
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8a/c45a9c-b983-43f6-a449-cd9d6ac801bd/1/TJJlcZbTk2DzIBM49LE4Bbpp4jA.mft
File: TJJlcZbTk2DzIBM49LE4Bbpp4jA.mft (raw, json)
Hash identifier: 9qn9JZ+b40udy4LJmRODBC6PO7zPA5bPdZ+v01/w3E8=
Subject key identifier: 86:75:55:B2:25:A3:1D:FE:DD:E5:CB:B4:1B:04:87:6A:71:46:75:8F
Authority key identifier: 4C:92:65:71:96:D3:93:60:F3:20:13:38:F4:B1:38:05:BA:69:E2:30
Certificate issuer: /CN=4c92657196d39360f3201338f4b13805ba69e230
Certificate serial: 01A0D872360DCBD727CEFBD026BBA88381C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TJJlcZbTk2DzIBM49LE4Bbpp4jA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/c45a9c-b983-43f6-a449-cd9d6ac801bd/1/TJJlcZbTk2DzIBM49LE4Bbpp4jA.mft
Manifest number: B1
Signing time: Fri 25 Sep 2026 12:02:38 +0000
Manifest this update: Fri 25 Sep 2026 12:02:38 +0000
Manifest next update: Sat 26 Sep 2026 12:02:38 +0000
Files and hashes: 1: GsCWehWfuR0Y5YAQxihGBdvrxRg.roa (hash: z7BYtMDbjCrW08d8JA7x90045Wib1Z+pxaVr97f8FKU=)
2: NNYJKSx4PH4wHLznLKSJ_tdSV74.roa (hash: tz4qDyJHR65GtxJWUzlYMsmg6QvJmo2pArNsj2Sgvek=)
3: TJJlcZbTk2DzIBM49LE4Bbpp4jA.crl (hash: vRj3bqSi7pU/pbaFptzawsX5R9eh2iXX8rrRCYhXM48=)
4: luf1YTB9xStV-pMcK9RhrzVtwoI.roa (hash: diCNzTBi/BtQjQQlSYdbD6MqDG03HWPnxAs6lAtK11o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/c45a9c-b983-43f6-a449-cd9d6ac801bd/1/TJJlcZbTk2DzIBM49LE4Bbpp4jA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/c45a9c-b983-43f6-a449-cd9d6ac801bd/1/TJJlcZbTk2DzIBM49LE4Bbpp4jA.mft
rsync://rpki.ripe.net/repository/DEFAULT/TJJlcZbTk2DzIBM49LE4Bbpp4jA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:72:36:0d:cb:d7:27:ce:fb:d0:26:bb:a8:83:81:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c92657196d39360f3201338f4b13805ba69e230
Validity
Not Before: Sep 25 12:02:38 2026 GMT
Not After : Sep 26 12:02:38 2026 GMT
Subject: CN=867555b225a31dfedde5cbb41b04876a7146758f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:dd:01:8e:11:67:7b:12:bf:f1:c0:97:04:93:
01:cf:33:dd:fe:80:72:39:f6:31:2a:23:39:5d:33:
ae:b0:73:c0:d6:de:38:8a:2b:d1:ca:e4:5a:81:d8:
b0:82:7d:0f:1f:6b:a5:03:45:c2:3f:ef:48:20:fc:
c7:62:2b:62:31:5a:3c:f4:50:eb:8e:b0:fe:7e:c6:
ff:3f:15:ac:41:7b:d7:5c:0e:44:51:6b:0b:8d:4a:
c4:b8:27:04:05:70:ca:2f:13:65:04:1d:94:57:b0:
d0:d3:0e:ab:26:ee:34:32:d8:ef:01:72:3f:4e:a5:
4c:5b:f6:19:7a:c5:b0:10:2e:4d:69:61:e1:b5:05:
4f:c3:d1:c8:b4:08:53:90:05:40:d7:70:42:24:35:
9e:27:b9:dc:db:f0:2f:a1:31:68:8d:6f:e0:46:75:
64:71:45:25:79:19:10:54:52:46:a7:5c:32:d2:11:
66:ee:4b:c3:85:57:53:85:ae:e4:b3:83:c6:10:7c:
6b:92:ff:fe:12:58:53:e0:ee:26:df:59:85:e5:4b:
89:ab:bb:6a:e0:31:53:54:c8:0e:71:0f:a7:8b:74:
10:1f:4a:c9:9a:61:6e:ab:10:2a:be:86:9f:40:55:
8d:81:71:0b:08:f8:09:6b:0d:af:4b:30:a8:c0:9e:
0d:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:75:55:B2:25:A3:1D:FE:DD:E5:CB:B4:1B:04:87:6A:71:46:75:8F
X509v3 Authority Key Identifier:
keyid:4C:92:65:71:96:D3:93:60:F3:20:13:38:F4:B1:38:05:BA:69:E2:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TJJlcZbTk2DzIBM49LE4Bbpp4jA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/c45a9c-b983-43f6-a449-cd9d6ac801bd/1/TJJlcZbTk2DzIBM49LE4Bbpp4jA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/c45a9c-b983-43f6-a449-cd9d6ac801bd/1/TJJlcZbTk2DzIBM49LE4Bbpp4jA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:c3:47:3a:07:09:20:4f:5b:60:a2:68:3d:2c:41:a8:7f:1f:
b4:98:68:69:60:18:70:82:e0:9f:63:ea:d1:fe:80:ca:a7:be:
b8:52:fb:c8:71:6f:9f:a4:b6:1c:e2:2a:bf:c7:8a:11:07:a4:
34:94:6b:38:96:21:0a:75:60:7c:a7:9a:af:79:45:69:de:45:
da:5b:ca:84:42:5a:2d:12:bb:51:c0:00:1c:63:08:9b:cf:34:
fd:9d:8d:8d:52:2f:43:92:a1:26:a1:bc:82:4d:c2:b5:0c:46:
89:49:ba:82:61:a1:86:91:f2:81:ea:91:99:3d:1b:13:12:54:
17:87:89:63:b8:b3:05:95:17:92:dc:73:4e:12:9c:96:b5:09:
34:0b:4b:6a:8c:e0:90:7b:ee:d5:16:05:fc:ad:f7:d2:5b:c3:
46:0d:5d:c7:a2:a7:63:a2:fb:9e:30:27:f3:59:70:68:7d:b7:
da:46:89:d8:c9:41:7e:09:d0:fe:7d:3a:18:d8:90:20:be:a6:
fc:56:61:92:92:9f:c8:d3:2c:4e:a0:38:60:67:df:f0:66:32:
f6:fd:7a:4d:bc:62:5b:2e:57:df:55:9e:66:83:9e:ba:40:a3:
c3:61:3f:1d:b4:8e:fb:d8:60:09:f8:fe:a2:74:3e:f9:f2:61:
2c:24:f1:57
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDYcjYNy9cnzvvQJruog4HBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjOTI2NTcxOTZkMzkzNjBmMzIwMTMzOGY0YjEzODA1YmE2
OWUyMzAwHhcNMjYwOTI1MTIwMjM4WhcNMjYwOTI2MTIwMjM4WjAzMTEwLwYDVQQD
Eyg4Njc1NTViMjI1YTMxZGZlZGRlNWNiYjQxYjA0ODc2YTcxNDY3NThmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3t0BjhFnexK/8cCXBJMBzzPd/oBy
OfYxKiM5XTOusHPA1t44iivRyuRagdiwgn0PH2ulA0XCP+9IIPzHYitiMVo89FDr
jrD+fsb/PxWsQXvXXA5EUWsLjUrEuCcEBXDKLxNlBB2UV7DQ0w6rJu40MtjvAXI/
TqVMW/YZesWwEC5NaWHhtQVPw9HItAhTkAVA13BCJDWeJ7nc2/AvoTFojW/gRnVk
cUUleRkQVFJGp1wy0hFm7kvDhVdTha7ks4PGEHxrkv/+ElhT4O4m31mF5UuJq7tq
4DFTVMgOcQ+ni3QQH0rJmmFuqxAqvoafQFWNgXELCPgJaw2vSzCowJ4N8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIZ1VbIlox3+3eXLtBsEh2pxRnWPMB8GA1UdIwQY
MBaAFEySZXGW05Ng8yATOPSxOAW6aeIwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVEpKbGNaYlRrMkR6SUJNNDlMRTRCYnBwNGpBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS9jNDVhOWMtYjk4My00M2Y2LWE0NDkt
Y2Q5ZDZhYzgwMWJkLzEvVEpKbGNaYlRrMkR6SUJNNDlMRTRCYnBwNGpBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS9jNDVhOWMtYjk4My00M2Y2LWE0NDktY2Q5ZDZhYzgwMWJk
LzEvVEpKbGNaYlRrMkR6SUJNNDlMRTRCYnBwNGpBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACcNHOgcJ
IE9bYKJoPSxBqH8ftJhoaWAYcILgn2Pq0f6Ayqe+uFL7yHFvn6S2HOIqv8eKEQek
NJRrOJYhCnVgfKear3lFad5F2lvKhEJaLRK7UcAAHGMIm880/Z2NjVIvQ5KhJqG8
gk3CtQxGiUm6gmGhhpHygeqRmT0bExJUF4eJY7izBZUXktxzThKclrUJNAtLaozg
kHvu1RYF/K330lvDRg1dx6KnY6L7njAn81lwaH232kaJ2MlBfgnQ/n06GNiQIL6m
/FZhkpKfyNMsTqA4YGff8GYy9v16TbxiWy5X31WeZoOeukCjw2E/HbSO+9hgCfj+
onQ++fJhLCTxVw==
-----END CERTIFICATE-----
Generated at Fri Sep 25 17:29:47 2026 by rpki-client