Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a2/87dadf-29d9-49d3-8ac6-4cc40ffd796d/1/TtDR6dtwOHtHkQsCFmwVFVR5now.mft
File: TtDR6dtwOHtHkQsCFmwVFVR5now.mft (raw, json)
Hash identifier: TKPKYICy5G8f83OzYs1/9S4T8oO8kwEeBf95KYxOS8c=
Subject key identifier: 48:74:AB:EC:6B:8C:59:FE:21:22:DC:AA:B2:51:DE:90:72:BD:38:9B
Authority key identifier: 4E:D0:D1:E9:DB:70:38:7B:47:91:0B:02:16:6C:15:15:54:79:9E:8C
Certificate issuer: /CN=4ed0d1e9db70387b47910b02166c151554799e8c
Certificate serial: 01A0EB1C7C6FC560AA48F1B6E31A0918E9D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TtDR6dtwOHtHkQsCFmwVFVR5now.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/87dadf-29d9-49d3-8ac6-4cc40ffd796d/1/TtDR6dtwOHtHkQsCFmwVFVR5now.mft
Manifest number: F3
Signing time: Tue 29 Sep 2026 03:01:47 +0000
Manifest this update: Tue 29 Sep 2026 03:01:47 +0000
Manifest next update: Wed 30 Sep 2026 03:01:47 +0000
Files and hashes: 1: GarD_CcyC8vH0Ew6FZexXJqsz3o.roa (hash: +xW0rSQLKtAW1Hp3b5Pv8qHOc3WB4PYX3/XibxiP1hA=)
2: TtDR6dtwOHtHkQsCFmwVFVR5now.crl (hash: Zda2qNaVmnpO5uHhxxLXTppoWC3Nd9Tb85rxq2t5ErU=)
3: br6axYGXcxv_9-Dchpg7P4DBzJE.roa (hash: 9eR+zwavNrHlgbbzIncH+OZak7hXd7F3p0WzOsUw9aE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/87dadf-29d9-49d3-8ac6-4cc40ffd796d/1/TtDR6dtwOHtHkQsCFmwVFVR5now.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/87dadf-29d9-49d3-8ac6-4cc40ffd796d/1/TtDR6dtwOHtHkQsCFmwVFVR5now.mft
rsync://rpki.ripe.net/repository/DEFAULT/TtDR6dtwOHtHkQsCFmwVFVR5now.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 23:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:eb:1c:7c:6f:c5:60:aa:48:f1:b6:e3:1a:09:18:e9:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ed0d1e9db70387b47910b02166c151554799e8c
Validity
Not Before: Sep 29 03:01:47 2026 GMT
Not After : Sep 30 03:01:47 2026 GMT
Subject: CN=4874abec6b8c59fe2122dcaab251de9072bd389b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:22:5c:1a:38:84:dd:56:49:24:78:44:41:3a:
f6:1d:99:52:97:3c:04:43:55:25:8e:86:54:44:64:
42:14:bf:98:8f:48:10:24:ce:7d:7d:3b:bc:ae:5f:
3e:b9:93:97:59:be:ed:cb:ae:8b:73:6f:d6:86:67:
a4:6e:e5:50:4f:59:bd:29:c1:6a:5e:63:d2:d0:5b:
23:8c:e3:61:e9:d3:11:de:a8:25:ab:84:d4:ab:de:
24:1e:a2:19:d0:d2:78:97:01:bc:08:3e:39:f8:85:
56:e3:08:55:b3:22:2c:cf:d2:66:66:d0:1f:44:9c:
1a:d3:7e:47:9c:bf:d5:6f:3c:21:35:b5:2e:c2:67:
77:fd:6b:0f:66:86:86:8a:69:88:e6:dc:50:d8:e8:
ea:86:1c:14:ba:a3:0e:63:73:36:a4:71:a6:bd:a7:
cb:8a:bb:fc:e4:82:49:3e:97:97:8e:73:7a:9d:01:
7f:35:c2:9f:f6:71:3b:c2:46:96:71:e5:30:05:de:
07:d7:a5:04:e2:41:d6:92:b9:62:b0:db:9d:d9:86:
c4:87:fb:c8:7d:62:5d:6d:0b:f7:1e:62:f9:35:34:
ee:ce:58:bd:02:a6:9b:e3:71:dd:d9:5f:7c:e4:ac:
77:f5:a8:32:e5:72:d5:ce:69:9b:a3:e1:ac:90:3d:
8f:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:74:AB:EC:6B:8C:59:FE:21:22:DC:AA:B2:51:DE:90:72:BD:38:9B
X509v3 Authority Key Identifier:
keyid:4E:D0:D1:E9:DB:70:38:7B:47:91:0B:02:16:6C:15:15:54:79:9E:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TtDR6dtwOHtHkQsCFmwVFVR5now.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/87dadf-29d9-49d3-8ac6-4cc40ffd796d/1/TtDR6dtwOHtHkQsCFmwVFVR5now.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/87dadf-29d9-49d3-8ac6-4cc40ffd796d/1/TtDR6dtwOHtHkQsCFmwVFVR5now.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:1e:ad:54:01:5f:ed:77:03:14:6a:7b:1c:38:df:67:0d:fd:
03:64:10:de:25:c6:06:1c:a5:8d:23:a6:7d:6a:b8:be:28:1c:
77:f4:f1:8d:b8:ef:e5:d1:5e:5c:28:b6:7c:47:c0:c8:6a:ff:
4e:ba:bf:fd:5e:3c:3b:2e:d2:d2:ca:2f:85:6a:54:ee:d6:0f:
5a:64:ae:f1:27:87:b8:9b:31:b4:74:bd:df:86:b9:ab:56:34:
73:62:a5:de:3a:8b:96:cb:91:9b:d6:00:ca:aa:30:7a:45:a4:
86:9b:69:50:bf:e1:be:b3:9b:66:63:eb:2c:2e:58:8a:e1:d8:
08:29:74:ee:56:21:0b:0e:f0:05:dd:f6:4a:ee:ec:9d:3a:f1:
98:7a:cd:36:cf:3c:2c:c8:4f:c4:5f:08:87:1d:15:17:52:4b:
2b:f8:72:04:c9:c7:aa:81:76:ca:80:f0:c2:f2:48:0b:0c:a3:
86:84:34:c7:da:12:dd:50:79:8f:9e:e5:06:3c:70:27:d0:f5:
6c:45:7a:f8:27:74:e7:70:0e:ff:a4:22:03:6a:cf:6b:3f:a6:
15:7d:f2:35:1a:26:bf:d3:86:67:05:c9:5e:ea:cb:56:06:19:
00:2f:7b:89:e3:78:29:9c:91:ae:72:f5:4e:e0:fb:b5:92:9d:
c0:78:2c:46
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDrHHxvxWCqSPG24xoJGOnSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRlZDBkMWU5ZGI3MDM4N2I0NzkxMGIwMjE2NmMxNTE1NTQ3
OTllOGMwHhcNMjYwOTI5MDMwMTQ3WhcNMjYwOTMwMDMwMTQ3WjAzMTEwLwYDVQQD
Eyg0ODc0YWJlYzZiOGM1OWZlMjEyMmRjYWFiMjUxZGU5MDcyYmQzODliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnyJcGjiE3VZJJHhEQTr2HZlSlzwE
Q1UljoZURGRCFL+Yj0gQJM59fTu8rl8+uZOXWb7ty66Lc2/WhmekbuVQT1m9KcFq
XmPS0FsjjONh6dMR3qglq4TUq94kHqIZ0NJ4lwG8CD45+IVW4whVsyIsz9JmZtAf
RJwa035HnL/VbzwhNbUuwmd3/WsPZoaGimmI5txQ2OjqhhwUuqMOY3M2pHGmvafL
irv85IJJPpeXjnN6nQF/NcKf9nE7wkaWceUwBd4H16UE4kHWkrlisNud2YbEh/vI
fWJdbQv3HmL5NTTuzli9Aqab43Hd2V985Kx39agy5XLVzmmbo+GskD2PYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEh0q+xrjFn+ISLcqrJR3pByvTibMB8GA1UdIwQY
MBaAFE7Q0enbcDh7R5ELAhZsFRVUeZ6MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHREUjZkdHdPSHRIa1FzQ0Ztd1ZGVlI1bm93LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi84N2RhZGYtMjlkOS00OWQzLThhYzYt
NGNjNDBmZmQ3OTZkLzEvVHREUjZkdHdPSHRIa1FzQ0Ztd1ZGVlI1bm93Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi84N2RhZGYtMjlkOS00OWQzLThhYzYtNGNjNDBmZmQ3OTZk
LzEvVHREUjZkdHdPSHRIa1FzQ0Ztd1ZGVlI1bm93LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOB6tVAFf
7XcDFGp7HDjfZw39A2QQ3iXGBhyljSOmfWq4vigcd/Txjbjv5dFeXCi2fEfAyGr/
Trq//V48Oy7S0sovhWpU7tYPWmSu8SeHuJsxtHS934a5q1Y0c2Kl3jqLlsuRm9YA
yqowekWkhptpUL/hvrObZmPrLC5YiuHYCCl07lYhCw7wBd32Su7snTrxmHrNNs88
LMhPxF8Ihx0VF1JLK/hyBMnHqoF2yoDwwvJICwyjhoQ0x9oS3VB5j57lBjxwJ9D1
bEV6+Cd053AO/6QiA2rPaz+mFX3yNRomv9OGZwXJXurLVgYZAC97ieN4KZyRrnL1
TuD7tZKdwHgsRg==
-----END CERTIFICATE-----
Generated at Tue Sep 29 09:42:48 2026 by rpki-client