Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/47/8008fe-175b-41bf-b1d6-2ce0eb458788/1/TFFjb96QX4Uh9BFHnoEyHNz0kEk.mft
File: TFFjb96QX4Uh9BFHnoEyHNz0kEk.mft (raw, json)
Hash identifier: DzWEbaIMu8MDYXfAew1w7shwfqMOZ+hnrju12ObBK/4=
Subject key identifier: D0:3F:D8:FE:97:D3:70:F9:D9:97:37:A6:56:02:F5:86:55:CB:CD:0F
Authority key identifier: 4C:51:63:6F:DE:90:5F:85:21:F4:11:47:9E:81:32:1C:DC:F4:90:49
Certificate issuer: /CN=4c51636fde905f8521f411479e81321cdcf49049
Certificate serial: 01A10EBA1811A0D01DF842D37F3F39303DFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TFFjb96QX4Uh9BFHnoEyHNz0kEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/8008fe-175b-41bf-b1d6-2ce0eb458788/1/TFFjb96QX4Uh9BFHnoEyHNz0kEk.mft
Manifest number: 0D1C
Signing time: Tue 06 Oct 2026 01:00:39 +0000
Manifest this update: Tue 06 Oct 2026 01:00:39 +0000
Manifest next update: Wed 07 Oct 2026 01:00:39 +0000
Files and hashes: 1: TFFjb96QX4Uh9BFHnoEyHNz0kEk.crl (hash: GaJ1Ii3OQLV1cKYZwpYUKyPz8nB8xIZ/f7ot7wEEImY=)
2: btVJTycrOu73mUIXm-DmnQZDlPs.roa (hash: XGmN+HVfqx/2ED53etC2ojf1SMKcGmAltxqzFq/xltI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/8008fe-175b-41bf-b1d6-2ce0eb458788/1/TFFjb96QX4Uh9BFHnoEyHNz0kEk.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/8008fe-175b-41bf-b1d6-2ce0eb458788/1/TFFjb96QX4Uh9BFHnoEyHNz0kEk.mft
rsync://rpki.ripe.net/repository/DEFAULT/TFFjb96QX4Uh9BFHnoEyHNz0kEk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 Oct 2026 20:22:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0e:ba:18:11:a0:d0:1d:f8:42:d3:7f:3f:39:30:3d:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c51636fde905f8521f411479e81321cdcf49049
Validity
Not Before: Oct 6 01:00:39 2026 GMT
Not After : Oct 7 01:00:39 2026 GMT
Subject: CN=d03fd8fe97d370f9d99737a65602f58655cbcd0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:a3:71:e7:ce:73:0e:eb:69:3e:5a:4d:b3:0e:
1c:0a:3a:91:ef:ab:10:68:6e:b0:09:44:da:63:ad:
93:d9:91:a5:a3:3c:3e:de:a1:eb:9e:a8:b3:0d:1e:
51:84:02:7b:e9:f5:e7:0c:0e:ee:9f:cf:47:bf:5f:
2d:85:db:c4:bf:c8:cb:fb:b7:3a:fb:42:4c:23:f0:
23:c3:6a:0a:de:ca:07:22:2b:8c:a4:3d:45:fb:ca:
98:c5:72:13:98:4a:28:81:43:05:df:27:8e:7a:d5:
c9:ae:66:96:e1:cc:85:f0:df:5c:0a:89:4c:5d:16:
65:a3:91:5c:8c:57:09:87:30:de:12:99:85:db:06:
38:c9:29:0f:ee:02:f7:07:16:ec:be:53:07:bd:ed:
94:48:ff:03:af:23:b3:c7:5b:b8:cf:29:a1:0a:39:
00:8d:b4:c4:b8:99:c8:24:8b:1b:36:09:4a:8e:95:
c5:91:54:ec:91:2e:32:58:f2:96:dd:f9:82:82:b8:
52:69:aa:47:7f:0a:f1:54:33:6f:3a:e9:63:d0:88:
09:ad:90:e7:93:4a:af:6f:c4:8a:eb:e7:2c:96:bb:
b4:59:f9:9a:40:57:4a:21:0f:53:7d:55:86:14:ef:
7d:09:98:6e:9e:f1:ca:ff:a8:c2:fc:83:57:dc:61:
a4:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:3F:D8:FE:97:D3:70:F9:D9:97:37:A6:56:02:F5:86:55:CB:CD:0F
X509v3 Authority Key Identifier:
keyid:4C:51:63:6F:DE:90:5F:85:21:F4:11:47:9E:81:32:1C:DC:F4:90:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TFFjb96QX4Uh9BFHnoEyHNz0kEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/8008fe-175b-41bf-b1d6-2ce0eb458788/1/TFFjb96QX4Uh9BFHnoEyHNz0kEk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/8008fe-175b-41bf-b1d6-2ce0eb458788/1/TFFjb96QX4Uh9BFHnoEyHNz0kEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:1b:a2:c3:7b:e0:64:cb:19:63:b0:58:80:09:ec:bc:4f:99:
ca:2b:6c:02:5e:83:6c:28:82:1b:20:c1:b8:7c:19:c7:c9:bb:
bd:5b:10:42:3a:74:c8:f9:54:5e:38:23:66:47:5b:51:a2:da:
af:86:15:7c:b5:68:d3:28:eb:99:11:f1:03:17:ee:dc:2a:ba:
25:3a:88:92:c5:fc:c6:b9:ba:99:2b:f5:4c:08:08:13:33:0f:
10:e7:e3:4c:dd:c6:f2:6a:45:e4:99:ed:4b:18:9a:19:73:42:
99:7c:5a:b8:9e:7b:aa:b4:3f:53:09:5e:d0:98:bd:c8:48:0d:
9d:cd:59:4d:9f:6c:59:48:fc:9b:7b:65:81:53:38:1e:a7:e7:
c5:d9:40:f3:9d:f2:9d:f4:46:d3:15:e3:c5:5d:10:1d:4f:dd:
dc:63:ae:6a:71:9f:b4:95:e0:d8:33:13:46:8d:eb:b0:17:29:
3f:47:c9:f0:b0:22:1c:85:6b:13:60:15:2a:f6:c2:75:e1:71:
bd:b5:4e:e6:39:33:c5:6a:2b:02:9a:80:5f:6e:94:53:bb:53:
14:41:6a:23:cd:5d:8f:ef:71:f8:6b:fd:df:c3:90:0f:c3:e8:
15:df:de:4b:f0:9d:b7:eb:d7:0d:62:68:c1:ef:8b:c3:c0:b2:
5a:19:41:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 04:09:39 2026 by rpki-client