Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6a/74b996-80ee-4c39-8e74-350e681b99d1/1/TtA31O4-XScGWtgDVlgqL9wrSI0.mft
File: TtA31O4-XScGWtgDVlgqL9wrSI0.mft (raw, json)
Hash identifier: 5mYRjm6UbQu2BlZufPjotv22ZB27BRLBfsuFsdvvZaE=
Subject key identifier: E0:4A:09:A7:EB:4A:77:A1:B9:D5:12:1F:D2:B3:8A:B3:F4:F4:60:7C
Authority key identifier: 4E:D0:37:D4:EE:3E:5D:27:06:5A:D8:03:56:58:2A:2F:DC:2B:48:8D
Certificate issuer: /CN=4ed037d4ee3e5d27065ad80356582a2fdc2b488d
Certificate serial: 01A181BE2C6D4060D10967EBD954CD24C33D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TtA31O4-XScGWtgDVlgqL9wrSI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/74b996-80ee-4c39-8e74-350e681b99d1/1/TtA31O4-XScGWtgDVlgqL9wrSI0.mft
Manifest number: 1445
Signing time: Wed 28 Oct 2026 09:01:26 +0000
Manifest this update: Wed 28 Oct 2026 09:01:26 +0000
Manifest next update: Thu 29 Oct 2026 09:01:26 +0000
Files and hashes: 1: TtA31O4-XScGWtgDVlgqL9wrSI0.crl (hash: JC9GGNuj80pyhrDFvF4i4TkEr0saTuIny0BqdMmycxk=)
2: dkZVoeRJR-__79SdUjWpgfrqgX0.roa (hash: hRQs/VOKf6Kl6D61x2oomcbiDqJtvslx7y4t6WRaaHw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/74b996-80ee-4c39-8e74-350e681b99d1/1/TtA31O4-XScGWtgDVlgqL9wrSI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/74b996-80ee-4c39-8e74-350e681b99d1/1/TtA31O4-XScGWtgDVlgqL9wrSI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/TtA31O4-XScGWtgDVlgqL9wrSI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 07:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:81:be:2c:6d:40:60:d1:09:67:eb:d9:54:cd:24:c3:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ed037d4ee3e5d27065ad80356582a2fdc2b488d
Validity
Not Before: Oct 28 09:01:26 2026 GMT
Not After : Oct 29 09:01:26 2026 GMT
Subject: CN=e04a09a7eb4a77a1b9d5121fd2b38ab3f4f4607c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:29:4a:f0:ff:28:ed:50:aa:21:aa:18:d1:45:
4d:03:d9:71:60:f9:65:ba:79:94:54:24:13:1d:b6:
60:19:8e:86:24:e3:d7:0e:8e:f9:83:e8:9a:ad:46:
e2:99:9e:1c:5b:05:ce:4e:52:e8:57:ff:5e:16:9a:
a3:da:de:d1:06:15:70:22:e1:8f:26:2a:10:8c:12:
12:f8:e2:8e:86:33:a7:fe:1d:b1:fb:a1:02:81:3e:
a7:5d:7e:97:d1:6b:8c:34:6e:6a:ae:97:46:82:4b:
5d:57:a4:7c:c0:29:ab:26:aa:5c:b0:87:f6:39:89:
6e:60:39:8f:b7:fc:20:49:84:b6:f9:96:cf:2c:eb:
c9:6f:bd:a1:c8:e5:65:30:8a:72:21:3e:7c:23:1d:
04:8b:a2:45:7c:88:83:f4:7b:be:bc:dd:75:e1:7a:
31:86:a1:c7:47:cf:28:13:17:e2:fa:2a:ee:a1:5d:
4a:fe:e1:72:5e:3a:9c:0d:ab:31:ad:11:c1:3f:5d:
51:ba:7b:e4:68:4a:73:7f:15:62:f4:62:79:68:78:
b1:b6:69:b5:f0:42:b7:81:6a:28:24:31:af:56:ff:
c3:2e:e1:1f:20:ef:e9:5f:8b:b3:e1:d9:2d:b1:57:
93:e2:3d:c0:d4:ff:bc:53:57:f0:d8:fa:b3:b2:82:
6a:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:4A:09:A7:EB:4A:77:A1:B9:D5:12:1F:D2:B3:8A:B3:F4:F4:60:7C
X509v3 Authority Key Identifier:
keyid:4E:D0:37:D4:EE:3E:5D:27:06:5A:D8:03:56:58:2A:2F:DC:2B:48:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TtA31O4-XScGWtgDVlgqL9wrSI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/74b996-80ee-4c39-8e74-350e681b99d1/1/TtA31O4-XScGWtgDVlgqL9wrSI0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/74b996-80ee-4c39-8e74-350e681b99d1/1/TtA31O4-XScGWtgDVlgqL9wrSI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:56:0c:fb:c5:cd:43:75:c5:f1:9b:2a:b3:83:12:03:a2:fa:
14:eb:69:49:d9:80:95:f0:f6:02:7e:3a:c2:b8:03:d9:34:a8:
a1:e0:65:aa:49:24:06:0a:3d:6d:88:8c:48:e3:b7:5a:f4:7f:
11:91:4c:d2:50:c2:91:8b:92:5e:1e:15:5b:ee:1d:59:2d:36:
80:72:97:6a:33:25:e5:ed:4e:e1:2e:71:3d:45:69:a2:29:b6:
85:64:3c:82:3b:03:75:95:88:e5:1d:dc:d7:63:46:f4:05:e5:
53:65:36:a0:3f:f7:25:55:fb:fa:d3:5e:64:f9:b6:20:d4:e9:
9a:77:a2:31:cb:b1:a9:7b:29:16:82:91:8a:7d:74:6a:6d:85:
a9:eb:7e:74:74:39:3b:2a:be:3f:c0:39:ab:e7:0a:42:37:ed:
b8:c7:d1:d7:eb:b9:dc:88:5d:0c:d3:c0:7f:9d:70:df:8e:72:
4d:95:0c:fa:9d:43:0f:df:0a:bd:25:ef:e5:71:83:ce:81:98:
97:1d:d0:6b:53:36:6f:17:11:0a:dd:bc:a3:e0:47:c1:96:b3:
3c:d5:28:7c:85:e8:dd:16:df:55:83:4f:30:18:b4:e8:7b:8b:
38:73:4a:2e:41:60:5c:63:18:88:c1:60:7a:cb:1b:54:b3:d5:
cd:93:39:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 12:53:39 2026 by rpki-client