Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/8008fe-175b-41bf-b1d6-2ce0eb458788/1/TFFjb96QX4Uh9BFHnoEyHNz0kEk.mft
File: TFFjb96QX4Uh9BFHnoEyHNz0kEk.mft (raw, json)
Hash identifier: Zm+JVs/IsAoLvNUzrxN6IWXFbIjXz1pntn4Zklg3AoM=
Subject key identifier: 72:0B:48:B2:F8:AA:43:2B:DC:CE:9D:B5:4A:3D:BD:AF:A9:43:F8:57
Authority key identifier: 4C:51:63:6F:DE:90:5F:85:21:F4:11:47:9E:81:32:1C:DC:F4:90:49
Certificate issuer: /CN=4c51636fde905f8521f411479e81321cdcf49049
Certificate serial: 019D37C006AA9B1B064178BA91E3A7A13791
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TFFjb96QX4Uh9BFHnoEyHNz0kEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/8008fe-175b-41bf-b1d6-2ce0eb458788/1/TFFjb96QX4Uh9BFHnoEyHNz0kEk.mft
Manifest number: 0B1F
Signing time: Sun 29 Mar 2026 04:00:24 +0000
Manifest this update: Sun 29 Mar 2026 04:00:24 +0000
Manifest next update: Mon 30 Mar 2026 04:00:24 +0000
Files and hashes: 1: TFFjb96QX4Uh9BFHnoEyHNz0kEk.crl (hash: 1i/SNOFZCEfej1UPazjW2XySOyKSMxboXDq8tS7PGhI=)
2: btVJTycrOu73mUIXm-DmnQZDlPs.roa (hash: XGmN+HVfqx/2ED53etC2ojf1SMKcGmAltxqzFq/xltI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/8008fe-175b-41bf-b1d6-2ce0eb458788/1/TFFjb96QX4Uh9BFHnoEyHNz0kEk.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/8008fe-175b-41bf-b1d6-2ce0eb458788/1/TFFjb96QX4Uh9BFHnoEyHNz0kEk.mft
rsync://rpki.ripe.net/repository/DEFAULT/TFFjb96QX4Uh9BFHnoEyHNz0kEk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:06:aa:9b:1b:06:41:78:ba:91:e3:a7:a1:37:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c51636fde905f8521f411479e81321cdcf49049
Validity
Not Before: Mar 29 04:00:24 2026 GMT
Not After : Mar 30 04:00:24 2026 GMT
Subject: CN=720b48b2f8aa432bdcce9db54a3dbdafa943f857
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e4:99:f6:1a:18:2f:34:b2:ed:f5:75:08:9f:
b0:ac:07:26:16:80:3d:1c:c7:e1:c2:35:c2:be:65:
2c:d7:78:fa:00:82:7d:6b:15:a5:12:2f:53:87:95:
22:9f:db:3a:74:f0:8a:f4:22:48:74:01:c1:45:e8:
ed:0e:2f:e4:3b:8c:96:d2:1b:9c:95:0d:f4:1a:19:
ee:0c:6e:7e:8e:18:0e:fe:a5:6b:96:11:60:c0:b5:
3a:f6:e1:50:7a:76:7c:b9:cd:c4:a9:6f:09:af:b1:
c8:28:2a:f4:a6:4d:4e:ff:01:5f:7b:6f:1b:e4:49:
dc:f5:ab:fb:c6:0d:a5:23:eb:72:b7:ab:8d:08:fd:
b7:99:b4:0e:15:a5:c0:53:3b:41:6a:c0:2f:d8:70:
65:b7:65:03:23:45:8c:db:83:d9:d1:e6:be:18:38:
d7:f4:15:56:90:22:d3:c7:03:f0:f4:26:f6:9d:7c:
cd:4c:94:76:d2:89:22:91:83:d8:2a:1e:b0:c3:2f:
90:89:13:35:94:4d:af:00:3c:7a:b0:05:2a:12:b7:
86:ac:07:28:cc:11:06:10:8a:5b:68:8f:94:2b:7e:
a3:ab:74:be:14:2e:d5:6d:4a:6d:67:68:82:aa:e4:
3c:53:59:a0:a0:c4:c1:79:d4:b0:c5:c5:46:eb:b8:
e1:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:0B:48:B2:F8:AA:43:2B:DC:CE:9D:B5:4A:3D:BD:AF:A9:43:F8:57
X509v3 Authority Key Identifier:
keyid:4C:51:63:6F:DE:90:5F:85:21:F4:11:47:9E:81:32:1C:DC:F4:90:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TFFjb96QX4Uh9BFHnoEyHNz0kEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/8008fe-175b-41bf-b1d6-2ce0eb458788/1/TFFjb96QX4Uh9BFHnoEyHNz0kEk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/8008fe-175b-41bf-b1d6-2ce0eb458788/1/TFFjb96QX4Uh9BFHnoEyHNz0kEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d3:62:78:cd:47:9d:66:d1:5d:9d:9a:da:b6:3c:b7:23:40:8c:
1c:3a:e0:10:b2:89:2e:16:ff:c1:98:26:6f:5c:4d:de:84:1f:
8e:ee:85:27:43:9c:77:f4:f7:04:3c:81:a6:8e:72:83:b9:38:
05:63:34:13:dc:e0:9f:be:62:35:7b:28:47:30:4f:c6:3b:ea:
c9:3e:de:65:a6:8e:b9:8a:a5:14:94:15:68:a2:e6:45:d3:09:
27:7c:10:6c:6a:10:89:c3:20:3a:36:ed:5a:1b:6e:d9:74:34:
d7:7a:0c:d4:24:f9:b4:1a:a1:97:a6:cc:91:d7:85:88:4d:ef:
fa:da:30:bb:5a:07:a4:32:6a:a7:a9:f1:a4:42:10:c3:59:40:
a0:36:1d:b5:f4:bc:c6:e7:b6:40:55:17:ee:bd:a5:7e:43:89:
a1:e3:47:00:f0:1d:5c:c5:37:41:48:a4:d0:4e:d3:43:05:06:
b7:92:2e:c0:f0:fd:3e:5a:b8:c7:20:1f:a6:3f:f5:da:e6:b7:
4e:0c:3c:ad:8d:0e:db:b6:f0:b8:41:72:90:e8:9c:cd:79:7a:
d0:09:cd:d8:dd:53:82:61:f2:75:c9:fc:d8:4b:2a:f9:66:8a:
ad:4e:57:8d:e5:54:29:04:8a:08:47:1f:c3:55:4a:0c:46:dd:
9b:ab:33:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:45:52 2026 by rpki-client