Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/b5fb58-928c-438f-bcef-858f8aca323f/1/TJ--R1YCj6QYejmVlfrGXDwcQ8Y.mft
File: TJ--R1YCj6QYejmVlfrGXDwcQ8Y.mft (raw, json)
Hash identifier: CM64LjEeTwShIP1aBa8euutqHQHHqlFhE4xkYfUPFVo=
Subject key identifier: 7F:3C:23:94:50:70:33:CE:06:DC:DA:85:CE:56:56:E5:9D:3E:B6:00
Authority key identifier: 4C:9F:BE:47:56:02:8F:A4:18:7A:39:95:95:FA:C6:5C:3C:1C:43:C6
Certificate issuer: /CN=4c9fbe4756028fa4187a399595fac65c3c1c43c6
Certificate serial: 019E3305B52EA2B6B3359EE99C60139571F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TJ--R1YCj6QYejmVlfrGXDwcQ8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/b5fb58-928c-438f-bcef-858f8aca323f/1/TJ--R1YCj6QYejmVlfrGXDwcQ8Y.mft
Manifest number: 0B59
Signing time: Sat 16 May 2026 23:01:12 +0000
Manifest this update: Sat 16 May 2026 23:01:12 +0000
Manifest next update: Sun 17 May 2026 23:01:12 +0000
Files and hashes: 1: TJ--R1YCj6QYejmVlfrGXDwcQ8Y.crl (hash: SsvYgaLWCKKcENPAZJbLlYP6WOnKpoHd2ntAf3ABtLg=)
2: aC8UNmy0l7OgPQTZ2nVPiNtSCxQ.roa (hash: L0i81KYUigHRpwI1gm1ehZ81UJds6Brs5hjYir4TlR0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/b5fb58-928c-438f-bcef-858f8aca323f/1/TJ--R1YCj6QYejmVlfrGXDwcQ8Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/b5fb58-928c-438f-bcef-858f8aca323f/1/TJ--R1YCj6QYejmVlfrGXDwcQ8Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/TJ--R1YCj6QYejmVlfrGXDwcQ8Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 21:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:33:05:b5:2e:a2:b6:b3:35:9e:e9:9c:60:13:95:71:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c9fbe4756028fa4187a399595fac65c3c1c43c6
Validity
Not Before: May 16 23:01:12 2026 GMT
Not After : May 17 23:01:12 2026 GMT
Subject: CN=7f3c2394507033ce06dcda85ce5656e59d3eb600
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:8f:78:3e:0f:57:e1:4b:4b:42:38:14:d7:91:
93:c4:e6:ea:15:a3:5b:d7:8a:0b:54:66:14:9e:7c:
b6:2c:23:cc:a3:c6:01:84:fa:56:19:3b:23:ab:71:
24:dd:2c:50:c4:ab:6a:4d:1b:f7:d2:7e:27:da:27:
43:5e:48:6e:12:25:c8:23:8c:aa:57:11:b6:2a:d5:
7b:e2:f7:2e:49:79:b4:6d:77:81:eb:1f:7e:ce:02:
01:ea:f2:72:96:74:42:ce:0e:42:f6:1f:b6:78:ef:
bc:2d:62:fe:58:63:52:1c:13:16:c4:ab:2b:31:3c:
0b:6f:9a:ec:33:01:d4:cc:2f:71:fd:e7:0c:f0:96:
4c:26:05:4f:ec:6e:8a:65:39:2c:36:e9:e1:3c:5e:
11:2d:37:1a:09:48:3b:2b:3d:e5:b3:b9:da:65:39:
53:73:89:1e:5a:de:d5:fc:33:c6:41:cb:00:a0:4e:
4d:5e:9f:91:ca:0d:d9:ac:18:83:3f:cb:17:95:3b:
42:b6:aa:ac:4e:52:57:7a:b1:ef:50:71:1c:b3:fb:
b5:8b:11:5a:f4:04:10:54:83:9f:f1:3c:46:20:16:
55:e5:3b:b6:c0:f2:c7:ba:f8:43:ae:82:55:cb:2c:
be:b1:85:d7:1e:e1:90:f7:6e:51:fa:81:05:98:e9:
3a:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:3C:23:94:50:70:33:CE:06:DC:DA:85:CE:56:56:E5:9D:3E:B6:00
X509v3 Authority Key Identifier:
keyid:4C:9F:BE:47:56:02:8F:A4:18:7A:39:95:95:FA:C6:5C:3C:1C:43:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TJ--R1YCj6QYejmVlfrGXDwcQ8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/b5fb58-928c-438f-bcef-858f8aca323f/1/TJ--R1YCj6QYejmVlfrGXDwcQ8Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/b5fb58-928c-438f-bcef-858f8aca323f/1/TJ--R1YCj6QYejmVlfrGXDwcQ8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:12:c2:c7:dc:16:21:2d:02:65:0b:ef:bc:bb:3a:77:d4:59:
95:c3:d0:5a:74:0b:f1:65:37:d9:29:81:bc:fb:b9:98:37:c9:
d6:b8:24:7d:65:6c:87:da:6b:7d:ea:9b:81:1d:b7:09:b3:a2:
fe:a7:1b:05:bb:09:47:69:f3:e8:2e:85:68:99:cd:d2:1e:96:
31:e9:13:53:1d:c2:f6:7e:4d:95:49:98:ce:f3:0e:8f:4f:48:
2c:78:7d:52:06:99:18:9f:b0:2f:16:00:6f:21:47:ed:f1:33:
f2:dc:53:e7:a8:ee:dc:4b:4e:05:9f:33:a2:41:86:47:39:22:
cf:7d:0f:ae:16:ce:03:b7:55:1f:69:de:20:9b:fe:1d:2a:76:
2d:53:85:e0:3d:f6:b2:39:29:0c:43:f0:68:c1:ec:e0:8e:5f:
e2:7d:e6:5e:d0:fd:fd:c4:84:d2:a4:2f:c7:a0:b0:b7:fd:0e:
8b:5c:03:ae:84:25:84:67:5e:6c:37:4c:52:81:9b:77:e0:1d:
76:2e:11:9f:08:c5:6a:e5:c9:a7:05:a7:30:b9:4f:07:11:8b:
a0:30:6f:f7:3d:9f:df:3d:23:fc:71:04:5a:69:2a:59:39:12:
48:9b:c0:37:db:23:a9:79:7f:7a:c8:dd:4a:1e:86:00:be:c2:
b8:44:dc:6b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4zBbUuorazNZ7pnGATlXHyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjOWZiZTQ3NTYwMjhmYTQxODdhMzk5NTk1ZmFjNjVjM2Mx
YzQzYzYwHhcNMjYwNTE2MjMwMTEyWhcNMjYwNTE3MjMwMTEyWjAzMTEwLwYDVQQD
Eyg3ZjNjMjM5NDUwNzAzM2NlMDZkY2RhODVjZTU2NTZlNTlkM2ViNjAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2o94Pg9X4UtLQjgU15GTxObqFaNb
14oLVGYUnny2LCPMo8YBhPpWGTsjq3Ek3SxQxKtqTRv30n4n2idDXkhuEiXII4yq
VxG2KtV74vcuSXm0bXeB6x9+zgIB6vJylnRCzg5C9h+2eO+8LWL+WGNSHBMWxKsr
MTwLb5rsMwHUzC9x/ecM8JZMJgVP7G6KZTksNunhPF4RLTcaCUg7Kz3ls7naZTlT
c4keWt7V/DPGQcsAoE5NXp+Ryg3ZrBiDP8sXlTtCtqqsTlJXerHvUHEcs/u1ixFa
9AQQVIOf8TxGIBZV5Tu2wPLHuvhDroJVyyy+sYXXHuGQ925R+oEFmOk6LQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH88I5RQcDPOBtzahc5WVuWdPrYAMB8GA1UdIwQY
MBaAFEyfvkdWAo+kGHo5lZX6xlw8HEPGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVEotLVIxWUNqNlFZZWptVmxmckdYRHdjUThZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny9iNWZiNTgtOTI4Yy00MzhmLWJjZWYt
ODU4ZjhhY2EzMjNmLzEvVEotLVIxWUNqNlFZZWptVmxmckdYRHdjUThZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ny9iNWZiNTgtOTI4Yy00MzhmLWJjZWYtODU4ZjhhY2EzMjNm
LzEvVEotLVIxWUNqNlFZZWptVmxmckdYRHdjUThZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASxLCx9wW
IS0CZQvvvLs6d9RZlcPQWnQL8WU32SmBvPu5mDfJ1rgkfWVsh9prfeqbgR23CbOi
/qcbBbsJR2nz6C6FaJnN0h6WMekTUx3C9n5NlUmYzvMOj09ILHh9UgaZGJ+wLxYA
byFH7fEz8txT56ju3EtOBZ8zokGGRzkiz30PrhbOA7dVH2neIJv+HSp2LVOF4D32
sjkpDEPwaMHs4I5f4n3mXtD9/cSE0qQvx6Cwt/0Oi1wDroQlhGdebDdMUoGbd+Ad
di4RnwjFauXJpwWnMLlPBxGLoDBv9z2f3z0j/HEEWmkqWTkSSJvAN9sjqXl/esjd
Sh6GAL7CuETcaw==
-----END CERTIFICATE-----
Generated at Sun May 17 01:09:09 2026 by rpki-client