Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/8008fe-175b-41bf-b1d6-2ce0eb458788/1/TFFjb96QX4Uh9BFHnoEyHNz0kEk.mft
File: TFFjb96QX4Uh9BFHnoEyHNz0kEk.mft (raw, json)
Hash identifier: Es0wl8zqT1yj6KdEzY7CyA/8TJldxe1fogBnerFcDQs=
Subject key identifier: 58:7C:06:39:9E:1E:58:93:7A:62:FD:E5:D4:1F:1D:BB:FB:C9:F6:99
Authority key identifier: 4C:51:63:6F:DE:90:5F:85:21:F4:11:47:9E:81:32:1C:DC:F4:90:49
Certificate issuer: /CN=4c51636fde905f8521f411479e81321cdcf49049
Certificate serial: 019E30E0278DA60F4830B933D523E08E5C99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TFFjb96QX4Uh9BFHnoEyHNz0kEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/8008fe-175b-41bf-b1d6-2ce0eb458788/1/TFFjb96QX4Uh9BFHnoEyHNz0kEk.mft
Manifest number: 0BA0
Signing time: Sat 16 May 2026 13:00:56 +0000
Manifest this update: Sat 16 May 2026 13:00:56 +0000
Manifest next update: Sun 17 May 2026 13:00:56 +0000
Files and hashes: 1: TFFjb96QX4Uh9BFHnoEyHNz0kEk.crl (hash: wECXfUtLjyO9bdlO2P6RK0Wl924lr8Lf3kGOXpp9xeM=)
2: btVJTycrOu73mUIXm-DmnQZDlPs.roa (hash: XGmN+HVfqx/2ED53etC2ojf1SMKcGmAltxqzFq/xltI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/8008fe-175b-41bf-b1d6-2ce0eb458788/1/TFFjb96QX4Uh9BFHnoEyHNz0kEk.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/8008fe-175b-41bf-b1d6-2ce0eb458788/1/TFFjb96QX4Uh9BFHnoEyHNz0kEk.mft
rsync://rpki.ripe.net/repository/DEFAULT/TFFjb96QX4Uh9BFHnoEyHNz0kEk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 13:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:e0:27:8d:a6:0f:48:30:b9:33:d5:23:e0:8e:5c:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c51636fde905f8521f411479e81321cdcf49049
Validity
Not Before: May 16 13:00:56 2026 GMT
Not After : May 17 13:00:56 2026 GMT
Subject: CN=587c06399e1e58937a62fde5d41f1dbbfbc9f699
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:98:5c:4e:6a:cc:e6:90:57:d8:02:e6:7c:63:
68:73:5f:3f:fe:8a:6e:28:d9:53:aa:c0:d4:53:15:
51:bd:3f:c2:ef:49:9b:0d:6a:e3:f5:4e:df:12:88:
25:b4:be:d3:8c:f2:2e:14:c5:21:c1:45:13:1f:b3:
fa:93:c5:0c:a7:6c:5f:62:f7:cf:a3:08:d3:33:54:
af:2c:a5:a2:84:4d:03:e8:2d:96:ff:ce:65:01:2c:
e5:0f:f8:dd:dd:85:90:98:59:3f:df:16:8f:a3:b0:
d5:16:94:1e:5e:fb:51:43:62:41:c9:fb:43:c9:7f:
e5:09:d8:61:02:96:f7:6a:31:e6:99:d9:d5:9f:c5:
6c:48:d1:72:38:4e:31:f2:b3:10:32:61:da:9d:7c:
f7:ad:be:00:3f:03:55:83:6b:48:59:c4:d6:de:96:
69:bb:71:47:f7:fa:38:99:08:cd:b6:36:aa:6e:92:
27:8a:cc:01:b7:82:88:a8:19:00:71:34:68:96:2c:
33:52:ce:88:e0:ce:c4:ea:36:29:ca:63:3a:d5:c6:
ff:d2:89:93:59:9e:40:9c:38:c6:bb:0a:f9:4a:8e:
4d:0a:93:65:09:6b:21:0b:23:50:63:26:0d:fb:70:
a6:c2:f7:1b:eb:38:e3:a7:b4:a9:14:44:ed:fb:94:
d7:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:7C:06:39:9E:1E:58:93:7A:62:FD:E5:D4:1F:1D:BB:FB:C9:F6:99
X509v3 Authority Key Identifier:
keyid:4C:51:63:6F:DE:90:5F:85:21:F4:11:47:9E:81:32:1C:DC:F4:90:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TFFjb96QX4Uh9BFHnoEyHNz0kEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/8008fe-175b-41bf-b1d6-2ce0eb458788/1/TFFjb96QX4Uh9BFHnoEyHNz0kEk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/8008fe-175b-41bf-b1d6-2ce0eb458788/1/TFFjb96QX4Uh9BFHnoEyHNz0kEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:6a:ac:31:89:28:69:c0:c7:77:c2:91:26:29:51:c4:33:5c:
2a:1f:6c:27:43:6a:ba:12:fe:ec:42:1b:34:8e:c6:f9:c9:c4:
ac:60:98:e8:72:ee:db:4e:8f:4d:1e:a8:1b:3a:3e:14:87:bc:
70:ed:00:87:4b:99:07:30:07:eb:c9:9a:9e:88:17:04:5d:14:
ba:61:99:a6:56:0a:12:fe:34:7f:41:60:2e:6b:94:fb:f7:8d:
08:9d:49:5d:a1:4e:03:5e:f5:71:90:95:aa:04:77:fc:33:31:
33:5f:ae:07:c4:7a:38:8b:1f:64:19:53:2b:79:43:7d:e7:f9:
1d:16:91:92:e9:44:14:56:51:ee:59:7b:3b:76:11:e2:ed:cd:
46:ba:c5:1b:ad:9e:d1:f1:8c:67:67:17:ea:30:ab:03:af:4d:
8b:d1:33:3a:e2:ee:ca:67:36:ad:ba:48:06:67:74:6c:cc:15:
b7:b7:e7:a7:28:c3:87:ba:94:30:da:86:1e:ce:17:ad:aa:21:
d4:83:1f:4a:0a:00:72:21:61:88:84:fa:4e:ef:d3:47:eb:df:
1c:d0:9c:2a:04:20:da:cb:5f:1c:b9:6f:c6:8f:ee:30:66:27:
99:dc:89:4a:7e:b8:9b:ad:60:43:db:ed:33:31:0e:6b:fd:c3:
dc:18:72:a3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4w4CeNpg9IMLkz1SPgjlyZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjNTE2MzZmZGU5MDVmODUyMWY0MTE0NzllODEzMjFjZGNm
NDkwNDkwHhcNMjYwNTE2MTMwMDU2WhcNMjYwNTE3MTMwMDU2WjAzMTEwLwYDVQQD
Eyg1ODdjMDYzOTllMWU1ODkzN2E2MmZkZTVkNDFmMWRiYmZiYzlmNjk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs5hcTmrM5pBX2ALmfGNoc18//opu
KNlTqsDUUxVRvT/C70mbDWrj9U7fEogltL7TjPIuFMUhwUUTH7P6k8UMp2xfYvfP
owjTM1SvLKWihE0D6C2W/85lASzlD/jd3YWQmFk/3xaPo7DVFpQeXvtRQ2JByftD
yX/lCdhhApb3ajHmmdnVn8VsSNFyOE4x8rMQMmHanXz3rb4APwNVg2tIWcTW3pZp
u3FH9/o4mQjNtjaqbpIniswBt4KIqBkAcTRoliwzUs6I4M7E6jYpymM61cb/0omT
WZ5AnDjGuwr5So5NCpNlCWshCyNQYyYN+3Cmwvcb6zjjp7SpFETt+5TXtwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFh8BjmeHliTemL95dQfHbv7yfaZMB8GA1UdIwQY
MBaAFExRY2/ekF+FIfQRR56BMhzc9JBJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVEZGamI5NlFYNFVoOUJGSG5vRXlITnowa0VrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny84MDA4ZmUtMTc1Yi00MWJmLWIxZDYt
MmNlMGViNDU4Nzg4LzEvVEZGamI5NlFYNFVoOUJGSG5vRXlITnowa0VrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny84MDA4ZmUtMTc1Yi00MWJmLWIxZDYtMmNlMGViNDU4Nzg4
LzEvVEZGamI5NlFYNFVoOUJGSG5vRXlITnowa0VrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACmqsMYko
acDHd8KRJilRxDNcKh9sJ0NquhL+7EIbNI7G+cnErGCY6HLu206PTR6oGzo+FIe8
cO0Ah0uZBzAH68manogXBF0UumGZplYKEv40f0FgLmuU+/eNCJ1JXaFOA171cZCV
qgR3/DMxM1+uB8R6OIsfZBlTK3lDfef5HRaRkulEFFZR7ll7O3YR4u3NRrrFG62e
0fGMZ2cX6jCrA69Ni9EzOuLuymc2rbpIBmd0bMwVt7fnpyjDh7qUMNqGHs4Xraoh
1IMfSgoAciFhiIT6Tu/TR+vfHNCcKgQg2stfHLlvxo/uMGYnmdyJSn64m61gQ9vt
MzEOa/3D3Bhyow==
-----END CERTIFICATE-----
Generated at Sat May 16 22:41:44 2026 by rpki-client