Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/d95b2c-1e02-4e4e-8438-bbcae0df1f2f/1/tgtXTwPZiBVfRLossHvH37RXzw8.mft
File: tgtXTwPZiBVfRLossHvH37RXzw8.mft (raw, json)
Hash identifier: IItzcH1Tj3K0mqVRI7QDOnnxGsgcbn+nGt8cT4aXycU=
Subject key identifier: 66:D5:AE:D0:28:2F:5B:94:49:2D:67:81:89:60:DF:BB:17:DE:92:98
Authority key identifier: B6:0B:57:4F:03:D9:88:15:5F:44:BA:2C:B0:7B:C7:DF:B4:57:CF:0F
Certificate issuer: /CN=b60b574f03d988155f44ba2cb07bc7dfb457cf0f
Certificate serial: 019CACEBB6D762502F3A9286CEB69DF4B4A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tgtXTwPZiBVfRLossHvH37RXzw8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/d95b2c-1e02-4e4e-8438-bbcae0df1f2f/1/tgtXTwPZiBVfRLossHvH37RXzw8.mft
Manifest number: 17D9
Signing time: Mon 02 Mar 2026 05:00:54 +0000
Manifest this update: Mon 02 Mar 2026 05:00:54 +0000
Manifest next update: Tue 03 Mar 2026 05:00:54 +0000
Files and hashes: 1: EPm1u1dJgYoTbNI80mTBhYkEcqs.roa (hash: KsEbKma2UWb8xEPEBQMHTxAAbTdu2Rgtnk9hAeBq/48=)
2: tgtXTwPZiBVfRLossHvH37RXzw8.crl (hash: Q08EIHSAle3bGfdk+oiugGpNHIgNGGErDjh3zEVOOXY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/d95b2c-1e02-4e4e-8438-bbcae0df1f2f/1/tgtXTwPZiBVfRLossHvH37RXzw8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/d95b2c-1e02-4e4e-8438-bbcae0df1f2f/1/tgtXTwPZiBVfRLossHvH37RXzw8.mft
rsync://rpki.ripe.net/repository/DEFAULT/tgtXTwPZiBVfRLossHvH37RXzw8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:eb:b6:d7:62:50:2f:3a:92:86:ce:b6:9d:f4:b4:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b60b574f03d988155f44ba2cb07bc7dfb457cf0f
Validity
Not Before: Mar 2 05:00:54 2026 GMT
Not After : Mar 3 05:00:54 2026 GMT
Subject: CN=66d5aed0282f5b94492d67818960dfbb17de9298
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:5b:da:b1:da:bb:06:3a:e1:f8:20:c3:b9:06:
6b:7f:b1:80:3d:5b:8d:16:eb:66:c4:c7:30:0c:13:
f7:4b:66:1d:d3:23:a6:f4:76:a5:9f:a7:30:d8:92:
49:13:e8:36:de:e4:e5:e2:28:cc:47:1f:90:75:97:
ad:fe:61:e8:e0:a6:c4:6d:80:c8:64:b4:a6:63:f2:
86:93:64:90:df:f9:55:30:1e:d3:58:87:f0:2e:9e:
37:c3:3a:cf:7f:60:4c:ac:8d:74:d3:ff:81:85:b6:
b0:96:68:0d:0a:18:46:f4:1e:10:dc:6d:4d:13:6f:
95:af:e1:b6:33:3c:8b:43:2a:25:cd:6c:f0:33:cd:
56:36:e5:b2:69:2d:81:c1:a2:e5:f7:ef:5a:1a:91:
5e:d7:9e:95:94:e6:ec:19:d5:51:ed:20:71:a6:5f:
9c:6b:4b:e4:b5:3e:a6:c3:d7:39:87:5c:20:52:a3:
dd:90:ea:33:5d:89:f8:8d:b2:c8:b8:c8:6c:d0:b7:
d9:7a:65:e3:97:32:9e:39:c5:a6:fd:68:ae:03:4d:
4e:dc:5b:c5:dc:46:08:1c:c0:4e:17:5c:b2:4e:08:
a0:43:5e:8f:53:54:ac:48:4e:34:de:4d:82:5e:21:
c4:97:f0:3e:53:b3:cd:39:0d:39:d0:50:85:8f:15:
bb:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:D5:AE:D0:28:2F:5B:94:49:2D:67:81:89:60:DF:BB:17:DE:92:98
X509v3 Authority Key Identifier:
keyid:B6:0B:57:4F:03:D9:88:15:5F:44:BA:2C:B0:7B:C7:DF:B4:57:CF:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tgtXTwPZiBVfRLossHvH37RXzw8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/d95b2c-1e02-4e4e-8438-bbcae0df1f2f/1/tgtXTwPZiBVfRLossHvH37RXzw8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/d95b2c-1e02-4e4e-8438-bbcae0df1f2f/1/tgtXTwPZiBVfRLossHvH37RXzw8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:9e:ff:c9:1c:48:4c:17:50:2f:1e:6c:d3:49:64:f2:5e:6b:
c0:ab:c9:3c:d1:84:10:f9:b1:9a:ef:eb:ca:2b:3d:59:02:88:
7e:46:be:c2:a8:c8:c9:fc:4c:ce:50:ec:ca:3b:00:8e:e3:ab:
a2:01:bc:5f:26:c4:05:99:5d:55:8a:8c:a5:0d:89:fc:a7:ee:
32:2a:6a:99:1e:41:b6:10:1a:0f:c7:c0:8d:96:22:ac:2e:4c:
f9:09:f0:27:21:97:49:a5:f3:62:a1:5d:98:c4:76:e1:a4:1b:
d0:46:7e:7f:c7:c5:cf:80:cc:8f:91:9b:5a:6f:0d:e2:d4:84:
fa:e5:8d:d4:8e:8f:ab:30:29:dd:9a:13:b4:0d:b5:f4:d1:a5:
0a:2a:d8:f3:dc:cc:67:f8:26:8c:11:38:04:4e:51:ad:b4:a4:
c8:e9:ec:39:be:05:40:6e:d8:c4:d5:97:0b:fc:a0:3d:e2:a2:
86:f8:27:28:64:49:f0:aa:6f:0f:22:e3:ca:d7:2d:6f:3c:e5:
ca:de:04:a5:4e:3f:d8:67:59:38:36:91:68:0f:5e:8b:aa:57:
e1:a0:32:78:99:8f:24:bc:e3:40:a4:60:7f:e9:fe:ee:c8:1e:
7f:a4:ea:77:7d:dc:7a:6b:c7:0c:ba:44:d4:6c:62:01:ee:86:
2b:ca:43:8c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZys67bXYlAvOpKGzrad9LSnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI2MGI1NzRmMDNkOTg4MTU1ZjQ0YmEyY2IwN2JjN2RmYjQ1
N2NmMGYwHhcNMjYwMzAyMDUwMDU0WhcNMjYwMzAzMDUwMDU0WjAzMTEwLwYDVQQD
Eyg2NmQ1YWVkMDI4MmY1Yjk0NDkyZDY3ODE4OTYwZGZiYjE3ZGU5Mjk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw1vasdq7Bjrh+CDDuQZrf7GAPVuN
FutmxMcwDBP3S2Yd0yOm9Haln6cw2JJJE+g23uTl4ijMRx+QdZet/mHo4KbEbYDI
ZLSmY/KGk2SQ3/lVMB7TWIfwLp43wzrPf2BMrI100/+BhbawlmgNChhG9B4Q3G1N
E2+Vr+G2MzyLQyolzWzwM81WNuWyaS2BwaLl9+9aGpFe156VlObsGdVR7SBxpl+c
a0vktT6mw9c5h1wgUqPdkOozXYn4jbLIuMhs0LfZemXjlzKeOcWm/WiuA01O3FvF
3EYIHMBOF1yyTgigQ16PU1SsSE403k2CXiHEl/A+U7PNOQ050FCFjxW7TQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGbVrtAoL1uUSS1ngYlg37sX3pKYMB8GA1UdIwQY
MBaAFLYLV08D2YgVX0S6LLB7x9+0V88PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdGd0WFR3UFppQlZmUkxvc3NIdkgzN1JYenc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC9kOTViMmMtMWUwMi00ZTRlLTg0Mzgt
YmJjYWUwZGYxZjJmLzEvdGd0WFR3UFppQlZmUkxvc3NIdkgzN1JYenc4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC9kOTViMmMtMWUwMi00ZTRlLTg0MzgtYmJjYWUwZGYxZjJm
LzEvdGd0WFR3UFppQlZmUkxvc3NIdkgzN1JYenc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcp7/yRxI
TBdQLx5s00lk8l5rwKvJPNGEEPmxmu/ryis9WQKIfka+wqjIyfxMzlDsyjsAjuOr
ogG8XybEBZldVYqMpQ2J/KfuMipqmR5BthAaD8fAjZYirC5M+QnwJyGXSaXzYqFd
mMR24aQb0EZ+f8fFz4DMj5GbWm8N4tSE+uWN1I6PqzAp3ZoTtA219NGlCirY89zM
Z/gmjBE4BE5RrbSkyOnsOb4FQG7YxNWXC/ygPeKihvgnKGRJ8KpvDyLjytctbzzl
yt4EpU4/2GdZODaRaA9ei6pX4aAyeJmPJLzjQKRgf+n+7sgef6Tqd33cemvHDLpE
1GxiAe6GK8pDjA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 08:30:00 2026 by rpki-client