Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/02/ed50b6-2e55-4cf2-b380-dae922e16be8/1/TiujrIcTmtEWAnd-TTXYFYKhkb8.mft
File: TiujrIcTmtEWAnd-TTXYFYKhkb8.mft (raw, json)
Hash identifier: d25F70kEMhsm0jw0fmwt9D+KfIdJJBQSPtdX0bewGOI=
Subject key identifier: DE:11:F4:68:7F:DE:5C:F7:F9:19:E4:5B:9A:95:E3:FB:35:A2:FF:63
Authority key identifier: 4E:2B:A3:AC:87:13:9A:D1:16:02:77:7E:4D:35:D8:15:82:A1:91:BF
Certificate issuer: /CN=4e2ba3ac87139ad11602777e4d35d81582a191bf
Certificate serial: 01A17FCFF8519D7A04E629EE571094F1E67F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TiujrIcTmtEWAnd-TTXYFYKhkb8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/ed50b6-2e55-4cf2-b380-dae922e16be8/1/TiujrIcTmtEWAnd-TTXYFYKhkb8.mft
Manifest number: 08C0
Signing time: Wed 28 Oct 2026 00:01:38 +0000
Manifest this update: Wed 28 Oct 2026 00:01:38 +0000
Manifest next update: Thu 29 Oct 2026 00:01:38 +0000
Files and hashes: 1: TiujrIcTmtEWAnd-TTXYFYKhkb8.crl (hash: SqqQ+4lrj4W+/KkBHEC/cSyMcz1WuKAx4IeBEZqqLzI=)
2: s8uoBmRDwT1I6UHn-j9HLjE26mE.roa (hash: 93nVEqAB+I5Wpe2PdQ+LQC2FT2DxNkUueoInceH3LxI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/ed50b6-2e55-4cf2-b380-dae922e16be8/1/TiujrIcTmtEWAnd-TTXYFYKhkb8.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/ed50b6-2e55-4cf2-b380-dae922e16be8/1/TiujrIcTmtEWAnd-TTXYFYKhkb8.mft
rsync://rpki.ripe.net/repository/DEFAULT/TiujrIcTmtEWAnd-TTXYFYKhkb8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 22:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7f:cf:f8:51:9d:7a:04:e6:29:ee:57:10:94:f1:e6:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e2ba3ac87139ad11602777e4d35d81582a191bf
Validity
Not Before: Oct 28 00:01:38 2026 GMT
Not After : Oct 29 00:01:38 2026 GMT
Subject: CN=de11f4687fde5cf7f919e45b9a95e3fb35a2ff63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ec:aa:ab:8d:2e:0d:23:c2:fb:ac:9c:50:d7:
e3:b2:38:0e:a7:2c:75:35:03:f3:59:84:98:19:3e:
f5:6b:c3:dd:39:c6:a8:7d:dc:71:9f:3a:c2:41:eb:
fd:7b:2c:79:3c:7b:5a:89:48:ff:2d:86:37:43:f8:
17:1d:a8:b9:f3:93:08:74:5b:71:a3:7d:c7:a5:ad:
84:95:a9:d1:76:b0:e5:0b:b1:75:69:fb:c4:97:9a:
50:76:46:81:71:28:e7:d0:e0:fc:c7:6e:85:f1:5e:
5a:12:55:6c:4b:c9:bd:96:cc:21:7f:ec:02:43:47:
29:7c:0c:76:fc:df:5e:92:a6:f6:b5:a4:6e:ff:19:
8b:90:87:d7:15:bc:9f:0b:f8:46:85:26:bb:c4:de:
e9:9f:c7:83:41:97:c3:04:ac:de:87:ce:7e:f3:d4:
e6:cc:61:7b:d4:6a:7a:15:ff:78:2b:6f:b4:14:8a:
00:28:35:19:58:1f:90:cf:24:46:9b:35:51:fd:18:
9a:2a:1d:05:cb:6d:9d:3b:55:93:5c:c3:9d:19:aa:
b9:b9:d5:11:41:66:ed:e2:52:3a:fd:d0:40:82:a6:
51:f0:ee:fe:76:56:b7:98:6f:06:4f:d1:46:2c:04:
c4:98:73:22:cc:48:de:3e:96:be:6e:53:2b:02:30:
95:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:11:F4:68:7F:DE:5C:F7:F9:19:E4:5B:9A:95:E3:FB:35:A2:FF:63
X509v3 Authority Key Identifier:
keyid:4E:2B:A3:AC:87:13:9A:D1:16:02:77:7E:4D:35:D8:15:82:A1:91:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TiujrIcTmtEWAnd-TTXYFYKhkb8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/ed50b6-2e55-4cf2-b380-dae922e16be8/1/TiujrIcTmtEWAnd-TTXYFYKhkb8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/ed50b6-2e55-4cf2-b380-dae922e16be8/1/TiujrIcTmtEWAnd-TTXYFYKhkb8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:57:07:73:6b:fb:41:3f:4f:c7:90:70:cf:e9:1a:81:f4:86:
84:be:ac:a2:26:83:35:32:bb:a1:0f:05:db:88:45:db:4c:b6:
a8:19:3e:01:cb:be:d8:06:b2:ff:ac:b8:9c:a7:50:9f:92:78:
77:2b:89:77:c9:cd:0b:ad:17:e4:f5:ef:76:e4:cb:16:9f:80:
8c:23:e7:5b:1f:a6:58:4d:35:43:65:da:9d:56:73:7a:1d:74:
1c:88:ff:ba:d5:13:d3:1f:b4:22:9f:c6:79:7c:28:19:b1:3f:
20:64:ce:03:bc:ca:23:aa:a4:64:38:79:35:6b:19:78:38:69:
6c:7a:6c:dd:56:e8:36:0e:d1:58:57:7c:21:15:75:56:ad:0b:
0a:31:64:42:6a:15:6a:48:ad:ef:52:1b:9d:b0:82:f2:ce:43:
ef:87:00:5e:fc:30:cb:08:6f:7d:2e:27:a2:d3:e4:fb:78:df:
77:19:75:9d:57:28:57:c0:3c:a9:ec:67:30:8f:1b:b9:64:0f:
56:ce:de:bd:26:56:3b:10:c1:37:3b:c0:dc:06:27:a5:f8:d1:
e0:86:70:23:e1:e9:53:8c:6f:41:2c:dc:81:05:bc:05:bd:de:
f7:37:05:d4:99:5d:e8:78:be:d0:e7:c2:6c:3c:18:d8:1c:02:
78:cb:56:d3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF/z/hRnXoE5inuVxCU8eZ/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRlMmJhM2FjODcxMzlhZDExNjAyNzc3ZTRkMzVkODE1ODJh
MTkxYmYwHhcNMjYxMDI4MDAwMTM4WhcNMjYxMDI5MDAwMTM4WjAzMTEwLwYDVQQD
EyhkZTExZjQ2ODdmZGU1Y2Y3ZjkxOWU0NWI5YTk1ZTNmYjM1YTJmZjYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqOyqq40uDSPC+6ycUNfjsjgOpyx1
NQPzWYSYGT71a8PdOcaofdxxnzrCQev9eyx5PHtaiUj/LYY3Q/gXHai585MIdFtx
o33Hpa2ElanRdrDlC7F1afvEl5pQdkaBcSjn0OD8x26F8V5aElVsS8m9lswhf+wC
Q0cpfAx2/N9ekqb2taRu/xmLkIfXFbyfC/hGhSa7xN7pn8eDQZfDBKzeh85+89Tm
zGF71Gp6Ff94K2+0FIoAKDUZWB+QzyRGmzVR/RiaKh0Fy22dO1WTXMOdGaq5udUR
QWbt4lI6/dBAgqZR8O7+dla3mG8GT9FGLATEmHMizEjePpa+blMrAjCV5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN4R9Gh/3lz3+RnkW5qV4/s1ov9jMB8GA1UdIwQY
MBaAFE4ro6yHE5rRFgJ3fk012BWCoZG/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVGl1anJJY1RtdEVXQW5kLVRUWFlGWUtoa2I4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9lZDUwYjYtMmU1NS00Y2YyLWIzODAt
ZGFlOTIyZTE2YmU4LzEvVGl1anJJY1RtdEVXQW5kLVRUWFlGWUtoa2I4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi9lZDUwYjYtMmU1NS00Y2YyLWIzODAtZGFlOTIyZTE2YmU4
LzEvVGl1anJJY1RtdEVXQW5kLVRUWFlGWUtoa2I4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiVcHc2v7
QT9Px5Bwz+kagfSGhL6soiaDNTK7oQ8F24hF20y2qBk+Acu+2Aay/6y4nKdQn5J4
dyuJd8nNC60X5PXvduTLFp+AjCPnWx+mWE01Q2XanVZzeh10HIj/utUT0x+0Ip/G
eXwoGbE/IGTOA7zKI6qkZDh5NWsZeDhpbHps3VboNg7RWFd8IRV1Vq0LCjFkQmoV
akit71IbnbCC8s5D74cAXvwwywhvfS4notPk+3jfdxl1nVcoV8A8qexnMI8buWQP
Vs7evSZWOxDBNzvA3AYnpfjR4IZwI+HpU4xvQSzcgQW8Bb3e9zcF1Jld6Hi+0OfC
bDwY2BwCeMtW0w==
-----END CERTIFICATE-----
Generated at Wed Oct 28 05:19:29 2026 by rpki-client