Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/fdff01-762f-43a9-a4be-7bb1844014d6/1/tT8fJDLiJL3km_qxn2dTYpq1cH8.mft
File: tT8fJDLiJL3km_qxn2dTYpq1cH8.mft (raw, json)
Hash identifier: oVoQtNmPA6DTNFhKxR1tfaqPcSBNNXjGIPgtkejY3zs=
Subject key identifier: 06:6A:20:DC:6A:07:F2:C0:AA:24:C9:CA:52:4D:E1:98:7F:FF:80:A3
Authority key identifier: B5:3F:1F:24:32:E2:24:BD:E4:9B:FA:B1:9F:67:53:62:9A:B5:70:7F
Certificate issuer: /CN=b53f1f2432e224bde49bfab19f6753629ab5707f
Certificate serial: 019D3866253F1CF9290141A0179D5247928B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tT8fJDLiJL3km_qxn2dTYpq1cH8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/fdff01-762f-43a9-a4be-7bb1844014d6/1/tT8fJDLiJL3km_qxn2dTYpq1cH8.mft
Manifest number: 0EEC
Signing time: Sun 29 Mar 2026 07:01:51 +0000
Manifest this update: Sun 29 Mar 2026 07:01:51 +0000
Manifest next update: Mon 30 Mar 2026 07:01:51 +0000
Files and hashes: 1: tT8fJDLiJL3km_qxn2dTYpq1cH8.crl (hash: HfSDBMbjeiyjF7lPkTf1+TylQf9OlYxPZqS7wFuii0I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/fdff01-762f-43a9-a4be-7bb1844014d6/1/tT8fJDLiJL3km_qxn2dTYpq1cH8.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/fdff01-762f-43a9-a4be-7bb1844014d6/1/tT8fJDLiJL3km_qxn2dTYpq1cH8.mft
rsync://rpki.ripe.net/repository/DEFAULT/tT8fJDLiJL3km_qxn2dTYpq1cH8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:25:3f:1c:f9:29:01:41:a0:17:9d:52:47:92:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b53f1f2432e224bde49bfab19f6753629ab5707f
Validity
Not Before: Mar 29 07:01:51 2026 GMT
Not After : Mar 30 07:01:51 2026 GMT
Subject: CN=066a20dc6a07f2c0aa24c9ca524de1987fff80a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:9a:a3:56:94:67:26:08:0b:33:e7:45:52:b9:
19:bd:29:6d:b9:c2:91:d4:2f:0f:b7:ab:35:31:0f:
ec:11:78:cc:7f:f7:bd:e3:9d:a9:b1:9f:50:5e:e3:
46:95:f4:e4:f7:81:46:88:68:b9:40:2d:e3:e8:bf:
46:28:63:cd:7a:20:16:eb:b5:21:54:e0:66:43:ad:
3a:8d:7c:d5:82:65:c3:c1:68:83:c6:37:dd:df:dc:
05:59:49:26:e6:e4:d5:c6:0b:65:5b:62:1d:e0:f3:
a2:da:3b:74:c4:bc:f0:5f:b4:54:0f:e7:cb:ac:e3:
c0:f4:3b:f0:05:07:b7:20:7c:11:4e:0d:06:0c:85:
54:e7:3e:68:af:aa:db:a9:ce:f9:b8:de:d6:06:09:
3d:cd:eb:0b:be:28:87:fa:e7:62:a0:f6:ae:fd:5f:
b1:94:f8:98:95:9f:7c:a4:3d:38:e2:71:89:8d:d4:
89:9b:97:42:c9:12:6f:74:8d:a5:7a:c8:b6:5f:18:
92:14:b1:3d:11:e4:c5:07:9c:e5:78:6a:da:2d:b2:
ea:8f:65:04:7a:00:27:52:7b:fe:d5:95:08:09:04:
80:80:76:91:68:d6:f8:fb:a5:a3:d2:7c:d9:8c:25:
d9:bc:82:60:81:64:f3:c1:e2:2a:e8:dd:05:ec:17:
d6:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:6A:20:DC:6A:07:F2:C0:AA:24:C9:CA:52:4D:E1:98:7F:FF:80:A3
X509v3 Authority Key Identifier:
keyid:B5:3F:1F:24:32:E2:24:BD:E4:9B:FA:B1:9F:67:53:62:9A:B5:70:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tT8fJDLiJL3km_qxn2dTYpq1cH8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/fdff01-762f-43a9-a4be-7bb1844014d6/1/tT8fJDLiJL3km_qxn2dTYpq1cH8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/fdff01-762f-43a9-a4be-7bb1844014d6/1/tT8fJDLiJL3km_qxn2dTYpq1cH8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:cf:84:8b:83:dc:67:ae:5f:9a:0b:15:be:b3:1a:60:5a:07:
62:ff:e6:75:5a:e4:5f:67:36:22:de:24:7e:9f:13:d4:4b:be:
17:e5:05:ff:58:21:00:1d:2c:a2:7b:8e:b9:91:0f:3e:6d:48:
9f:50:e8:e1:ee:fc:5b:20:bb:57:20:14:80:17:15:db:7c:0b:
39:ee:d0:48:e1:54:69:02:69:2f:9c:8b:6a:17:68:11:ab:64:
e0:30:59:7f:14:db:f8:bb:94:61:a2:31:1b:fd:9a:97:a2:da:
a4:88:ad:df:63:f9:a8:d1:c7:44:4f:f5:92:a0:ff:da:c6:75:
e3:3d:d8:5d:00:5b:be:13:16:9f:df:04:35:66:5b:c7:b6:ca:
ad:32:d9:89:e8:d4:ef:ce:b6:f9:11:01:9c:40:9a:4b:2e:34:
37:59:ed:4b:60:36:7b:c2:da:6a:a9:30:c8:99:27:c0:46:ee:
62:84:cf:c7:5a:83:59:db:5f:15:f3:47:a6:1c:26:89:17:17:
56:8e:57:94:53:f8:81:fc:f3:6e:c5:47:39:11:9d:74:1e:9f:
62:6d:1d:c7:c5:f9:26:cc:42:b7:5e:f9:ec:23:e9:cd:82:00:
c0:2e:03:2d:fa:39:57:73:c7:a6:ae:39:a6:17:37:4a:91:bf:
8f:b4:f6:72
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04ZiU/HPkpAUGgF51SR5KLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1M2YxZjI0MzJlMjI0YmRlNDliZmFiMTlmNjc1MzYyOWFi
NTcwN2YwHhcNMjYwMzI5MDcwMTUxWhcNMjYwMzMwMDcwMTUxWjAzMTEwLwYDVQQD
EygwNjZhMjBkYzZhMDdmMmMwYWEyNGM5Y2E1MjRkZTE5ODdmZmY4MGEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArJqjVpRnJggLM+dFUrkZvSltucKR
1C8Pt6s1MQ/sEXjMf/e9452psZ9QXuNGlfTk94FGiGi5QC3j6L9GKGPNeiAW67Uh
VOBmQ606jXzVgmXDwWiDxjfd39wFWUkm5uTVxgtlW2Id4POi2jt0xLzwX7RUD+fL
rOPA9DvwBQe3IHwRTg0GDIVU5z5or6rbqc75uN7WBgk9zesLviiH+udioPau/V+x
lPiYlZ98pD044nGJjdSJm5dCyRJvdI2lesi2XxiSFLE9EeTFB5zleGraLbLqj2UE
egAnUnv+1ZUICQSAgHaRaNb4+6Wj0nzZjCXZvIJggWTzweIq6N0F7BfWbQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAZqINxqB/LAqiTJylJN4Zh//4CjMB8GA1UdIwQY
MBaAFLU/HyQy4iS95Jv6sZ9nU2KatXB/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFQ4ZkpETGlKTDNrbV9xeG4yZFRZcHExY0g4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS9mZGZmMDEtNzYyZi00M2E5LWE0YmUt
N2JiMTg0NDAxNGQ2LzEvdFQ4ZkpETGlKTDNrbV9xeG4yZFRZcHExY0g4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOS9mZGZmMDEtNzYyZi00M2E5LWE0YmUtN2JiMTg0NDAxNGQ2
LzEvdFQ4ZkpETGlKTDNrbV9xeG4yZFRZcHExY0g4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKM+Ei4Pc
Z65fmgsVvrMaYFoHYv/mdVrkX2c2It4kfp8T1Eu+F+UF/1ghAB0sonuOuZEPPm1I
n1Do4e78WyC7VyAUgBcV23wLOe7QSOFUaQJpL5yLahdoEatk4DBZfxTb+LuUYaIx
G/2al6LapIit32P5qNHHRE/1kqD/2sZ14z3YXQBbvhMWn98ENWZbx7bKrTLZiejU
7862+REBnECaSy40N1ntS2A2e8LaaqkwyJknwEbuYoTPx1qDWdtfFfNHphwmiRcX
Vo5XlFP4gfzzbsVHORGddB6fYm0dx8X5JsxCt1757CPpzYIAwC4DLfo5V3PHpq45
phc3SpG/j7T2cg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:28:46 2026 by rpki-client