Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bd/b737f6-304b-4c4f-b887-71108258f1b9/1/TT9U8wTmuFFgjCk5eLFrpRrANQ4.mft
File: TT9U8wTmuFFgjCk5eLFrpRrANQ4.mft (raw, json)
Hash identifier: ZARVus/07meyTvLj7iCksOhxV+hjErShGmRhbSSgDgY=
Subject key identifier: 8D:5B:08:EE:34:45:91:74:4A:1F:01:C3:B6:85:1E:EA:4B:CC:DA:D6
Authority key identifier: 4D:3F:54:F3:04:E6:B8:51:60:8C:29:39:78:B1:6B:A5:1A:C0:35:0E
Certificate issuer: /CN=4d3f54f304e6b851608c293978b16ba51ac0350e
Certificate serial: 01A1863F34D2623D52541BBA7F2C0B6FB9F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TT9U8wTmuFFgjCk5eLFrpRrANQ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/b737f6-304b-4c4f-b887-71108258f1b9/1/TT9U8wTmuFFgjCk5eLFrpRrANQ4.mft
Manifest number: 1ACB
Signing time: Thu 29 Oct 2026 06:00:51 +0000
Manifest this update: Thu 29 Oct 2026 06:00:51 +0000
Manifest next update: Fri 30 Oct 2026 06:00:51 +0000
Files and hashes: 1: TT9U8wTmuFFgjCk5eLFrpRrANQ4.crl (hash: Yd/h643/mTUV1VXjO+QPxf/laeMr4RB6WBCWuqszKGs=)
2: kJ79XeVCgRV25HKpL8ktREfXHlw.roa (hash: 7gNr/5O63l4yUAcolVBkp40kuH2WYLPsyzzPi2c2gEI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/b737f6-304b-4c4f-b887-71108258f1b9/1/TT9U8wTmuFFgjCk5eLFrpRrANQ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/b737f6-304b-4c4f-b887-71108258f1b9/1/TT9U8wTmuFFgjCk5eLFrpRrANQ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/TT9U8wTmuFFgjCk5eLFrpRrANQ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Oct 2026 06:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:86:3f:34:d2:62:3d:52:54:1b:ba:7f:2c:0b:6f:b9:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d3f54f304e6b851608c293978b16ba51ac0350e
Validity
Not Before: Oct 29 06:00:51 2026 GMT
Not After : Oct 30 06:00:51 2026 GMT
Subject: CN=8d5b08ee344591744a1f01c3b6851eea4bccdad6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:9b:f7:6a:9f:5f:c9:db:ef:30:b1:4c:54:c7:
1d:d4:3c:8d:84:b7:1b:c0:79:da:d3:94:6a:15:e7:
42:f4:8c:47:9c:f9:08:fe:d1:9f:82:ea:98:8b:a6:
cf:ef:db:94:68:a4:c5:f6:e0:b6:41:73:f4:02:bd:
6d:68:a3:af:dd:95:f4:ad:7e:04:5d:c3:60:fc:d2:
ec:0c:c9:e0:42:ec:94:23:40:2a:46:98:6d:64:18:
43:d7:4d:02:e2:62:58:81:b8:3e:cf:f0:aa:cd:b2:
35:de:13:fc:9e:84:fb:4a:bf:6f:5c:14:57:98:e0:
cf:ff:33:b7:62:21:8c:3d:bd:8c:b0:c4:0b:07:8e:
ea:7c:b9:82:67:25:21:a7:e0:f4:5d:6a:e7:44:16:
33:61:1b:7d:2b:ad:36:e3:57:35:09:14:2b:6f:58:
1a:9c:26:f2:b5:9c:c8:80:53:7e:7f:38:0a:d9:f4:
af:38:6d:9a:da:bd:6f:12:08:80:87:c0:bb:ac:c1:
a6:50:50:3c:a7:c9:2d:eb:16:23:18:b1:33:b4:cd:
84:40:df:6f:de:b5:85:c9:9b:7f:fd:96:3b:86:a6:
63:ff:0f:65:b0:1b:82:a9:d4:a3:6c:fe:bc:0b:f3:
e8:88:66:dc:b3:b5:05:70:a7:ed:9e:82:2b:ea:6a:
1a:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:5B:08:EE:34:45:91:74:4A:1F:01:C3:B6:85:1E:EA:4B:CC:DA:D6
X509v3 Authority Key Identifier:
keyid:4D:3F:54:F3:04:E6:B8:51:60:8C:29:39:78:B1:6B:A5:1A:C0:35:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TT9U8wTmuFFgjCk5eLFrpRrANQ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/b737f6-304b-4c4f-b887-71108258f1b9/1/TT9U8wTmuFFgjCk5eLFrpRrANQ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/b737f6-304b-4c4f-b887-71108258f1b9/1/TT9U8wTmuFFgjCk5eLFrpRrANQ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:d4:94:d9:75:4c:71:e7:3e:0d:b1:37:d5:0f:36:3e:fd:7f:
5e:19:a5:a9:df:28:7f:29:ac:37:e4:d9:66:01:f4:95:14:f6:
c0:2e:4c:6e:a5:61:bf:06:77:0e:4f:af:ac:dc:d0:d0:8c:c5:
5e:2f:a5:1a:bb:6d:e1:d5:f1:30:2c:5e:4e:94:6e:3e:87:78:
d1:32:da:3a:c0:13:2d:dd:3f:ae:92:b7:29:f0:ef:15:bc:12:
47:75:88:b5:ec:50:fe:ad:3c:d7:da:ec:28:b8:bc:f1:76:a3:
ea:c4:bf:92:44:69:fc:45:1d:17:7c:a3:22:c3:0b:42:a3:cd:
a0:aa:cf:c9:5c:db:e1:ca:63:85:43:ed:51:28:9e:d7:08:78:
1c:fe:d6:07:35:ee:08:81:f0:49:15:26:74:ef:ec:43:d0:84:
55:5d:ac:2a:1e:b9:3b:52:b8:81:16:95:54:02:eb:22:60:a2:
25:85:76:07:15:0e:4d:af:8a:92:87:eb:40:8f:41:2c:90:05:
3f:49:e0:21:ce:00:df:8c:1d:6f:18:27:8a:be:d2:d3:c8:dd:
8b:92:2e:97:51:2d:00:60:76:b6:f4:22:5c:d0:27:c1:0f:6d:
81:8a:c8:a0:b3:f2:59:c9:f4:f6:53:7b:eb:d0:a7:cc:bb:c7:
ba:58:62:3f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGGPzTSYj1SVBu6fywLb7n2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRkM2Y1NGYzMDRlNmI4NTE2MDhjMjkzOTc4YjE2YmE1MWFj
MDM1MGUwHhcNMjYxMDI5MDYwMDUxWhcNMjYxMDMwMDYwMDUxWjAzMTEwLwYDVQQD
Eyg4ZDViMDhlZTM0NDU5MTc0NGExZjAxYzNiNjg1MWVlYTRiY2NkYWQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs5v3ap9fydvvMLFMVMcd1DyNhLcb
wHna05RqFedC9IxHnPkI/tGfguqYi6bP79uUaKTF9uC2QXP0Ar1taKOv3ZX0rX4E
XcNg/NLsDMngQuyUI0AqRphtZBhD100C4mJYgbg+z/CqzbI13hP8noT7Sr9vXBRX
mODP/zO3YiGMPb2MsMQLB47qfLmCZyUhp+D0XWrnRBYzYRt9K60241c1CRQrb1ga
nCbytZzIgFN+fzgK2fSvOG2a2r1vEgiAh8C7rMGmUFA8p8kt6xYjGLEztM2EQN9v
3rWFyZt//ZY7hqZj/w9lsBuCqdSjbP68C/PoiGbcs7UFcKftnoIr6moaMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI1bCO40RZF0Sh8Bw7aFHupLzNrWMB8GA1UdIwQY
MBaAFE0/VPME5rhRYIwpOXixa6UawDUOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVFQ5VTh3VG11RkZnakNrNWVMRnJwUnJBTlE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC9iNzM3ZjYtMzA0Yi00YzRmLWI4ODct
NzExMDgyNThmMWI5LzEvVFQ5VTh3VG11RkZnakNrNWVMRnJwUnJBTlE0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZC9iNzM3ZjYtMzA0Yi00YzRmLWI4ODctNzExMDgyNThmMWI5
LzEvVFQ5VTh3VG11RkZnakNrNWVMRnJwUnJBTlE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApNSU2XVM
cec+DbE31Q82Pv1/Xhmlqd8ofymsN+TZZgH0lRT2wC5MbqVhvwZ3Dk+vrNzQ0IzF
Xi+lGrtt4dXxMCxeTpRuPod40TLaOsATLd0/rpK3KfDvFbwSR3WItexQ/q0819rs
KLi88Xaj6sS/kkRp/EUdF3yjIsMLQqPNoKrPyVzb4cpjhUPtUSie1wh4HP7WBzXu
CIHwSRUmdO/sQ9CEVV2sKh65O1K4gRaVVALrImCiJYV2BxUOTa+KkofrQI9BLJAF
P0ngIc4A34wdbxgnir7S08jdi5Iul1EtAGB2tvQiXNAnwQ9tgYrIoLPyWcn09lN7
69CnzLvHulhiPw==
-----END CERTIFICATE-----
Generated at Thu Oct 29 13:54:05 2026 by rpki-client