Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/d95b2c-1e02-4e4e-8438-bbcae0df1f2f/1/tgtXTwPZiBVfRLossHvH37RXzw8.mft
File: tgtXTwPZiBVfRLossHvH37RXzw8.mft (raw, json)
Hash identifier: f2C3vAWl8KTsb2ZCcBW+56VtdPmWeiCqzdZ70pA+c/c=
Subject key identifier: 26:0A:C5:93:67:72:1E:3D:C1:EB:E1:52:73:F8:00:6D:44:ED:5A:31
Authority key identifier: B6:0B:57:4F:03:D9:88:15:5F:44:BA:2C:B0:7B:C7:DF:B4:57:CF:0F
Certificate issuer: /CN=b60b574f03d988155f44ba2cb07bc7dfb457cf0f
Certificate serial: 019DA41D0403179C6F2CD4F480701E0764E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tgtXTwPZiBVfRLossHvH37RXzw8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/d95b2c-1e02-4e4e-8438-bbcae0df1f2f/1/tgtXTwPZiBVfRLossHvH37RXzw8.mft
Manifest number: 1859
Signing time: Sun 19 Apr 2026 05:00:58 +0000
Manifest this update: Sun 19 Apr 2026 05:00:58 +0000
Manifest next update: Mon 20 Apr 2026 05:00:58 +0000
Files and hashes: 1: EPm1u1dJgYoTbNI80mTBhYkEcqs.roa (hash: KsEbKma2UWb8xEPEBQMHTxAAbTdu2Rgtnk9hAeBq/48=)
2: tgtXTwPZiBVfRLossHvH37RXzw8.crl (hash: ZRWMLL16opsjTqSuwGlZQtmffR0Xplux0Cmm11BTMQE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/d95b2c-1e02-4e4e-8438-bbcae0df1f2f/1/tgtXTwPZiBVfRLossHvH37RXzw8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/d95b2c-1e02-4e4e-8438-bbcae0df1f2f/1/tgtXTwPZiBVfRLossHvH37RXzw8.mft
rsync://rpki.ripe.net/repository/DEFAULT/tgtXTwPZiBVfRLossHvH37RXzw8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:1d:04:03:17:9c:6f:2c:d4:f4:80:70:1e:07:64:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b60b574f03d988155f44ba2cb07bc7dfb457cf0f
Validity
Not Before: Apr 19 05:00:58 2026 GMT
Not After : Apr 20 05:00:58 2026 GMT
Subject: CN=260ac59367721e3dc1ebe15273f8006d44ed5a31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:a5:74:4a:0a:d5:e3:dc:01:9c:f5:56:b6:d5:
14:7e:e8:aa:68:60:6a:90:44:3d:9e:af:0e:b6:11:
c9:06:a2:0a:61:06:ec:c0:b1:73:f9:4d:cd:14:22:
9e:4d:e9:53:03:bd:4e:08:d4:5a:96:94:11:cf:ec:
22:5b:d8:7d:bf:4f:ed:57:3b:97:97:45:8c:e5:5e:
70:ea:be:a1:4d:a7:cc:cd:27:bc:ad:ff:4c:4b:0e:
39:a7:c7:a5:99:a2:76:c0:5f:81:a0:2f:c0:18:13:
57:4c:3d:c5:cb:69:c8:7e:20:bf:84:a9:6b:52:e8:
bd:7e:ee:f4:ca:3d:33:0a:0a:b4:3f:52:13:c2:96:
93:10:c0:92:6a:86:0a:19:c4:33:69:25:8b:aa:73:
61:30:56:33:10:1a:c9:0d:68:2f:ac:21:bc:16:34:
82:c6:e3:0c:67:4f:2d:2b:77:b8:0b:8f:74:88:f5:
ad:65:e5:59:3f:a9:d8:93:59:a2:83:18:32:7b:52:
d8:eb:49:64:b2:ad:26:dc:be:ca:b0:96:a2:cc:5d:
6d:54:76:00:2c:83:38:80:37:1b:f0:84:9d:bc:d4:
2e:6d:7b:85:25:ab:b1:f4:5f:1f:fe:d4:a1:fa:0b:
c4:16:d5:b4:4b:b2:52:42:cd:7d:7b:9e:14:9e:da:
24:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:0A:C5:93:67:72:1E:3D:C1:EB:E1:52:73:F8:00:6D:44:ED:5A:31
X509v3 Authority Key Identifier:
keyid:B6:0B:57:4F:03:D9:88:15:5F:44:BA:2C:B0:7B:C7:DF:B4:57:CF:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tgtXTwPZiBVfRLossHvH37RXzw8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/d95b2c-1e02-4e4e-8438-bbcae0df1f2f/1/tgtXTwPZiBVfRLossHvH37RXzw8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/d95b2c-1e02-4e4e-8438-bbcae0df1f2f/1/tgtXTwPZiBVfRLossHvH37RXzw8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:1e:c4:61:c3:dd:6a:fd:bb:9e:b4:24:96:e1:78:70:2a:59:
a8:c8:88:43:9d:72:cf:e8:01:6d:e0:36:b3:73:28:72:51:9c:
1f:b4:88:cb:99:19:be:c8:27:dd:fb:19:79:98:d4:bb:09:a1:
3f:d7:bc:39:9b:c3:31:56:99:c7:87:c3:e6:f4:4b:90:2a:9f:
a5:b6:95:89:67:97:b7:9f:ed:cb:60:97:50:7f:97:c7:d9:78:
ff:0b:82:75:6b:40:0a:58:97:5c:41:f1:28:75:0b:d9:7d:08:
71:aa:5f:64:2b:4a:55:bf:7d:e3:95:66:67:17:f0:2b:10:5c:
bd:77:d5:81:bf:6c:cc:1f:85:af:f8:82:82:39:d7:95:80:34:
0f:66:7d:83:d2:bc:87:b7:b7:66:2a:04:28:db:9e:d0:f0:ff:
e9:9b:6b:2d:45:08:93:00:4f:d5:0e:36:8b:4a:65:76:0e:cc:
70:89:f9:92:5f:3f:75:8e:67:05:1c:6a:74:27:ef:eb:ad:d7:
2b:9d:1f:38:47:2a:28:81:8f:10:f1:28:44:6a:0b:cb:c2:67:
9b:a3:4d:f0:e6:5d:ed:4b:33:4a:8e:b0:cc:76:33:34:df:61:
ff:c8:fd:0f:90:19:fb:98:7d:83:57:56:fa:27:30:ae:a1:e4:
71:35:99:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:15:26 2026 by rpki-client