Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/8008fe-175b-41bf-b1d6-2ce0eb458788/1/TFFjb96QX4Uh9BFHnoEyHNz0kEk.mft
File: TFFjb96QX4Uh9BFHnoEyHNz0kEk.mft (raw, json)
Hash identifier: RtUDwU0l7Jguzv08sf26kA+/K/SLLE7UhZpEjVr2lic=
Subject key identifier: 35:AC:6C:DB:F7:12:0B:1E:0D:50:B3:C8:BA:F9:C2:77:76:43:64:CF
Authority key identifier: 4C:51:63:6F:DE:90:5F:85:21:F4:11:47:9E:81:32:1C:DC:F4:90:49
Certificate issuer: /CN=4c51636fde905f8521f411479e81321cdcf49049
Certificate serial: 019D9850031E121749C27F6424DDB4FEF864
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TFFjb96QX4Uh9BFHnoEyHNz0kEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/8008fe-175b-41bf-b1d6-2ce0eb458788/1/TFFjb96QX4Uh9BFHnoEyHNz0kEk.mft
Manifest number: 0B51
Signing time: Thu 16 Apr 2026 22:01:13 +0000
Manifest this update: Thu 16 Apr 2026 22:01:13 +0000
Manifest next update: Fri 17 Apr 2026 22:01:13 +0000
Files and hashes: 1: TFFjb96QX4Uh9BFHnoEyHNz0kEk.crl (hash: JQNH5jjF3pM5SlGH4Iy8J8Wyf0xxk+1WoRhkKyV1pEg=)
2: btVJTycrOu73mUIXm-DmnQZDlPs.roa (hash: XGmN+HVfqx/2ED53etC2ojf1SMKcGmAltxqzFq/xltI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/8008fe-175b-41bf-b1d6-2ce0eb458788/1/TFFjb96QX4Uh9BFHnoEyHNz0kEk.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/8008fe-175b-41bf-b1d6-2ce0eb458788/1/TFFjb96QX4Uh9BFHnoEyHNz0kEk.mft
rsync://rpki.ripe.net/repository/DEFAULT/TFFjb96QX4Uh9BFHnoEyHNz0kEk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:50:03:1e:12:17:49:c2:7f:64:24:dd:b4:fe:f8:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c51636fde905f8521f411479e81321cdcf49049
Validity
Not Before: Apr 16 22:01:13 2026 GMT
Not After : Apr 17 22:01:13 2026 GMT
Subject: CN=35ac6cdbf7120b1e0d50b3c8baf9c277764364cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:ad:b0:96:f3:bc:13:60:88:31:f1:67:da:89:
c7:ed:e7:c5:58:9d:8a:e6:07:30:df:94:49:3f:cb:
2f:e9:ae:d3:ce:a5:db:10:b2:cc:f3:01:75:be:ed:
94:c0:a6:d0:11:48:21:09:09:9e:bb:ca:1a:aa:6d:
8c:8c:57:70:e2:aa:c8:bb:83:32:ba:f5:bc:01:4c:
29:7c:63:0e:f0:54:c0:67:15:f3:0c:67:c7:07:24:
97:cb:4a:75:cd:df:ed:8e:f7:09:b8:7f:62:db:33:
92:ef:c9:9b:77:9a:b0:eb:67:97:cb:70:06:53:b1:
05:46:f3:b9:d4:8c:e8:92:82:b8:b2:44:4e:4e:87:
11:56:86:66:c5:cc:19:5a:7a:8b:06:6e:df:17:d8:
26:3b:77:b2:29:8b:b6:46:83:b3:11:31:93:69:d7:
38:50:c2:de:68:ed:27:4b:85:30:64:ef:e7:79:52:
d7:dd:ad:72:a9:19:b2:a9:ae:53:32:12:13:a1:dd:
81:e6:c0:08:24:4f:d8:d1:15:bc:91:f1:6e:5d:be:
9b:38:df:58:32:9e:77:03:5c:eb:db:b5:5c:0d:f6:
8b:39:83:d7:ea:87:65:97:f1:2c:e5:78:73:8e:f9:
ce:03:2d:61:24:4b:99:6a:f0:21:e0:1e:64:fa:3e:
60:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:AC:6C:DB:F7:12:0B:1E:0D:50:B3:C8:BA:F9:C2:77:76:43:64:CF
X509v3 Authority Key Identifier:
keyid:4C:51:63:6F:DE:90:5F:85:21:F4:11:47:9E:81:32:1C:DC:F4:90:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TFFjb96QX4Uh9BFHnoEyHNz0kEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/8008fe-175b-41bf-b1d6-2ce0eb458788/1/TFFjb96QX4Uh9BFHnoEyHNz0kEk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/8008fe-175b-41bf-b1d6-2ce0eb458788/1/TFFjb96QX4Uh9BFHnoEyHNz0kEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:bc:f2:ce:43:db:03:ee:22:48:2a:0e:01:97:3d:1b:4c:0a:
c0:44:75:2f:48:14:b4:11:05:63:b2:24:5b:8e:d9:3c:c0:2f:
ed:5c:65:d4:92:b2:cd:ba:95:f2:3b:9a:39:3b:38:12:b6:4f:
40:44:bd:92:5f:08:e9:b3:ab:ec:c2:d9:6a:03:ff:27:9f:3c:
d8:1e:92:c6:4c:ba:ee:11:cf:74:51:fd:13:79:92:fd:fa:9e:
1f:c2:92:5f:e2:dd:9d:cc:5b:15:eb:af:67:62:de:5c:5f:87:
25:92:3b:d7:33:cd:83:db:92:1a:93:ea:39:c1:38:ee:b5:f8:
91:63:20:78:d7:4e:10:36:ae:6a:8d:7f:ee:49:fa:d7:65:61:
c9:f3:e5:1f:34:8a:12:56:df:0b:ce:fd:9d:93:59:2b:e9:90:
90:14:c3:e5:1d:be:64:a7:8d:03:12:c2:a4:4f:cd:ff:de:de:
04:e7:19:88:1a:d3:1a:11:8b:36:9a:ed:4d:06:f0:45:53:c8:
af:8e:d9:d7:af:00:59:76:7d:a8:32:d2:24:69:70:e6:b3:c2:
99:3d:58:6e:b6:1c:93:30:4b:14:9c:ad:5e:e5:38:a3:5b:6f:
d4:81:c0:dc:e0:ec:e9:20:6e:03:f0:9c:fa:e1:86:f4:ef:43:
32:0e:d9:66
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2YUAMeEhdJwn9kJN20/vhkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjNTE2MzZmZGU5MDVmODUyMWY0MTE0NzllODEzMjFjZGNm
NDkwNDkwHhcNMjYwNDE2MjIwMTEzWhcNMjYwNDE3MjIwMTEzWjAzMTEwLwYDVQQD
EygzNWFjNmNkYmY3MTIwYjFlMGQ1MGIzYzhiYWY5YzI3Nzc2NDM2NGNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA162wlvO8E2CIMfFn2onH7efFWJ2K
5gcw35RJP8sv6a7TzqXbELLM8wF1vu2UwKbQEUghCQmeu8oaqm2MjFdw4qrIu4My
uvW8AUwpfGMO8FTAZxXzDGfHBySXy0p1zd/tjvcJuH9i2zOS78mbd5qw62eXy3AG
U7EFRvO51IzokoK4skROTocRVoZmxcwZWnqLBm7fF9gmO3eyKYu2RoOzETGTadc4
UMLeaO0nS4UwZO/neVLX3a1yqRmyqa5TMhITod2B5sAIJE/Y0RW8kfFuXb6bON9Y
Mp53A1zr27VcDfaLOYPX6odll/Es5XhzjvnOAy1hJEuZavAh4B5k+j5gtwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDWsbNv3EgseDVCzyLr5wnd2Q2TPMB8GA1UdIwQY
MBaAFExRY2/ekF+FIfQRR56BMhzc9JBJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVEZGamI5NlFYNFVoOUJGSG5vRXlITnowa0VrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny84MDA4ZmUtMTc1Yi00MWJmLWIxZDYt
MmNlMGViNDU4Nzg4LzEvVEZGamI5NlFYNFVoOUJGSG5vRXlITnowa0VrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny84MDA4ZmUtMTc1Yi00MWJmLWIxZDYtMmNlMGViNDU4Nzg4
LzEvVEZGamI5NlFYNFVoOUJGSG5vRXlITnowa0VrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAu7zyzkPb
A+4iSCoOAZc9G0wKwER1L0gUtBEFY7IkW47ZPMAv7Vxl1JKyzbqV8juaOTs4ErZP
QES9kl8I6bOr7MLZagP/J5882B6Sxky67hHPdFH9E3mS/fqeH8KSX+LdncxbFeuv
Z2LeXF+HJZI71zPNg9uSGpPqOcE47rX4kWMgeNdOEDauao1/7kn612VhyfPlHzSK
ElbfC879nZNZK+mQkBTD5R2+ZKeNAxLCpE/N/97eBOcZiBrTGhGLNprtTQbwRVPI
r47Z168AWXZ9qDLSJGlw5rPCmT1YbrYckzBLFJytXuU4o1tv1IHA3ODs6SBuA/Cc
+uGG9O9DMg7ZZg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 03:47:08 2026 by rpki-client