Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/eb/dbc472-6e0a-411c-af8f-0888eb42744c/1/TGr5hrJB2dJ-xySt-r8G1dIxeT8.mft
File: TGr5hrJB2dJ-xySt-r8G1dIxeT8.mft (raw, json)
Hash identifier: o8Xd7Amzuzh5mAPO2Wcb+np0WN5Ggzz9qqE4yXuib/M=
Subject key identifier: 4C:7B:93:1D:99:71:08:7A:B3:C6:EF:A2:AB:F1:61:7C:85:70:25:B3
Authority key identifier: 4C:6A:F9:86:B2:41:D9:D2:7E:C7:24:AD:FA:BF:06:D5:D2:31:79:3F
Certificate issuer: /CN=4c6af986b241d9d27ec724adfabf06d5d231793f
Certificate serial: 01A0E777696C90802A6E0B8670AA09A74F3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TGr5hrJB2dJ-xySt-r8G1dIxeT8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/dbc472-6e0a-411c-af8f-0888eb42744c/1/TGr5hrJB2dJ-xySt-r8G1dIxeT8.mft
Manifest number: 172B
Signing time: Mon 28 Sep 2026 10:02:37 +0000
Manifest this update: Mon 28 Sep 2026 10:02:37 +0000
Manifest next update: Tue 29 Sep 2026 10:02:37 +0000
Files and hashes: 1: TGr5hrJB2dJ-xySt-r8G1dIxeT8.crl (hash: HNaA4ounmze9x5J6rGIv6xOJhju18hylxJvN4spMj6E=)
2: uLeN3kY2ZRDo-2-B-T0hlmjh-nU.roa (hash: eLP3MmcrJSGHUuA9jj4PGJnAA+F8952d8mOEbR6//AA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/dbc472-6e0a-411c-af8f-0888eb42744c/1/TGr5hrJB2dJ-xySt-r8G1dIxeT8.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/dbc472-6e0a-411c-af8f-0888eb42744c/1/TGr5hrJB2dJ-xySt-r8G1dIxeT8.mft
rsync://rpki.ripe.net/repository/DEFAULT/TGr5hrJB2dJ-xySt-r8G1dIxeT8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 10:02:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e7:77:69:6c:90:80:2a:6e:0b:86:70:aa:09:a7:4f:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c6af986b241d9d27ec724adfabf06d5d231793f
Validity
Not Before: Sep 28 10:02:37 2026 GMT
Not After : Sep 29 10:02:37 2026 GMT
Subject: CN=4c7b931d9971087ab3c6efa2abf1617c857025b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:ee:53:fe:b2:21:80:74:22:ab:3b:4c:4e:0a:
c8:54:4a:b9:8a:9c:a1:50:c4:3f:b1:e7:10:8a:48:
4e:39:f0:d0:10:8e:fe:4c:bd:6c:93:05:23:0c:09:
d6:ea:68:34:db:d6:a1:c4:43:aa:96:bd:81:09:a0:
bb:db:7b:4f:5a:12:df:47:6b:5c:08:12:a9:5f:bd:
d8:a5:8a:6d:2e:9d:a8:c3:50:93:2e:cd:22:44:96:
92:c9:3c:dc:70:46:2d:db:1f:1d:3c:8e:57:85:b9:
9a:da:cf:40:e6:d2:3f:f4:fc:ec:18:d0:ce:c5:39:
5e:c2:d5:fe:8b:d6:62:8f:e9:1f:2a:41:9e:ea:85:
e4:05:1e:4c:18:b5:2a:30:f5:34:cf:7e:8b:32:68:
64:d7:e7:42:bb:98:08:37:ff:a4:fc:cf:0d:ab:6c:
8e:b4:97:9f:7f:0c:5e:30:2d:df:b9:b5:94:bb:72:
9e:a5:e4:3b:df:03:40:67:ac:53:68:ce:ba:58:9a:
d2:8b:c1:9d:15:62:c4:ef:b1:f8:e6:94:6b:12:a3:
a1:2d:6f:43:81:a1:14:af:72:b1:32:6f:cd:4e:c7:
60:c9:7b:32:f6:89:db:21:86:6b:34:95:fe:14:fe:
4b:d0:e0:3f:dc:35:c7:4f:7b:99:f6:e2:d8:ba:ca:
9d:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:7B:93:1D:99:71:08:7A:B3:C6:EF:A2:AB:F1:61:7C:85:70:25:B3
X509v3 Authority Key Identifier:
keyid:4C:6A:F9:86:B2:41:D9:D2:7E:C7:24:AD:FA:BF:06:D5:D2:31:79:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TGr5hrJB2dJ-xySt-r8G1dIxeT8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/dbc472-6e0a-411c-af8f-0888eb42744c/1/TGr5hrJB2dJ-xySt-r8G1dIxeT8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/dbc472-6e0a-411c-af8f-0888eb42744c/1/TGr5hrJB2dJ-xySt-r8G1dIxeT8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:d3:78:a6:47:bc:d0:bd:03:dd:aa:fe:0b:91:d5:87:a2:c7:
16:78:ec:47:2a:fd:7f:e8:20:75:d3:fb:a4:68:f4:59:47:c2:
4f:b1:1e:8e:ce:7b:c3:90:6e:ec:6b:a8:e6:53:94:4e:91:07:
b0:63:e2:8e:3d:94:50:2a:05:23:d4:53:18:a0:f5:3d:a7:d8:
cf:3e:31:b9:41:d0:f1:f4:df:3d:49:6e:69:7e:f4:3b:9f:c4:
8e:d8:3f:80:c3:27:6d:5e:ac:d9:62:ad:8d:34:15:65:ad:4b:
cc:7f:8b:96:03:ac:60:e8:b6:84:7f:10:c0:26:df:2c:a4:2c:
a6:20:65:aa:a1:ce:ed:31:7c:88:f7:76:e0:f6:b9:87:2f:11:
62:52:12:ff:89:5a:af:f0:98:1e:55:bf:0b:36:db:9d:95:03:
99:d8:33:43:78:ca:1b:d8:bc:47:ba:e1:6c:9f:2f:31:2d:73:
7d:b5:e6:1a:85:84:1f:2d:d6:c3:cc:85:b8:bd:17:48:88:9d:
f2:cd:bc:77:c7:d4:70:8d:fe:19:3a:54:9b:dc:f6:c5:50:74:
b8:5d:4f:3a:24:7f:16:ec:8e:27:2d:ae:d7:43:5f:55:aa:ec:
32:b9:6a:63:48:84:ab:dd:91:a9:a7:86:2b:a0:02:47:f1:e7:
2e:28:90:ad
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDnd2lskIAqbguGcKoJp08+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjNmFmOTg2YjI0MWQ5ZDI3ZWM3MjRhZGZhYmYwNmQ1ZDIz
MTc5M2YwHhcNMjYwOTI4MTAwMjM3WhcNMjYwOTI5MTAwMjM3WjAzMTEwLwYDVQQD
Eyg0YzdiOTMxZDk5NzEwODdhYjNjNmVmYTJhYmYxNjE3Yzg1NzAyNWIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAju5T/rIhgHQiqztMTgrIVEq5ipyh
UMQ/secQikhOOfDQEI7+TL1skwUjDAnW6mg029ahxEOqlr2BCaC723tPWhLfR2tc
CBKpX73YpYptLp2ow1CTLs0iRJaSyTzccEYt2x8dPI5Xhbma2s9A5tI/9PzsGNDO
xTlewtX+i9Zij+kfKkGe6oXkBR5MGLUqMPU0z36LMmhk1+dCu5gIN/+k/M8Nq2yO
tJeffwxeMC3fubWUu3KepeQ73wNAZ6xTaM66WJrSi8GdFWLE77H45pRrEqOhLW9D
gaEUr3KxMm/NTsdgyXsy9onbIYZrNJX+FP5L0OA/3DXHT3uZ9uLYusqdPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEx7kx2ZcQh6s8bvoqvxYXyFcCWzMB8GA1UdIwQY
MBaAFExq+YayQdnSfsckrfq/BtXSMXk/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVEdyNWhySkIyZEoteHlTdC1yOEcxZEl4ZVQ4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi9kYmM0NzItNmUwYS00MTFjLWFmOGYt
MDg4OGViNDI3NDRjLzEvVEdyNWhySkIyZEoteHlTdC1yOEcxZEl4ZVQ4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi9kYmM0NzItNmUwYS00MTFjLWFmOGYtMDg4OGViNDI3NDRj
LzEvVEdyNWhySkIyZEoteHlTdC1yOEcxZEl4ZVQ4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAldN4pke8
0L0D3ar+C5HVh6LHFnjsRyr9f+ggddP7pGj0WUfCT7Eejs57w5Bu7Guo5lOUTpEH
sGPijj2UUCoFI9RTGKD1PafYzz4xuUHQ8fTfPUluaX70O5/Ejtg/gMMnbV6s2WKt
jTQVZa1LzH+LlgOsYOi2hH8QwCbfLKQspiBlqqHO7TF8iPd24Pa5hy8RYlIS/4la
r/CYHlW/CzbbnZUDmdgzQ3jKG9i8R7rhbJ8vMS1zfbXmGoWEHy3Ww8yFuL0XSIid
8s28d8fUcI3+GTpUm9z2xVB0uF1POiR/FuyOJy2u10NfVarsMrlqY0iEq92RqaeG
K6ACR/HnLiiQrQ==
-----END CERTIFICATE-----
Generated at Mon Sep 28 18:07:45 2026 by rpki-client