Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/f0dd5f-b972-410b-9907-166fb9db6db3/1/TTAqLdUXpho7lSdG8u6fvkNtY0k.mft
File: TTAqLdUXpho7lSdG8u6fvkNtY0k.mft (raw, json)
Hash identifier: jDIqkw/eeSejGIXzYOjugOCJuTMJ2L0eTDNOFjz8FNY=
Subject key identifier: CF:67:06:04:6B:FA:27:42:4C:9A:BE:07:B1:61:58:2D:81:0C:B1:7E
Authority key identifier: 4D:30:2A:2D:D5:17:A6:1A:3B:95:27:46:F2:EE:9F:BE:43:6D:63:49
Certificate issuer: /CN=4d302a2dd517a61a3b952746f2ee9fbe436d6349
Certificate serial: 019D389C32B5A960367C461564F45E095142
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TTAqLdUXpho7lSdG8u6fvkNtY0k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/f0dd5f-b972-410b-9907-166fb9db6db3/1/TTAqLdUXpho7lSdG8u6fvkNtY0k.mft
Manifest number: 1894
Signing time: Sun 29 Mar 2026 08:00:53 +0000
Manifest this update: Sun 29 Mar 2026 08:00:53 +0000
Manifest next update: Mon 30 Mar 2026 08:00:53 +0000
Files and hashes: 1: MKcSKQuThlhl7-lUDky950t59Bo.roa (hash: fmVr/24w+km0YFsLjQinoWMje0xwl7aW8GTMFVmYXv4=)
2: Nj8TjPnXMYEU1O-KPe0uF1aj5lI.roa (hash: 2REceW8NS4BgdGbGaQMtAyU9R7M7AyhHdxZZ2m9dzWY=)
3: TTAqLdUXpho7lSdG8u6fvkNtY0k.crl (hash: yqRvhOMnukKpyiVnMYDnuq1kxhIpsrq3h6r2TslGD1k=)
4: XIFzkJPJ71521E26Mrj2xnc0JrU.asa (hash: VlbNe+O5EvKvAXRSzSuJJZA5UZMsBVV8HUf17LLjU3c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/f0dd5f-b972-410b-9907-166fb9db6db3/1/TTAqLdUXpho7lSdG8u6fvkNtY0k.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/f0dd5f-b972-410b-9907-166fb9db6db3/1/TTAqLdUXpho7lSdG8u6fvkNtY0k.mft
rsync://rpki.ripe.net/repository/DEFAULT/TTAqLdUXpho7lSdG8u6fvkNtY0k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:32:b5:a9:60:36:7c:46:15:64:f4:5e:09:51:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d302a2dd517a61a3b952746f2ee9fbe436d6349
Validity
Not Before: Mar 29 08:00:53 2026 GMT
Not After : Mar 30 08:00:53 2026 GMT
Subject: CN=cf6706046bfa27424c9abe07b161582d810cb17e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:fa:30:f4:4c:36:e4:50:b3:2b:77:90:5e:af:
6a:e6:71:1f:70:10:76:06:8f:ea:0d:32:be:a4:ac:
6e:22:36:3a:9e:b9:3c:90:c4:ce:ce:71:b7:dc:68:
70:4c:a1:a6:8b:a4:45:23:4b:f2:a5:2b:4d:8c:5b:
67:eb:47:a5:c1:c9:22:6a:8d:a2:cb:3a:9d:ad:96:
9f:05:22:a9:85:d5:74:cc:48:91:6e:22:1d:06:11:
2e:56:3d:81:df:5f:41:40:b0:c8:47:14:12:0b:a3:
1f:1e:4f:a7:2d:ed:02:47:22:60:0b:a4:b3:c5:a9:
c0:fe:bd:8d:d2:b2:0a:3c:1f:2e:17:b6:0d:35:86:
ed:5f:b0:2c:fa:f9:b1:82:20:88:ed:6d:74:ae:23:
d4:32:0f:00:d4:58:bf:28:ee:bf:3c:3d:fb:bb:da:
1c:7e:04:23:04:fd:04:77:7b:be:51:c7:b2:88:90:
46:c0:23:78:64:eb:41:f1:ec:fe:8e:8d:74:ea:4d:
89:77:54:75:cf:5a:5f:3b:5b:1b:a1:15:64:9a:e0:
7d:cb:23:ed:2e:58:c1:39:7e:f9:32:81:db:0e:3b:
d3:56:87:81:24:e5:0e:a8:99:c9:af:a7:52:ff:da:
e8:af:77:36:4c:24:9f:e0:59:5e:47:a4:1e:a8:8c:
37:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:67:06:04:6B:FA:27:42:4C:9A:BE:07:B1:61:58:2D:81:0C:B1:7E
X509v3 Authority Key Identifier:
keyid:4D:30:2A:2D:D5:17:A6:1A:3B:95:27:46:F2:EE:9F:BE:43:6D:63:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TTAqLdUXpho7lSdG8u6fvkNtY0k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/f0dd5f-b972-410b-9907-166fb9db6db3/1/TTAqLdUXpho7lSdG8u6fvkNtY0k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/f0dd5f-b972-410b-9907-166fb9db6db3/1/TTAqLdUXpho7lSdG8u6fvkNtY0k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:a1:81:bd:ea:80:d2:0a:b9:ff:7e:f2:42:09:a8:e8:2a:d5:
c2:8f:2b:84:b7:07:20:d4:f3:0b:aa:be:ea:58:ae:a7:ab:da:
8a:65:82:b5:b5:e3:04:e6:be:4e:a6:5c:e4:8d:3b:56:53:02:
d6:ff:2e:08:4c:69:09:f7:43:16:10:b4:6c:ab:9b:09:fe:9e:
f5:70:4e:8e:e8:82:0b:8a:80:bb:70:c4:db:ac:09:e0:7a:d0:
81:8d:a1:58:26:ed:7f:46:c7:aa:c5:ae:c2:d3:b0:6f:a0:11:
66:bb:60:e5:e0:de:38:ec:0e:31:90:b7:66:3d:c3:75:1e:10:
c3:aa:7a:90:cf:37:a5:0f:77:23:ef:53:61:b6:df:2b:bc:12:
7a:af:d4:a6:79:85:7a:66:ce:5c:df:9e:43:6b:a8:a3:71:12:
4b:48:cf:28:ca:76:4e:de:0e:39:36:f2:e8:d9:ea:1f:67:bd:
a6:60:67:7b:5f:13:8b:2b:ff:f7:5a:dc:4b:06:23:f9:d7:81:
10:38:d4:1d:d0:bf:78:f7:a1:b3:9d:e5:42:3b:c1:f9:49:29:
fd:e5:6c:77:ea:a9:37:ae:34:7a:25:54:be:f3:2c:59:b2:a7:
21:f2:9c:46:77:e7:38:07:52:8c:9c:29:8a:3a:ed:69:2d:b3:
42:d7:1b:2f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04nDK1qWA2fEYVZPReCVFCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRkMzAyYTJkZDUxN2E2MWEzYjk1Mjc0NmYyZWU5ZmJlNDM2
ZDYzNDkwHhcNMjYwMzI5MDgwMDUzWhcNMjYwMzMwMDgwMDUzWjAzMTEwLwYDVQQD
EyhjZjY3MDYwNDZiZmEyNzQyNGM5YWJlMDdiMTYxNTgyZDgxMGNiMTdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1vow9Ew25FCzK3eQXq9q5nEfcBB2
Bo/qDTK+pKxuIjY6nrk8kMTOznG33GhwTKGmi6RFI0vypStNjFtn60elwckiao2i
yzqdrZafBSKphdV0zEiRbiIdBhEuVj2B319BQLDIRxQSC6MfHk+nLe0CRyJgC6Sz
xanA/r2N0rIKPB8uF7YNNYbtX7As+vmxgiCI7W10riPUMg8A1Fi/KO6/PD37u9oc
fgQjBP0Ed3u+UceyiJBGwCN4ZOtB8ez+jo106k2Jd1R1z1pfO1sboRVkmuB9yyPt
LljBOX75MoHbDjvTVoeBJOUOqJnJr6dS/9ror3c2TCSf4FleR6QeqIw3EwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM9nBgRr+idCTJq+B7FhWC2BDLF+MB8GA1UdIwQY
MBaAFE0wKi3VF6YaO5UnRvLun75DbWNJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVFRBcUxkVVhwaG83bFNkRzh1NmZ2a050WTBrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9mMGRkNWYtYjk3Mi00MTBiLTk5MDct
MTY2ZmI5ZGI2ZGIzLzEvVFRBcUxkVVhwaG83bFNkRzh1NmZ2a050WTBrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi9mMGRkNWYtYjk3Mi00MTBiLTk5MDctMTY2ZmI5ZGI2ZGIz
LzEvVFRBcUxkVVhwaG83bFNkRzh1NmZ2a050WTBrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMqGBveqA
0gq5/37yQgmo6CrVwo8rhLcHINTzC6q+6liup6vaimWCtbXjBOa+TqZc5I07VlMC
1v8uCExpCfdDFhC0bKubCf6e9XBOjuiCC4qAu3DE26wJ4HrQgY2hWCbtf0bHqsWu
wtOwb6ARZrtg5eDeOOwOMZC3Zj3DdR4Qw6p6kM83pQ93I+9TYbbfK7wSeq/UpnmF
embOXN+eQ2uoo3ESS0jPKMp2Tt4OOTby6NnqH2e9pmBne18Tiyv/91rcSwYj+deB
EDjUHdC/ePehs53lQjvB+Ukp/eVsd+qpN640eiVUvvMsWbKnIfKcRnfnOAdSjJwp
ijrtaS2zQtcbLw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 17:49:00 2026 by rpki-client