Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3a/4448a7-1ac1-46ad-a727-d96393af2f20/1/TGtjcblFo16d8wj_Q4A-JheFEGk.mft
File: TGtjcblFo16d8wj_Q4A-JheFEGk.mft (raw, json)
Hash identifier: lWxFeRhpC6yPqneUYXZ59HGAtxbhSbIxuMFo5tlPLZo=
Subject key identifier: 61:96:6B:22:05:53:57:42:33:ED:38:10:29:5F:85:8B:A3:CF:21:88
Authority key identifier: 4C:6B:63:71:B9:45:A3:5E:9D:F3:08:FF:43:80:3E:26:17:85:10:69
Certificate issuer: /CN=4c6b6371b945a35e9df308ff43803e2617851069
Certificate serial: 01A105B724F085DC79DF4A1B956EF64E221E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TGtjcblFo16d8wj_Q4A-JheFEGk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/4448a7-1ac1-46ad-a727-d96393af2f20/1/TGtjcblFo16d8wj_Q4A-JheFEGk.mft
Manifest number: 153D
Signing time: Sun 04 Oct 2026 07:00:50 +0000
Manifest this update: Sun 04 Oct 2026 07:00:50 +0000
Manifest next update: Mon 05 Oct 2026 07:00:50 +0000
Files and hashes: 1: SFGE70vQYmz_oKTtZMgB-YKUyZc.roa (hash: lZ0OnAmHAxbwpz0Bf+bKQq6tPOf7KpsPHIF+YP1ggzc=)
2: TGtjcblFo16d8wj_Q4A-JheFEGk.crl (hash: EGUDiX+UUDTTDwCD/hUM0uRxnK5OXtIzPLJfQISFyVU=)
3: eHNuPU6iYgVIfZ9NIp8A3552y-I.roa (hash: AOM1Ajc5ONgwd+E4wuOhZtP8/uws9RFZszPyOYWcL2Q=)
4: vP7G0LDj9js2uqV_dVx329H3yeM.roa (hash: fyHdxLq/9tcpLwgIyk0ErgVx3QqPOxT/MFLUCo0yJ0g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/4448a7-1ac1-46ad-a727-d96393af2f20/1/TGtjcblFo16d8wj_Q4A-JheFEGk.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/4448a7-1ac1-46ad-a727-d96393af2f20/1/TGtjcblFo16d8wj_Q4A-JheFEGk.mft
rsync://rpki.ripe.net/repository/DEFAULT/TGtjcblFo16d8wj_Q4A-JheFEGk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 05:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:05:b7:24:f0:85:dc:79:df:4a:1b:95:6e:f6:4e:22:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c6b6371b945a35e9df308ff43803e2617851069
Validity
Not Before: Oct 4 07:00:50 2026 GMT
Not After : Oct 5 07:00:50 2026 GMT
Subject: CN=61966b220553574233ed3810295f858ba3cf2188
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:70:13:bc:49:1f:1b:39:63:9b:2e:31:89:65:
54:f6:f0:4d:2a:b0:cc:bc:54:97:1c:69:e8:ff:b2:
ab:4d:ca:2e:f5:96:bc:ce:7f:95:ea:a4:61:f1:a3:
27:96:eb:a0:6f:3c:31:2e:4a:d4:b0:49:4f:f2:23:
7a:28:05:72:40:e8:28:d7:cc:ad:fa:8a:19:60:56:
1f:c2:0b:c1:1f:c8:c1:90:fa:48:32:90:a8:fb:7b:
16:3a:52:14:2e:fe:50:47:9e:2a:8a:30:f9:1b:aa:
df:ca:ba:29:c5:d1:03:fc:45:13:5e:14:2a:6a:94:
3c:57:42:a4:2a:5c:04:eb:39:6b:52:27:04:6d:b3:
13:51:8e:37:47:59:14:a6:df:23:38:46:19:a2:c0:
86:e1:5c:90:f1:01:a5:dc:9f:92:18:cd:27:24:a4:
7a:f1:49:35:08:9c:64:54:11:08:fc:17:c9:6c:5b:
5e:5f:3e:a2:77:43:c9:02:df:be:1c:b2:fb:96:bd:
aa:94:e8:3e:2c:60:e5:b6:b3:e0:44:9a:b9:8d:a7:
92:53:ee:95:2d:3e:31:61:3a:02:e0:0a:5e:1c:0a:
61:cb:ae:fc:46:f0:b9:c1:3d:2c:6d:1a:4d:5a:19:
1f:60:b7:94:46:b7:91:ac:ad:0e:15:64:b0:27:9f:
5e:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:96:6B:22:05:53:57:42:33:ED:38:10:29:5F:85:8B:A3:CF:21:88
X509v3 Authority Key Identifier:
keyid:4C:6B:63:71:B9:45:A3:5E:9D:F3:08:FF:43:80:3E:26:17:85:10:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TGtjcblFo16d8wj_Q4A-JheFEGk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/4448a7-1ac1-46ad-a727-d96393af2f20/1/TGtjcblFo16d8wj_Q4A-JheFEGk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/4448a7-1ac1-46ad-a727-d96393af2f20/1/TGtjcblFo16d8wj_Q4A-JheFEGk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:e3:8a:81:e6:b7:a5:02:f5:b3:db:0a:f7:61:40:22:78:b8:
f6:e3:39:de:37:79:5d:b0:b8:68:f8:c5:7d:65:28:92:8a:6c:
0e:4d:d4:45:be:94:31:7a:59:dd:8f:86:40:27:e6:7e:94:c2:
4e:1a:e2:ef:c6:68:61:e0:60:91:60:a9:14:9b:e9:65:83:22:
2e:dd:d8:c3:db:2f:31:6b:06:e0:bb:1e:e1:04:f8:f6:9d:cb:
45:ea:34:0a:76:85:74:27:fe:26:b7:74:02:c6:6c:62:7c:10:
21:70:35:a3:84:e1:7f:43:27:de:7d:c1:11:ef:32:b2:bd:57:
3d:43:60:0e:67:cf:cb:54:76:d9:94:7f:d5:69:6a:41:ac:be:
df:0a:8d:76:23:62:f0:82:f8:e5:87:9b:a0:28:ea:ab:8d:c5:
1c:b0:1b:bd:c8:30:97:a9:37:b3:25:34:7c:bc:5e:93:7d:5b:
03:a9:19:ce:08:01:57:27:76:7a:02:01:1f:08:2d:aa:85:17:
78:19:13:df:a0:61:b7:ab:35:87:58:b1:8a:ad:ad:ea:4d:21:
be:f6:73:82:78:7d:87:2e:c0:b6:7e:1f:61:6d:df:66:91:09:
4f:da:92:3a:3e:e6:1d:59:29:be:61:07:69:20:ed:b0:0e:12:
a9:48:24:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 15:14:17 2026 by rpki-client