Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/7bbb91-c5b0-4d0b-925b-09be5989d0ac/1/Ttxom7ItCUdVdPQcDl2XwEWTCSg.mft
File: Ttxom7ItCUdVdPQcDl2XwEWTCSg.mft (raw, json)
Hash identifier: 8+XqvyAW4TZtxz/jsnnzDMBXFcrejzgpqWsduGpxJ6c=
Subject key identifier: 2E:E8:53:91:54:DA:05:EF:02:93:92:3D:7E:7C:4E:FF:B5:68:BA:10
Authority key identifier: 4E:DC:68:9B:B2:2D:09:47:55:74:F4:1C:0E:5D:97:C0:45:93:09:28
Certificate issuer: /CN=4edc689bb22d09475574f41c0e5d97c045930928
Certificate serial: 019D37F756CB754EFCC1EDA0DE274451C656
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ttxom7ItCUdVdPQcDl2XwEWTCSg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/7bbb91-c5b0-4d0b-925b-09be5989d0ac/1/Ttxom7ItCUdVdPQcDl2XwEWTCSg.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 05:00:49 +0000
Manifest this update: Sun 29 Mar 2026 05:00:49 +0000
Manifest next update: Mon 30 Mar 2026 05:00:49 +0000
Files and hashes: 1: 1qel5UJvF0Nw_b-bGu5_QNoqlRk.roa (hash: dYaVAlWLEdmSPPhA4+BPhKB1MJDLY30AwRM+D7oK3SI=)
2: Ttxom7ItCUdVdPQcDl2XwEWTCSg.crl (hash: CG5ifGZAgc+YDpX+57T3anqBOAhkXUkF+EfMteMu/7M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/7bbb91-c5b0-4d0b-925b-09be5989d0ac/1/Ttxom7ItCUdVdPQcDl2XwEWTCSg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/7bbb91-c5b0-4d0b-925b-09be5989d0ac/1/Ttxom7ItCUdVdPQcDl2XwEWTCSg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ttxom7ItCUdVdPQcDl2XwEWTCSg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:56:cb:75:4e:fc:c1:ed:a0:de:27:44:51:c6:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4edc689bb22d09475574f41c0e5d97c045930928
Validity
Not Before: Mar 29 05:00:49 2026 GMT
Not After : Mar 30 05:00:49 2026 GMT
Subject: CN=2ee8539154da05ef0293923d7e7c4effb568ba10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:12:e2:cc:eb:f9:18:de:60:94:53:ac:b9:58:
96:69:68:c7:20:34:10:43:bd:1e:f5:10:03:47:5c:
ed:71:12:30:f6:4e:c9:e6:a1:10:23:f1:4c:4b:50:
e7:b8:7d:8b:ad:b8:f8:25:6a:8f:38:ba:cb:7a:da:
3a:e4:e8:3d:e3:d6:ca:74:f8:0b:13:fa:54:1a:ae:
c7:fc:e2:7e:cc:02:3c:15:5e:5c:47:ae:9b:5e:3a:
aa:5d:17:28:f2:f1:29:1e:cb:f1:48:32:a9:9c:71:
38:ea:2c:6d:fc:57:eb:0e:d9:d3:e5:73:25:5f:a2:
06:0d:92:13:51:17:38:48:73:26:4e:43:20:39:19:
e8:1d:85:73:ae:95:1a:e6:e8:d1:aa:49:2e:33:35:
2e:db:dc:a0:24:22:fe:32:74:14:da:b4:7c:e9:13:
0d:c6:32:30:5d:9c:55:a0:66:7f:08:8f:c7:7f:45:
45:b4:01:d2:62:97:99:62:e9:c2:ec:89:79:a8:66:
58:c8:14:d1:f4:a3:4c:30:e6:a0:25:34:73:c1:41:
8a:70:a8:15:9b:be:fb:0f:9d:c4:eb:ff:41:91:e1:
dd:42:6a:04:64:ea:17:75:00:84:ef:a4:38:3d:66:
b7:4f:2d:0c:fa:f5:05:11:09:64:48:0b:19:fd:8d:
62:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:E8:53:91:54:DA:05:EF:02:93:92:3D:7E:7C:4E:FF:B5:68:BA:10
X509v3 Authority Key Identifier:
keyid:4E:DC:68:9B:B2:2D:09:47:55:74:F4:1C:0E:5D:97:C0:45:93:09:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ttxom7ItCUdVdPQcDl2XwEWTCSg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/7bbb91-c5b0-4d0b-925b-09be5989d0ac/1/Ttxom7ItCUdVdPQcDl2XwEWTCSg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/7bbb91-c5b0-4d0b-925b-09be5989d0ac/1/Ttxom7ItCUdVdPQcDl2XwEWTCSg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:97:45:1b:ea:9d:6c:ba:eb:32:73:da:42:be:13:ed:b2:82:
bc:99:d5:73:9a:92:d4:46:a0:2c:db:77:6e:a3:c3:fc:f2:ed:
4c:1c:52:5e:e3:0b:ee:3d:f3:cd:6f:66:e7:f6:b2:23:c6:b9:
fb:58:39:40:cb:59:25:e2:54:8d:f0:48:01:0a:c7:db:4c:68:
5b:de:cb:05:a9:ab:38:87:36:77:2d:d6:8a:d8:56:81:27:9b:
0f:9c:f1:14:98:b8:7b:6f:4d:61:55:f3:ca:44:a1:3b:42:34:
65:58:f1:11:c8:4e:07:a4:f4:26:9f:83:3e:f4:11:aa:ae:90:
eb:a9:0d:28:3d:d9:9c:06:0e:d2:d2:69:99:ad:ac:24:74:29:
87:91:f2:44:4f:1e:56:03:b5:55:ad:f3:8a:89:ef:cb:4f:ab:
e9:07:ef:87:ea:0e:f2:d7:5d:c8:5f:8f:d4:98:65:3d:cd:d7:
a1:75:ed:a7:89:13:38:04:35:db:8e:05:e1:2a:28:b5:ec:cd:
ac:3e:a3:af:b0:2d:d6:65:86:de:cb:a9:1c:1f:a3:04:a5:28:
7b:05:c1:03:7d:ae:ab:c2:66:45:16:95:71:24:6a:58:dd:f4:
22:67:33:5d:fc:ba:a6:a7:9f:ae:00:0a:78:44:1a:8d:2d:b3:
9b:32:07:1e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0391bLdU78we2g3idEUcZWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRlZGM2ODliYjIyZDA5NDc1NTc0ZjQxYzBlNWQ5N2MwNDU5
MzA5MjgwHhcNMjYwMzI5MDUwMDQ5WhcNMjYwMzMwMDUwMDQ5WjAzMTEwLwYDVQQD
EygyZWU4NTM5MTU0ZGEwNWVmMDI5MzkyM2Q3ZTdjNGVmZmI1NjhiYTEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1RLizOv5GN5glFOsuViWaWjHIDQQ
Q70e9RADR1ztcRIw9k7J5qEQI/FMS1DnuH2Lrbj4JWqPOLrLeto65Og949bKdPgL
E/pUGq7H/OJ+zAI8FV5cR66bXjqqXRco8vEpHsvxSDKpnHE46ixt/FfrDtnT5XMl
X6IGDZITURc4SHMmTkMgORnoHYVzrpUa5ujRqkkuMzUu29ygJCL+MnQU2rR86RMN
xjIwXZxVoGZ/CI/Hf0VFtAHSYpeZYunC7Il5qGZYyBTR9KNMMOagJTRzwUGKcKgV
m777D53E6/9BkeHdQmoEZOoXdQCE76Q4PWa3Ty0M+vUFEQlkSAsZ/Y1i7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC7oU5FU2gXvApOSPX58Tv+1aLoQMB8GA1UdIwQY
MBaAFE7caJuyLQlHVXT0HA5dl8BFkwkoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHR4b203SXRDVWRWZFBRY0RsMlh3RVdUQ1NnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi83YmJiOTEtYzViMC00ZDBiLTkyNWIt
MDliZTU5ODlkMGFjLzEvVHR4b203SXRDVWRWZFBRY0RsMlh3RVdUQ1NnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi83YmJiOTEtYzViMC00ZDBiLTkyNWItMDliZTU5ODlkMGFj
LzEvVHR4b203SXRDVWRWZFBRY0RsMlh3RVdUQ1NnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfZdFG+qd
bLrrMnPaQr4T7bKCvJnVc5qS1EagLNt3bqPD/PLtTBxSXuML7j3zzW9m5/ayI8a5
+1g5QMtZJeJUjfBIAQrH20xoW97LBamrOIc2dy3WithWgSebD5zxFJi4e29NYVXz
ykShO0I0ZVjxEchOB6T0Jp+DPvQRqq6Q66kNKD3ZnAYO0tJpma2sJHQph5HyRE8e
VgO1Va3zionvy0+r6Qfvh+oO8tddyF+P1JhlPc3XoXXtp4kTOAQ1244F4SootezN
rD6jr7At1mWG3supHB+jBKUoewXBA32uq8JmRRaVcSRqWN30ImczXfy6pqefrgAK
eEQajS2zmzIHHg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 14:57:51 2026 by rpki-client