Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/b737f6-304b-4c4f-b887-71108258f1b9/1/TT9U8wTmuFFgjCk5eLFrpRrANQ4.mft
File: TT9U8wTmuFFgjCk5eLFrpRrANQ4.mft (raw, json)
Hash identifier: 8MJNckNFFwvKVnmpClg4o7JkVVntLK5NQReXyeIbxsg=
Subject key identifier: 29:3F:74:50:12:0B:CB:B1:58:27:6C:37:A1:6A:41:69:82:67:C3:28
Authority key identifier: 4D:3F:54:F3:04:E6:B8:51:60:8C:29:39:78:B1:6B:A5:1A:C0:35:0E
Certificate issuer: /CN=4d3f54f304e6b851608c293978b16ba51ac0350e
Certificate serial: 019F93FFFFAE7DE844483F1F3C7FF47C081D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TT9U8wTmuFFgjCk5eLFrpRrANQ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/b737f6-304b-4c4f-b887-71108258f1b9/1/TT9U8wTmuFFgjCk5eLFrpRrANQ4.mft
Manifest number: 19C9
Signing time: Fri 24 Jul 2026 12:00:55 +0000
Manifest this update: Fri 24 Jul 2026 12:00:55 +0000
Manifest next update: Sat 25 Jul 2026 12:00:55 +0000
Files and hashes: 1: TT9U8wTmuFFgjCk5eLFrpRrANQ4.crl (hash: xdyPl7+1vGshbkXx5F6tYsZfT3CS1vcY+t+UsC1HHhU=)
2: kJ79XeVCgRV25HKpL8ktREfXHlw.roa (hash: 7gNr/5O63l4yUAcolVBkp40kuH2WYLPsyzzPi2c2gEI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/b737f6-304b-4c4f-b887-71108258f1b9/1/TT9U8wTmuFFgjCk5eLFrpRrANQ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/b737f6-304b-4c4f-b887-71108258f1b9/1/TT9U8wTmuFFgjCk5eLFrpRrANQ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/TT9U8wTmuFFgjCk5eLFrpRrANQ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:ff:ff:ae:7d:e8:44:48:3f:1f:3c:7f:f4:7c:08:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d3f54f304e6b851608c293978b16ba51ac0350e
Validity
Not Before: Jul 24 12:00:55 2026 GMT
Not After : Jul 25 12:00:55 2026 GMT
Subject: CN=293f7450120bcbb158276c37a16a41698267c328
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:8a:2b:9f:81:e3:0f:7f:ba:63:a8:d9:c6:2a:
f6:e4:9b:d4:6a:e7:6a:66:77:fb:eb:22:18:9b:ac:
d7:f1:57:ce:bc:02:7a:9e:62:38:0a:0b:3e:0d:31:
ca:05:c9:09:75:21:62:55:db:14:85:ca:d4:6d:9a:
ec:a8:30:cb:33:04:1f:56:02:42:bc:be:67:2b:be:
15:7c:ea:de:5b:3a:41:41:75:55:20:0d:04:72:41:
a8:45:78:ae:d4:85:4f:51:13:26:ce:2a:99:de:c1:
9f:d6:de:fb:0f:12:1d:c1:0d:71:6a:19:e3:8d:5f:
91:90:fb:bd:70:e6:e7:d4:a2:0a:bd:d5:c4:2d:79:
35:6e:67:96:44:3e:2a:a7:29:68:48:bf:ac:7a:b4:
40:64:e0:24:ee:ef:33:8c:5b:a4:52:cc:bb:87:64:
be:a0:e1:24:a2:89:67:fc:00:b7:e5:43:40:b0:41:
8f:08:d5:0f:e3:98:04:bf:88:19:21:75:89:45:7a:
37:69:3e:bc:59:c4:11:31:05:e1:e7:8b:4c:b2:79:
57:0a:98:69:4e:35:d3:c1:c3:99:72:0d:a2:a3:96:
af:8f:58:f7:ff:e5:a0:21:13:c6:87:ca:50:58:3b:
6b:fc:6e:c8:ce:d3:7b:bf:62:05:53:3c:0e:fa:99:
c7:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:3F:74:50:12:0B:CB:B1:58:27:6C:37:A1:6A:41:69:82:67:C3:28
X509v3 Authority Key Identifier:
keyid:4D:3F:54:F3:04:E6:B8:51:60:8C:29:39:78:B1:6B:A5:1A:C0:35:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TT9U8wTmuFFgjCk5eLFrpRrANQ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/b737f6-304b-4c4f-b887-71108258f1b9/1/TT9U8wTmuFFgjCk5eLFrpRrANQ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/b737f6-304b-4c4f-b887-71108258f1b9/1/TT9U8wTmuFFgjCk5eLFrpRrANQ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:14:bd:3f:86:e9:33:5f:71:71:38:88:0e:d5:c4:e3:a7:fd:
f0:8f:e6:58:01:ed:b2:86:80:09:45:ab:37:db:bf:78:17:c3:
5c:f3:48:e6:08:36:d5:95:a0:92:0f:a3:1c:f8:ed:ce:f4:3e:
28:c6:89:5c:fb:76:ce:6b:90:d3:8a:8f:6e:b8:af:78:9b:57:
67:3f:19:79:f8:3c:53:b2:7e:23:11:2f:2d:7a:17:e0:55:73:
c7:d5:44:90:96:0b:6a:dc:5a:cf:9a:7b:21:ea:dd:09:13:b0:
7a:e9:00:6c:0e:3b:16:72:99:1f:6c:db:56:a2:c7:34:09:7e:
37:10:80:78:66:8e:8a:e3:1e:89:20:35:7a:4c:e9:a8:68:37:
ca:cd:30:16:65:73:58:fb:fe:84:ca:8a:b2:ff:06:dc:b7:c3:
65:2b:fc:d4:45:d8:7d:1c:c9:13:da:52:d3:8a:ed:aa:60:3c:
8f:ce:9b:dd:9c:ec:d9:00:7f:b9:b7:76:3a:36:4f:6e:68:12:
c5:6f:a7:46:78:92:0d:46:4e:a8:bf:38:be:2e:f0:2e:e8:62:
33:ba:79:28:d8:bc:6d:00:44:64:dd:65:c3:d1:c6:a9:f7:48:
ab:80:13:fd:fa:62:1b:b9:16:ad:5b:10:af:08:9b:c6:e6:a7:
6f:82:92:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:57:52 2026 by rpki-client