Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/47/8008fe-175b-41bf-b1d6-2ce0eb458788/1/TFFjb96QX4Uh9BFHnoEyHNz0kEk.mft
File: TFFjb96QX4Uh9BFHnoEyHNz0kEk.mft (raw, json)
Hash identifier: 6vvkM9J6MtMX0j+SicA5E27yVRGblhVECffbfbBT9Ak=
Subject key identifier: B2:10:15:99:EC:B5:97:4C:8B:11:F4:54:18:17:3C:B4:AF:77:D7:23
Authority key identifier: 4C:51:63:6F:DE:90:5F:85:21:F4:11:47:9E:81:32:1C:DC:F4:90:49
Certificate issuer: /CN=4c51636fde905f8521f411479e81321cdcf49049
Certificate serial: 01A15BFA52B2F485293A4E7FD106B8BB982E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TFFjb96QX4Uh9BFHnoEyHNz0kEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/8008fe-175b-41bf-b1d6-2ce0eb458788/1/TFFjb96QX4Uh9BFHnoEyHNz0kEk.mft
Manifest number: 0D44
Signing time: Wed 21 Oct 2026 01:01:34 +0000
Manifest this update: Wed 21 Oct 2026 01:01:34 +0000
Manifest next update: Thu 22 Oct 2026 01:01:34 +0000
Files and hashes: 1: TFFjb96QX4Uh9BFHnoEyHNz0kEk.crl (hash: +CGQfXwxXYyYYRB+6imq/5sZk6PzjM/f+E+OnFNqZk8=)
2: btVJTycrOu73mUIXm-DmnQZDlPs.roa (hash: XGmN+HVfqx/2ED53etC2ojf1SMKcGmAltxqzFq/xltI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/8008fe-175b-41bf-b1d6-2ce0eb458788/1/TFFjb96QX4Uh9BFHnoEyHNz0kEk.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/8008fe-175b-41bf-b1d6-2ce0eb458788/1/TFFjb96QX4Uh9BFHnoEyHNz0kEk.mft
rsync://rpki.ripe.net/repository/DEFAULT/TFFjb96QX4Uh9BFHnoEyHNz0kEk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 01:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:5b:fa:52:b2:f4:85:29:3a:4e:7f:d1:06:b8:bb:98:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c51636fde905f8521f411479e81321cdcf49049
Validity
Not Before: Oct 21 01:01:34 2026 GMT
Not After : Oct 22 01:01:34 2026 GMT
Subject: CN=b2101599ecb5974c8b11f45418173cb4af77d723
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:4b:a7:f6:b1:ba:bc:62:a0:5a:84:e7:70:97:
f3:bc:b4:d8:5e:45:28:c5:c3:fd:39:08:67:bb:6d:
f9:c8:76:2a:d3:c9:05:9a:35:31:6a:06:df:55:5d:
37:a2:3a:e3:d2:f7:9f:1a:00:71:96:22:a2:23:fc:
22:00:8d:d1:bd:5c:92:41:56:22:58:cb:f0:a7:14:
f4:b4:5f:7f:60:31:23:6c:2e:29:02:b6:c3:1a:fc:
6b:34:e3:ff:b5:76:8d:4c:a6:52:97:9b:dd:32:8b:
b4:ab:6e:ba:75:17:6d:0c:41:69:44:d4:6e:bf:13:
8d:22:83:e9:f1:44:10:f0:cb:78:1b:f0:e9:14:43:
d4:89:43:f2:11:bf:bc:49:fb:8c:7a:b4:dd:19:ce:
8e:88:8b:cf:fd:16:ee:04:a0:15:e4:01:2b:65:1e:
a1:e5:2b:70:90:d5:a0:1f:22:fa:31:9f:a3:73:fa:
c9:93:27:c7:70:f5:e8:bd:a3:ca:05:1c:7f:94:58:
e2:c2:48:85:17:8a:c1:eb:06:c1:20:69:9f:27:80:
13:83:a0:f2:ac:ad:21:f8:be:47:35:ea:02:67:5c:
38:c3:bf:4c:40:dd:bc:1b:57:32:13:c8:d3:fa:c9:
bf:79:54:66:71:89:61:ea:6a:85:6d:13:f6:36:4b:
d5:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:10:15:99:EC:B5:97:4C:8B:11:F4:54:18:17:3C:B4:AF:77:D7:23
X509v3 Authority Key Identifier:
keyid:4C:51:63:6F:DE:90:5F:85:21:F4:11:47:9E:81:32:1C:DC:F4:90:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TFFjb96QX4Uh9BFHnoEyHNz0kEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/8008fe-175b-41bf-b1d6-2ce0eb458788/1/TFFjb96QX4Uh9BFHnoEyHNz0kEk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/8008fe-175b-41bf-b1d6-2ce0eb458788/1/TFFjb96QX4Uh9BFHnoEyHNz0kEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:3c:31:ef:ea:19:13:1f:8a:d9:16:e2:2a:9b:b8:10:3a:be:
dd:e6:93:bc:2c:35:b8:d5:09:37:43:ec:79:55:a2:18:7c:e2:
fe:41:d5:b4:7b:2d:fa:c3:22:a1:f0:b6:3e:ad:da:e3:4f:92:
66:d4:ae:57:e7:d8:4b:48:0d:10:1a:b9:6e:7e:9e:35:87:1c:
85:ce:34:52:b7:cf:4c:ec:23:2c:74:fa:95:cb:11:a2:21:9c:
bd:44:a9:80:99:73:da:b4:3e:85:7d:fb:85:a4:de:e8:32:f3:
7e:99:12:1b:d9:35:e7:0d:17:6b:22:fc:9a:73:3d:d8:b3:36:
1d:fa:94:6c:66:cd:35:d8:ca:f1:b8:b4:1d:7c:3e:7f:0f:d8:
0b:25:c0:82:42:84:d6:6a:1b:95:70:2e:74:72:89:c9:e0:87:
48:e9:41:06:ef:bd:a9:c5:61:49:5b:e9:2b:ad:bf:e9:32:6e:
26:24:47:4c:f4:48:d4:9d:8d:d9:00:dd:bf:51:ef:52:db:c5:
80:ce:70:3e:88:f6:d5:09:ee:8d:47:4f:64:77:7e:c6:89:c3:
2e:7c:c9:c7:0c:e1:7f:d2:05:d5:02:78:25:90:a5:8c:5e:f5:
5d:56:46:77:13:bb:4d:1c:70:43:6c:e0:70:7c:43:b3:dc:6b:
56:57:35:96
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFb+lKy9IUpOk5/0Qa4u5guMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjNTE2MzZmZGU5MDVmODUyMWY0MTE0NzllODEzMjFjZGNm
NDkwNDkwHhcNMjYxMDIxMDEwMTM0WhcNMjYxMDIyMDEwMTM0WjAzMTEwLwYDVQQD
EyhiMjEwMTU5OWVjYjU5NzRjOGIxMWY0NTQxODE3M2NiNGFmNzdkNzIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwkun9rG6vGKgWoTncJfzvLTYXkUo
xcP9OQhnu235yHYq08kFmjUxagbfVV03ojrj0vefGgBxliKiI/wiAI3RvVySQVYi
WMvwpxT0tF9/YDEjbC4pArbDGvxrNOP/tXaNTKZSl5vdMou0q266dRdtDEFpRNRu
vxONIoPp8UQQ8Mt4G/DpFEPUiUPyEb+8SfuMerTdGc6OiIvP/RbuBKAV5AErZR6h
5StwkNWgHyL6MZ+jc/rJkyfHcPXovaPKBRx/lFjiwkiFF4rB6wbBIGmfJ4ATg6Dy
rK0h+L5HNeoCZ1w4w79MQN28G1cyE8jT+sm/eVRmcYlh6mqFbRP2NkvVFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLIQFZnstZdMixH0VBgXPLSvd9cjMB8GA1UdIwQY
MBaAFExRY2/ekF+FIfQRR56BMhzc9JBJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVEZGamI5NlFYNFVoOUJGSG5vRXlITnowa0VrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny84MDA4ZmUtMTc1Yi00MWJmLWIxZDYt
MmNlMGViNDU4Nzg4LzEvVEZGamI5NlFYNFVoOUJGSG5vRXlITnowa0VrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny84MDA4ZmUtMTc1Yi00MWJmLWIxZDYtMmNlMGViNDU4Nzg4
LzEvVEZGamI5NlFYNFVoOUJGSG5vRXlITnowa0VrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqjwx7+oZ
Ex+K2RbiKpu4EDq+3eaTvCw1uNUJN0PseVWiGHzi/kHVtHst+sMiofC2Pq3a40+S
ZtSuV+fYS0gNEBq5bn6eNYcchc40UrfPTOwjLHT6lcsRoiGcvUSpgJlz2rQ+hX37
haTe6DLzfpkSG9k15w0XayL8mnM92LM2HfqUbGbNNdjK8bi0HXw+fw/YCyXAgkKE
1moblXAudHKJyeCHSOlBBu+9qcVhSVvpK62/6TJuJiRHTPRI1J2N2QDdv1HvUtvF
gM5wPoj21QnujUdPZHd+xonDLnzJxwzhf9IF1QJ4JZCljF71XVZGdxO7TRxwQ2zg
cHxDs9xrVlc1lg==
-----END CERTIFICATE-----
Generated at Wed Oct 21 14:43:44 2026 by rpki-client