Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/b737f6-304b-4c4f-b887-71108258f1b9/1/TT9U8wTmuFFgjCk5eLFrpRrANQ4.mft
File: TT9U8wTmuFFgjCk5eLFrpRrANQ4.mft (raw, json)
Hash identifier: PY2KdBHb8f3pERG0umrmHlvezy97mBquJOPmh2NvNnY=
Subject key identifier: 5A:AB:EB:5C:B3:78:FC:89:47:2D:AB:28:3D:86:DE:D8:C4:F4:2E:2A
Authority key identifier: 4D:3F:54:F3:04:E6:B8:51:60:8C:29:39:78:B1:6B:A5:1A:C0:35:0E
Certificate issuer: /CN=4d3f54f304e6b851608c293978b16ba51ac0350e
Certificate serial: 019D378949EB514BCA3A7C06EF831D845FDF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TT9U8wTmuFFgjCk5eLFrpRrANQ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/b737f6-304b-4c4f-b887-71108258f1b9/1/TT9U8wTmuFFgjCk5eLFrpRrANQ4.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 03:00:37 +0000
Manifest this update: Sun 29 Mar 2026 03:00:37 +0000
Manifest next update: Mon 30 Mar 2026 03:00:37 +0000
Files and hashes: 1: TT9U8wTmuFFgjCk5eLFrpRrANQ4.crl (hash: nOLvszZrOWmk0C/QFLfW60unQuBP5Ju3idjzY1i3Kmk=)
2: kJ79XeVCgRV25HKpL8ktREfXHlw.roa (hash: 7gNr/5O63l4yUAcolVBkp40kuH2WYLPsyzzPi2c2gEI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/b737f6-304b-4c4f-b887-71108258f1b9/1/TT9U8wTmuFFgjCk5eLFrpRrANQ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/b737f6-304b-4c4f-b887-71108258f1b9/1/TT9U8wTmuFFgjCk5eLFrpRrANQ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/TT9U8wTmuFFgjCk5eLFrpRrANQ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:49:eb:51:4b:ca:3a:7c:06:ef:83:1d:84:5f:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d3f54f304e6b851608c293978b16ba51ac0350e
Validity
Not Before: Mar 29 03:00:37 2026 GMT
Not After : Mar 30 03:00:37 2026 GMT
Subject: CN=5aabeb5cb378fc89472dab283d86ded8c4f42e2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:28:fb:66:10:62:d7:df:ca:b9:b2:4e:b1:5d:
d1:a3:61:d8:86:0b:c6:90:35:ae:68:7e:35:92:92:
74:f2:5a:1a:1e:02:78:ab:bb:b5:ea:fd:4d:83:c8:
ac:c0:33:6f:3d:6d:26:2b:c5:0c:ba:33:47:9d:d1:
04:28:11:ae:7c:91:3a:05:1f:c2:41:36:12:39:0d:
af:57:90:bd:e0:04:23:8c:fb:a3:f6:05:04:5d:0a:
c1:f8:c0:16:d3:21:ef:45:aa:bd:cd:4f:19:2d:b0:
4a:41:ae:31:8a:35:a3:bc:2f:16:97:ca:c8:74:3b:
82:be:d9:df:78:a6:d1:a7:b2:89:79:16:65:d2:5b:
fe:b9:e5:ba:c6:f5:b2:32:e9:02:4a:83:36:24:80:
cb:90:2e:32:20:78:f2:09:12:67:ab:40:d4:ae:88:
fb:0a:a6:7c:b9:0f:52:df:2d:25:23:71:9f:8e:dc:
5e:43:44:42:40:29:ef:14:79:8d:bb:37:78:f2:e0:
75:01:e3:bd:49:81:d6:4c:2f:0d:98:8d:27:5b:36:
54:fe:2b:5b:9c:86:a7:a4:28:ac:6e:9b:4b:0d:4a:
f6:c0:f8:8c:20:0b:91:88:84:d2:c7:ff:b5:87:58:
5b:5b:27:ef:25:3f:c0:c6:df:21:04:23:8d:58:07:
c6:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:AB:EB:5C:B3:78:FC:89:47:2D:AB:28:3D:86:DE:D8:C4:F4:2E:2A
X509v3 Authority Key Identifier:
keyid:4D:3F:54:F3:04:E6:B8:51:60:8C:29:39:78:B1:6B:A5:1A:C0:35:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TT9U8wTmuFFgjCk5eLFrpRrANQ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/b737f6-304b-4c4f-b887-71108258f1b9/1/TT9U8wTmuFFgjCk5eLFrpRrANQ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/b737f6-304b-4c4f-b887-71108258f1b9/1/TT9U8wTmuFFgjCk5eLFrpRrANQ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:66:cb:fa:5e:2e:89:43:4c:a2:ac:ae:48:5d:86:d2:e9:8b:
6b:3e:dc:a7:67:55:fd:86:b4:fb:84:a2:4c:6f:14:46:32:34:
84:52:51:a9:f9:2d:cb:b9:5c:d4:82:9f:0a:39:39:d7:0c:e2:
c4:a0:5a:af:a8:80:73:ac:b6:67:08:6e:f9:4a:cd:b7:4c:3b:
e7:ba:37:0e:ed:cc:5e:ad:f8:8e:77:74:72:24:bf:ed:05:d9:
18:90:4d:73:4d:72:9f:c6:88:05:9c:3b:d0:10:1a:26:1f:5f:
42:dc:cd:d3:2b:26:dc:c2:d1:69:cc:3c:97:96:da:d7:65:a0:
e0:10:71:58:6d:b8:f9:b5:8c:93:04:7c:6e:b9:bf:d3:b9:d7:
b0:8b:ce:75:f8:3c:9f:54:b7:12:3f:a1:57:33:e3:0d:65:a3:
5d:98:ed:29:d1:db:a7:48:ac:be:48:76:1c:0c:13:89:b1:f6:
21:f4:cd:dd:45:fa:09:d2:ea:88:a6:c5:5b:d1:dc:bf:57:8c:
e7:4e:f8:ab:84:a5:41:d5:9c:e9:f4:66:22:0b:24:f4:5c:ce:
ff:ef:93:23:4b:06:94:0c:f0:a3:c7:4f:8f:2f:75:4c:79:25:
be:db:fd:c6:59:96:18:48:3b:8b:d5:05:2b:0f:cc:46:d6:8d:
aa:ce:a9:19
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03iUnrUUvKOnwG74MdhF/fMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRkM2Y1NGYzMDRlNmI4NTE2MDhjMjkzOTc4YjE2YmE1MWFj
MDM1MGUwHhcNMjYwMzI5MDMwMDM3WhcNMjYwMzMwMDMwMDM3WjAzMTEwLwYDVQQD
Eyg1YWFiZWI1Y2IzNzhmYzg5NDcyZGFiMjgzZDg2ZGVkOGM0ZjQyZTJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkyj7ZhBi19/KubJOsV3Ro2HYhgvG
kDWuaH41kpJ08loaHgJ4q7u16v1Ng8iswDNvPW0mK8UMujNHndEEKBGufJE6BR/C
QTYSOQ2vV5C94AQjjPuj9gUEXQrB+MAW0yHvRaq9zU8ZLbBKQa4xijWjvC8Wl8rI
dDuCvtnfeKbRp7KJeRZl0lv+ueW6xvWyMukCSoM2JIDLkC4yIHjyCRJnq0DUroj7
CqZ8uQ9S3y0lI3GfjtxeQ0RCQCnvFHmNuzd48uB1AeO9SYHWTC8NmI0nWzZU/itb
nIanpCisbptLDUr2wPiMIAuRiITSx/+1h1hbWyfvJT/Axt8hBCONWAfGJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFqr61yzePyJRy2rKD2G3tjE9C4qMB8GA1UdIwQY
MBaAFE0/VPME5rhRYIwpOXixa6UawDUOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVFQ5VTh3VG11RkZnakNrNWVMRnJwUnJBTlE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC9iNzM3ZjYtMzA0Yi00YzRmLWI4ODct
NzExMDgyNThmMWI5LzEvVFQ5VTh3VG11RkZnakNrNWVMRnJwUnJBTlE0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZC9iNzM3ZjYtMzA0Yi00YzRmLWI4ODctNzExMDgyNThmMWI5
LzEvVFQ5VTh3VG11RkZnakNrNWVMRnJwUnJBTlE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK2bL+l4u
iUNMoqyuSF2G0umLaz7cp2dV/Ya0+4SiTG8URjI0hFJRqfkty7lc1IKfCjk51wzi
xKBar6iAc6y2Zwhu+UrNt0w757o3Du3MXq34jnd0ciS/7QXZGJBNc01yn8aIBZw7
0BAaJh9fQtzN0ysm3MLRacw8l5ba12Wg4BBxWG24+bWMkwR8brm/07nXsIvOdfg8
n1S3Ej+hVzPjDWWjXZjtKdHbp0isvkh2HAwTibH2IfTN3UX6CdLqiKbFW9Hcv1eM
5074q4SlQdWc6fRmIgsk9FzO/++TI0sGlAzwo8dPjy91THklvtv9xlmWGEg7i9UF
Kw/MRtaNqs6pGQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:46 2026 by rpki-client