Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/017c37-61b6-4d40-881a-53a084390527/1/TtMkzMCQuDGCmReur3ODTwg0Ss4.mft
File: TtMkzMCQuDGCmReur3ODTwg0Ss4.mft (raw, json)
Hash identifier: nLwMYfEKZNN19XZzYGvYviBijFLIqLMf5INL+16qJIw=
Subject key identifier: CF:A4:B4:B2:8A:EB:4C:9E:A7:29:37:4D:98:92:37:81:02:58:1A:EA
Authority key identifier: 4E:D3:24:CC:C0:90:B8:31:82:99:17:AE:AF:73:83:4F:08:34:4A:CE
Certificate issuer: /CN=4ed324ccc090b831829917aeaf73834f08344ace
Certificate serial: 019FA071C290013D436C2DB8AFBA65B5D924
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TtMkzMCQuDGCmReur3ODTwg0Ss4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/017c37-61b6-4d40-881a-53a084390527/1/TtMkzMCQuDGCmReur3ODTwg0Ss4.mft
Manifest number: 04DE
Signing time: Sun 26 Jul 2026 22:00:37 +0000
Manifest this update: Sun 26 Jul 2026 22:00:37 +0000
Manifest next update: Mon 27 Jul 2026 22:00:37 +0000
Files and hashes: 1: C6nXsG6UDvJjYHmVMk3MguMztUw.roa (hash: DZ6jiw9DI8ZM7KfN0j9o/vZRidGddKGFVOWlQEbKrbI=)
2: TtMkzMCQuDGCmReur3ODTwg0Ss4.crl (hash: J7uO+odvUY6J7F0mbnhGH7KIOe3/X2NMKFCRJVzeEpM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/017c37-61b6-4d40-881a-53a084390527/1/TtMkzMCQuDGCmReur3ODTwg0Ss4.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/017c37-61b6-4d40-881a-53a084390527/1/TtMkzMCQuDGCmReur3ODTwg0Ss4.mft
rsync://rpki.ripe.net/repository/DEFAULT/TtMkzMCQuDGCmReur3ODTwg0Ss4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 14:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a0:71:c2:90:01:3d:43:6c:2d:b8:af:ba:65:b5:d9:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ed324ccc090b831829917aeaf73834f08344ace
Validity
Not Before: Jul 26 22:00:37 2026 GMT
Not After : Jul 27 22:00:37 2026 GMT
Subject: CN=cfa4b4b28aeb4c9ea729374d9892378102581aea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:bc:fc:f8:c8:d7:cb:39:a3:8c:92:c9:9c:1d:
dd:6a:9d:29:88:cb:3f:f2:55:b9:fb:8e:3a:18:eb:
4b:f0:86:43:e7:ff:e1:a2:e8:89:ba:b3:2b:57:da:
60:1a:59:9d:37:53:0d:d0:02:5b:99:21:53:8f:5d:
92:ec:d4:43:76:80:9d:5f:b9:14:87:06:dc:88:4b:
f1:49:7e:0d:79:62:51:30:91:3a:72:bc:16:dc:50:
f1:cd:bf:18:3b:0f:e9:b1:2c:f4:31:e8:2f:f1:06:
58:ce:dc:82:cc:cd:b3:e5:fb:ab:25:73:d8:91:17:
a7:78:52:07:f0:31:05:e8:7a:91:72:3a:e8:3c:45:
d1:b5:b7:1b:90:ae:80:c7:5f:9a:cc:a6:87:2f:e6:
93:97:cb:87:c5:4c:12:98:61:be:a3:a4:a1:30:52:
9a:03:6c:6e:a3:ed:c0:27:c1:97:f9:a2:1e:8b:8e:
52:d0:db:bb:fd:ae:6a:93:20:eb:52:4c:4f:51:c0:
a4:66:f8:34:54:7e:c3:65:30:b4:f6:72:e3:c7:e6:
cb:c5:8f:7a:de:76:fc:db:b3:be:e9:1a:ea:69:09:
3c:d3:60:fb:10:c1:54:a4:e2:92:b8:c0:0f:a4:dc:
c6:71:20:43:7c:48:33:b7:14:92:83:68:82:07:aa:
ef:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:A4:B4:B2:8A:EB:4C:9E:A7:29:37:4D:98:92:37:81:02:58:1A:EA
X509v3 Authority Key Identifier:
keyid:4E:D3:24:CC:C0:90:B8:31:82:99:17:AE:AF:73:83:4F:08:34:4A:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TtMkzMCQuDGCmReur3ODTwg0Ss4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/017c37-61b6-4d40-881a-53a084390527/1/TtMkzMCQuDGCmReur3ODTwg0Ss4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/017c37-61b6-4d40-881a-53a084390527/1/TtMkzMCQuDGCmReur3ODTwg0Ss4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:f8:f2:eb:99:23:b9:94:00:70:23:06:ac:fb:90:5d:b3:a8:
98:d1:26:61:13:3d:ba:b1:fd:8a:c5:60:74:dd:9c:18:df:74:
50:24:c5:e5:2f:eb:9a:56:7e:f1:84:5d:ec:da:d6:1a:b6:54:
16:52:4f:34:eb:1d:8f:95:bc:07:2a:10:2f:5f:d1:7b:ab:fd:
90:76:0e:d0:29:65:ea:89:c6:ce:a1:93:76:c9:5c:2b:96:3a:
85:f7:c3:50:39:a5:0f:ec:1b:5c:19:38:c3:d8:2a:da:e1:e5:
15:ab:70:7d:4c:e2:42:bd:23:5f:2a:96:fe:47:5a:84:d3:5b:
4e:52:22:60:9c:7b:13:df:57:6e:10:0b:d8:38:28:7e:2a:d8:
c9:d9:7f:8c:9c:d0:0a:eb:de:d5:56:e3:f4:25:21:25:a4:f9:
f6:8e:ee:cf:c2:39:80:1c:98:de:f3:51:25:f9:fa:80:db:ec:
a1:4f:e6:74:c6:38:8e:7b:cf:d7:b9:55:cb:96:36:0b:c6:e5:
39:a4:04:cc:e0:5c:0a:36:53:6c:19:f5:7e:65:82:39:44:46:
47:30:fb:7d:84:9a:5d:59:ce:6f:c1:34:c4:11:69:da:f9:f8:
47:4a:eb:4e:bc:5e:d3:bd:13:0c:81:a1:ed:a8:d4:46:d4:e7:
a4:0c:a8:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 00:17:10 2026 by rpki-client