Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/459e63-40b8-4536-84b4-aa81b9603857/1/TtHX3yWkqdXnJ8QvVenjGD02qTo.mft
File: TtHX3yWkqdXnJ8QvVenjGD02qTo.mft (raw, json)
Hash identifier: nABJkbGw9AY+ce7JVtNuVubIV4YhHsD0F6kNNg8Lj5Y=
Subject key identifier: 2A:75:BB:A1:72:46:B5:2B:A3:F4:65:3A:47:F3:A9:69:35:5F:88:F1
Authority key identifier: 4E:D1:D7:DF:25:A4:A9:D5:E7:27:C4:2F:55:E9:E3:18:3D:36:A9:3A
Certificate issuer: /CN=4ed1d7df25a4a9d5e727c42f55e9e3183d36a93a
Certificate serial: 019D37F785FC3C68F92E8C827C7DC1E96031
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TtHX3yWkqdXnJ8QvVenjGD02qTo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/459e63-40b8-4536-84b4-aa81b9603857/1/TtHX3yWkqdXnJ8QvVenjGD02qTo.mft
Manifest number: 121A
Signing time: Sun 29 Mar 2026 05:01:01 +0000
Manifest this update: Sun 29 Mar 2026 05:01:01 +0000
Manifest next update: Mon 30 Mar 2026 05:01:01 +0000
Files and hashes: 1: TtHX3yWkqdXnJ8QvVenjGD02qTo.crl (hash: CzqHb4atgzdqB1Wb+ri1QLgCw0mYNxEsuAggKnRURMk=)
2: taVJ-Q2hMTd13C7NB7DobfbxLWA.roa (hash: /rtclsT6DmoztL99hwNHoG6rHBH4YjW2YpA+4zkm4f4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/459e63-40b8-4536-84b4-aa81b9603857/1/TtHX3yWkqdXnJ8QvVenjGD02qTo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/459e63-40b8-4536-84b4-aa81b9603857/1/TtHX3yWkqdXnJ8QvVenjGD02qTo.mft
rsync://rpki.ripe.net/repository/DEFAULT/TtHX3yWkqdXnJ8QvVenjGD02qTo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:85:fc:3c:68:f9:2e:8c:82:7c:7d:c1:e9:60:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ed1d7df25a4a9d5e727c42f55e9e3183d36a93a
Validity
Not Before: Mar 29 05:01:01 2026 GMT
Not After : Mar 30 05:01:01 2026 GMT
Subject: CN=2a75bba17246b52ba3f4653a47f3a969355f88f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:15:e9:91:30:49:9a:c1:b4:f8:86:86:c5:45:
0d:11:9e:d4:2a:13:9a:06:ef:58:f6:97:35:08:55:
f1:76:54:0d:b0:3d:f0:35:fe:05:ce:30:d4:1d:1a:
da:42:8c:ba:c7:74:b4:ce:60:f7:75:81:14:c5:a2:
db:ff:b2:82:54:6f:37:6e:61:92:fa:d9:fb:3e:9f:
1c:1f:0c:f1:02:45:4e:76:d6:e7:67:b9:6b:2a:b1:
ef:9a:0d:4e:b6:8d:5f:cc:9a:a8:91:3b:88:72:92:
33:79:c3:12:72:94:e6:6c:98:e2:b4:c9:66:25:b8:
a2:5a:78:7b:e8:77:69:54:be:1e:b7:8d:95:23:d1:
52:64:dd:88:e0:51:5f:bb:73:c8:b1:12:95:6c:bd:
f8:d1:85:dc:56:e9:04:f3:c2:a6:38:cc:22:dc:a8:
37:36:9b:cb:28:4e:ac:72:40:36:eb:0d:13:89:19:
18:ae:ca:08:57:67:c4:78:fb:c3:aa:58:7d:8d:35:
bf:db:0c:51:48:8e:68:47:68:de:b7:1c:0e:c3:c4:
fc:c0:d6:dc:7a:3c:f7:0b:e6:39:68:cf:fd:8e:fd:
f7:d3:90:e2:db:88:a3:27:6b:ec:d2:af:4a:d1:32:
d0:cc:25:db:6a:3a:8a:7a:0f:0f:e8:89:e6:69:1d:
8e:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:75:BB:A1:72:46:B5:2B:A3:F4:65:3A:47:F3:A9:69:35:5F:88:F1
X509v3 Authority Key Identifier:
keyid:4E:D1:D7:DF:25:A4:A9:D5:E7:27:C4:2F:55:E9:E3:18:3D:36:A9:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TtHX3yWkqdXnJ8QvVenjGD02qTo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/459e63-40b8-4536-84b4-aa81b9603857/1/TtHX3yWkqdXnJ8QvVenjGD02qTo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/459e63-40b8-4536-84b4-aa81b9603857/1/TtHX3yWkqdXnJ8QvVenjGD02qTo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:40:1e:6f:cb:bc:9b:ce:57:14:0e:0c:7e:ee:af:c9:0d:9b:
f2:35:c7:e7:bf:7f:4d:71:f9:59:35:0c:34:7f:83:01:72:4d:
06:f6:e1:15:cd:a5:eb:79:db:be:af:10:53:e2:1a:8b:06:10:
33:d0:c9:e9:1f:d6:69:e4:f3:8d:9e:22:19:41:7e:9d:bf:60:
43:2d:ff:91:47:72:15:cc:ff:52:86:f0:6f:1b:ea:52:bd:fe:
26:5d:72:e0:60:8b:f7:6b:f7:bc:de:8d:f4:37:8b:dc:64:6b:
89:b4:a8:7e:e4:1d:fa:56:58:f2:94:0b:4f:7d:9a:f0:66:1a:
56:49:76:d3:67:62:a9:67:f5:64:c9:76:01:93:06:96:32:e1:
51:16:32:06:ec:b7:40:c4:7c:cc:94:fa:09:52:77:9d:18:2f:
c0:0e:50:80:92:d9:61:a5:d7:3f:a6:9d:dc:b9:8f:48:65:12:
56:7f:eb:f0:26:7b:f5:d7:84:dd:e4:2e:88:05:c6:85:d7:f4:
32:f0:f1:9c:f0:36:54:6b:91:54:03:95:7e:15:29:67:ee:2e:
09:c3:f8:3f:8a:1c:6b:e6:d8:59:98:87:fe:18:94:13:5c:ac:
97:02:c0:5e:fb:02:67:9a:43:bc:22:f3:9d:fd:f0:37:1f:05:
fd:f8:16:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:48:56 2026 by rpki-client