Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6a/74b996-80ee-4c39-8e74-350e681b99d1/1/TtA31O4-XScGWtgDVlgqL9wrSI0.mft
File: TtA31O4-XScGWtgDVlgqL9wrSI0.mft (raw, json)
Hash identifier: T+82W/B1ulAUZWUvpEI5sLQnFdFBDea0LyH4Cit8ieU=
Subject key identifier: 6C:CB:DB:52:7E:F1:1F:48:30:1A:D6:DC:91:5D:75:5A:2E:41:00:F0
Authority key identifier: 4E:D0:37:D4:EE:3E:5D:27:06:5A:D8:03:56:58:2A:2F:DC:2B:48:8D
Certificate issuer: /CN=4ed037d4ee3e5d27065ad80356582a2fdc2b488d
Certificate serial: 01A06F8323D6B905CFA4758E84D2095DA3AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TtA31O4-XScGWtgDVlgqL9wrSI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/74b996-80ee-4c39-8e74-350e681b99d1/1/TtA31O4-XScGWtgDVlgqL9wrSI0.mft
Manifest number: 13B7
Signing time: Sat 05 Sep 2026 03:01:00 +0000
Manifest this update: Sat 05 Sep 2026 03:01:00 +0000
Manifest next update: Sun 06 Sep 2026 03:01:00 +0000
Files and hashes: 1: TtA31O4-XScGWtgDVlgqL9wrSI0.crl (hash: ZWaJLNN9+FiSiiipNvcoUg0JHP7oFyCzCe6F8W5vdzo=)
2: dkZVoeRJR-__79SdUjWpgfrqgX0.roa (hash: hRQs/VOKf6Kl6D61x2oomcbiDqJtvslx7y4t6WRaaHw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/74b996-80ee-4c39-8e74-350e681b99d1/1/TtA31O4-XScGWtgDVlgqL9wrSI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/74b996-80ee-4c39-8e74-350e681b99d1/1/TtA31O4-XScGWtgDVlgqL9wrSI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/TtA31O4-XScGWtgDVlgqL9wrSI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Sep 2026 01:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6f:83:23:d6:b9:05:cf:a4:75:8e:84:d2:09:5d:a3:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ed037d4ee3e5d27065ad80356582a2fdc2b488d
Validity
Not Before: Sep 5 03:01:00 2026 GMT
Not After : Sep 6 03:01:00 2026 GMT
Subject: CN=6ccbdb527ef11f48301ad6dc915d755a2e4100f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:6c:25:e6:0f:08:99:07:d0:02:ae:ed:c5:61:
9d:33:5c:b2:bd:b2:39:6f:92:36:01:a1:f1:dd:41:
1f:2a:53:fd:ea:cc:a9:6a:fe:07:67:bb:79:b9:67:
43:4d:46:78:80:8a:19:61:31:ef:d5:09:18:b4:1b:
0e:7b:6a:7a:a5:96:0f:2b:4c:28:50:fa:d2:0c:3b:
88:c8:df:2d:ea:02:92:ff:cd:fd:31:8f:24:05:26:
74:47:17:23:9d:18:08:5f:3c:62:74:a7:c5:6f:51:
64:1e:5c:2c:66:03:77:9e:4a:78:49:33:20:7e:60:
3f:59:8c:2c:d8:f3:b1:ed:ca:d1:cf:01:b2:a7:2c:
be:cc:eb:f2:33:c8:81:65:75:9c:90:11:61:3b:b0:
73:79:0a:15:cb:f4:3e:cb:fb:53:05:0b:45:bc:d9:
cc:56:09:63:77:96:20:9f:8b:d1:57:9b:c5:a3:fd:
cb:af:fa:56:7f:a1:1c:8e:27:15:4b:e7:75:16:e2:
7d:8a:0e:5c:73:79:20:f5:7d:d4:83:36:99:80:16:
41:8d:d7:3e:27:23:ae:4d:de:5e:93:9e:dd:d0:a2:
a4:8d:51:79:69:44:52:f3:51:db:da:a7:d3:18:ec:
e0:be:c7:a2:9d:e1:82:51:d0:28:9e:80:1e:b5:53:
c2:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:CB:DB:52:7E:F1:1F:48:30:1A:D6:DC:91:5D:75:5A:2E:41:00:F0
X509v3 Authority Key Identifier:
keyid:4E:D0:37:D4:EE:3E:5D:27:06:5A:D8:03:56:58:2A:2F:DC:2B:48:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TtA31O4-XScGWtgDVlgqL9wrSI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/74b996-80ee-4c39-8e74-350e681b99d1/1/TtA31O4-XScGWtgDVlgqL9wrSI0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/74b996-80ee-4c39-8e74-350e681b99d1/1/TtA31O4-XScGWtgDVlgqL9wrSI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:16:1d:81:e4:f0:85:d6:da:e0:75:05:cd:8d:57:a6:d3:be:
f5:58:26:5c:b4:6a:7b:52:e3:71:46:45:85:7f:6d:f0:0d:44:
8c:43:46:5c:c5:e2:c8:6e:bd:f5:1c:67:a5:7b:41:e7:64:a9:
5c:43:e9:6f:2d:57:1b:5a:37:9c:f1:5a:3c:48:34:77:2a:b6:
1f:f4:85:f3:d3:78:8a:97:7b:d6:59:b7:93:0a:5b:a5:60:10:
31:51:1f:6a:fa:ca:b2:b5:7a:d8:5c:b7:6d:70:5d:64:7e:4c:
6e:4e:e5:1f:f2:0b:14:67:e1:36:6d:b5:28:6e:3f:23:f9:3c:
71:20:9c:db:cc:a2:d6:18:b5:45:ee:5a:d1:14:c8:42:ca:7b:
58:2c:8c:62:c4:41:a9:17:0d:8a:03:d9:4c:e3:52:e8:f5:55:
b6:c2:a8:7a:4c:5c:97:77:14:5f:f6:9a:1b:40:b5:e6:87:62:
98:b2:11:b8:55:49:ba:f3:39:3b:f8:5b:31:26:ae:5a:3f:c4:
f1:60:cf:92:3e:9d:53:a9:b1:b5:dd:21:34:89:a0:86:a4:95:
c7:a0:59:69:ef:56:7d:07:1f:e9:d4:55:11:e3:8d:76:88:0e:
8a:5a:89:4f:8e:00:8c:0b:4e:19:ea:ac:5a:4e:b3:f5:94:dc:
a0:3d:0f:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 09:24:10 2026 by rpki-client