
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/3768ac-ba49-443a-8a12-6f7c72f1c5e9/1/TgcXrm2hIbzPb3U9IFt520x0qtw.mft
File: TgcXrm2hIbzPb3U9IFt520x0qtw.mft (raw, json)
Hash identifier: yuRnn3gJ/puAguQr/QbuHvt9bUyXi4EFn3KVnYy760g=
Subject key identifier: 76:F8:06:6B:21:6A:C6:04:8D:C1:C4:31:FE:61:51:8B:C3:4D:52:61
Authority key identifier: 4E:07:17:AE:6D:A1:21:BC:CF:6F:75:3D:20:5B:79:DB:4C:74:AA:DC
Certificate issuer: /CN=4e0717ae6da121bccf6f753d205b79db4c74aadc
Certificate serial: 019EC035CEBB409148BDE90B7DD154A0473C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TgcXrm2hIbzPb3U9IFt520x0qtw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/3768ac-ba49-443a-8a12-6f7c72f1c5e9/1/TgcXrm2hIbzPb3U9IFt520x0qtw.mft
Manifest number: AF
Signing time: Sat 13 Jun 2026 09:00:12 +0000
Manifest this update: Sat 13 Jun 2026 09:00:12 +0000
Manifest next update: Sun 14 Jun 2026 09:00:12 +0000
Files and hashes: 1: PMUh_CeB1kKvaGLeBJYIic294CY.roa (hash: +eBM0O7yXapPeEEFqL/YF99B3PHfAKw0Egv5IPFdGT4=)
2: TgcXrm2hIbzPb3U9IFt520x0qtw.crl (hash: DNF8HeZW18WAhzd5PMqV5wioXeXoDN9tVZGMHPNzofo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/3768ac-ba49-443a-8a12-6f7c72f1c5e9/1/TgcXrm2hIbzPb3U9IFt520x0qtw.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/3768ac-ba49-443a-8a12-6f7c72f1c5e9/1/TgcXrm2hIbzPb3U9IFt520x0qtw.mft
rsync://rpki.ripe.net/repository/DEFAULT/TgcXrm2hIbzPb3U9IFt520x0qtw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:35:ce:bb:40:91:48:bd:e9:0b:7d:d1:54:a0:47:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e0717ae6da121bccf6f753d205b79db4c74aadc
Validity
Not Before: Jun 13 09:00:12 2026 GMT
Not After : Jun 14 09:00:12 2026 GMT
Subject: CN=76f8066b216ac6048dc1c431fe61518bc34d5261
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:7e:98:0b:2c:52:15:92:b7:da:35:bf:59:0b:
4b:df:77:a4:4c:58:74:bf:67:6e:e6:04:50:af:3a:
23:37:7f:f8:45:7d:09:03:31:1f:e2:f2:8c:13:48:
46:26:c5:1c:e8:bb:dc:a9:ba:18:9e:e0:b5:41:e6:
0c:3a:09:3e:a0:b2:e3:fe:fc:df:d6:cf:56:4e:06:
bb:64:6e:41:16:1a:7c:58:3b:98:57:95:ed:ea:7e:
89:d2:a2:5c:69:9c:57:c1:8e:35:8b:6a:75:da:5a:
dd:b5:13:3f:7f:d0:87:68:e4:f5:43:de:9c:4b:de:
84:92:62:16:20:35:90:f6:97:b7:ec:0e:79:b1:57:
e9:1a:9b:8f:67:dc:f9:b1:0e:c7:45:ec:bc:35:50:
bc:18:f1:12:d5:1b:52:ac:ab:05:0a:23:4f:3c:4a:
03:a1:80:3e:c5:f3:f0:e8:f2:08:bb:eb:c1:53:a5:
68:0a:a6:50:63:73:8a:91:79:59:cc:ea:94:52:54:
79:ce:9b:29:d2:92:62:82:3b:0f:9b:a6:88:5b:21:
22:06:5d:a4:7e:b0:37:fc:c6:c1:6f:60:a3:88:92:
28:22:8c:cc:63:d3:73:ae:9f:11:55:62:8e:2a:aa:
a8:70:da:86:f8:d2:0d:b9:57:73:22:41:49:1e:b1:
12:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:F8:06:6B:21:6A:C6:04:8D:C1:C4:31:FE:61:51:8B:C3:4D:52:61
X509v3 Authority Key Identifier:
keyid:4E:07:17:AE:6D:A1:21:BC:CF:6F:75:3D:20:5B:79:DB:4C:74:AA:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TgcXrm2hIbzPb3U9IFt520x0qtw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/3768ac-ba49-443a-8a12-6f7c72f1c5e9/1/TgcXrm2hIbzPb3U9IFt520x0qtw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/3768ac-ba49-443a-8a12-6f7c72f1c5e9/1/TgcXrm2hIbzPb3U9IFt520x0qtw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:e9:94:64:2b:11:c0:c0:89:a4:ca:f2:07:a5:50:57:7b:b0:
76:02:ed:80:7c:af:4c:18:1c:12:cd:35:3b:38:2a:79:d2:15:
1d:00:56:6c:22:ae:2d:55:bb:f3:31:6c:53:63:e8:e8:97:fd:
aa:52:6c:22:6f:90:9b:05:d1:89:28:5d:48:44:6a:7d:e4:c6:
98:d4:c9:58:0a:2b:d8:c1:59:ef:7c:3b:cd:6d:cb:8b:ba:00:
32:1f:40:b6:8c:5f:1a:a6:26:1b:58:7b:e8:ce:32:6d:fc:df:
bf:30:a7:e7:e7:35:97:49:1d:80:e9:89:a1:ca:f4:3e:c0:d7:
cc:a5:4d:09:3d:1c:81:3e:1a:4d:b8:c1:be:7b:ba:32:d7:d4:
e4:78:09:3a:09:51:ac:75:b0:03:ec:a2:85:10:c0:39:55:1e:
86:14:f2:92:eb:51:f7:5b:d4:c6:39:2e:c3:51:67:31:4a:05:
b5:08:41:49:b7:47:0c:e2:22:0e:4c:06:60:22:5e:2a:c3:a4:
2c:13:9e:60:60:61:65:68:55:16:fa:0d:ca:91:6d:35:e1:f7:
98:bf:c3:ae:24:c7:f5:31:00:f0:93:a3:e8:b1:86:25:d8:0c:
43:d4:66:40:7f:c2:28:10:c3:c8:05:c3:01:a1:a4:ca:ae:3b:
d8:7b:0d:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:33:58 2026 by rpki-client