Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d8/d95b2c-1e02-4e4e-8438-bbcae0df1f2f/1/tgtXTwPZiBVfRLossHvH37RXzw8.mft
File: tgtXTwPZiBVfRLossHvH37RXzw8.mft (raw, json)
Hash identifier: EmO3IJ1vspsEI70VF48Ds6cfSlN4y9oGG0we8h4Zsj0=
Subject key identifier: C9:16:7E:6B:EE:B3:DD:1C:CD:FA:9B:90:2D:78:E9:13:E3:B7:19:38
Authority key identifier: B6:0B:57:4F:03:D9:88:15:5F:44:BA:2C:B0:7B:C7:DF:B4:57:CF:0F
Certificate issuer: /CN=b60b574f03d988155f44ba2cb07bc7dfb457cf0f
Certificate serial: 01A1DF83241FEDC2D2449E1C56CBE0F3486F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tgtXTwPZiBVfRLossHvH37RXzw8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/d95b2c-1e02-4e4e-8438-bbcae0df1f2f/1/tgtXTwPZiBVfRLossHvH37RXzw8.mft
Manifest number: 1A8A
Signing time: Sun 15 Nov 2026 14:01:15 +0000
Manifest this update: Sun 15 Nov 2026 14:01:15 +0000
Manifest next update: Mon 16 Nov 2026 14:01:15 +0000
Files and hashes: 1: EPm1u1dJgYoTbNI80mTBhYkEcqs.roa (hash: KsEbKma2UWb8xEPEBQMHTxAAbTdu2Rgtnk9hAeBq/48=)
2: tgtXTwPZiBVfRLossHvH37RXzw8.crl (hash: v2pQgnvljRrzPbZ/knwSuhQicHjHvJ3fIwvrP31LRp8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/d95b2c-1e02-4e4e-8438-bbcae0df1f2f/1/tgtXTwPZiBVfRLossHvH37RXzw8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/d95b2c-1e02-4e4e-8438-bbcae0df1f2f/1/tgtXTwPZiBVfRLossHvH37RXzw8.mft
rsync://rpki.ripe.net/repository/DEFAULT/tgtXTwPZiBVfRLossHvH37RXzw8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:df:83:24:1f:ed:c2:d2:44:9e:1c:56:cb:e0:f3:48:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b60b574f03d988155f44ba2cb07bc7dfb457cf0f
Validity
Not Before: Nov 15 14:01:15 2026 GMT
Not After : Nov 16 14:01:15 2026 GMT
Subject: CN=c9167e6beeb3dd1ccdfa9b902d78e913e3b71938
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:35:55:8e:73:b3:d1:82:30:5f:37:e5:d2:1e:
7d:61:fd:bc:bc:34:1d:29:c5:ce:3f:34:04:d1:e3:
64:a4:29:22:41:52:c1:72:f4:95:83:9f:a3:58:00:
b1:0a:ce:8e:85:ad:5c:b3:8a:1f:01:53:e2:9d:dc:
51:f8:36:12:2b:3c:7d:b8:b7:b3:ff:3d:a7:53:67:
d6:94:5f:7c:25:58:b7:0d:5e:3e:73:3d:ba:8a:8e:
91:f3:57:6d:87:53:22:41:d1:7d:6c:8f:5f:92:6c:
27:6b:2b:69:4e:ce:c1:1d:c4:ab:b8:63:b5:c7:a9:
eb:b4:61:e3:fd:76:a2:ba:a9:4d:a8:a3:13:89:ca:
15:d3:b8:0e:c3:53:cb:bc:ad:66:07:6c:49:0e:2c:
f3:74:e2:68:4d:39:a3:01:b0:bc:78:5b:52:d7:4f:
c4:bd:58:4a:c0:f1:46:f9:78:bc:34:d4:a9:08:63:
d0:f5:60:a6:37:d6:0f:5e:28:e1:97:6a:59:1b:e2:
83:95:7c:0f:be:f4:b5:0c:99:60:13:f7:3d:80:37:
1f:cb:a4:05:43:f0:90:be:48:13:dd:c4:28:40:10:
48:75:a9:2f:c0:d3:54:d6:5f:83:55:21:25:0b:9f:
1c:51:17:d2:f2:5a:bb:50:15:0a:d5:df:25:ec:c3:
12:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:16:7E:6B:EE:B3:DD:1C:CD:FA:9B:90:2D:78:E9:13:E3:B7:19:38
X509v3 Authority Key Identifier:
keyid:B6:0B:57:4F:03:D9:88:15:5F:44:BA:2C:B0:7B:C7:DF:B4:57:CF:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tgtXTwPZiBVfRLossHvH37RXzw8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/d95b2c-1e02-4e4e-8438-bbcae0df1f2f/1/tgtXTwPZiBVfRLossHvH37RXzw8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/d95b2c-1e02-4e4e-8438-bbcae0df1f2f/1/tgtXTwPZiBVfRLossHvH37RXzw8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:91:5e:88:fa:bf:42:34:ce:de:ad:61:53:8c:ba:32:4c:1d:
02:df:83:9f:10:9b:6f:a1:93:6e:79:97:3a:d1:0f:0c:8e:40:
2b:8f:fe:ad:f0:69:1e:5d:5c:29:7a:39:55:4f:69:01:a3:5f:
79:62:ca:f2:89:9f:bd:b5:bc:99:ea:b2:05:da:58:51:25:9e:
68:00:44:17:32:99:87:c2:cb:96:fc:8c:3c:76:29:42:6e:5e:
52:a9:fb:3e:f9:b6:e7:e5:7e:f7:fd:b8:57:b7:f6:64:7b:b0:
fb:aa:d1:6d:b5:42:10:51:70:f5:af:a9:85:8f:ac:19:8e:e9:
24:af:fb:fa:b9:05:fd:bf:62:80:f7:0f:80:48:a9:33:ae:e5:
24:59:af:18:4f:e2:67:08:08:91:0d:1c:fb:73:db:69:0f:66:
27:d7:53:4b:38:b2:ba:73:4e:fc:f9:65:15:76:9b:b8:10:cc:
05:28:55:f2:68:be:ac:11:41:fb:e7:62:f9:90:bb:94:7a:54:
e9:76:da:26:63:3b:7e:43:f5:0c:44:7b:83:a6:a0:ec:10:30:
bb:ab:04:4a:61:7b:02:6e:c9:41:da:bd:43:2e:f6:31:bf:74:
ea:c3:93:45:fe:e7:3c:d5:d2:ec:dd:8f:d0:f5:7b:90:a9:54:
0f:0b:8d:34
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHfgyQf7cLSRJ4cVsvg80hvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI2MGI1NzRmMDNkOTg4MTU1ZjQ0YmEyY2IwN2JjN2RmYjQ1
N2NmMGYwHhcNMjYxMTE1MTQwMTE1WhcNMjYxMTE2MTQwMTE1WjAzMTEwLwYDVQQD
EyhjOTE2N2U2YmVlYjNkZDFjY2RmYTliOTAyZDc4ZTkxM2UzYjcxOTM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApzVVjnOz0YIwXzfl0h59Yf28vDQd
KcXOPzQE0eNkpCkiQVLBcvSVg5+jWACxCs6Oha1cs4ofAVPindxR+DYSKzx9uLez
/z2nU2fWlF98JVi3DV4+cz26io6R81dth1MiQdF9bI9fkmwnaytpTs7BHcSruGO1
x6nrtGHj/XaiuqlNqKMTicoV07gOw1PLvK1mB2xJDizzdOJoTTmjAbC8eFtS10/E
vVhKwPFG+Xi8NNSpCGPQ9WCmN9YPXijhl2pZG+KDlXwPvvS1DJlgE/c9gDcfy6QF
Q/CQvkgT3cQoQBBIdakvwNNU1l+DVSElC58cURfS8lq7UBUK1d8l7MMSIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMkWfmvus90czfqbkC146RPjtxk4MB8GA1UdIwQY
MBaAFLYLV08D2YgVX0S6LLB7x9+0V88PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdGd0WFR3UFppQlZmUkxvc3NIdkgzN1JYenc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC9kOTViMmMtMWUwMi00ZTRlLTg0Mzgt
YmJjYWUwZGYxZjJmLzEvdGd0WFR3UFppQlZmUkxvc3NIdkgzN1JYenc4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC9kOTViMmMtMWUwMi00ZTRlLTg0MzgtYmJjYWUwZGYxZjJm
LzEvdGd0WFR3UFppQlZmUkxvc3NIdkgzN1JYenc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOpFeiPq/
QjTO3q1hU4y6MkwdAt+DnxCbb6GTbnmXOtEPDI5AK4/+rfBpHl1cKXo5VU9pAaNf
eWLK8omfvbW8meqyBdpYUSWeaABEFzKZh8LLlvyMPHYpQm5eUqn7Pvm25+V+9/24
V7f2ZHuw+6rRbbVCEFFw9a+phY+sGY7pJK/7+rkF/b9igPcPgEipM67lJFmvGE/i
ZwgIkQ0c+3PbaQ9mJ9dTSziyunNO/PllFXabuBDMBShV8mi+rBFB++di+ZC7lHpU
6XbaJmM7fkP1DER7g6ag7BAwu6sESmF7Am7JQdq9Qy72Mb906sOTRf7nPNXS7N2P
0PV7kKlUDwuNNA==
-----END CERTIFICATE-----
Generated at Sun Nov 15 20:13:54 2026 by rpki-client