Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/87dadf-29d9-49d3-8ac6-4cc40ffd796d/1/TtDR6dtwOHtHkQsCFmwVFVR5now.mft
File: TtDR6dtwOHtHkQsCFmwVFVR5now.mft (raw, json)
Hash identifier: pDEzCxJA7veWFLy2XERvMajsA7sXnMbawnaqXglurZc=
Subject key identifier: DD:C9:DE:FB:D5:DE:62:E5:F1:51:97:DE:5B:14:7A:8D:AE:48:15:76
Authority key identifier: 4E:D0:D1:E9:DB:70:38:7B:47:91:0B:02:16:6C:15:15:54:79:9E:8C
Certificate issuer: /CN=4ed0d1e9db70387b47910b02166c151554799e8c
Certificate serial: 019FA4BC789BBBB4420612B01FB57B6395DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TtDR6dtwOHtHkQsCFmwVFVR5now.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/87dadf-29d9-49d3-8ac6-4cc40ffd796d/1/TtDR6dtwOHtHkQsCFmwVFVR5now.mft
Manifest number: 4A
Signing time: Mon 27 Jul 2026 18:00:42 +0000
Manifest this update: Mon 27 Jul 2026 18:00:42 +0000
Manifest next update: Tue 28 Jul 2026 18:00:42 +0000
Files and hashes: 1: GarD_CcyC8vH0Ew6FZexXJqsz3o.roa (hash: +xW0rSQLKtAW1Hp3b5Pv8qHOc3WB4PYX3/XibxiP1hA=)
2: TtDR6dtwOHtHkQsCFmwVFVR5now.crl (hash: vm5eGLk61wQZWVN/vYPUSyBolLZtk7fMFnNlaJnuSaU=)
3: br6axYGXcxv_9-Dchpg7P4DBzJE.roa (hash: 9eR+zwavNrHlgbbzIncH+OZak7hXd7F3p0WzOsUw9aE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/87dadf-29d9-49d3-8ac6-4cc40ffd796d/1/TtDR6dtwOHtHkQsCFmwVFVR5now.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/87dadf-29d9-49d3-8ac6-4cc40ffd796d/1/TtDR6dtwOHtHkQsCFmwVFVR5now.mft
rsync://rpki.ripe.net/repository/DEFAULT/TtDR6dtwOHtHkQsCFmwVFVR5now.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 13:48:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a4:bc:78:9b:bb:b4:42:06:12:b0:1f:b5:7b:63:95:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ed0d1e9db70387b47910b02166c151554799e8c
Validity
Not Before: Jul 27 18:00:42 2026 GMT
Not After : Jul 28 18:00:42 2026 GMT
Subject: CN=ddc9defbd5de62e5f15197de5b147a8dae481576
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:f7:d7:cb:e2:31:8f:a7:36:66:35:e4:0a:a4:
bf:a1:64:a2:7b:0c:a3:b8:6e:e7:be:29:18:5e:dc:
71:0c:f7:3a:52:4c:73:9d:c4:9e:b5:37:34:b8:c2:
19:59:ea:cd:ca:e5:ce:60:58:b2:d4:aa:5d:ab:31:
4f:46:fb:75:dc:92:60:6b:f6:0d:13:9f:38:c2:df:
58:d7:3a:41:ec:dc:ba:04:1c:60:ba:0b:bb:bf:3d:
35:f8:20:d8:51:0b:04:35:98:5d:09:eb:d9:ef:fa:
c4:9a:4d:1f:a6:0d:87:02:5b:c0:6b:dc:83:4b:1b:
94:48:04:10:4f:ab:7f:0e:a6:16:f1:89:83:32:6b:
58:89:5d:b6:b8:49:e6:89:af:0c:79:eb:8a:29:75:
4f:97:70:69:46:c8:87:09:a8:d9:f7:6d:2b:f0:25:
93:04:7d:64:b7:49:de:c3:39:46:ee:8b:cc:36:46:
55:41:e7:c9:4f:af:e9:9e:4d:23:88:d5:1f:a2:09:
9a:83:43:dd:bf:b5:57:3d:28:a5:6d:81:1b:e0:92:
64:34:1c:35:af:99:76:86:48:09:f8:3f:d5:a3:17:
1f:dd:70:9f:f3:1e:84:2c:12:32:84:d6:de:6e:db:
5b:b3:46:ce:63:78:0c:20:7c:19:c5:cb:c3:c1:80:
71:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:C9:DE:FB:D5:DE:62:E5:F1:51:97:DE:5B:14:7A:8D:AE:48:15:76
X509v3 Authority Key Identifier:
keyid:4E:D0:D1:E9:DB:70:38:7B:47:91:0B:02:16:6C:15:15:54:79:9E:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TtDR6dtwOHtHkQsCFmwVFVR5now.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/87dadf-29d9-49d3-8ac6-4cc40ffd796d/1/TtDR6dtwOHtHkQsCFmwVFVR5now.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/87dadf-29d9-49d3-8ac6-4cc40ffd796d/1/TtDR6dtwOHtHkQsCFmwVFVR5now.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:66:b9:d7:3b:1e:d4:12:b1:d3:b5:d0:c4:5c:b7:4e:3c:f6:
1f:8f:c7:f5:20:99:21:14:cb:15:a9:34:84:c1:2b:22:79:a9:
86:02:cb:e5:25:2b:82:65:1a:b7:89:a9:1e:ad:df:17:6b:be:
e3:fd:dd:d9:19:31:83:8f:09:d8:cf:98:ec:3a:89:a4:12:c7:
43:07:96:07:e3:60:91:af:e6:e7:53:2c:ee:37:08:f5:24:be:
91:80:ea:91:3b:23:ed:a1:b7:ef:71:08:a5:5b:ec:50:1a:53:
e9:cb:c3:d7:67:8a:92:99:c7:b3:23:97:97:a5:8a:78:a2:91:
8a:d8:cf:cb:5f:3a:b1:a3:ab:f1:98:76:ea:2e:4f:6d:7c:8b:
97:6b:34:b8:d5:e5:d6:a9:2b:3c:85:d7:47:dc:af:6a:ff:43:
d1:25:d2:ee:ab:c1:76:d2:b4:12:e1:d1:44:27:0e:fe:af:0d:
43:8c:50:1c:42:e8:76:4d:ba:f5:00:ea:40:86:57:a8:b3:dd:
39:9d:72:79:7c:9c:cb:39:05:40:47:7d:7c:3a:d5:2d:59:07:
ec:d0:c2:a6:2c:e9:67:c7:ac:3c:27:dc:af:04:af:27:69:35:
d6:07:f4:f1:52:09:54:33:37:e4:1a:5e:36:07:78:94:14:06:
1c:e4:70:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 20:27:21 2026 by rpki-client