Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bd/b737f6-304b-4c4f-b887-71108258f1b9/1/TT9U8wTmuFFgjCk5eLFrpRrANQ4.mft
File: TT9U8wTmuFFgjCk5eLFrpRrANQ4.mft (raw, json)
Hash identifier: SZnhSpcgu9t6zXY1pv2ZH3rCTSgdSd0r11xXiPnjEVE=
Subject key identifier: 77:70:39:FE:48:17:CB:80:5A:0F:2D:01:FF:D0:67:AF:42:9C:E1:84
Authority key identifier: 4D:3F:54:F3:04:E6:B8:51:60:8C:29:39:78:B1:6B:A5:1A:C0:35:0E
Certificate issuer: /CN=4d3f54f304e6b851608c293978b16ba51ac0350e
Certificate serial: 01A08B312EE39FACD8891A8B7B857A47E110
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TT9U8wTmuFFgjCk5eLFrpRrANQ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/b737f6-304b-4c4f-b887-71108258f1b9/1/TT9U8wTmuFFgjCk5eLFrpRrANQ4.mft
Manifest number: 1A49
Signing time: Thu 10 Sep 2026 12:00:51 +0000
Manifest this update: Thu 10 Sep 2026 12:00:51 +0000
Manifest next update: Fri 11 Sep 2026 12:00:51 +0000
Files and hashes: 1: TT9U8wTmuFFgjCk5eLFrpRrANQ4.crl (hash: 7AniTayyVxc2r00xJ58aS6Nh6XQc4tAY2zhZbSyfOyM=)
2: kJ79XeVCgRV25HKpL8ktREfXHlw.roa (hash: 7gNr/5O63l4yUAcolVBkp40kuH2WYLPsyzzPi2c2gEI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/b737f6-304b-4c4f-b887-71108258f1b9/1/TT9U8wTmuFFgjCk5eLFrpRrANQ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/b737f6-304b-4c4f-b887-71108258f1b9/1/TT9U8wTmuFFgjCk5eLFrpRrANQ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/TT9U8wTmuFFgjCk5eLFrpRrANQ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 12:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:31:2e:e3:9f:ac:d8:89:1a:8b:7b:85:7a:47:e1:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d3f54f304e6b851608c293978b16ba51ac0350e
Validity
Not Before: Sep 10 12:00:51 2026 GMT
Not After : Sep 11 12:00:51 2026 GMT
Subject: CN=777039fe4817cb805a0f2d01ffd067af429ce184
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:e8:53:35:b7:1e:01:7f:5f:cc:30:f3:25:b5:
4b:d1:b5:2c:35:d2:f3:70:82:19:03:14:70:83:e6:
77:a8:a8:8d:12:e6:b9:a6:4b:4e:88:c7:dc:70:f7:
91:24:fb:e6:28:b8:78:5d:97:57:7a:8d:11:7a:6b:
64:ab:48:0c:4e:bf:e8:19:9b:99:5f:e0:d4:9d:64:
d3:3c:c0:22:39:9c:00:46:cc:6f:f7:51:62:9e:c6:
88:a8:d0:36:6a:49:be:c0:66:b3:a6:f2:cf:63:a3:
8c:f5:f1:27:0c:9e:0d:4e:75:5e:ab:ef:08:18:93:
c3:76:22:83:d9:fc:01:c5:f4:ff:eb:47:a9:06:66:
e2:af:6f:dd:b7:92:9d:ee:c8:fc:07:e0:00:94:59:
e9:6a:70:bd:9a:7f:90:8e:81:06:d0:04:71:1d:c4:
41:e4:df:8f:d0:ca:f4:70:10:95:26:31:8f:e5:44:
f3:c9:da:ca:f3:3c:29:d9:35:5e:20:28:6a:78:5a:
d0:a6:d9:33:54:04:f5:c6:79:9d:73:92:32:4c:40:
c3:cf:7b:53:44:a8:58:a2:88:44:bd:88:db:74:06:
54:fb:67:56:4a:49:27:df:86:06:29:ca:83:7a:3d:
99:24:89:5c:fc:0e:9c:cd:6c:63:c9:cb:45:9b:17:
8a:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:70:39:FE:48:17:CB:80:5A:0F:2D:01:FF:D0:67:AF:42:9C:E1:84
X509v3 Authority Key Identifier:
keyid:4D:3F:54:F3:04:E6:B8:51:60:8C:29:39:78:B1:6B:A5:1A:C0:35:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TT9U8wTmuFFgjCk5eLFrpRrANQ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/b737f6-304b-4c4f-b887-71108258f1b9/1/TT9U8wTmuFFgjCk5eLFrpRrANQ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/b737f6-304b-4c4f-b887-71108258f1b9/1/TT9U8wTmuFFgjCk5eLFrpRrANQ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:4b:3f:e4:67:47:64:07:6a:a8:0a:73:3b:24:11:fa:9c:8b:
60:08:79:cf:e9:44:d4:5e:1c:e9:52:3e:ac:38:98:1d:19:c4:
5f:8e:1b:b2:69:57:33:05:91:a2:2b:af:01:bf:0d:a3:45:1b:
b6:cc:ce:19:9e:f8:14:db:c4:a9:8c:b7:63:38:f3:f0:ee:ad:
4f:14:81:9f:55:c3:eb:fa:ee:d8:a5:ab:03:86:25:82:cd:b8:
8d:31:07:be:6d:b6:d8:3b:2a:b0:8e:d8:a8:24:7c:28:ee:f4:
47:17:19:7e:e8:97:23:cc:98:33:cf:0a:f7:70:c3:68:7b:e3:
ec:fc:b5:7e:db:db:85:0f:22:ac:34:b3:a1:12:fc:69:bf:b8:
b5:0d:52:f3:64:3a:f0:4b:d9:6e:2b:6c:4c:b7:45:b7:2a:b7:
bd:2e:1e:b2:a5:41:77:ea:d1:8e:8b:46:4e:f9:a8:f8:bd:09:
d6:58:01:e6:b9:c3:66:e9:23:34:76:b3:26:0e:d6:6d:aa:9e:
06:e3:e7:2f:0d:4a:56:d4:ef:e4:b1:93:a7:ca:7c:ce:6c:ab:
02:a4:dd:9a:aa:7d:97:30:ed:75:38:66:11:45:44:a3:99:14:
e4:f1:42:d2:e6:a1:04:75:e3:5a:4a:a6:0b:8b:d1:9a:08:c2:
7f:ca:f1:5d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCLMS7jn6zYiRqLe4V6R+EQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRkM2Y1NGYzMDRlNmI4NTE2MDhjMjkzOTc4YjE2YmE1MWFj
MDM1MGUwHhcNMjYwOTEwMTIwMDUxWhcNMjYwOTExMTIwMDUxWjAzMTEwLwYDVQQD
Eyg3NzcwMzlmZTQ4MTdjYjgwNWEwZjJkMDFmZmQwNjdhZjQyOWNlMTg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv+hTNbceAX9fzDDzJbVL0bUsNdLz
cIIZAxRwg+Z3qKiNEua5pktOiMfccPeRJPvmKLh4XZdXeo0Remtkq0gMTr/oGZuZ
X+DUnWTTPMAiOZwARsxv91FinsaIqNA2akm+wGazpvLPY6OM9fEnDJ4NTnVeq+8I
GJPDdiKD2fwBxfT/60epBmbir2/dt5Kd7sj8B+AAlFnpanC9mn+QjoEG0ARxHcRB
5N+P0Mr0cBCVJjGP5UTzydrK8zwp2TVeIChqeFrQptkzVAT1xnmdc5IyTEDDz3tT
RKhYoohEvYjbdAZU+2dWSkkn34YGKcqDej2ZJIlc/A6czWxjyctFmxeKUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHdwOf5IF8uAWg8tAf/QZ69CnOGEMB8GA1UdIwQY
MBaAFE0/VPME5rhRYIwpOXixa6UawDUOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVFQ5VTh3VG11RkZnakNrNWVMRnJwUnJBTlE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC9iNzM3ZjYtMzA0Yi00YzRmLWI4ODct
NzExMDgyNThmMWI5LzEvVFQ5VTh3VG11RkZnakNrNWVMRnJwUnJBTlE0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZC9iNzM3ZjYtMzA0Yi00YzRmLWI4ODctNzExMDgyNThmMWI5
LzEvVFQ5VTh3VG11RkZnakNrNWVMRnJwUnJBTlE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALEs/5GdH
ZAdqqApzOyQR+pyLYAh5z+lE1F4c6VI+rDiYHRnEX44bsmlXMwWRoiuvAb8No0Ub
tszOGZ74FNvEqYy3Yzjz8O6tTxSBn1XD6/ru2KWrA4Ylgs24jTEHvm222DsqsI7Y
qCR8KO70RxcZfuiXI8yYM88K93DDaHvj7Py1ftvbhQ8irDSzoRL8ab+4tQ1S82Q6
8EvZbitsTLdFtyq3vS4esqVBd+rRjotGTvmo+L0J1lgB5rnDZukjNHazJg7Wbaqe
BuPnLw1KVtTv5LGTp8p8zmyrAqTdmqp9lzDtdThmEUVEo5kU5PFC0uahBHXjWkqm
C4vRmgjCf8rxXQ==
-----END CERTIFICATE-----
Generated at Thu Sep 10 19:18:46 2026 by rpki-client