3c:d9:
80:59:0f:d5:67:71:da:19:c2:5d:40:2e:10:78:6f:
c5:53:70:f3:1c:a7:e9:62:8b:70:fe:29:99:79:20:
90:e4:e9:88:e0:69:50:86:f1:1e:75:18:c7:62:6c:
48:b5:7d:61:4f:02:97:3b:8f:44:3c:47:f4:39:05:
ec:93:87:3c:75:4b:a6:ee:9b:46:f5:c3:7e:a8:e8:
74:d7:a6:eb:f5:72:cc:49:52:4a:8b:97:2e:a6:ef:
3c:ca:cb:d4:f4:e8:8d:ec:5a:fb:64:33:6a:b4:da:
f6:9a:3b:46:bd:7f:77:37:ad:fd:21:08:2e:cb:ad:
72:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:26:0C:0A:11:FD:48:D1:25:FC:08:84:B2:5A:77:22:20:DC:1F:B9
X509v3 Authority Key Identifier:
keyid:4E:07:17:AE:6D:A1:21:BC:CF:6F:75:3D:20:5B:79:DB:4C:74:AA:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TgcXrm2hIbzPb3U9IFt520x0qtw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/3768ac-ba49-443a-8a12-6f7c72f1c5e9/1/TgcXrm2hIbzPb3U9IFt520x0qtw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/3768ac-ba49-443a-8a12-6f7c72f1c5e9/1/TgcXrm2hIbzPb3U9IFt520x0qtw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:2a:25:08:91:fa:93:ec:fd:72:8b:5f:ca:19:d9:34:bb:39:
80:a6:af:b9:60:5a:99:9b:e4:81:23:ad:80:2d:0a:2e:71:e9:
e8:31:b3:dd:68:fd:81:f1:66:37:05:b0:2a:ce:66:6d:3a:4a:
2d:1c:bf:fc:44:b4:45:41:a9:59:bd:ce:2d:cb:31:1a:df:bc:
4e:27:9d:73:80:40:41:e1:32:f7:f2:51:39:1d:b2:d5:09:94:
0f:2b:3c:90:32:2e:a3:54:63:e1:97:d4:d6:46:9d:be:68:79:
f8:d2:42:4f:c7:9d:b3:2a:09:4a:75:81:9b:ff:0a:2d:b7:e4:
e2:13:c2:84:9f:fd:26:c7:31:ae:b2:b0:4f:60:26:69:8f:45:
76:2b:fc:9e:5c:f1:cd:2c:1e:d9:1f:3d:f1:39:0d:9d:0e:f2:
91:db:fd:24:fd:e2:fa:54:1d:64:9d:d8:79:b4:b6:22:0d:58:
05:73:b6:0d:75:a8:0d:c2:c3:9a:a5:77:3e:54:9a:77:a8:28:
c0:40:ca:87:4f:33:6f:7f:8f:ce:8a:c5:f3:f1:ca:a1:8b:f9:
f0:2d:2a:0a:ac:dd:bd:b9:79:c0:fd:87:95:76:50:9a:81:88:
1d:fc:bf:79:7f:da:3f:91:be:f6:b2:9d:2e:ee:d9:8d:0f:a2:
68:0e:dd:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:01:14 2026 by rpki-client