Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/d95b2c-1e02-4e4e-8438-bbcae0df1f2f/1/tgtXTwPZiBVfRLossHvH37RXzw8.mft
File: tgtXTwPZiBVfRLossHvH37RXzw8.mft (raw, json)
Hash identifier: XRGCITezAF+AYzVfAjPbyGf284ZvDZSFUz30gUWwOs4=
Subject key identifier: D3:9A:C7:95:47:FF:98:80:4A:B8:DF:E4:AC:FA:B8:B7:F6:7C:65:BA
Authority key identifier: B6:0B:57:4F:03:D9:88:15:5F:44:BA:2C:B0:7B:C7:DF:B4:57:CF:0F
Certificate issuer: /CN=b60b574f03d988155f44ba2cb07bc7dfb457cf0f
Certificate serial: 019ED53E2E54F2CA107A67824E1D62D755C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tgtXTwPZiBVfRLossHvH37RXzw8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/d95b2c-1e02-4e4e-8438-bbcae0df1f2f/1/tgtXTwPZiBVfRLossHvH37RXzw8.mft
Manifest number: 18F7
Signing time: Wed 17 Jun 2026 11:01:22 +0000
Manifest this update: Wed 17 Jun 2026 11:01:22 +0000
Manifest next update: Thu 18 Jun 2026 11:01:22 +0000
Files and hashes: 1: EPm1u1dJgYoTbNI80mTBhYkEcqs.roa (hash: KsEbKma2UWb8xEPEBQMHTxAAbTdu2Rgtnk9hAeBq/48=)
2: tgtXTwPZiBVfRLossHvH37RXzw8.crl (hash: ylqAi/EyM2GPG1/2PGEhhjsdZj0whtbEkFuWsb88WYA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/d95b2c-1e02-4e4e-8438-bbcae0df1f2f/1/tgtXTwPZiBVfRLossHvH37RXzw8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/d95b2c-1e02-4e4e-8438-bbcae0df1f2f/1/tgtXTwPZiBVfRLossHvH37RXzw8.mft
rsync://rpki.ripe.net/repository/DEFAULT/tgtXTwPZiBVfRLossHvH37RXzw8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 18 Jun 2026 08:33:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d5:3e:2e:54:f2:ca:10:7a:67:82:4e:1d:62:d7:55:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b60b574f03d988155f44ba2cb07bc7dfb457cf0f
Validity
Not Before: Jun 17 11:01:22 2026 GMT
Not After : Jun 18 11:01:22 2026 GMT
Subject: CN=d39ac79547ff98804ab8dfe4acfab8b7f67c65ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:19:93:7f:8b:43:6b:34:75:38:e6:62:c0:e8:
85:8f:5f:7f:8f:f5:e2:77:32:31:d4:28:f9:0f:c8:
83:66:86:a4:0c:72:ae:a0:02:da:13:be:34:48:38:
dc:6f:6a:d0:0d:c2:21:1d:91:61:13:c3:89:3d:58:
c7:5b:2d:f4:e5:45:b3:82:1b:ca:a3:21:39:13:da:
05:37:77:71:0e:a0:b6:c8:38:38:ef:20:32:06:04:
20:1f:c3:a1:a9:e2:30:72:98:cc:96:5a:d4:41:6d:
94:94:91:c1:c9:92:d7:12:ec:5e:a0:dc:92:93:66:
56:f6:90:8a:24:6b:8d:3e:3c:fc:a4:8c:39:7a:77:
e7:ed:2d:83:c1:58:3d:b2:32:06:65:13:5c:49:af:
ee:74:49:78:05:d2:40:d3:00:17:b6:a4:63:36:98:
4a:58:91:59:8d:b7:17:4c:51:6a:c4:47:67:3d:05:
01:92:57:3b:84:5b:63:4e:f3:bc:a5:6b:1e:5e:37:
7e:6f:05:73:e6:d8:e5:36:16:1f:d4:11:62:d6:e3:
bd:93:97:6b:19:e0:0a:2a:48:2f:37:50:e7:e8:06:
d7:37:d3:bf:69:1e:fb:47:bb:23:25:5e:c5:ba:5d:
2c:59:f0:9c:3e:fd:b0:0c:fd:fe:42:97:02:ba:bf:
7b:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:9A:C7:95:47:FF:98:80:4A:B8:DF:E4:AC:FA:B8:B7:F6:7C:65:BA
X509v3 Authority Key Identifier:
keyid:B6:0B:57:4F:03:D9:88:15:5F:44:BA:2C:B0:7B:C7:DF:B4:57:CF:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tgtXTwPZiBVfRLossHvH37RXzw8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/d95b2c-1e02-4e4e-8438-bbcae0df1f2f/1/tgtXTwPZiBVfRLossHvH37RXzw8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/d95b2c-1e02-4e4e-8438-bbcae0df1f2f/1/tgtXTwPZiBVfRLossHvH37RXzw8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:e4:ca:73:89:11:8b:82:10:68:1e:cb:9e:bf:39:98:cf:e6:
d7:22:ae:4a:8f:65:20:b3:d2:8d:2c:0f:5c:8a:99:54:fb:93:
7e:c1:8e:93:3d:43:06:b8:55:b1:ce:e6:3e:c2:0f:65:2e:70:
57:dc:17:8b:c4:d0:77:d3:bd:59:10:4e:e3:7c:45:1d:4b:78:
ec:48:26:db:0b:31:20:eb:3b:4f:ed:b7:66:f9:ef:11:29:4c:
65:2a:a1:06:ce:b4:b0:30:c1:14:d1:d1:06:f6:8e:fa:64:7b:
79:46:3b:62:fc:10:35:1e:bd:8e:af:e3:b0:3f:d2:80:34:e6:
b0:52:78:3a:c7:be:57:64:e0:ea:d8:08:19:0c:18:70:2f:6f:
12:09:7f:c1:5b:52:75:d5:07:e4:bd:a5:72:ce:39:da:98:96:
67:14:c4:09:af:e6:81:7f:85:2e:a5:8f:78:02:92:77:ff:c0:
65:45:f5:d5:31:8c:26:2b:29:0c:42:d1:cf:5d:a5:61:60:0c:
66:d5:74:c2:5a:89:0f:7e:78:8a:5e:da:8a:58:e0:01:a9:e1:
f3:58:bf:93:b3:12:02:ca:c8:45:b9:63:56:49:a0:21:27:b8:
2c:8b:2c:ca:a7:67:8c:0e:4d:79:7c:7e:b6:c4:fa:2c:8e:00:
3b:f2:d2:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 15:15:48 2026 by rpki-client