Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/9d958d-fe88-4bef-8c42-b514d65557c4/1/TtDX7ERt5StwulWVjOKf_0VRLdU.mft
File: TtDX7ERt5StwulWVjOKf_0VRLdU.mft (raw, json)
Hash identifier: /YK+oY25tWKLAiNKLK/T5LCrnGgBANLy0orDVO5gyEQ=
Subject key identifier: B1:DD:43:C2:B8:9F:D4:0D:5B:9F:C5:F9:BE:10:71:D8:29:9B:6B:6B
Authority key identifier: 4E:D0:D7:EC:44:6D:E5:2B:70:BA:55:95:8C:E2:9F:FF:45:51:2D:D5
Certificate issuer: /CN=4ed0d7ec446de52b70ba55958ce29fff45512dd5
Certificate serial: 019D39E5912B55DAD7B008AB234AB8F2D596
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TtDX7ERt5StwulWVjOKf_0VRLdU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/9d958d-fe88-4bef-8c42-b514d65557c4/1/TtDX7ERt5StwulWVjOKf_0VRLdU.mft
Manifest number: 0126
Signing time: Sun 29 Mar 2026 14:00:39 +0000
Manifest this update: Sun 29 Mar 2026 14:00:39 +0000
Manifest next update: Mon 30 Mar 2026 14:00:39 +0000
Files and hashes: 1: TtDX7ERt5StwulWVjOKf_0VRLdU.crl (hash: b3KKx18aaSGvWxu3OL1TVsILIGOA4BOhHEnTbPUfrwA=)
2: o78Yz-Nk6dc1kHrE7Ktx27BYHw8.roa (hash: FxOZqpXBIrVYUuEwZWUjex8BT8GRXefDXhHzG3+iF7E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/9d958d-fe88-4bef-8c42-b514d65557c4/1/TtDX7ERt5StwulWVjOKf_0VRLdU.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/9d958d-fe88-4bef-8c42-b514d65557c4/1/TtDX7ERt5StwulWVjOKf_0VRLdU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TtDX7ERt5StwulWVjOKf_0VRLdU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 14:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:e5:91:2b:55:da:d7:b0:08:ab:23:4a:b8:f2:d5:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ed0d7ec446de52b70ba55958ce29fff45512dd5
Validity
Not Before: Mar 29 14:00:39 2026 GMT
Not After : Mar 30 14:00:39 2026 GMT
Subject: CN=b1dd43c2b89fd40d5b9fc5f9be1071d8299b6b6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:fe:31:1b:c5:f5:d2:b8:2c:04:ac:f1:94:b0:
62:77:c2:12:11:9a:8d:f2:38:a0:57:52:da:c0:0c:
b6:0b:47:e0:34:6f:b6:7d:f8:e0:0e:b2:94:6d:9c:
1f:9d:ee:ad:27:45:d9:2c:50:7a:ca:d8:70:56:e2:
b4:7e:d9:7a:bd:7a:b7:97:18:0a:d3:39:9d:88:1f:
b2:3f:82:1d:96:54:fa:9a:ea:0b:7a:82:dc:f0:48:
30:d3:6d:1d:eb:d1:88:41:4d:06:bc:28:49:5d:e9:
2c:14:b7:94:8a:b5:0b:b8:bd:f9:a7:86:57:fc:d3:
f6:aa:f1:82:e2:ce:db:5a:32:66:01:d4:32:7e:37:
e4:72:7f:36:3d:85:ef:c7:79:c6:a1:99:3b:95:cb:
3f:10:51:96:6e:54:46:e9:2d:81:81:50:76:8e:71:
03:bb:0c:ca:53:27:a5:02:ac:1c:0b:64:0d:cd:9b:
99:ed:b9:63:30:bc:2d:5d:1d:c2:a0:1e:92:8f:59:
d8:9e:1c:c8:10:5d:b9:21:f7:4f:11:2f:a8:c7:e1:
5e:de:41:35:46:8d:77:23:ea:4c:5e:a0:f4:fe:bb:
1e:ff:fd:b7:51:84:7e:82:09:a8:4a:51:7b:e2:45:
85:5d:9c:1b:20:89:00:ae:c7:b3:54:82:67:14:cb:
b0:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:DD:43:C2:B8:9F:D4:0D:5B:9F:C5:F9:BE:10:71:D8:29:9B:6B:6B
X509v3 Authority Key Identifier:
keyid:4E:D0:D7:EC:44:6D:E5:2B:70:BA:55:95:8C:E2:9F:FF:45:51:2D:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TtDX7ERt5StwulWVjOKf_0VRLdU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/9d958d-fe88-4bef-8c42-b514d65557c4/1/TtDX7ERt5StwulWVjOKf_0VRLdU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/9d958d-fe88-4bef-8c42-b514d65557c4/1/TtDX7ERt5StwulWVjOKf_0VRLdU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:35:2d:38:4a:e8:44:2f:55:22:85:79:bb:8e:25:e2:1a:b6:
38:33:0d:42:c1:89:03:fb:8c:5e:91:4e:15:18:1d:a4:d1:55:
4c:98:bf:bd:2d:7b:c5:41:f2:22:93:85:e6:cd:89:3f:23:b6:
ca:d9:8b:74:b1:6d:bd:30:91:7a:5e:46:ed:77:1e:f9:d7:b8:
e8:cf:ae:f8:09:7b:1e:95:33:1e:95:0a:cc:b1:87:05:64:67:
63:8e:97:ce:54:9a:fb:c1:c5:12:ae:b2:7e:70:df:7c:df:f7:
52:79:40:6e:31:42:5b:01:46:6c:e6:75:dd:0c:a4:45:c1:ab:
21:53:44:4d:61:b2:11:40:80:50:45:5b:4c:1b:5e:c6:a5:2a:
c7:ae:d2:ad:76:6e:55:0f:b6:26:88:be:d1:44:11:38:0a:04:
a5:7a:2b:02:25:a1:45:6d:c9:46:6a:e0:80:80:af:22:47:5f:
75:c1:78:55:7b:eb:58:4d:4a:1f:3e:a7:47:9a:97:6e:06:a3:
56:82:14:bd:7f:2a:d0:12:af:a1:77:0e:d8:71:ec:f8:b6:ab:
7b:7d:16:71:49:8a:41:81:86:84:10:7d:ed:ad:86:70:e9:02:
17:72:00:93:e1:94:8b:d9:ae:4f:9d:ac:8e:ec:ac:c0:95:46:
a6:62:82:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 20:47:32 2026 by rpki-client