Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/8008fe-175b-41bf-b1d6-2ce0eb458788/1/TFFjb96QX4Uh9BFHnoEyHNz0kEk.mft
File: TFFjb96QX4Uh9BFHnoEyHNz0kEk.mft (raw, json)
Hash identifier: 2l0uPdZ42eXDevRW59ChfV0+33+N4MpDawMQu+ZZ40A=
Subject key identifier: D9:3B:3A:54:07:6C:76:87:A4:A9:FD:B0:FA:DB:40:AA:1F:D6:43:01
Authority key identifier: 4C:51:63:6F:DE:90:5F:85:21:F4:11:47:9E:81:32:1C:DC:F4:90:49
Certificate issuer: /CN=4c51636fde905f8521f411479e81321cdcf49049
Certificate serial: 019E1F7E728B11F3BC122E4845B5DB8AD6BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TFFjb96QX4Uh9BFHnoEyHNz0kEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/8008fe-175b-41bf-b1d6-2ce0eb458788/1/TFFjb96QX4Uh9BFHnoEyHNz0kEk.mft
Manifest number: 0B97
Signing time: Wed 13 May 2026 04:00:40 +0000
Manifest this update: Wed 13 May 2026 04:00:40 +0000
Manifest next update: Thu 14 May 2026 04:00:40 +0000
Files and hashes: 1: TFFjb96QX4Uh9BFHnoEyHNz0kEk.crl (hash: K1nMwUICPKjNd4gyZ3ZHmPtWEzVHffN5zPWBg3SR2m0=)
2: btVJTycrOu73mUIXm-DmnQZDlPs.roa (hash: XGmN+HVfqx/2ED53etC2ojf1SMKcGmAltxqzFq/xltI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/8008fe-175b-41bf-b1d6-2ce0eb458788/1/TFFjb96QX4Uh9BFHnoEyHNz0kEk.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/8008fe-175b-41bf-b1d6-2ce0eb458788/1/TFFjb96QX4Uh9BFHnoEyHNz0kEk.mft
rsync://rpki.ripe.net/repository/DEFAULT/TFFjb96QX4Uh9BFHnoEyHNz0kEk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 04:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:7e:72:8b:11:f3:bc:12:2e:48:45:b5:db:8a:d6:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c51636fde905f8521f411479e81321cdcf49049
Validity
Not Before: May 13 04:00:40 2026 GMT
Not After : May 14 04:00:40 2026 GMT
Subject: CN=d93b3a54076c7687a4a9fdb0fadb40aa1fd64301
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:a4:84:77:27:2c:11:be:79:a1:65:51:68:66:
5c:c9:97:d5:fd:88:b3:da:9e:e7:94:38:fc:bd:ef:
10:33:6b:c0:3d:9e:fa:da:3f:ca:4f:49:08:fc:50:
2c:be:d5:7a:5f:ba:74:83:c3:16:f5:d2:0a:2e:d5:
fc:1a:71:81:b3:c3:c7:36:47:7a:64:7c:22:e6:94:
f5:c3:b8:dc:33:81:9b:90:18:c8:51:e5:a5:5f:48:
8e:74:7a:1a:f7:33:ee:82:e2:69:ea:cc:c0:6a:e6:
6c:1b:29:f8:2d:38:64:02:a7:f3:3f:1a:ad:e0:55:
9d:e8:d4:1e:cd:9d:31:02:79:f7:41:3c:9b:81:82:
f1:c0:6f:91:32:52:53:b5:86:01:4e:99:49:be:e9:
82:c0:8e:e9:d7:8c:e7:87:f7:fa:f7:bf:38:f5:88:
dd:ab:4b:ce:8b:98:f8:98:80:16:7c:6c:f6:33:cc:
8f:53:a5:be:5f:dd:25:97:f4:3b:5e:0f:a4:0c:59:
ff:e4:4b:08:e0:81:a3:be:cf:32:67:20:81:fd:19:
81:6a:b8:de:56:aa:f5:bf:1e:84:62:3c:38:75:f0:
57:60:a1:6b:94:f6:09:ed:3a:dd:61:34:9d:9b:52:
83:76:26:f7:79:b1:36:26:53:d7:ee:9a:dc:e1:c0:
76:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:3B:3A:54:07:6C:76:87:A4:A9:FD:B0:FA:DB:40:AA:1F:D6:43:01
X509v3 Authority Key Identifier:
keyid:4C:51:63:6F:DE:90:5F:85:21:F4:11:47:9E:81:32:1C:DC:F4:90:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TFFjb96QX4Uh9BFHnoEyHNz0kEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/8008fe-175b-41bf-b1d6-2ce0eb458788/1/TFFjb96QX4Uh9BFHnoEyHNz0kEk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/8008fe-175b-41bf-b1d6-2ce0eb458788/1/TFFjb96QX4Uh9BFHnoEyHNz0kEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:52:0f:10:80:b1:5e:29:f9:2a:94:eb:87:11:57:80:24:d6:
e5:73:92:1e:5f:6e:7d:ad:16:b2:1c:77:24:85:7c:93:8c:f4:
38:90:16:83:2c:5c:85:90:8e:1d:d7:00:29:d5:cf:8d:ae:03:
a8:2e:ef:ef:76:7e:2d:1e:bf:77:20:d7:98:d4:77:c6:3d:3e:
ae:51:5f:c8:c0:56:cc:87:94:1b:70:6c:4e:31:d9:8e:6c:ca:
ca:6f:f4:26:36:12:26:48:7c:60:f0:0c:92:17:7b:76:70:5b:
8c:ce:f3:9d:5d:55:85:41:ff:00:7b:ee:92:ed:b6:a7:22:a2:
9d:5f:10:94:c1:6b:1a:7a:5b:ed:b8:32:b9:58:0b:d2:49:f2:
6d:56:e8:e7:9c:32:54:62:62:2e:36:b3:70:ca:60:34:18:c5:
45:3b:d0:ac:06:7a:88:43:23:b7:88:12:82:da:ce:0d:55:fa:
9c:9f:09:bf:6e:61:4c:2b:2c:69:a7:39:89:fa:10:92:05:08:
cb:ba:26:09:0e:52:be:2a:e3:5b:5c:d7:b1:43:c2:a0:df:68:
83:c3:11:37:f8:bb:d1:38:0c:f0:b8:00:c2:39:c6:6c:c5:cf:
ac:93:3c:44:57:ea:9e:0f:92:cf:84:ff:8d:70:b5:fc:ca:63:
83:50:cf:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:45:08 2026 by rpki-client