Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d8/d95b2c-1e02-4e4e-8438-bbcae0df1f2f/1/tgtXTwPZiBVfRLossHvH37RXzw8.mft
File: tgtXTwPZiBVfRLossHvH37RXzw8.mft (raw, json)
Hash identifier: RjLj9eAeSzTY3upr3C97c64HUhOxy5d83nXCJ9A2zCM=
Subject key identifier: C5:6A:D1:18:74:E9:69:C5:88:64:A3:53:18:B5:DD:47:D6:99:40:F4
Authority key identifier: B6:0B:57:4F:03:D9:88:15:5F:44:BA:2C:B0:7B:C7:DF:B4:57:CF:0F
Certificate issuer: /CN=b60b574f03d988155f44ba2cb07bc7dfb457cf0f
Certificate serial: 01A0C96B5171C15FC08BE8B0456A8E7F9420
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tgtXTwPZiBVfRLossHvH37RXzw8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/d95b2c-1e02-4e4e-8438-bbcae0df1f2f/1/tgtXTwPZiBVfRLossHvH37RXzw8.mft
Manifest number: 19FA
Signing time: Tue 22 Sep 2026 14:00:48 +0000
Manifest this update: Tue 22 Sep 2026 14:00:48 +0000
Manifest next update: Wed 23 Sep 2026 14:00:48 +0000
Files and hashes: 1: EPm1u1dJgYoTbNI80mTBhYkEcqs.roa (hash: KsEbKma2UWb8xEPEBQMHTxAAbTdu2Rgtnk9hAeBq/48=)
2: tgtXTwPZiBVfRLossHvH37RXzw8.crl (hash: Z8Ls6gnEwD5c2MiqRS0q3smyx1QPPElmlALG9J+DQrs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/d95b2c-1e02-4e4e-8438-bbcae0df1f2f/1/tgtXTwPZiBVfRLossHvH37RXzw8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/d95b2c-1e02-4e4e-8438-bbcae0df1f2f/1/tgtXTwPZiBVfRLossHvH37RXzw8.mft
rsync://rpki.ripe.net/repository/DEFAULT/tgtXTwPZiBVfRLossHvH37RXzw8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c9:6b:51:71:c1:5f:c0:8b:e8:b0:45:6a:8e:7f:94:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b60b574f03d988155f44ba2cb07bc7dfb457cf0f
Validity
Not Before: Sep 22 14:00:48 2026 GMT
Not After : Sep 23 14:00:48 2026 GMT
Subject: CN=c56ad11874e969c58864a35318b5dd47d69940f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:57:bf:2a:05:99:5b:3c:bd:0c:d2:c4:d8:15:
db:6b:26:a7:10:ab:3a:ff:d0:d3:5d:49:77:b2:ad:
3c:3e:66:55:71:d4:1c:21:77:5b:3b:0c:4f:54:5d:
56:18:2a:b3:24:e3:fd:c7:f0:e1:fe:f5:d4:b1:5c:
52:ad:8f:58:6a:b2:f0:46:05:50:36:a2:88:14:0b:
a9:8a:5f:7a:48:94:b6:f5:ce:68:85:50:a1:ab:e9:
43:cc:83:49:0d:8a:80:f3:38:e4:c7:ef:f1:c9:a9:
27:b4:9d:12:95:2c:0d:6d:a5:f0:9c:e0:1b:80:20:
ff:67:53:0d:98:b8:9c:a7:f9:0c:08:20:12:d6:2f:
45:f3:b1:d1:8e:90:d5:41:e6:51:33:45:9e:f4:e8:
ee:54:4d:bf:87:52:27:a9:72:9a:be:5d:b1:47:65:
7f:6d:dd:69:75:34:59:90:73:67:be:9f:d0:23:b3:
ff:16:a3:d7:64:d4:e2:87:7f:ec:5a:df:f2:4d:ca:
6b:5e:f0:de:ee:e6:ee:91:f7:64:c0:e8:c8:7d:40:
7a:30:4a:f6:a2:a9:0e:48:8e:fa:4c:15:72:a4:89:
56:b4:ae:e1:c1:0c:14:6a:93:b8:af:86:a2:1e:6d:
b0:8d:11:1c:cd:8b:46:1d:1e:48:f3:a0:3a:0b:ac:
cd:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:6A:D1:18:74:E9:69:C5:88:64:A3:53:18:B5:DD:47:D6:99:40:F4
X509v3 Authority Key Identifier:
keyid:B6:0B:57:4F:03:D9:88:15:5F:44:BA:2C:B0:7B:C7:DF:B4:57:CF:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tgtXTwPZiBVfRLossHvH37RXzw8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/d95b2c-1e02-4e4e-8438-bbcae0df1f2f/1/tgtXTwPZiBVfRLossHvH37RXzw8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/d95b2c-1e02-4e4e-8438-bbcae0df1f2f/1/tgtXTwPZiBVfRLossHvH37RXzw8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:53:68:98:75:0c:32:be:3a:87:b7:da:60:f3:ad:88:27:61:
04:7f:85:c9:cd:c1:50:ac:91:34:fe:18:5e:50:9f:b3:91:26:
6f:3a:90:3e:bb:93:48:b4:1e:b0:d4:c8:62:15:91:fa:cd:c8:
c0:6d:ce:7a:a2:1c:96:97:38:5a:24:37:be:ec:d1:a3:dc:8c:
20:31:78:9e:58:4a:b9:65:30:28:c3:19:7a:f2:da:ff:8d:3b:
e5:f1:e5:6b:23:db:9a:8a:76:86:02:5f:4e:f8:c4:46:2b:69:
b8:fd:0b:d7:c4:c8:d6:c3:b7:e9:9b:58:88:15:58:d8:9e:8a:
aa:db:f7:34:16:d7:33:78:12:ae:08:f1:0b:29:f2:a1:3a:08:
7a:31:40:5d:25:c3:a7:be:d9:99:3d:3a:9d:db:0d:99:4c:39:
fd:38:a4:41:13:9e:32:ae:0f:5c:88:e5:13:2c:16:08:1e:4a:
79:87:4d:42:82:a5:83:bb:6b:a1:53:18:3c:db:77:2e:0f:58:
7d:b8:bf:85:48:1e:57:dc:64:ad:60:b5:a2:3f:72:9f:a8:34:
01:ae:47:7c:c1:25:e3:02:04:cb:7d:fb:3f:03:e3:f3:09:e4:
64:08:1b:d2:12:44:e2:d1:19:62:1f:cc:a7:36:95:15:fa:e1:
b1:5b:fa:76
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDJa1FxwV/Ai+iwRWqOf5QgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI2MGI1NzRmMDNkOTg4MTU1ZjQ0YmEyY2IwN2JjN2RmYjQ1
N2NmMGYwHhcNMjYwOTIyMTQwMDQ4WhcNMjYwOTIzMTQwMDQ4WjAzMTEwLwYDVQQD
EyhjNTZhZDExODc0ZTk2OWM1ODg2NGEzNTMxOGI1ZGQ0N2Q2OTk0MGY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlFe/KgWZWzy9DNLE2BXbayanEKs6
/9DTXUl3sq08PmZVcdQcIXdbOwxPVF1WGCqzJOP9x/Dh/vXUsVxSrY9YarLwRgVQ
NqKIFAupil96SJS29c5ohVChq+lDzINJDYqA8zjkx+/xyakntJ0SlSwNbaXwnOAb
gCD/Z1MNmLicp/kMCCAS1i9F87HRjpDVQeZRM0We9OjuVE2/h1InqXKavl2xR2V/
bd1pdTRZkHNnvp/QI7P/FqPXZNTih3/sWt/yTcprXvDe7ubukfdkwOjIfUB6MEr2
oqkOSI76TBVypIlWtK7hwQwUapO4r4aiHm2wjREczYtGHR5I86A6C6zN8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMVq0Rh06WnFiGSjUxi13UfWmUD0MB8GA1UdIwQY
MBaAFLYLV08D2YgVX0S6LLB7x9+0V88PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdGd0WFR3UFppQlZmUkxvc3NIdkgzN1JYenc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC9kOTViMmMtMWUwMi00ZTRlLTg0Mzgt
YmJjYWUwZGYxZjJmLzEvdGd0WFR3UFppQlZmUkxvc3NIdkgzN1JYenc4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC9kOTViMmMtMWUwMi00ZTRlLTg0MzgtYmJjYWUwZGYxZjJm
LzEvdGd0WFR3UFppQlZmUkxvc3NIdkgzN1JYenc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJFNomHUM
Mr46h7faYPOtiCdhBH+Fyc3BUKyRNP4YXlCfs5EmbzqQPruTSLQesNTIYhWR+s3I
wG3OeqIclpc4WiQ3vuzRo9yMIDF4nlhKuWUwKMMZevLa/4075fHlayPbmop2hgJf
TvjERitpuP0L18TI1sO36ZtYiBVY2J6Kqtv3NBbXM3gSrgjxCynyoToIejFAXSXD
p77ZmT06ndsNmUw5/TikQROeMq4PXIjlEywWCB5KeYdNQoKlg7troVMYPNt3Lg9Y
fbi/hUgeV9xkrWC1oj9yn6g0Aa5HfMEl4wIEy337PwPj8wnkZAgb0hJE4tEZYh/M
pzaVFfrhsVv6dg==
-----END CERTIFICATE-----
Generated at Tue Sep 22 22:52:29 2026 by rpki-client