
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/74b996-80ee-4c39-8e74-350e681b99d1/1/TtA31O4-XScGWtgDVlgqL9wrSI0.mft
File: TtA31O4-XScGWtgDVlgqL9wrSI0.mft (raw, json)
Hash identifier: X2m6tS5RCojojl3KohRqavQTsqqBXHN/ep2ejOXUvig=
Subject key identifier: D9:30:54:82:B8:3B:EC:13:29:D8:66:81:98:81:EE:2B:3F:B6:BF:1A
Authority key identifier: 4E:D0:37:D4:EE:3E:5D:27:06:5A:D8:03:56:58:2A:2F:DC:2B:48:8D
Certificate issuer: /CN=4ed037d4ee3e5d27065ad80356582a2fdc2b488d
Certificate serial: 019CC30558AF182AAE923578FCD2BE5301B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TtA31O4-XScGWtgDVlgqL9wrSI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/74b996-80ee-4c39-8e74-350e681b99d1/1/TtA31O4-XScGWtgDVlgqL9wrSI0.mft
Manifest number: 11D0
Signing time: Fri 06 Mar 2026 12:00:33 +0000
Manifest this update: Fri 06 Mar 2026 12:00:33 +0000
Manifest next update: Sat 07 Mar 2026 12:00:33 +0000
Files and hashes: 1: TtA31O4-XScGWtgDVlgqL9wrSI0.crl (hash: GRkYMj+TG7UgeEZxMSVuM0euOuoZebo4aiNuVAqUzYc=)
2: dkZVoeRJR-__79SdUjWpgfrqgX0.roa (hash: hRQs/VOKf6Kl6D61x2oomcbiDqJtvslx7y4t6WRaaHw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/74b996-80ee-4c39-8e74-350e681b99d1/1/TtA31O4-XScGWtgDVlgqL9wrSI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/74b996-80ee-4c39-8e74-350e681b99d1/1/TtA31O4-XScGWtgDVlgqL9wrSI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/TtA31O4-XScGWtgDVlgqL9wrSI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Mar 2026 10:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:c3:05:58:af:18:2a:ae:92:35:78:fc:d2:be:53:01:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ed037d4ee3e5d27065ad80356582a2fdc2b488d
Validity
Not Before: Mar 6 12:00:33 2026 GMT
Not After : Mar 7 12:00:33 2026 GMT
Subject: CN=d9305482b83bec1329d866819881ee2b3fb6bf1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:73:5e:ac:4b:9f:3c:ef:e0:55:9e:e1:be:95:
65:c1:9f:51:46:39:68:ff:b0:bd:cd:70:24:06:c5:
67:d4:ef:fb:b8:b6:9e:65:e3:0b:ac:5f:1c:61:e0:
ed:8a:bf:91:9b:e4:ec:30:39:42:22:9f:36:17:99:
29:d3:9e:d5:4c:02:d7:d4:1c:87:c3:e4:9e:be:f9:
33:e4:ac:e7:d1:2c:37:1a:03:82:14:84:d7:37:74:
0b:35:fc:82:7f:23:66:a9:1a:d9:91:7a:18:72:fb:
dd:be:69:c9:e7:7e:8e:02:39:dd:fa:ee:e0:cf:5a:
53:bc:5b:1e:98:71:06:06:ae:13:af:1f:45:81:66:
ee:fd:ef:6d:ed:ed:8f:89:93:b7:2a:c7:08:37:77:
3f:be:6e:06:a0:e8:68:0b:31:c9:32:f1:3e:9d:f0:
12:c4:3b:b6:91:83:13:a7:ca:77:16:42:b4:d8:e4:
0b:4e:60:09:a9:d8:b3:93:d4:f6:ac:f1:8c:95:3a:
0f:78:d1:b7:67:83:69:e4:4f:c3:13:25:f7:b4:bb:
fd:c8:07:e7:f5:96:54:41:23:1b:58:1c:0e:65:17:
81:54:2d:3c:da:35:98:03:cf:5d:85:ad:0d:a4:59:
1a:ba:fd:ce:e4:7d:93:92:8c:ea:27:e6:bf:1a:36:
62:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:30:54:82:B8:3B:EC:13:29:D8:66:81:98:81:EE:2B:3F:B6:BF:1A
X509v3 Authority Key Identifier:
keyid:4E:D0:37:D4:EE:3E:5D:27:06:5A:D8:03:56:58:2A:2F:DC:2B:48:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TtA31O4-XScGWtgDVlgqL9wrSI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/74b996-80ee-4c39-8e74-350e681b99d1/1/TtA31O4-XScGWtgDVlgqL9wrSI0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/74b996-80ee-4c39-8e74-350e681b99d1/1/TtA31O4-XScGWtgDVlgqL9wrSI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:c7:c9:e8:df:d8:da:c0:30:65:9e:20:ab:c1:3c:df:6c:db:
c5:39:44:25:e4:89:f8:b9:30:b5:fe:a9:18:09:50:0b:53:ca:
09:cc:36:01:ca:02:f4:a4:0d:95:03:55:1d:99:e8:22:60:95:
3c:6c:a2:77:43:47:53:ce:cf:a3:de:e2:71:31:a8:89:36:13:
11:8f:d7:d6:88:a5:1a:97:96:3d:a8:1e:69:2b:ca:01:19:eb:
c3:f7:79:0a:fa:3a:1c:60:01:0c:1c:4c:c6:1c:5f:b1:4e:bc:
49:d5:0f:cb:d0:38:f1:68:c0:7e:2b:32:af:45:44:ab:f4:2b:
a4:8a:7b:cd:ae:64:48:41:b9:53:76:15:b3:07:f8:93:96:ac:
c3:de:44:ee:98:4a:1a:ef:b1:35:0d:47:5f:4f:a5:15:9b:b6:
51:b3:c5:3d:ef:94:01:e1:d1:bc:00:23:ce:06:67:a2:fe:da:
06:94:4b:23:5e:eb:9e:d5:9d:a8:ba:53:29:fd:fb:33:d2:ca:
eb:5d:a3:ce:1c:22:a9:fa:d6:5f:13:3c:05:f1:a7:1e:a8:4a:
2b:45:4c:e8:72:ed:4f:6f:b2:dd:6e:9c:8f:64:f3:8a:db:8f:
84:9c:83:10:9b:d4:e9:1b:5e:51:0b:52:62:4d:61:dc:ee:5c:
8e:a6:cd:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 6 20:22:07 2026 by rpki-client