Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/b737f6-304b-4c4f-b887-71108258f1b9/1/TT9U8wTmuFFgjCk5eLFrpRrANQ4.mft
File: TT9U8wTmuFFgjCk5eLFrpRrANQ4.mft (raw, json)
Hash identifier: FjZLtO3ZmGdFqSX5q4AOhA8JwD0lem9x0OxMwCfqSwQ=
Subject key identifier: 33:9C:D0:7E:2F:4B:93:87:A6:E9:38:9F:F1:6D:01:C1:8F:EA:44:5C
Authority key identifier: 4D:3F:54:F3:04:E6:B8:51:60:8C:29:39:78:B1:6B:A5:1A:C0:35:0E
Certificate issuer: /CN=4d3f54f304e6b851608c293978b16ba51ac0350e
Certificate serial: 019EB5E952A7E8DFB7CB75C2C16576D0A25D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TT9U8wTmuFFgjCk5eLFrpRrANQ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/b737f6-304b-4c4f-b887-71108258f1b9/1/TT9U8wTmuFFgjCk5eLFrpRrANQ4.mft
Manifest number: 1956
Signing time: Thu 11 Jun 2026 09:00:27 +0000
Manifest this update: Thu 11 Jun 2026 09:00:27 +0000
Manifest next update: Fri 12 Jun 2026 09:00:27 +0000
Files and hashes: 1: TT9U8wTmuFFgjCk5eLFrpRrANQ4.crl (hash: kmO2SVesZjUo2/zoW4c1MLNAxA4ktsJqESMpW/OuLgo=)
2: kJ79XeVCgRV25HKpL8ktREfXHlw.roa (hash: 7gNr/5O63l4yUAcolVBkp40kuH2WYLPsyzzPi2c2gEI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/b737f6-304b-4c4f-b887-71108258f1b9/1/TT9U8wTmuFFgjCk5eLFrpRrANQ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/b737f6-304b-4c4f-b887-71108258f1b9/1/TT9U8wTmuFFgjCk5eLFrpRrANQ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/TT9U8wTmuFFgjCk5eLFrpRrANQ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 09:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b5:e9:52:a7:e8:df:b7:cb:75:c2:c1:65:76:d0:a2:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d3f54f304e6b851608c293978b16ba51ac0350e
Validity
Not Before: Jun 11 09:00:27 2026 GMT
Not After : Jun 12 09:00:27 2026 GMT
Subject: CN=339cd07e2f4b9387a6e9389ff16d01c18fea445c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:24:5b:07:35:6a:4e:a0:d0:64:b7:5a:2b:ac:
08:87:51:ec:81:b8:8b:53:25:e2:08:8d:6e:58:09:
33:24:e7:5a:90:45:9d:da:5c:38:74:21:39:d9:25:
d4:eb:f0:13:eb:5d:07:3f:7d:e0:fa:b8:4c:4c:30:
dc:8d:da:96:17:0e:e4:bf:42:b2:84:7e:e8:4c:5a:
5b:75:33:d3:8f:c6:17:8e:1a:07:e4:a2:36:a2:a4:
3c:80:e1:f1:53:19:33:db:75:da:30:ff:88:3e:f3:
29:7a:c4:45:a3:a3:14:78:56:d7:f4:6a:cf:62:ee:
3a:6d:1b:28:1f:f9:d4:b4:d7:4e:1b:49:75:72:9d:
d0:31:ec:47:c9:dc:a3:07:71:b7:96:f6:5f:8e:d3:
a6:dc:8e:fe:e6:0a:5c:83:67:92:4d:28:ea:85:c7:
89:d4:a5:be:11:2c:fd:91:42:9e:92:ca:bb:42:37:
86:2d:f6:a2:8c:b4:32:ab:34:21:9b:95:4f:4c:9f:
bc:8a:e7:49:51:db:ef:6c:03:8a:5b:0b:bc:7b:26:
0e:53:ca:d0:0d:77:41:67:a4:28:11:9c:39:16:d6:
77:dd:10:db:6e:f6:b5:d6:b4:fc:38:c7:13:9b:36:
c5:06:b8:f2:14:33:73:29:a4:c2:33:c2:a1:02:59:
1e:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:9C:D0:7E:2F:4B:93:87:A6:E9:38:9F:F1:6D:01:C1:8F:EA:44:5C
X509v3 Authority Key Identifier:
keyid:4D:3F:54:F3:04:E6:B8:51:60:8C:29:39:78:B1:6B:A5:1A:C0:35:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TT9U8wTmuFFgjCk5eLFrpRrANQ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/b737f6-304b-4c4f-b887-71108258f1b9/1/TT9U8wTmuFFgjCk5eLFrpRrANQ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/b737f6-304b-4c4f-b887-71108258f1b9/1/TT9U8wTmuFFgjCk5eLFrpRrANQ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:87:c1:cf:e2:f8:4c:8c:c1:0b:13:c6:7f:2f:22:30:08:48:
4a:cc:5e:6f:a5:73:3e:02:1d:c8:4c:30:4f:d7:fa:3c:bb:46:
17:6a:fe:b8:7b:e6:b9:b2:a5:0e:57:db:ec:1b:2f:b9:79:6f:
80:a2:18:e3:9e:50:81:35:71:30:6d:ed:41:69:c7:7c:e5:b8:
2c:7d:f1:d1:1e:f6:52:b6:05:d4:12:88:6a:a3:13:56:c3:d3:
3e:83:1b:f2:36:71:9a:35:18:93:ff:54:c8:2a:7e:03:1c:d7:
6f:5d:06:28:b2:a5:c7:a2:bf:29:c9:69:e9:56:66:0e:28:3d:
97:32:ad:ec:73:3b:ae:23:0f:7f:c5:3d:48:ea:c8:c8:21:9f:
a1:9e:64:30:51:ae:05:aa:ab:31:8b:75:3c:de:29:3d:b0:bf:
ba:95:34:82:64:07:42:0c:af:93:52:c4:a3:ff:d2:4f:9a:38:
f0:1a:e9:6c:53:15:36:44:e9:67:e8:28:8b:26:d4:8b:64:bf:
34:75:c6:dc:d1:89:30:f7:a6:f0:fc:58:bd:d8:21:5f:68:26:
dc:ae:76:c1:39:30:2a:4b:0f:cb:91:02:1d:6a:0e:9b:95:25:
f9:0d:89:e5:2f:e9:ee:d3:35:38:bc:c4:73:38:b5:6b:bd:9a:
00:cc:fa:a0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ616VKn6N+3y3XCwWV20KJdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRkM2Y1NGYzMDRlNmI4NTE2MDhjMjkzOTc4YjE2YmE1MWFj
MDM1MGUwHhcNMjYwNjExMDkwMDI3WhcNMjYwNjEyMDkwMDI3WjAzMTEwLwYDVQQD
EygzMzljZDA3ZTJmNGI5Mzg3YTZlOTM4OWZmMTZkMDFjMThmZWE0NDVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvCRbBzVqTqDQZLdaK6wIh1HsgbiL
UyXiCI1uWAkzJOdakEWd2lw4dCE52SXU6/AT610HP33g+rhMTDDcjdqWFw7kv0Ky
hH7oTFpbdTPTj8YXjhoH5KI2oqQ8gOHxUxkz23XaMP+IPvMpesRFo6MUeFbX9GrP
Yu46bRsoH/nUtNdOG0l1cp3QMexHydyjB3G3lvZfjtOm3I7+5gpcg2eSTSjqhceJ
1KW+ESz9kUKeksq7QjeGLfaijLQyqzQhm5VPTJ+8iudJUdvvbAOKWwu8eyYOU8rQ
DXdBZ6QoEZw5FtZ33RDbbva11rT8OMcTmzbFBrjyFDNzKaTCM8KhAlkefQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDOc0H4vS5OHpuk4n/FtAcGP6kRcMB8GA1UdIwQY
MBaAFE0/VPME5rhRYIwpOXixa6UawDUOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVFQ5VTh3VG11RkZnakNrNWVMRnJwUnJBTlE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC9iNzM3ZjYtMzA0Yi00YzRmLWI4ODct
NzExMDgyNThmMWI5LzEvVFQ5VTh3VG11RkZnakNrNWVMRnJwUnJBTlE0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZC9iNzM3ZjYtMzA0Yi00YzRmLWI4ODctNzExMDgyNThmMWI5
LzEvVFQ5VTh3VG11RkZnakNrNWVMRnJwUnJBTlE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjIfBz+L4
TIzBCxPGfy8iMAhISsxeb6VzPgIdyEwwT9f6PLtGF2r+uHvmubKlDlfb7BsvuXlv
gKIY455QgTVxMG3tQWnHfOW4LH3x0R72UrYF1BKIaqMTVsPTPoMb8jZxmjUYk/9U
yCp+AxzXb10GKLKlx6K/Kclp6VZmDig9lzKt7HM7riMPf8U9SOrIyCGfoZ5kMFGu
BaqrMYt1PN4pPbC/upU0gmQHQgyvk1LEo//ST5o48BrpbFMVNkTpZ+goiybUi2S/
NHXG3NGJMPem8PxYvdghX2gm3K52wTkwKksPy5ECHWoOm5Ul+Q2J5S/p7tM1OLzE
czi1a72aAMz6oA==
-----END CERTIFICATE-----
Generated at Thu Jun 11 17:53:49 2026 by rpki-client