Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/686d4b-f15b-4530-b91b-e0c406b64672/1/TtTTbmM3JKGxeUm8QiR2lk518GU.mft
File: TtTTbmM3JKGxeUm8QiR2lk518GU.mft (raw, json)
Hash identifier: ZpKVDiTZSwe1N8PsL3fSRxlKwWVzq849XSYijjFI2ag=
Subject key identifier: 38:1C:0D:18:94:AC:C6:3B:DE:BC:AA:72:4D:1F:97:F0:90:3D:10:45
Authority key identifier: 4E:D4:D3:6E:63:37:24:A1:B1:79:49:BC:42:24:76:96:4E:75:F0:65
Certificate issuer: /CN=4ed4d36e633724a1b17949bc422476964e75f065
Certificate serial: 019D39AF744B043638333D5A811D1BC4A125
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TtTTbmM3JKGxeUm8QiR2lk518GU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/686d4b-f15b-4530-b91b-e0c406b64672/1/TtTTbmM3JKGxeUm8QiR2lk518GU.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 13:01:32 +0000
Manifest this update: Sun 29 Mar 2026 13:01:32 +0000
Manifest next update: Mon 30 Mar 2026 13:01:32 +0000
Files and hashes: 1: TtTTbmM3JKGxeUm8QiR2lk518GU.crl (hash: Wu8/ifAJ3fS1uixKTC4LSTfy3bzzhtiTc0+wpOofHIA=)
2: ciYm9mEV2L9eSrKsaReboOeTaEs.roa (hash: y10S4mN+BJMChkxSiJiAL2EsRGyVDqBF8+UMGdjCK70=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/686d4b-f15b-4530-b91b-e0c406b64672/1/TtTTbmM3JKGxeUm8QiR2lk518GU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/686d4b-f15b-4530-b91b-e0c406b64672/1/TtTTbmM3JKGxeUm8QiR2lk518GU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TtTTbmM3JKGxeUm8QiR2lk518GU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:af:74:4b:04:36:38:33:3d:5a:81:1d:1b:c4:a1:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ed4d36e633724a1b17949bc422476964e75f065
Validity
Not Before: Mar 29 13:01:32 2026 GMT
Not After : Mar 30 13:01:32 2026 GMT
Subject: CN=381c0d1894acc63bdebcaa724d1f97f0903d1045
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:36:05:27:f6:be:e6:7e:50:71:31:55:48:86:
e9:a5:20:75:b8:d6:56:d2:80:13:f0:1f:d7:e6:5c:
07:db:4d:cb:ed:fd:01:66:dc:07:52:74:51:24:26:
b0:19:1d:2c:25:69:47:8f:32:61:5d:ef:f1:37:19:
61:1d:67:00:06:a5:11:ca:bb:a2:7c:3f:63:00:2f:
f1:7b:96:87:cd:80:1a:56:12:12:be:41:5e:e6:4e:
78:d3:0d:86:04:d6:9a:22:69:47:cb:5d:99:4c:68:
83:a6:02:6b:58:ec:4b:f6:ea:40:a3:40:50:33:b9:
02:d7:cf:3f:ff:82:5e:e9:ab:94:90:53:04:51:66:
0f:4c:66:39:f3:a4:04:91:2d:a5:9f:16:18:db:09:
33:18:dd:98:a2:4a:96:54:25:c6:59:1a:f8:d1:3b:
4a:ea:7b:32:98:5b:26:4c:c9:cb:a0:e3:13:e9:30:
4d:10:05:f6:8c:07:78:88:d1:3a:af:44:bc:0a:a5:
07:25:c6:3b:9e:c9:f0:b8:52:ff:79:17:22:27:1f:
a3:36:a9:ef:10:70:ab:b2:3e:f6:1a:fa:4b:1f:e7:
50:ba:1b:2c:ec:dd:51:1e:89:aa:69:6f:44:34:00:
a9:e7:3f:45:9c:d3:db:e0:a6:f0:a9:3f:52:22:de:
c7:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:1C:0D:18:94:AC:C6:3B:DE:BC:AA:72:4D:1F:97:F0:90:3D:10:45
X509v3 Authority Key Identifier:
keyid:4E:D4:D3:6E:63:37:24:A1:B1:79:49:BC:42:24:76:96:4E:75:F0:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TtTTbmM3JKGxeUm8QiR2lk518GU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/686d4b-f15b-4530-b91b-e0c406b64672/1/TtTTbmM3JKGxeUm8QiR2lk518GU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/686d4b-f15b-4530-b91b-e0c406b64672/1/TtTTbmM3JKGxeUm8QiR2lk518GU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:76:8e:c8:a6:55:1f:ef:8d:69:85:61:ce:09:65:93:bb:c0:
0a:71:fb:b7:9a:b4:33:cf:15:53:e1:0b:68:b5:86:e3:76:cb:
15:16:0c:1d:e8:90:54:a5:3c:41:51:7e:8b:4f:7e:d0:4c:30:
a8:d3:22:25:2b:0b:eb:19:3c:cf:a1:46:b8:3a:44:fa:e3:05:
6c:48:5a:a5:5a:53:2b:85:9a:f3:a2:58:67:c2:b1:c1:cb:16:
60:2c:64:71:da:47:1a:c0:79:df:37:3b:98:a5:16:32:eb:c1:
b7:09:23:cc:da:2c:ad:18:ac:6b:b6:1b:f7:c7:30:2b:79:94:
25:5e:fb:94:a8:14:8a:b4:8d:44:f8:7c:b4:25:25:d8:7d:70:
a5:07:00:68:cd:3b:79:57:f8:03:bf:20:da:6f:47:e9:5a:0e:
71:87:d0:e2:60:43:96:d4:6b:9b:d3:a6:a2:58:82:fa:0f:4a:
42:34:bd:e7:8c:78:c4:25:7a:cc:bb:bd:cc:50:0e:e9:5b:7e:
b5:63:55:67:f2:ce:20:d9:48:63:37:37:dd:19:03:8d:a4:64:
3a:da:77:6f:a4:e6:0d:c4:e2:78:12:57:4c:fa:c0:fd:45:5e:
b1:1c:e4:68:d9:06:d3:f2:92:aa:e3:6d:8e:70:54:52:a1:1a:
02:61:9f:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:27:05 2026 by rpki-client