Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/35bee9-843f-4d38-9286-7aa49becf467/1/Tt5MZdc1r3knftFOtsTPVATHiNU.mft
File: Tt5MZdc1r3knftFOtsTPVATHiNU.mft (raw, json)
Hash identifier: zPGB/g4Wh5Mofkqj+/BKBmqQtzLY+YoPbMf7Efutz8A=
Subject key identifier: 0E:C0:51:01:2F:AB:A1:D4:A3:5F:61:5F:8C:33:1E:74:53:A5:44:1F
Authority key identifier: 4E:DE:4C:65:D7:35:AF:79:27:7E:D1:4E:B6:C4:CF:54:04:C7:88:D5
Certificate issuer: /CN=4ede4c65d735af79277ed14eb6c4cf5404c788d5
Certificate serial: 019D27A8A00BE8F547D81E5AD5C901B8B6F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tt5MZdc1r3knftFOtsTPVATHiNU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/35bee9-843f-4d38-9286-7aa49becf467/1/Tt5MZdc1r3knftFOtsTPVATHiNU.mft
Manifest number: 0AC7
Signing time: Thu 26 Mar 2026 01:00:55 +0000
Manifest this update: Thu 26 Mar 2026 01:00:55 +0000
Manifest next update: Fri 27 Mar 2026 01:00:55 +0000
Files and hashes: 1: TdYAourfzXro8X37Y0IoM8aZBEo.roa (hash: gZYndkQ6uGvgPeqwt5brtKCHj9NVuSxL2FUpX4xFOEs=)
2: Tt5MZdc1r3knftFOtsTPVATHiNU.crl (hash: XlpHx8b5poCthSdwNkxD8yfaR1rwZXxOBRjeI3q/NO4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/35bee9-843f-4d38-9286-7aa49becf467/1/Tt5MZdc1r3knftFOtsTPVATHiNU.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/35bee9-843f-4d38-9286-7aa49becf467/1/Tt5MZdc1r3knftFOtsTPVATHiNU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tt5MZdc1r3knftFOtsTPVATHiNU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:a0:0b:e8:f5:47:d8:1e:5a:d5:c9:01:b8:b6:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ede4c65d735af79277ed14eb6c4cf5404c788d5
Validity
Not Before: Mar 26 01:00:55 2026 GMT
Not After : Mar 27 01:00:55 2026 GMT
Subject: CN=0ec051012faba1d4a35f615f8c331e7453a5441f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:b4:18:1d:c0:65:4f:d6:5c:c3:f3:8b:0a:fc:
a3:17:ab:ba:94:11:6c:0f:8b:61:02:c5:76:01:38:
08:ba:31:b8:3d:8a:11:40:9f:98:91:3e:97:26:e5:
d8:98:b4:91:7d:1e:7d:22:84:71:8a:fb:4a:fa:73:
03:31:d5:bd:e1:58:78:f4:b3:85:c4:49:ce:3f:be:
ed:a3:9c:24:59:af:b3:a5:a9:26:d6:78:db:a2:2d:
fd:cc:21:c0:6b:e3:25:7d:5b:76:06:8b:5c:b4:98:
ff:ff:43:82:12:2c:d9:54:39:d6:ea:2c:3b:a3:5f:
ae:a6:94:92:28:00:5a:89:b5:5e:76:40:96:4e:88:
13:ba:6c:67:f0:c4:ec:1e:cf:13:9e:a8:95:61:87:
13:21:2e:96:c0:13:4a:3f:bc:0e:1f:39:d4:e6:6d:
78:1d:f5:ff:e1:47:43:d7:d8:7e:1c:33:c2:2b:ee:
61:cc:fe:ea:9d:bb:da:9d:d4:8e:a3:25:fd:8e:fc:
a6:a8:e3:64:79:88:47:81:12:a8:47:86:d0:cf:99:
41:4c:09:1f:c0:7f:5e:fe:2b:b2:c5:6b:95:f0:3c:
62:32:35:00:67:d9:55:95:95:78:5e:8e:d4:cb:a4:
80:c6:8d:29:c6:cc:c5:76:26:31:67:16:76:26:b5:
1e:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:C0:51:01:2F:AB:A1:D4:A3:5F:61:5F:8C:33:1E:74:53:A5:44:1F
X509v3 Authority Key Identifier:
keyid:4E:DE:4C:65:D7:35:AF:79:27:7E:D1:4E:B6:C4:CF:54:04:C7:88:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tt5MZdc1r3knftFOtsTPVATHiNU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/35bee9-843f-4d38-9286-7aa49becf467/1/Tt5MZdc1r3knftFOtsTPVATHiNU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/35bee9-843f-4d38-9286-7aa49becf467/1/Tt5MZdc1r3knftFOtsTPVATHiNU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:f4:55:90:6f:f5:98:cd:5f:9d:02:e7:54:63:6c:b0:50:7e:
07:fa:97:75:c5:02:2a:9c:8a:6c:c8:20:0b:1e:78:6a:70:35:
e0:f8:e3:1a:aa:1c:17:59:33:89:64:08:d8:ba:91:c8:78:db:
ad:30:84:18:86:7d:70:c0:e1:68:26:4e:fc:30:e6:53:05:b7:
bb:b3:41:4d:12:3f:a5:d6:c1:96:6c:cb:d9:7a:7b:b1:6e:8b:
66:aa:3b:98:0f:be:f5:30:ec:5d:07:02:ef:cf:ba:50:f9:db:
83:5f:c1:3c:4f:88:48:74:60:83:bb:df:c0:7b:6d:bf:97:04:
18:60:2a:64:4a:d8:c5:07:b1:e5:a4:96:da:89:90:4d:cf:d9:
a5:75:9a:08:c4:95:84:93:02:a5:b1:50:26:22:41:32:0e:03:
57:a8:43:e5:8b:ce:89:14:0d:3b:47:34:45:4f:51:dd:b0:3b:
bc:3e:d5:55:e3:dd:fa:cb:13:7b:97:fe:c4:83:ee:87:66:f4:
b4:1c:68:c7:bf:5d:d9:3f:ce:f9:4e:08:18:e0:20:04:32:5b:
dd:cb:b8:67:1c:40:37:fe:58:48:ea:10:da:ea:e6:67:be:c5:
4f:8c:a9:14:a4:97:0a:bd:e8:02:4f:30:ff:e1:8f:3f:46:53:
0f:39:53:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:14:46 2026 by rpki-client