Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/4448a7-1ac1-46ad-a727-d96393af2f20/1/TGtjcblFo16d8wj_Q4A-JheFEGk.mft
File: TGtjcblFo16d8wj_Q4A-JheFEGk.mft (raw, json)
Hash identifier: pMZTTuVNyEQYZzVmqd5SHOcI2ZbBy3smVS6xhTRaRl8=
Subject key identifier: 1B:30:63:75:69:F1:65:C1:7E:8C:C0:F0:C6:FA:1F:3D:12:3B:74:8C
Authority key identifier: 4C:6B:63:71:B9:45:A3:5E:9D:F3:08:FF:43:80:3E:26:17:85:10:69
Certificate issuer: /CN=4c6b6371b945a35e9df308ff43803e2617851069
Certificate serial: 019D9AE34F399A861E5980748BF0742FB201
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TGtjcblFo16d8wj_Q4A-JheFEGk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/4448a7-1ac1-46ad-a727-d96393af2f20/1/TGtjcblFo16d8wj_Q4A-JheFEGk.mft
Manifest number: 1378
Signing time: Fri 17 Apr 2026 10:01:21 +0000
Manifest this update: Fri 17 Apr 2026 10:01:21 +0000
Manifest next update: Sat 18 Apr 2026 10:01:21 +0000
Files and hashes: 1: SFGE70vQYmz_oKTtZMgB-YKUyZc.roa (hash: lZ0OnAmHAxbwpz0Bf+bKQq6tPOf7KpsPHIF+YP1ggzc=)
2: TGtjcblFo16d8wj_Q4A-JheFEGk.crl (hash: yrRHrWZx0/GvDMlIWKOo7BJXnuUlBIbfDH5hUWaOS0s=)
3: eHNuPU6iYgVIfZ9NIp8A3552y-I.roa (hash: AOM1Ajc5ONgwd+E4wuOhZtP8/uws9RFZszPyOYWcL2Q=)
4: vP7G0LDj9js2uqV_dVx329H3yeM.roa (hash: fyHdxLq/9tcpLwgIyk0ErgVx3QqPOxT/MFLUCo0yJ0g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/4448a7-1ac1-46ad-a727-d96393af2f20/1/TGtjcblFo16d8wj_Q4A-JheFEGk.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/4448a7-1ac1-46ad-a727-d96393af2f20/1/TGtjcblFo16d8wj_Q4A-JheFEGk.mft
rsync://rpki.ripe.net/repository/DEFAULT/TGtjcblFo16d8wj_Q4A-JheFEGk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e3:4f:39:9a:86:1e:59:80:74:8b:f0:74:2f:b2:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c6b6371b945a35e9df308ff43803e2617851069
Validity
Not Before: Apr 17 10:01:21 2026 GMT
Not After : Apr 18 10:01:21 2026 GMT
Subject: CN=1b30637569f165c17e8cc0f0c6fa1f3d123b748c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:01:b4:e8:27:82:83:b9:27:ca:68:5b:57:4e:
da:47:97:56:32:c8:2b:fc:28:aa:3e:f2:fe:91:cf:
5f:a3:8d:90:8e:50:ad:e7:c5:14:00:d3:26:8b:22:
44:18:d7:20:f0:63:4d:64:b8:08:d4:14:05:b7:94:
b1:a2:06:30:1c:6c:64:b7:b0:f1:16:42:be:b4:1d:
00:59:12:1b:13:a0:31:ab:e1:b8:70:a9:3b:b2:5c:
a0:ae:9c:33:30:c5:29:18:5d:36:ff:51:e3:5f:75:
49:56:72:03:e8:f7:80:92:f2:cb:48:9d:2e:40:c0:
e0:42:77:d2:05:1e:02:b2:2d:d6:8e:2d:63:c1:bd:
64:2c:ca:fd:0c:a1:6e:30:4f:66:b3:c2:ff:19:47:
86:67:95:09:e4:b6:5e:2f:86:26:12:3f:c2:4a:96:
d5:bb:eb:b1:e1:17:08:ff:80:99:7d:8f:06:2b:80:
9f:8e:8c:34:9a:07:a3:7a:84:24:c4:b4:21:58:1b:
17:7f:db:4c:49:88:aa:40:6c:60:6e:01:29:3a:02:
4a:ab:67:71:86:97:03:86:e4:7f:ca:99:d5:fd:67:
f4:19:95:71:96:45:af:23:2e:a3:04:95:50:5b:50:
ae:11:73:e0:8d:ec:fe:ef:6e:73:19:00:7b:d3:df:
8f:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:30:63:75:69:F1:65:C1:7E:8C:C0:F0:C6:FA:1F:3D:12:3B:74:8C
X509v3 Authority Key Identifier:
keyid:4C:6B:63:71:B9:45:A3:5E:9D:F3:08:FF:43:80:3E:26:17:85:10:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TGtjcblFo16d8wj_Q4A-JheFEGk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/4448a7-1ac1-46ad-a727-d96393af2f20/1/TGtjcblFo16d8wj_Q4A-JheFEGk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/4448a7-1ac1-46ad-a727-d96393af2f20/1/TGtjcblFo16d8wj_Q4A-JheFEGk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:40:82:74:e0:16:e3:ce:f6:ab:52:92:c0:cd:ce:e2:d9:e4:
cc:08:50:58:b4:b9:5a:4f:4b:83:57:78:ac:7e:b9:87:09:d5:
05:9e:e3:2f:0d:68:0b:4c:9e:bf:f1:47:65:93:5e:fb:fc:dd:
8d:77:0e:9e:97:7b:61:7d:11:01:02:78:0e:c1:dc:c4:09:e5:
6e:ca:de:f8:32:3c:99:c8:0a:c6:05:a3:73:0c:4b:5d:10:6c:
86:fc:65:1d:ac:7a:c7:9b:01:10:49:4b:66:9c:0f:2d:38:5c:
74:1b:12:44:b2:63:a3:a2:d7:6f:4e:92:8a:c0:62:7b:ed:8e:
98:77:19:2e:75:ec:ee:a4:22:66:97:b6:13:86:2e:1f:10:a9:
e9:ed:56:a7:69:59:ad:65:e3:ca:6d:6b:ad:d0:9a:ae:c4:e2:
a4:18:9c:5c:c7:5b:d9:ac:19:6f:0d:ea:f2:c9:5b:36:f0:26:
ef:e3:d7:75:35:2f:8e:1b:86:f4:f1:f2:77:dc:52:0a:13:2f:
d5:97:4e:92:ac:ef:2d:99:70:63:55:1b:85:df:8b:91:22:a5:
da:1d:4d:f2:2e:2d:f1:fb:08:7a:f8:23:99:4b:ba:79:03:db:
9a:81:6f:33:84:fa:07:22:d6:fc:4c:b3:7a:f3:03:6c:cb:31:
8b:87:bf:f7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2a4085moYeWYB0i/B0L7IBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjNmI2MzcxYjk0NWEzNWU5ZGYzMDhmZjQzODAzZTI2MTc4
NTEwNjkwHhcNMjYwNDE3MTAwMTIxWhcNMjYwNDE4MTAwMTIxWjAzMTEwLwYDVQQD
EygxYjMwNjM3NTY5ZjE2NWMxN2U4Y2MwZjBjNmZhMWYzZDEyM2I3NDhjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmgG06CeCg7knymhbV07aR5dWMsgr
/CiqPvL+kc9fo42QjlCt58UUANMmiyJEGNcg8GNNZLgI1BQFt5SxogYwHGxkt7Dx
FkK+tB0AWRIbE6Axq+G4cKk7slygrpwzMMUpGF02/1HjX3VJVnID6PeAkvLLSJ0u
QMDgQnfSBR4Csi3Wji1jwb1kLMr9DKFuME9ms8L/GUeGZ5UJ5LZeL4YmEj/CSpbV
u+ux4RcI/4CZfY8GK4Cfjow0mgejeoQkxLQhWBsXf9tMSYiqQGxgbgEpOgJKq2dx
hpcDhuR/ypnV/Wf0GZVxlkWvIy6jBJVQW1CuEXPgjez+725zGQB709+PAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBswY3Vp8WXBfozA8Mb6Hz0SO3SMMB8GA1UdIwQY
MBaAFExrY3G5RaNenfMI/0OAPiYXhRBpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVEd0amNibEZvMTZkOHdqX1E0QS1KaGVGRUdrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS80NDQ4YTctMWFjMS00NmFkLWE3Mjct
ZDk2MzkzYWYyZjIwLzEvVEd0amNibEZvMTZkOHdqX1E0QS1KaGVGRUdrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYS80NDQ4YTctMWFjMS00NmFkLWE3MjctZDk2MzkzYWYyZjIw
LzEvVEd0amNibEZvMTZkOHdqX1E0QS1KaGVGRUdrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL0CCdOAW
4872q1KSwM3O4tnkzAhQWLS5Wk9Lg1d4rH65hwnVBZ7jLw1oC0yev/FHZZNe+/zd
jXcOnpd7YX0RAQJ4DsHcxAnlbsre+DI8mcgKxgWjcwxLXRBshvxlHax6x5sBEElL
ZpwPLThcdBsSRLJjo6LXb06SisBie+2OmHcZLnXs7qQiZpe2E4YuHxCp6e1Wp2lZ
rWXjym1rrdCarsTipBicXMdb2awZbw3q8slbNvAm7+PXdTUvjhuG9PHyd9xSChMv
1ZdOkqzvLZlwY1Ubhd+LkSKl2h1N8i4t8fsIevgjmUu6eQPbmoFvM4T6ByLW/Eyz
evMDbMsxi4e/9w==
-----END CERTIFICATE-----
Generated at Fri Apr 17 14:16:27 2026 by rpki-client