Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/35bee9-843f-4d38-9286-7aa49becf467/1/Tt5MZdc1r3knftFOtsTPVATHiNU.mft
File: Tt5MZdc1r3knftFOtsTPVATHiNU.mft (raw, json)
Hash identifier: HSF3jhWn4LVl8K7lHBbmJVz3psJaLCYzi8EkSksaK9k=
Subject key identifier: E2:2F:F7:A6:C6:08:99:7D:5D:12:9D:1A:DD:37:CE:43:65:57:EB:92
Authority key identifier: 4E:DE:4C:65:D7:35:AF:79:27:7E:D1:4E:B6:C4:CF:54:04:C7:88:D5
Certificate issuer: /CN=4ede4c65d735af79277ed14eb6c4cf5404c788d5
Certificate serial: 019D371BFE02F06F84A92C74CC918E88A224
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tt5MZdc1r3knftFOtsTPVATHiNU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/35bee9-843f-4d38-9286-7aa49becf467/1/Tt5MZdc1r3knftFOtsTPVATHiNU.mft
Manifest number: 0ACF
Signing time: Sun 29 Mar 2026 01:01:14 +0000
Manifest this update: Sun 29 Mar 2026 01:01:14 +0000
Manifest next update: Mon 30 Mar 2026 01:01:14 +0000
Files and hashes: 1: TdYAourfzXro8X37Y0IoM8aZBEo.roa (hash: gZYndkQ6uGvgPeqwt5brtKCHj9NVuSxL2FUpX4xFOEs=)
2: Tt5MZdc1r3knftFOtsTPVATHiNU.crl (hash: 5oRJp20wxXHkkTuEcW1wx1MoW+ENMsUBJ+fu0H+f27U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/35bee9-843f-4d38-9286-7aa49becf467/1/Tt5MZdc1r3knftFOtsTPVATHiNU.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/35bee9-843f-4d38-9286-7aa49becf467/1/Tt5MZdc1r3knftFOtsTPVATHiNU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tt5MZdc1r3knftFOtsTPVATHiNU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 01:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:1b:fe:02:f0:6f:84:a9:2c:74:cc:91:8e:88:a2:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ede4c65d735af79277ed14eb6c4cf5404c788d5
Validity
Not Before: Mar 29 01:01:14 2026 GMT
Not After : Mar 30 01:01:14 2026 GMT
Subject: CN=e22ff7a6c608997d5d129d1add37ce436557eb92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:ed:d2:5e:56:e3:39:5a:5e:96:cf:e9:ce:61:
0b:33:61:9c:b2:01:4c:c1:51:25:29:a8:e8:84:36:
e0:55:52:4c:82:1f:d8:dc:64:e0:b5:92:a4:7f:66:
85:99:04:e9:6e:b8:fc:9a:bd:59:70:55:ff:75:e3:
49:04:10:ad:64:35:43:a3:3d:99:c6:5e:f7:bd:1d:
64:ba:94:13:be:1e:de:61:35:f3:ee:0d:96:49:7a:
cc:68:98:eb:06:a9:38:ed:46:bd:e5:7f:81:ea:0d:
12:43:b1:9c:0f:61:fa:b1:1d:37:92:44:77:ac:79:
1a:d3:cb:3f:db:c5:5a:d4:bf:dd:10:3d:f4:a5:f6:
de:be:8f:35:b0:52:d7:f2:89:99:45:66:d3:b5:15:
e1:44:0f:61:77:b8:b6:c7:f4:ac:3f:d0:1b:c7:d4:
b3:70:aa:9e:d5:95:b8:52:a6:ef:b0:78:12:7a:b8:
bf:da:f9:ec:05:15:e8:a3:49:07:3b:cb:55:5f:96:
a9:4a:c9:27:ea:aa:83:35:d5:a0:62:27:2e:86:01:
b8:d9:ee:93:f5:fd:0a:43:c5:d3:d9:b4:6a:c1:8a:
5d:12:5c:8c:ad:dd:d8:28:1d:b8:51:25:32:18:52:
d7:a8:30:5d:af:9a:71:86:a3:87:d4:14:2b:fb:f3:
d3:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:2F:F7:A6:C6:08:99:7D:5D:12:9D:1A:DD:37:CE:43:65:57:EB:92
X509v3 Authority Key Identifier:
keyid:4E:DE:4C:65:D7:35:AF:79:27:7E:D1:4E:B6:C4:CF:54:04:C7:88:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tt5MZdc1r3knftFOtsTPVATHiNU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/35bee9-843f-4d38-9286-7aa49becf467/1/Tt5MZdc1r3knftFOtsTPVATHiNU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/35bee9-843f-4d38-9286-7aa49becf467/1/Tt5MZdc1r3knftFOtsTPVATHiNU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:54:52:c7:ae:61:81:2d:ae:a7:7b:84:69:0a:6f:d4:cd:ed:
eb:62:8d:81:6b:c4:44:c1:d2:92:14:0f:87:db:bf:6a:9a:5c:
b5:7e:51:e2:9d:f3:8b:50:ee:61:94:bd:53:25:1e:39:7c:5a:
33:c3:e2:bb:be:94:b6:22:a8:15:64:54:6c:a2:01:3c:01:5c:
c7:f6:69:a7:88:a2:c0:0d:00:df:91:a1:5e:07:85:dd:14:01:
e8:57:1b:ba:7a:cc:07:ef:7c:75:cb:7c:88:85:eb:03:1b:8f:
bb:90:a6:9d:cd:41:97:68:2b:2e:ba:74:60:7f:4d:99:36:b6:
c0:35:79:ca:e5:a9:a0:9a:38:0c:f2:e7:dc:25:ce:2d:a7:24:
71:d6:de:6c:f9:c5:f4:e7:f6:b2:55:d6:09:e4:87:72:06:36:
18:e5:d9:ed:02:fa:8d:3b:f1:50:e3:68:fc:0a:9a:e9:6b:ff:
95:71:aa:a0:b8:34:41:a5:a6:7f:b7:d9:e5:38:ce:2b:eb:80:
15:b7:9e:9f:4f:db:45:a2:f3:ec:44:7c:52:27:9c:6a:5e:2a:
d1:23:d6:9e:8c:b1:78:68:2e:8a:7d:4b:c3:3b:36:62:e2:4c:
2b:43:5b:87:93:6f:5c:f7:b8:f2:e2:78:3d:30:f0:4a:89:5b:
64:64:a3:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:30:55 2026 by rpki-client