
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/3e401b-64c1-41aa-98df-133e7e6f6069/1/TtaClltaFeoMReqF7z20vnFnlpY.mft
File: TtaClltaFeoMReqF7z20vnFnlpY.mft (raw, json)
Hash identifier: 9Z8NsFqP3fx5gciswkutQijwmzUOfhSdBDzh382sNaU=
Subject key identifier: 3F:BF:DD:ED:C1:33:94:5C:8D:89:70:A9:55:E2:B2:E3:A9:D0:11:CE
Authority key identifier: 4E:D6:82:96:5B:5A:15:EA:0C:45:EA:85:EF:3D:B4:BE:71:67:96:96
Certificate issuer: /CN=4ed682965b5a15ea0c45ea85ef3db4be71679696
Certificate serial: 019D3977A32E2F17039738B802E6E7E08A12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TtaClltaFeoMReqF7z20vnFnlpY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/3e401b-64c1-41aa-98df-133e7e6f6069/1/TtaClltaFeoMReqF7z20vnFnlpY.mft
Manifest number: 06B7
Signing time: Sun 29 Mar 2026 12:00:34 +0000
Manifest this update: Sun 29 Mar 2026 12:00:34 +0000
Manifest next update: Mon 30 Mar 2026 12:00:34 +0000
Files and hashes: 1: TtaClltaFeoMReqF7z20vnFnlpY.crl (hash: XiyBSqLRRhAAJeHRgLdPF7WNGsyt/kHtL5v0nKdO3dg=)
2: ccAwFuFoEVY4ZVDtB4ez7EOrJHw.roa (hash: fjcffrvIzn+8rVbXn0+XNf1+negR6a3bRf3n/jGpSFY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/3e401b-64c1-41aa-98df-133e7e6f6069/1/TtaClltaFeoMReqF7z20vnFnlpY.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/3e401b-64c1-41aa-98df-133e7e6f6069/1/TtaClltaFeoMReqF7z20vnFnlpY.mft
rsync://rpki.ripe.net/repository/DEFAULT/TtaClltaFeoMReqF7z20vnFnlpY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 12:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:77:a3:2e:2f:17:03:97:38:b8:02:e6:e7:e0:8a:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ed682965b5a15ea0c45ea85ef3db4be71679696
Validity
Not Before: Mar 29 12:00:34 2026 GMT
Not After : Mar 30 12:00:34 2026 GMT
Subject: CN=3fbfddedc133945c8d8970a955e2b2e3a9d011ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:d2:c3:86:9f:f4:7a:c3:2d:fb:6d:da:3a:e7:
a6:2d:6c:4a:cb:e3:a6:1a:9e:69:b5:1c:46:44:50:
e0:ad:cc:f9:41:9e:cd:4a:4f:9c:09:94:d7:f3:ed:
04:1b:22:76:65:26:ad:d8:87:14:6c:7b:33:8e:06:
6c:ef:8a:f5:27:d4:e1:5d:dc:c1:af:cf:34:8f:e6:
a2:9f:66:2a:00:a9:eb:d3:a4:d8:29:61:a3:1a:f1:
9d:21:ac:6c:69:b3:f4:ab:fc:9a:08:84:e6:1e:27:
51:60:79:07:4c:d4:ee:05:fe:b7:40:d3:a5:6d:18:
27:12:db:02:43:18:a5:2e:4c:ed:30:c0:44:83:36:
47:3e:e6:e4:79:51:4f:a1:38:6c:1e:2d:91:a5:03:
ef:74:04:ec:92:c3:8c:23:b0:92:77:df:25:75:26:
f2:34:e0:0a:4c:77:1b:4d:da:2f:58:9c:2d:f9:ca:
0c:4c:8a:cb:6f:2d:0e:5d:2c:30:da:95:ca:56:c8:
1d:e3:3c:8f:47:d6:46:c5:27:11:9b:64:54:09:57:
da:12:d9:15:27:6b:4a:2c:ce:fe:49:19:bc:9f:11:
0d:88:51:87:6e:4d:4c:90:f1:33:50:dd:b7:66:cc:
ab:c4:85:f4:a9:4b:3c:c7:7b:40:bb:2f:e9:bf:f0:
e1:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:BF:DD:ED:C1:33:94:5C:8D:89:70:A9:55:E2:B2:E3:A9:D0:11:CE
X509v3 Authority Key Identifier:
keyid:4E:D6:82:96:5B:5A:15:EA:0C:45:EA:85:EF:3D:B4:BE:71:67:96:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TtaClltaFeoMReqF7z20vnFnlpY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/3e401b-64c1-41aa-98df-133e7e6f6069/1/TtaClltaFeoMReqF7z20vnFnlpY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/3e401b-64c1-41aa-98df-133e7e6f6069/1/TtaClltaFeoMReqF7z20vnFnlpY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:29:62:5c:17:e7:31:35:53:48:ca:d4:70:57:71:51:7a:0b:
76:6a:a8:57:be:09:ba:69:ec:71:9e:5f:74:7a:6b:53:98:36:
a6:ef:25:f6:f1:53:93:90:a8:e7:24:ca:3a:47:2e:fc:2e:00:
e3:a6:19:d7:44:0a:cd:44:3e:b9:ef:40:59:8e:27:ac:be:57:
86:49:40:64:ef:62:d3:e8:99:6b:10:7a:f8:c0:0b:a6:ee:63:
95:f9:6a:53:d3:7f:22:67:51:37:ca:91:8a:78:82:e6:b9:9e:
3e:68:25:c4:75:9d:6e:dd:c1:ea:b0:7e:0a:a6:1c:50:b9:73:
a4:0e:a9:87:ed:d3:ce:8e:25:0f:43:72:d4:f3:e5:23:5e:37:
d2:b7:03:76:10:26:06:b3:93:72:13:c6:39:38:17:8d:24:14:
53:47:35:3e:65:94:06:65:7b:d7:9c:f8:a9:5b:c8:bb:44:bb:
37:bf:47:1d:da:58:79:dc:48:05:33:d5:b1:58:66:ee:16:66:
5d:ab:16:b1:7e:ba:80:64:9a:3b:41:79:45:36:1c:b6:16:fc:
63:f0:fb:11:7f:90:d1:fe:fe:ba:d5:f4:7f:7d:39:62:20:a2:
04:f7:f2:e1:6c:cd:80:5a:51:4b:2d:ba:da:9d:e4:ea:61:c3:
22:b9:b4:49
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05d6MuLxcDlzi4Aubn4IoSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRlZDY4Mjk2NWI1YTE1ZWEwYzQ1ZWE4NWVmM2RiNGJlNzE2
Nzk2OTYwHhcNMjYwMzI5MTIwMDM0WhcNMjYwMzMwMTIwMDM0WjAzMTEwLwYDVQQD
EygzZmJmZGRlZGMxMzM5NDVjOGQ4OTcwYTk1NWUyYjJlM2E5ZDAxMWNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4tLDhp/0esMt+23aOuemLWxKy+Om
Gp5ptRxGRFDgrcz5QZ7NSk+cCZTX8+0EGyJ2ZSat2IcUbHszjgZs74r1J9ThXdzB
r880j+ain2YqAKnr06TYKWGjGvGdIaxsabP0q/yaCITmHidRYHkHTNTuBf63QNOl
bRgnEtsCQxilLkztMMBEgzZHPubkeVFPoThsHi2RpQPvdATsksOMI7CSd98ldSby
NOAKTHcbTdovWJwt+coMTIrLby0OXSww2pXKVsgd4zyPR9ZGxScRm2RUCVfaEtkV
J2tKLM7+SRm8nxENiFGHbk1MkPEzUN23ZsyrxIX0qUs8x3tAuy/pv/DhawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD+/3e3BM5RcjYlwqVXisuOp0BHOMB8GA1UdIwQY
MBaAFE7WgpZbWhXqDEXqhe89tL5xZ5aWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHRhQ2xsdGFGZW9NUmVxRjd6MjB2bkZubHBZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS8zZTQwMWItNjRjMS00MWFhLTk4ZGYt
MTMzZTdlNmY2MDY5LzEvVHRhQ2xsdGFGZW9NUmVxRjd6MjB2bkZubHBZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OS8zZTQwMWItNjRjMS00MWFhLTk4ZGYtMTMzZTdlNmY2MDY5
LzEvVHRhQ2xsdGFGZW9NUmVxRjd6MjB2bkZubHBZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoiliXBfn
MTVTSMrUcFdxUXoLdmqoV74JumnscZ5fdHprU5g2pu8l9vFTk5Co5yTKOkcu/C4A
46YZ10QKzUQ+ue9AWY4nrL5XhklAZO9i0+iZaxB6+MALpu5jlflqU9N/ImdRN8qR
iniC5rmePmglxHWdbt3B6rB+CqYcULlzpA6ph+3Tzo4lD0Ny1PPlI1430rcDdhAm
BrOTchPGOTgXjSQUU0c1PmWUBmV715z4qVvIu0S7N79HHdpYedxIBTPVsVhm7hZm
XasWsX66gGSaO0F5RTYcthb8Y/D7EX+Q0f7+utX0f305YiCiBPfy4WzNgFpRSy26
2p3k6mHDIrm0SQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 20:45:16 2026 by rpki-client