Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/74b996-80ee-4c39-8e74-350e681b99d1/1/TtA31O4-XScGWtgDVlgqL9wrSI0.mft
File: TtA31O4-XScGWtgDVlgqL9wrSI0.mft (raw, json)
Hash identifier: tVlPgj1ykP60JSL/it68tRir/O0t75amGrqX1rR80qU=
Subject key identifier: 9D:12:AF:3F:35:3E:BB:E1:F9:73:01:30:02:45:5F:EE:08:05:4F:BE
Authority key identifier: 4E:D0:37:D4:EE:3E:5D:27:06:5A:D8:03:56:58:2A:2F:DC:2B:48:8D
Certificate issuer: /CN=4ed037d4ee3e5d27065ad80356582a2fdc2b488d
Certificate serial: 019E92827428D4DB8C3137709C039533A71F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TtA31O4-XScGWtgDVlgqL9wrSI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/74b996-80ee-4c39-8e74-350e681b99d1/1/TtA31O4-XScGWtgDVlgqL9wrSI0.mft
Manifest number: 12C0
Signing time: Thu 04 Jun 2026 12:01:23 +0000
Manifest this update: Thu 04 Jun 2026 12:01:23 +0000
Manifest next update: Fri 05 Jun 2026 12:01:23 +0000
Files and hashes: 1: TtA31O4-XScGWtgDVlgqL9wrSI0.crl (hash: L1PNbfSCR3uHrRo8elnJLs4T5VgkT2bEMR7Rhr+akqw=)
2: dkZVoeRJR-__79SdUjWpgfrqgX0.roa (hash: hRQs/VOKf6Kl6D61x2oomcbiDqJtvslx7y4t6WRaaHw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/74b996-80ee-4c39-8e74-350e681b99d1/1/TtA31O4-XScGWtgDVlgqL9wrSI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/74b996-80ee-4c39-8e74-350e681b99d1/1/TtA31O4-XScGWtgDVlgqL9wrSI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/TtA31O4-XScGWtgDVlgqL9wrSI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Jun 2026 07:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:92:82:74:28:d4:db:8c:31:37:70:9c:03:95:33:a7:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ed037d4ee3e5d27065ad80356582a2fdc2b488d
Validity
Not Before: Jun 4 12:01:23 2026 GMT
Not After : Jun 5 12:01:23 2026 GMT
Subject: CN=9d12af3f353ebbe1f973013002455fee08054fbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:e6:0f:9f:9b:72:a0:ce:51:2a:50:a0:03:ee:
a3:94:4f:74:bd:b1:d5:4b:2a:74:32:0a:d7:32:7b:
0d:fc:8c:62:ae:d5:02:56:fa:d8:13:ef:d5:35:da:
3b:84:0f:98:43:30:c8:2c:c8:f1:b7:a5:3a:00:75:
22:65:1b:13:1b:fe:de:5a:a7:52:c3:4d:b6:70:d3:
15:a6:f8:fb:d6:4c:1a:35:37:c9:4e:60:ad:4d:d4:
1b:0f:83:24:a7:f4:b3:d0:2e:ed:7c:16:ec:76:74:
ed:5a:3f:15:1d:55:c3:90:35:b0:ed:69:52:2e:22:
2e:c7:0a:6b:ee:94:0a:3d:42:41:3c:05:08:e3:3c:
41:a4:45:f6:10:aa:6f:62:64:b7:5b:47:ef:ff:3f:
15:93:3d:88:0e:65:79:56:b7:52:6e:68:38:a7:9c:
07:66:62:3e:00:78:c7:5e:6e:da:33:ca:90:b0:7f:
b9:1b:82:23:a5:45:07:7c:50:cd:fc:20:c9:2b:6a:
47:92:16:f4:20:8f:a0:8b:f2:69:17:8c:50:69:90:
8e:af:10:b3:bb:66:cf:2c:90:45:60:94:f0:fc:7d:
e6:b2:33:49:c0:31:bc:e8:78:79:c7:7e:13:51:21:
1e:a1:0e:e2:4b:36:ae:ee:0e:1f:f9:6f:45:99:07:
b0:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:12:AF:3F:35:3E:BB:E1:F9:73:01:30:02:45:5F:EE:08:05:4F:BE
X509v3 Authority Key Identifier:
keyid:4E:D0:37:D4:EE:3E:5D:27:06:5A:D8:03:56:58:2A:2F:DC:2B:48:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TtA31O4-XScGWtgDVlgqL9wrSI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/74b996-80ee-4c39-8e74-350e681b99d1/1/TtA31O4-XScGWtgDVlgqL9wrSI0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/74b996-80ee-4c39-8e74-350e681b99d1/1/TtA31O4-XScGWtgDVlgqL9wrSI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:04:b1:cf:a6:33:de:2f:d5:2d:fd:98:db:ca:3b:8d:15:eb:
ee:6b:08:7e:fe:41:4b:ce:f6:d0:82:b5:2b:58:86:0b:ef:98:
ee:bd:bc:88:22:33:79:41:09:d4:57:5e:b1:3e:75:2c:db:79:
88:2c:c0:69:d8:2e:92:76:06:f5:94:ca:b8:78:54:fc:ae:3b:
c9:49:b9:be:b1:0b:7d:89:59:4c:b8:85:15:b0:db:96:24:d7:
bb:2b:f6:99:e5:71:7d:56:4d:7e:b0:8d:05:0d:f9:4b:20:21:
13:b6:6d:83:4e:75:e6:5c:fc:5a:c2:9d:15:30:24:61:44:1b:
f3:4f:20:74:5c:fc:c5:64:81:73:76:22:b5:6e:b0:45:13:d1:
95:6a:98:fd:87:d4:bd:51:64:9b:d4:29:1a:bb:80:29:25:ca:
96:4f:4c:67:ea:eb:b5:d2:cc:6f:5b:70:25:89:fd:34:b7:8a:
40:20:86:cd:91:bf:3d:d3:81:7b:d0:09:29:04:3f:5d:9a:88:
53:d4:67:fe:46:70:af:96:96:b2:f8:0b:49:a1:0b:78:92:13:
21:69:80:27:c9:2e:5b:78:e4:d9:2a:17:ee:47:14:74:84:aa:
77:00:3e:c2:8c:be:33:19:c5:3d:eb:c5:3f:24:55:57:52:ca:
1c:bc:13:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 17:24:33 2026 by rpki-client