Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/b737f6-304b-4c4f-b887-71108258f1b9/1/TT9U8wTmuFFgjCk5eLFrpRrANQ4.mft
File: TT9U8wTmuFFgjCk5eLFrpRrANQ4.mft (raw, json)
Hash identifier: iPWI/ct4UaPfLCcUSrhAH0it3XX5C0hoUB8SyHSUXiQ=
Subject key identifier: 8C:3B:B1:91:A8:3E:2F:29:0D:BF:36:B6:65:A9:4B:00:31:93:D5:73
Authority key identifier: 4D:3F:54:F3:04:E6:B8:51:60:8C:29:39:78:B1:6B:A5:1A:C0:35:0E
Certificate issuer: /CN=4d3f54f304e6b851608c293978b16ba51ac0350e
Certificate serial: 019FAB2C981FC764E93C7B861EF83255B69E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TT9U8wTmuFFgjCk5eLFrpRrANQ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/b737f6-304b-4c4f-b887-71108258f1b9/1/TT9U8wTmuFFgjCk5eLFrpRrANQ4.mft
Manifest number: 19D5
Signing time: Wed 29 Jul 2026 00:00:54 +0000
Manifest this update: Wed 29 Jul 2026 00:00:54 +0000
Manifest next update: Thu 30 Jul 2026 00:00:54 +0000
Files and hashes: 1: TT9U8wTmuFFgjCk5eLFrpRrANQ4.crl (hash: 41qKqKA2dTk9GrYDqXQahBNcZMAdow+kE/XwMZqChCk=)
2: kJ79XeVCgRV25HKpL8ktREfXHlw.roa (hash: 7gNr/5O63l4yUAcolVBkp40kuH2WYLPsyzzPi2c2gEI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/b737f6-304b-4c4f-b887-71108258f1b9/1/TT9U8wTmuFFgjCk5eLFrpRrANQ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/b737f6-304b-4c4f-b887-71108258f1b9/1/TT9U8wTmuFFgjCk5eLFrpRrANQ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/TT9U8wTmuFFgjCk5eLFrpRrANQ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:2c:98:1f:c7:64:e9:3c:7b:86:1e:f8:32:55:b6:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d3f54f304e6b851608c293978b16ba51ac0350e
Validity
Not Before: Jul 29 00:00:54 2026 GMT
Not After : Jul 30 00:00:54 2026 GMT
Subject: CN=8c3bb191a83e2f290dbf36b665a94b003193d573
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:e7:75:e2:99:ad:cd:b7:75:c9:c8:51:f2:16:
fc:82:6e:fe:2b:17:c9:8d:bb:79:36:50:13:df:f9:
ed:96:08:10:93:c5:3b:9e:2b:46:db:9a:de:6e:ee:
1b:f2:4d:83:20:77:49:45:3c:27:35:50:26:79:a7:
f2:e8:2c:c9:20:6d:bf:80:bb:24:58:ea:57:67:fd:
a6:d6:91:bc:de:e2:e2:19:2e:34:87:10:df:3f:00:
09:22:4f:48:b3:c4:d1:af:a1:9e:95:05:33:d6:9a:
06:81:09:82:23:7a:bc:a4:9e:f6:60:5e:6e:a4:88:
e4:67:1e:17:be:80:6b:45:4d:2c:8a:6b:9c:21:d9:
45:ce:99:ff:33:4c:ad:e5:f0:d1:6e:fc:62:6f:ac:
0f:b9:24:bd:b0:61:1b:03:3d:a9:b9:09:5f:0c:8d:
f7:28:ad:76:c5:43:84:68:f4:22:55:c3:b4:3c:17:
46:a6:32:8f:b5:9f:52:ca:d0:79:b0:ae:66:95:90:
d9:38:b8:54:64:47:b9:fd:10:f7:2b:84:af:64:77:
49:90:b5:3f:a8:03:1a:11:0d:df:6c:b6:fe:e2:e6:
53:93:f3:14:39:9d:95:cf:c8:ec:f1:0c:46:86:0e:
e7:30:51:f2:bb:a8:15:82:f5:ca:71:be:79:c3:d4:
38:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:3B:B1:91:A8:3E:2F:29:0D:BF:36:B6:65:A9:4B:00:31:93:D5:73
X509v3 Authority Key Identifier:
keyid:4D:3F:54:F3:04:E6:B8:51:60:8C:29:39:78:B1:6B:A5:1A:C0:35:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TT9U8wTmuFFgjCk5eLFrpRrANQ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/b737f6-304b-4c4f-b887-71108258f1b9/1/TT9U8wTmuFFgjCk5eLFrpRrANQ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/b737f6-304b-4c4f-b887-71108258f1b9/1/TT9U8wTmuFFgjCk5eLFrpRrANQ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:80:a0:25:bd:0c:ce:54:a3:d4:60:03:95:0b:ad:ad:5b:a4:
f7:0f:f2:a5:16:c5:69:5f:f3:f4:63:51:94:bc:a8:4e:08:8c:
8d:e0:3a:bb:11:e1:9c:dd:7c:17:4f:b5:d1:39:4e:a8:fa:ca:
4e:d4:58:b0:89:89:bc:68:fe:c9:fd:81:48:94:10:52:66:72:
72:94:34:71:cb:30:5c:bb:8f:33:bb:71:90:88:4f:48:cc:7b:
c4:4d:51:7c:37:bd:0c:9a:e9:76:45:01:56:b2:66:e7:80:c6:
7b:e4:be:04:c5:28:9b:2f:09:b1:2f:09:6b:19:ff:43:05:fc:
3d:11:4d:24:eb:c8:02:86:25:60:e5:f8:8c:ea:12:1d:a0:49:
ef:ef:73:df:92:a5:7e:f2:5c:05:8e:27:b1:34:b7:11:a9:4d:
17:c9:17:04:28:ab:89:20:fd:1a:e5:8a:d0:fe:7a:85:04:2e:
bc:d8:44:14:9e:a8:1b:71:f3:0b:98:b3:b6:46:34:04:71:98:
dd:b5:9d:97:68:bd:be:7a:ca:c9:ad:7b:3d:6c:60:dc:3f:9d:
41:9b:10:1c:8f:cf:27:c3:89:5d:19:63:18:95:25:84:6e:83:
5a:88:7c:b0:5f:92:14:51:a6:57:ad:88:57:0b:d0:8a:e5:9c:
22:67:62:e6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+rLJgfx2TpPHuGHvgyVbaeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRkM2Y1NGYzMDRlNmI4NTE2MDhjMjkzOTc4YjE2YmE1MWFj
MDM1MGUwHhcNMjYwNzI5MDAwMDU0WhcNMjYwNzMwMDAwMDU0WjAzMTEwLwYDVQQD
Eyg4YzNiYjE5MWE4M2UyZjI5MGRiZjM2YjY2NWE5NGIwMDMxOTNkNTczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtud14pmtzbd1ychR8hb8gm7+KxfJ
jbt5NlAT3/ntlggQk8U7nitG25rebu4b8k2DIHdJRTwnNVAmeafy6CzJIG2/gLsk
WOpXZ/2m1pG83uLiGS40hxDfPwAJIk9Is8TRr6GelQUz1poGgQmCI3q8pJ72YF5u
pIjkZx4XvoBrRU0simucIdlFzpn/M0yt5fDRbvxib6wPuSS9sGEbAz2puQlfDI33
KK12xUOEaPQiVcO0PBdGpjKPtZ9SytB5sK5mlZDZOLhUZEe5/RD3K4SvZHdJkLU/
qAMaEQ3fbLb+4uZTk/MUOZ2Vz8js8QxGhg7nMFHyu6gVgvXKcb55w9Q4MQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIw7sZGoPi8pDb82tmWpSwAxk9VzMB8GA1UdIwQY
MBaAFE0/VPME5rhRYIwpOXixa6UawDUOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVFQ5VTh3VG11RkZnakNrNWVMRnJwUnJBTlE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC9iNzM3ZjYtMzA0Yi00YzRmLWI4ODct
NzExMDgyNThmMWI5LzEvVFQ5VTh3VG11RkZnakNrNWVMRnJwUnJBTlE0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZC9iNzM3ZjYtMzA0Yi00YzRmLWI4ODctNzExMDgyNThmMWI5
LzEvVFQ5VTh3VG11RkZnakNrNWVMRnJwUnJBTlE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApICgJb0M
zlSj1GADlQutrVuk9w/ypRbFaV/z9GNRlLyoTgiMjeA6uxHhnN18F0+10TlOqPrK
TtRYsImJvGj+yf2BSJQQUmZycpQ0ccswXLuPM7txkIhPSMx7xE1RfDe9DJrpdkUB
VrJm54DGe+S+BMUomy8JsS8Jaxn/QwX8PRFNJOvIAoYlYOX4jOoSHaBJ7+9z35Kl
fvJcBY4nsTS3EalNF8kXBCiriSD9GuWK0P56hQQuvNhEFJ6oG3HzC5iztkY0BHGY
3bWdl2i9vnrKya17PWxg3D+dQZsQHI/PJ8OJXRljGJUlhG6DWoh8sF+SFFGmV62I
VwvQiuWcImdi5g==
-----END CERTIFICATE-----
Generated at Wed Jul 29 05:28:44 2026 by rpki-client