Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/889608-0f40-4a64-b526-1a26b9d8fede/1/TitqaUPTM40AdQNtlp7AHD3O_Kk.mft
File: TitqaUPTM40AdQNtlp7AHD3O_Kk.mft (raw, json)
Hash identifier: QuCDTIIHQ9tYByGie1VAaBK80RLOC8QzklV+HjNr5sI=
Subject key identifier: FE:09:25:2E:7F:69:47:4C:92:21:67:15:90:31:0E:34:48:BA:48:02
Authority key identifier: 4E:2B:6A:69:43:D3:33:8D:00:75:03:6D:96:9E:C0:1C:3D:CE:FC:A9
Certificate issuer: /CN=4e2b6a6943d3338d0075036d969ec01c3dcefca9
Certificate serial: 019D37897D1C6B707357A77DB0F94A5B1C4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TitqaUPTM40AdQNtlp7AHD3O_Kk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/889608-0f40-4a64-b526-1a26b9d8fede/1/TitqaUPTM40AdQNtlp7AHD3O_Kk.mft
Manifest number: 17D2
Signing time: Sun 29 Mar 2026 03:00:50 +0000
Manifest this update: Sun 29 Mar 2026 03:00:50 +0000
Manifest next update: Mon 30 Mar 2026 03:00:50 +0000
Files and hashes: 1: TitqaUPTM40AdQNtlp7AHD3O_Kk.crl (hash: YFodzo6k/bGie7Nz5XLfkrZQN4cV3vZ/0Nnvg3YWUOY=)
2: ttKN1YCGnceJaCqd8VrVa2V0glc.roa (hash: zV7RvPb6zQACx1fxP6QGuTXEuZbel1F9mgNOA4+EP6k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/889608-0f40-4a64-b526-1a26b9d8fede/1/TitqaUPTM40AdQNtlp7AHD3O_Kk.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/889608-0f40-4a64-b526-1a26b9d8fede/1/TitqaUPTM40AdQNtlp7AHD3O_Kk.mft
rsync://rpki.ripe.net/repository/DEFAULT/TitqaUPTM40AdQNtlp7AHD3O_Kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:7d:1c:6b:70:73:57:a7:7d:b0:f9:4a:5b:1c:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e2b6a6943d3338d0075036d969ec01c3dcefca9
Validity
Not Before: Mar 29 03:00:50 2026 GMT
Not After : Mar 30 03:00:50 2026 GMT
Subject: CN=fe09252e7f69474c9221671590310e3448ba4802
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:75:75:1a:b9:35:b0:be:a2:fa:d0:c8:b8:a6:
cd:a3:16:81:e9:49:31:0a:09:5e:0a:3a:3d:4b:64:
8d:ad:1c:d2:5f:93:b5:f8:99:d0:2a:65:2a:f5:af:
d3:cc:99:24:37:77:fe:6f:25:6f:fe:05:97:b9:e0:
a1:f7:46:83:f8:c1:93:a6:fd:f8:86:de:55:07:10:
74:66:82:ef:26:ed:b1:05:ea:0f:4d:4f:ef:21:ba:
62:ea:60:3d:ee:0d:28:70:50:d5:13:48:13:c0:c4:
d0:cb:07:4b:46:b5:fe:02:31:ad:70:47:d8:6c:3a:
e3:2e:1c:fc:77:5b:29:f3:02:3c:32:80:62:85:8c:
59:db:f2:4d:eb:37:7d:ec:a6:b5:3b:f2:10:9f:16:
e9:84:97:52:8a:1f:bf:c8:55:24:f6:a1:32:a0:3f:
98:73:3d:57:a4:3d:5f:e1:92:d0:25:b7:b2:2f:e6:
aa:1a:6c:f9:2b:a0:78:e1:31:b4:42:d4:c2:09:a3:
5f:eb:4c:47:58:25:58:89:66:f2:98:bb:85:d7:a8:
de:80:ed:14:bb:64:f4:01:d0:ff:5c:24:2a:07:e8:
60:e9:3a:b2:c2:3d:59:0b:bd:fa:57:fe:18:cf:e0:
ee:ee:d8:96:5b:87:b2:8b:0b:25:ef:b9:ce:19:f9:
02:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:09:25:2E:7F:69:47:4C:92:21:67:15:90:31:0E:34:48:BA:48:02
X509v3 Authority Key Identifier:
keyid:4E:2B:6A:69:43:D3:33:8D:00:75:03:6D:96:9E:C0:1C:3D:CE:FC:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TitqaUPTM40AdQNtlp7AHD3O_Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/889608-0f40-4a64-b526-1a26b9d8fede/1/TitqaUPTM40AdQNtlp7AHD3O_Kk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/889608-0f40-4a64-b526-1a26b9d8fede/1/TitqaUPTM40AdQNtlp7AHD3O_Kk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:86:4e:f2:b9:cb:3e:04:72:c8:82:44:96:7e:a9:8a:66:e9:
f1:c4:8d:36:1d:f1:13:75:4c:f0:ae:2f:a2:f2:d4:c3:0e:4d:
66:51:15:0a:a7:cd:42:54:fc:1f:3b:03:38:5a:5b:12:62:f3:
b8:ff:5e:18:ee:53:81:22:78:5a:b3:f2:d9:be:d9:ca:ef:b0:
e9:98:14:1f:c6:2a:7b:39:22:3b:c7:78:db:e9:cf:a6:1d:cf:
32:64:08:98:bb:8e:d5:a8:97:6c:8d:17:54:79:13:fd:d2:33:
f6:b6:ca:34:3f:c5:29:3c:97:7d:b6:1c:e7:8e:84:71:00:cf:
93:77:c1:fa:d4:08:7c:48:22:bf:c2:ee:00:a2:15:cb:70:98:
c5:6c:22:6e:99:7a:cd:11:48:a8:ff:2f:cc:4e:f7:70:2e:60:
68:c2:68:d1:6b:8d:d3:f6:52:35:a8:48:d9:76:4f:07:38:a4:
6e:0e:db:2f:b9:aa:df:f1:55:97:83:18:a9:ab:3c:60:38:49:
a1:b5:ef:74:65:43:25:a9:0d:4e:29:9b:83:ee:4b:05:63:79:
5f:6e:b0:2c:9c:2d:16:37:bf:cb:40:2a:98:de:f6:6c:28:0f:
b4:f6:29:82:43:49:c9:e4:42:2d:a8:65:84:57:bf:5e:40:c4:
b2:6d:a0:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:54:42 2026 by rpki-client