
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/e6f13e-ebeb-4e26-9f91-8183751813d9/1/tTsKRfBg4Q7M8Sa29mdYm4AyjJU.mft
File: tTsKRfBg4Q7M8Sa29mdYm4AyjJU.mft (raw, json)
Hash identifier: bd6SICWOp6RBT9xNrOGXKra0XG4I4ruiROF0fUSV6As=
Subject key identifier: CC:6B:C7:FB:11:7A:62:0F:64:7B:00:0B:47:ED:F4:27:BC:84:DD:CD
Authority key identifier: B5:3B:0A:45:F0:60:E1:0E:CC:F1:26:B6:F6:67:58:9B:80:32:8C:95
Certificate issuer: /CN=b53b0a45f060e10eccf126b6f667589b80328c95
Certificate serial: 01A17E4EC5EB7964BFCD04B3A6CC75F49D52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tTsKRfBg4Q7M8Sa29mdYm4AyjJU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/e6f13e-ebeb-4e26-9f91-8183751813d9/1/tTsKRfBg4Q7M8Sa29mdYm4AyjJU.mft
Manifest number: 14C2
Signing time: Tue 27 Oct 2026 17:00:54 +0000
Manifest this update: Tue 27 Oct 2026 17:00:54 +0000
Manifest next update: Wed 28 Oct 2026 17:00:54 +0000
Files and hashes: 1: tTsKRfBg4Q7M8Sa29mdYm4AyjJU.crl (hash: m6gYv8eJ4asrdMpNKHmjrQMK20nWMCl1OvcdyvYERnY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/e6f13e-ebeb-4e26-9f91-8183751813d9/1/tTsKRfBg4Q7M8Sa29mdYm4AyjJU.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/e6f13e-ebeb-4e26-9f91-8183751813d9/1/tTsKRfBg4Q7M8Sa29mdYm4AyjJU.mft
rsync://rpki.ripe.net/repository/DEFAULT/tTsKRfBg4Q7M8Sa29mdYm4AyjJU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 13:57:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7e:4e:c5:eb:79:64:bf:cd:04:b3:a6:cc:75:f4:9d:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b53b0a45f060e10eccf126b6f667589b80328c95
Validity
Not Before: Oct 27 17:00:54 2026 GMT
Not After : Oct 28 17:00:54 2026 GMT
Subject: CN=cc6bc7fb117a620f647b000b47edf427bc84ddcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:72:8c:21:e2:40:56:1e:61:34:8e:59:bd:c5:
8a:b2:f0:fb:02:32:85:c2:3b:be:cd:30:bc:b5:40:
8a:45:d2:58:49:7e:61:0f:bf:dc:a8:d9:0a:4b:1e:
67:73:79:5c:8c:79:c0:81:d0:2d:f6:da:6c:af:77:
97:f1:78:36:47:cf:b3:93:21:66:12:f7:9b:6a:60:
cb:b5:d4:7d:0d:a8:ad:98:60:86:31:49:1a:38:57:
7c:df:10:29:c4:fa:a2:cf:f4:3c:09:75:f0:07:11:
5a:d0:bb:16:3a:f8:0e:0c:c9:73:c9:66:3d:36:bb:
53:a3:91:73:07:0f:eb:2c:bd:36:ae:9d:bf:b5:d3:
f7:c2:1e:81:1c:9e:a7:21:da:7c:ec:b4:00:00:0d:
67:74:20:93:2c:48:9a:e9:c1:d8:12:9a:79:e2:28:
ed:9c:9c:17:a3:98:03:5a:08:9f:88:2f:a7:05:bc:
f9:43:fc:8d:b6:81:39:74:ae:1c:25:1b:d7:72:87:
29:e4:0f:6a:e6:69:28:16:e9:7d:1b:ec:5c:8c:78:
4a:25:98:7b:60:e5:5a:ef:6e:b2:07:e6:2c:e8:97:
8e:60:99:b1:68:75:2c:7e:7a:85:95:e1:d2:8d:62:
0f:1c:e9:99:6b:f6:67:36:01:c5:93:31:ae:18:f3:
c2:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:6B:C7:FB:11:7A:62:0F:64:7B:00:0B:47:ED:F4:27:BC:84:DD:CD
X509v3 Authority Key Identifier:
keyid:B5:3B:0A:45:F0:60:E1:0E:CC:F1:26:B6:F6:67:58:9B:80:32:8C:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tTsKRfBg4Q7M8Sa29mdYm4AyjJU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/e6f13e-ebeb-4e26-9f91-8183751813d9/1/tTsKRfBg4Q7M8Sa29mdYm4AyjJU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/e6f13e-ebeb-4e26-9f91-8183751813d9/1/tTsKRfBg4Q7M8Sa29mdYm4AyjJU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:af:12:c7:83:dc:ea:94:a2:f6:ba:9c:6e:36:df:87:7d:bf:
c0:be:71:94:43:a2:5b:00:4e:c2:cb:3c:6a:d2:c9:74:f2:98:
7a:e0:d9:d4:05:0e:6d:30:0b:93:67:75:50:5b:17:e1:44:54:
de:d9:66:fd:f3:11:e0:e0:f6:17:1e:25:51:51:2e:22:17:21:
5f:92:4f:16:ab:44:6a:77:4e:a8:5e:93:96:27:8e:77:d8:85:
7c:42:b7:14:f3:3e:37:ca:af:91:23:82:fe:19:ea:d6:04:e7:
89:9e:42:98:fc:87:ca:a9:74:5a:cc:8f:ee:c7:a8:38:84:52:
42:a0:7f:98:3c:0d:7b:e8:d2:13:e4:79:56:39:b7:70:cb:58:
54:fa:33:da:34:b6:38:c5:04:bc:7c:50:36:e7:81:8d:ee:13:
4b:e3:c8:3b:85:a8:9a:50:42:3b:ad:45:19:5d:2c:0e:45:39:
32:b1:49:dd:1b:c8:9d:2e:79:79:21:55:55:13:61:bf:2f:e1:
b5:14:52:43:83:d4:75:76:31:9b:52:17:22:31:38:f1:da:30:
6b:82:42:d5:65:51:0b:98:3b:87:ca:cd:d2:cf:c2:81:19:00:
8b:25:80:f7:06:c7:7f:bb:4a:bc:29:32:50:8a:17:35:75:31:
4c:59:7f:8a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF+TsXreWS/zQSzpsx19J1SMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1M2IwYTQ1ZjA2MGUxMGVjY2YxMjZiNmY2Njc1ODliODAz
MjhjOTUwHhcNMjYxMDI3MTcwMDU0WhcNMjYxMDI4MTcwMDU0WjAzMTEwLwYDVQQD
EyhjYzZiYzdmYjExN2E2MjBmNjQ3YjAwMGI0N2VkZjQyN2JjODRkZGNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxHKMIeJAVh5hNI5ZvcWKsvD7AjKF
wju+zTC8tUCKRdJYSX5hD7/cqNkKSx5nc3lcjHnAgdAt9tpsr3eX8Xg2R8+zkyFm
EvebamDLtdR9DaitmGCGMUkaOFd83xApxPqiz/Q8CXXwBxFa0LsWOvgODMlzyWY9
NrtTo5FzBw/rLL02rp2/tdP3wh6BHJ6nIdp87LQAAA1ndCCTLEia6cHYEpp54ijt
nJwXo5gDWgifiC+nBbz5Q/yNtoE5dK4cJRvXcocp5A9q5mkoFul9G+xcjHhKJZh7
YOVa726yB+Ys6JeOYJmxaHUsfnqFleHSjWIPHOmZa/ZnNgHFkzGuGPPCDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMxrx/sRemIPZHsAC0ft9Ce8hN3NMB8GA1UdIwQY
MBaAFLU7CkXwYOEOzPEmtvZnWJuAMoyVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFRzS1JmQmc0UTdNOFNhMjltZFltNEF5akpVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC9lNmYxM2UtZWJlYi00ZTI2LTlmOTEt
ODE4Mzc1MTgxM2Q5LzEvdFRzS1JmQmc0UTdNOFNhMjltZFltNEF5akpVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC9lNmYxM2UtZWJlYi00ZTI2LTlmOTEtODE4Mzc1MTgxM2Q5
LzEvdFRzS1JmQmc0UTdNOFNhMjltZFltNEF5akpVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfq8Sx4Pc
6pSi9rqcbjbfh32/wL5xlEOiWwBOwss8atLJdPKYeuDZ1AUObTALk2d1UFsX4URU
3tlm/fMR4OD2Fx4lUVEuIhchX5JPFqtEandOqF6TlieOd9iFfEK3FPM+N8qvkSOC
/hnq1gTniZ5CmPyHyql0WsyP7seoOIRSQqB/mDwNe+jSE+R5Vjm3cMtYVPoz2jS2
OMUEvHxQNueBje4TS+PIO4WomlBCO61FGV0sDkU5MrFJ3RvInS55eSFVVRNhvy/h
tRRSQ4PUdXYxm1IXIjE48dowa4JC1WVRC5g7h8rN0s/CgRkAiyWA9wbHf7tKvCky
UIoXNXUxTFl/ig==
-----END CERTIFICATE-----
Generated at Tue Oct 27 23:01:58 2026 by rpki-client