Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/b737f6-304b-4c4f-b887-71108258f1b9/1/TT9U8wTmuFFgjCk5eLFrpRrANQ4.mft
File: TT9U8wTmuFFgjCk5eLFrpRrANQ4.mft (raw, json)
Hash identifier: KOf4kPgI4AVrNRjZVRGUKdR8QkyDT7IGTU3c+VeVEkg=
Subject key identifier: B5:7D:C6:B7:89:D9:55:F0:1C:38:3C:4B:8E:19:88:CC:B3:AD:E7:63
Authority key identifier: 4D:3F:54:F3:04:E6:B8:51:60:8C:29:39:78:B1:6B:A5:1A:C0:35:0E
Certificate issuer: /CN=4d3f54f304e6b851608c293978b16ba51ac0350e
Certificate serial: 019D2816C40CC381528BBC3895EF0CE6EE35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TT9U8wTmuFFgjCk5eLFrpRrANQ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/b737f6-304b-4c4f-b887-71108258f1b9/1/TT9U8wTmuFFgjCk5eLFrpRrANQ4.mft
Manifest number: 1888
Signing time: Thu 26 Mar 2026 03:01:13 +0000
Manifest this update: Thu 26 Mar 2026 03:01:13 +0000
Manifest next update: Fri 27 Mar 2026 03:01:13 +0000
Files and hashes: 1: TT9U8wTmuFFgjCk5eLFrpRrANQ4.crl (hash: 5W99EyK+nJlf9jLXXYDwHNfj2i54HEErSdcF3a6Y3Ic=)
2: kJ79XeVCgRV25HKpL8ktREfXHlw.roa (hash: 7gNr/5O63l4yUAcolVBkp40kuH2WYLPsyzzPi2c2gEI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/b737f6-304b-4c4f-b887-71108258f1b9/1/TT9U8wTmuFFgjCk5eLFrpRrANQ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/b737f6-304b-4c4f-b887-71108258f1b9/1/TT9U8wTmuFFgjCk5eLFrpRrANQ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/TT9U8wTmuFFgjCk5eLFrpRrANQ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:c4:0c:c3:81:52:8b:bc:38:95:ef:0c:e6:ee:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d3f54f304e6b851608c293978b16ba51ac0350e
Validity
Not Before: Mar 26 03:01:13 2026 GMT
Not After : Mar 27 03:01:13 2026 GMT
Subject: CN=b57dc6b789d955f01c383c4b8e1988ccb3ade763
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:fc:cc:a8:a5:95:83:42:1f:83:31:47:eb:8c:
78:11:09:de:5f:f0:cf:51:99:cc:4a:27:4c:ca:bc:
6f:ea:91:a0:08:f0:ca:13:89:68:9d:ca:ca:14:a1:
3e:d5:8b:a0:21:a2:51:1b:92:33:24:ab:96:92:6c:
ba:0d:eb:48:76:af:f1:dd:af:6f:65:f7:1a:65:a8:
f3:94:48:d4:12:bb:09:1f:c6:91:70:95:bb:14:98:
0b:70:56:02:95:f1:b3:dc:6b:50:2a:1e:0a:86:f2:
c5:d0:fe:0d:54:f9:eb:65:96:25:a9:c4:34:af:d9:
93:9c:3d:d4:a5:7a:0f:59:01:88:02:ba:63:ec:17:
4e:d6:42:e3:48:76:f8:08:a0:6e:62:11:2c:48:c3:
ff:bf:8e:7d:fb:5b:0a:bc:34:bd:9c:61:11:56:c7:
12:4d:1d:47:d9:bf:b1:08:0b:6c:88:05:6e:32:61:
61:64:17:f7:50:38:cc:84:9a:79:67:fd:bb:59:cf:
21:68:c3:5e:45:87:94:53:01:78:2e:9a:36:e3:78:
3b:92:4d:cc:62:b6:21:dd:74:ed:32:e0:7f:e0:6d:
21:7b:2e:58:4b:ad:2c:ec:cd:ce:98:e7:e1:fa:4a:
85:f0:a2:0d:15:b7:a1:3b:75:bf:79:4b:0e:f9:45:
49:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:7D:C6:B7:89:D9:55:F0:1C:38:3C:4B:8E:19:88:CC:B3:AD:E7:63
X509v3 Authority Key Identifier:
keyid:4D:3F:54:F3:04:E6:B8:51:60:8C:29:39:78:B1:6B:A5:1A:C0:35:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TT9U8wTmuFFgjCk5eLFrpRrANQ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/b737f6-304b-4c4f-b887-71108258f1b9/1/TT9U8wTmuFFgjCk5eLFrpRrANQ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/b737f6-304b-4c4f-b887-71108258f1b9/1/TT9U8wTmuFFgjCk5eLFrpRrANQ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:48:a8:9c:fd:fe:bf:f2:6f:5f:fb:61:07:77:d2:dd:1a:8d:
4b:e5:54:4e:85:2e:8e:20:a3:72:e0:92:17:8a:4e:81:fe:23:
34:9b:ea:d9:ec:22:c6:33:48:0a:10:de:19:ef:ee:0c:d5:22:
2d:47:61:c3:01:1e:a5:1e:89:60:04:37:68:b8:20:ae:6a:67:
cb:16:1b:b0:4d:cc:06:c5:f1:5d:4f:33:60:74:33:77:43:d4:
f8:8f:6b:02:92:5f:6c:90:3a:f4:85:e7:02:67:04:51:2a:47:
68:40:b1:aa:7f:7b:8a:54:f8:53:53:57:c2:b9:c1:e3:22:1f:
02:99:bf:4d:10:8f:31:19:6c:4f:d2:91:1f:c8:b7:6d:39:e8:
c5:a3:a1:75:84:e0:8d:73:df:fb:6c:2a:84:6a:31:68:3a:03:
7e:b0:d7:c3:ee:5d:3a:83:c5:8a:db:fe:a1:be:1b:38:b3:8b:
18:76:e5:74:25:01:e9:04:9a:32:39:7c:12:f4:9b:cb:75:73:
a9:00:b1:ba:5a:af:4a:15:4b:3f:d6:3f:0e:45:9b:ba:47:84:
15:6d:17:21:41:74:c5:84:82:05:8a:90:64:62:20:7a:9c:91:
03:35:7f:7a:09:a6:93:25:9a:ba:ae:0a:69:ab:da:e8:1f:e1:
5f:80:0c:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:06:47 2026 by rpki-client