Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bd/b737f6-304b-4c4f-b887-71108258f1b9/1/TT9U8wTmuFFgjCk5eLFrpRrANQ4.mft
File: TT9U8wTmuFFgjCk5eLFrpRrANQ4.mft (raw, json)
Hash identifier: 8dfWCAT7Cj6UH+CaZw0QJL7IRMbrDAhQhBLWrctNjvM=
Subject key identifier: FE:6D:4D:17:DB:9E:6B:50:F8:4F:7D:63:56:15:7C:95:A8:9E:08:AB
Authority key identifier: 4D:3F:54:F3:04:E6:B8:51:60:8C:29:39:78:B1:6B:A5:1A:C0:35:0E
Certificate issuer: /CN=4d3f54f304e6b851608c293978b16ba51ac0350e
Certificate serial: 01A0DC4DE68CE3EA5A288425CBC9DAF5BAE9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TT9U8wTmuFFgjCk5eLFrpRrANQ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/b737f6-304b-4c4f-b887-71108258f1b9/1/TT9U8wTmuFFgjCk5eLFrpRrANQ4.mft
Manifest number: 1A73
Signing time: Sat 26 Sep 2026 06:01:27 +0000
Manifest this update: Sat 26 Sep 2026 06:01:27 +0000
Manifest next update: Sun 27 Sep 2026 06:01:27 +0000
Files and hashes: 1: TT9U8wTmuFFgjCk5eLFrpRrANQ4.crl (hash: 6mhp13zd+MtdOFtOrb7wu/+x2CJ4bYrygEVM5lADgbI=)
2: kJ79XeVCgRV25HKpL8ktREfXHlw.roa (hash: 7gNr/5O63l4yUAcolVBkp40kuH2WYLPsyzzPi2c2gEI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/b737f6-304b-4c4f-b887-71108258f1b9/1/TT9U8wTmuFFgjCk5eLFrpRrANQ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/b737f6-304b-4c4f-b887-71108258f1b9/1/TT9U8wTmuFFgjCk5eLFrpRrANQ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/TT9U8wTmuFFgjCk5eLFrpRrANQ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dc:4d:e6:8c:e3:ea:5a:28:84:25:cb:c9:da:f5:ba:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d3f54f304e6b851608c293978b16ba51ac0350e
Validity
Not Before: Sep 26 06:01:27 2026 GMT
Not After : Sep 27 06:01:27 2026 GMT
Subject: CN=fe6d4d17db9e6b50f84f7d6356157c95a89e08ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:21:d6:e7:d1:2d:3f:55:e9:7a:d9:61:12:e6:
a0:45:4c:79:75:bf:de:3d:48:d2:28:2c:c3:50:40:
8a:b2:c9:44:76:50:35:9e:78:ff:6e:88:b5:e2:63:
7e:ed:4b:a9:11:5c:8a:aa:d2:ca:ab:73:18:45:11:
05:7e:47:77:fe:da:18:14:04:d1:fe:ce:93:61:2d:
e2:fe:b0:d3:ad:0b:49:87:70:1f:c2:08:ba:03:23:
07:16:da:5c:3f:39:bf:dc:fd:ee:82:87:6e:68:44:
68:53:b9:4f:03:ca:f4:58:d6:8f:45:7b:1d:42:38:
24:6e:27:1f:5d:ea:9a:02:16:fc:41:f5:96:19:a9:
62:a2:77:1d:53:0c:cd:a2:9a:13:54:1f:ea:cc:a5:
bc:90:c7:ca:4a:a4:a6:cd:a0:f0:4b:28:32:42:05:
07:0a:c7:de:f8:94:2f:17:b8:13:e0:a3:72:f1:f1:
72:b7:96:6e:b5:54:61:7e:21:06:d5:41:9e:5c:9e:
e9:b0:6d:9d:78:d2:a4:de:2b:2a:7f:d6:1f:b6:2f:
35:54:8e:29:93:a6:d6:75:df:08:68:79:7e:8f:24:
14:e5:0c:e1:63:e6:e7:5e:c5:94:9e:58:32:fd:1d:
23:f9:02:c3:7b:7f:d1:3d:1a:fc:77:0b:c8:fe:bd:
f3:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:6D:4D:17:DB:9E:6B:50:F8:4F:7D:63:56:15:7C:95:A8:9E:08:AB
X509v3 Authority Key Identifier:
keyid:4D:3F:54:F3:04:E6:B8:51:60:8C:29:39:78:B1:6B:A5:1A:C0:35:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TT9U8wTmuFFgjCk5eLFrpRrANQ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/b737f6-304b-4c4f-b887-71108258f1b9/1/TT9U8wTmuFFgjCk5eLFrpRrANQ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/b737f6-304b-4c4f-b887-71108258f1b9/1/TT9U8wTmuFFgjCk5eLFrpRrANQ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:09:9e:ef:aa:04:bb:2f:7a:b8:49:00:54:fd:bc:78:8b:f7:
26:cf:31:0f:d9:ad:f0:49:23:45:c3:f8:45:6e:85:d3:e3:30:
df:51:f0:5f:96:41:b6:c8:49:ee:af:8a:9d:76:9e:60:ac:0f:
58:60:4c:4b:87:d6:8e:a8:c1:26:57:c8:45:c5:f7:e5:32:57:
e0:53:49:50:5b:76:4c:5c:cc:39:5d:78:84:1c:c9:75:e7:25:
a8:5a:1a:80:74:c7:0a:f4:0b:b1:e8:bd:6c:04:fa:8d:87:18:
b4:5c:da:29:b1:ed:a4:fe:1e:ca:ec:a9:75:78:98:21:2c:7e:
26:04:bc:df:0a:8e:d9:bc:f0:32:4a:9e:3f:48:28:e9:74:28:
17:59:b3:3d:c7:3e:b1:29:7c:af:71:86:74:98:00:21:21:7c:
64:2b:d6:06:54:f7:a3:0f:85:29:6f:dd:08:47:f8:e4:2f:38:
90:b8:0c:f4:45:d9:82:b7:3a:7b:a3:53:e6:0a:ed:c0:e2:d9:
8e:51:ff:32:41:89:b0:78:11:33:51:2b:83:5c:6d:89:ae:c8:
75:29:fd:57:c0:c6:8f:14:66:d1:0f:8e:85:e3:4e:0e:b5:41:
0c:30:c9:32:3e:94:a1:9f:25:ee:41:af:bf:f8:70:b1:77:53:
24:55:f9:d5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDcTeaM4+paKIQly8na9brpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRkM2Y1NGYzMDRlNmI4NTE2MDhjMjkzOTc4YjE2YmE1MWFj
MDM1MGUwHhcNMjYwOTI2MDYwMTI3WhcNMjYwOTI3MDYwMTI3WjAzMTEwLwYDVQQD
EyhmZTZkNGQxN2RiOWU2YjUwZjg0ZjdkNjM1NjE1N2M5NWE4OWUwOGFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoiHW59EtP1XpetlhEuagRUx5db/e
PUjSKCzDUECKsslEdlA1nnj/boi14mN+7UupEVyKqtLKq3MYRREFfkd3/toYFATR
/s6TYS3i/rDTrQtJh3Afwgi6AyMHFtpcPzm/3P3ugoduaERoU7lPA8r0WNaPRXsd
QjgkbicfXeqaAhb8QfWWGalioncdUwzNopoTVB/qzKW8kMfKSqSmzaDwSygyQgUH
Csfe+JQvF7gT4KNy8fFyt5ZutVRhfiEG1UGeXJ7psG2deNKk3isqf9Yfti81VI4p
k6bWdd8IaHl+jyQU5QzhY+bnXsWUnlgy/R0j+QLDe3/RPRr8dwvI/r3zgwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP5tTRfbnmtQ+E99Y1YVfJWongirMB8GA1UdIwQY
MBaAFE0/VPME5rhRYIwpOXixa6UawDUOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVFQ5VTh3VG11RkZnakNrNWVMRnJwUnJBTlE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC9iNzM3ZjYtMzA0Yi00YzRmLWI4ODct
NzExMDgyNThmMWI5LzEvVFQ5VTh3VG11RkZnakNrNWVMRnJwUnJBTlE0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZC9iNzM3ZjYtMzA0Yi00YzRmLWI4ODctNzExMDgyNThmMWI5
LzEvVFQ5VTh3VG11RkZnakNrNWVMRnJwUnJBTlE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPQme76oE
uy96uEkAVP28eIv3Js8xD9mt8EkjRcP4RW6F0+Mw31HwX5ZBtshJ7q+KnXaeYKwP
WGBMS4fWjqjBJlfIRcX35TJX4FNJUFt2TFzMOV14hBzJdeclqFoagHTHCvQLsei9
bAT6jYcYtFzaKbHtpP4eyuypdXiYISx+JgS83wqO2bzwMkqeP0go6XQoF1mzPcc+
sSl8r3GGdJgAISF8ZCvWBlT3ow+FKW/dCEf45C84kLgM9EXZgrc6e6NT5grtwOLZ
jlH/MkGJsHgRM1Erg1xtia7IdSn9V8DGjxRm0Q+OheNODrVBDDDJMj6UoZ8l7kGv
v/hwsXdTJFX51Q==
-----END CERTIFICATE-----
Generated at Sat Sep 26 12:42:09 2026 by rpki-client