Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dc/017c37-61b6-4d40-881a-53a084390527/1/TtMkzMCQuDGCmReur3ODTwg0Ss4.mft
File: TtMkzMCQuDGCmReur3ODTwg0Ss4.mft (raw, json)
Hash identifier: 1U4JMp3P+Vt2jH1xn2oOmvmN7oehCm1V6JejHnq7tiE=
Subject key identifier: 38:73:C2:36:50:26:F9:35:97:0C:6C:38:B0:EA:BF:6D:75:1A:BB:0C
Authority key identifier: 4E:D3:24:CC:C0:90:B8:31:82:99:17:AE:AF:73:83:4F:08:34:4A:CE
Certificate issuer: /CN=4ed324ccc090b831829917aeaf73834f08344ace
Certificate serial: 01A18150D4FBA6001E920F4DCE5EB75F6086
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TtMkzMCQuDGCmReur3ODTwg0Ss4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/017c37-61b6-4d40-881a-53a084390527/1/TtMkzMCQuDGCmReur3ODTwg0Ss4.mft
Manifest number: 05D7
Signing time: Wed 28 Oct 2026 07:02:00 +0000
Manifest this update: Wed 28 Oct 2026 07:02:00 +0000
Manifest next update: Thu 29 Oct 2026 07:02:00 +0000
Files and hashes: 1: C6nXsG6UDvJjYHmVMk3MguMztUw.roa (hash: DZ6jiw9DI8ZM7KfN0j9o/vZRidGddKGFVOWlQEbKrbI=)
2: TtMkzMCQuDGCmReur3ODTwg0Ss4.crl (hash: iKlNmMUtNgZx3rZoolyp9VpFFZWItxABZVchFo5vzGg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/017c37-61b6-4d40-881a-53a084390527/1/TtMkzMCQuDGCmReur3ODTwg0Ss4.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/017c37-61b6-4d40-881a-53a084390527/1/TtMkzMCQuDGCmReur3ODTwg0Ss4.mft
rsync://rpki.ripe.net/repository/DEFAULT/TtMkzMCQuDGCmReur3ODTwg0Ss4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 07:02:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:81:50:d4:fb:a6:00:1e:92:0f:4d:ce:5e:b7:5f:60:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ed324ccc090b831829917aeaf73834f08344ace
Validity
Not Before: Oct 28 07:02:00 2026 GMT
Not After : Oct 29 07:02:00 2026 GMT
Subject: CN=3873c2365026f935970c6c38b0eabf6d751abb0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:2e:c0:51:c4:f1:dc:d6:9a:cb:dc:2d:ce:c2:
f2:e1:fc:22:18:0f:c9:36:d2:72:3f:6a:3a:f8:0f:
25:8a:9f:02:3f:20:ff:f5:d1:4c:51:bb:d0:f6:2b:
48:ca:fe:ea:58:19:92:0c:76:48:b7:c3:2e:ca:a1:
31:8e:57:33:a9:9a:90:22:c7:f4:3a:58:e4:b1:92:
58:29:a4:05:40:f1:20:b3:c1:45:f7:eb:e3:7d:e1:
46:42:79:e3:b4:01:6e:5d:b8:ea:65:a2:c7:ea:6e:
67:7d:90:0f:07:3d:43:b0:ff:71:26:10:54:bb:10:
00:99:4c:68:f5:1d:98:d4:2d:73:9b:df:c3:7a:e0:
d2:56:d1:70:ad:76:9f:9c:e1:ff:8f:04:46:63:e4:
88:08:16:d4:e8:7f:4f:48:eb:47:6f:00:ff:b8:0a:
ed:6f:fc:2d:ad:db:ed:d7:d1:f3:a5:59:27:ac:93:
94:39:81:be:87:a5:05:a8:97:ad:ae:7d:b6:8e:a5:
68:27:d9:76:da:58:93:aa:68:1f:6d:84:e9:ad:61:
f3:b3:b5:48:42:19:44:09:2b:55:20:85:ae:b4:21:
1f:8c:33:61:1b:df:84:e7:09:e3:fa:ce:da:d0:b7:
99:36:f5:7e:21:15:16:71:7b:79:cd:f3:da:6b:95:
65:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:73:C2:36:50:26:F9:35:97:0C:6C:38:B0:EA:BF:6D:75:1A:BB:0C
X509v3 Authority Key Identifier:
keyid:4E:D3:24:CC:C0:90:B8:31:82:99:17:AE:AF:73:83:4F:08:34:4A:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TtMkzMCQuDGCmReur3ODTwg0Ss4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/017c37-61b6-4d40-881a-53a084390527/1/TtMkzMCQuDGCmReur3ODTwg0Ss4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/017c37-61b6-4d40-881a-53a084390527/1/TtMkzMCQuDGCmReur3ODTwg0Ss4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:d2:50:44:c7:f0:91:99:89:03:0b:aa:f5:93:5a:64:59:93:
8e:03:fa:fc:b7:0a:d9:45:8e:62:e8:e3:f1:d6:37:73:01:9b:
36:6c:dc:87:76:c5:6a:b9:e4:5c:96:d9:5b:ef:85:7c:63:25:
f5:0a:79:ad:83:64:bd:7e:7c:84:e0:46:42:25:b3:4c:4a:c4:
67:3a:c6:fd:a1:fe:91:b0:77:0c:1c:d4:7e:c8:5d:48:d4:68:
e2:27:36:b5:ff:7f:9f:a7:c9:32:57:fe:f0:45:74:20:6a:07:
0a:90:a2:d7:e0:f9:91:55:f4:0c:bf:3a:b6:af:50:d3:81:31:
2f:3e:b9:e8:c0:3d:6a:98:bc:0b:1b:00:bb:d5:35:c0:dc:09:
c1:2f:ec:8b:1b:ce:ef:62:ed:96:00:88:ea:93:e8:ce:91:3b:
bc:da:f3:4e:29:d6:b7:ba:77:80:bc:71:8b:8f:f5:ec:79:9d:
d0:46:ee:2c:4c:36:93:5b:93:7d:18:e3:df:44:c0:37:2c:0e:
2d:21:58:ff:dd:29:ea:3d:9e:59:f6:7d:e3:2a:46:82:7b:ba:
03:6e:bb:f7:f6:4b:78:bd:e8:e4:94:03:38:13:1f:eb:06:5a:
a5:9a:e8:66:99:f2:5c:1f:4c:58:39:d0:6a:f5:15:de:31:47:
52:76:db:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 16:33:47 2026 by rpki-client