
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6a/74b996-80ee-4c39-8e74-350e681b99d1/1/TtA31O4-XScGWtgDVlgqL9wrSI0.mft
File: TtA31O4-XScGWtgDVlgqL9wrSI0.mft (raw, json)
Hash identifier: 7FBfixReyzxUsUGtwzOMXT6f80/81dI+ocN+nMy2EGw=
Subject key identifier: CD:E0:00:2D:F7:49:32:60:9D:52:78:83:D9:47:2F:A6:81:C7:06:0E
Authority key identifier: 4E:D0:37:D4:EE:3E:5D:27:06:5A:D8:03:56:58:2A:2F:DC:2B:48:8D
Certificate issuer: /CN=4ed037d4ee3e5d27065ad80356582a2fdc2b488d
Certificate serial: 01A12AD6C0132B6D7414D06DACC3CDFC5822
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TtA31O4-XScGWtgDVlgqL9wrSI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/74b996-80ee-4c39-8e74-350e681b99d1/1/TtA31O4-XScGWtgDVlgqL9wrSI0.mft
Manifest number: 1418
Signing time: Sun 11 Oct 2026 12:01:19 +0000
Manifest this update: Sun 11 Oct 2026 12:01:19 +0000
Manifest next update: Mon 12 Oct 2026 12:01:19 +0000
Files and hashes: 1: TtA31O4-XScGWtgDVlgqL9wrSI0.crl (hash: 3vFsuagLA7PORTUX3XBot+hFSKLfKqaMrWJyf8KeVUg=)
2: dkZVoeRJR-__79SdUjWpgfrqgX0.roa (hash: hRQs/VOKf6Kl6D61x2oomcbiDqJtvslx7y4t6WRaaHw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/74b996-80ee-4c39-8e74-350e681b99d1/1/TtA31O4-XScGWtgDVlgqL9wrSI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/74b996-80ee-4c39-8e74-350e681b99d1/1/TtA31O4-XScGWtgDVlgqL9wrSI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/TtA31O4-XScGWtgDVlgqL9wrSI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 05:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2a:d6:c0:13:2b:6d:74:14:d0:6d:ac:c3:cd:fc:58:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ed037d4ee3e5d27065ad80356582a2fdc2b488d
Validity
Not Before: Oct 11 12:01:19 2026 GMT
Not After : Oct 12 12:01:19 2026 GMT
Subject: CN=cde0002df74932609d527883d9472fa681c7060e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:44:bb:23:2c:9f:44:5a:c1:b0:09:26:af:37:
ec:81:0e:76:83:6f:a1:b1:8e:41:a0:b8:12:7b:09:
9d:41:ae:f7:b4:cb:b0:b8:c6:cb:ee:24:6c:e8:fb:
50:ad:84:6c:d3:89:68:a0:64:8f:c1:5d:38:66:36:
42:df:f5:92:6e:2b:c3:92:c2:e3:06:76:5a:73:f1:
90:fb:48:ec:c5:e0:12:ae:81:89:2a:34:ee:35:29:
73:99:b8:e4:11:7d:18:88:d6:6d:03:48:10:0f:cc:
ff:4f:cd:81:08:e4:c0:a3:e9:2f:c0:86:06:47:66:
d3:e2:2c:9b:b6:f3:4c:a7:0a:df:69:5f:92:1e:cc:
9a:c5:f0:6c:71:d7:5c:53:15:ed:b4:69:c6:32:e4:
0e:90:17:a0:fb:ca:c5:90:d0:d4:e4:27:39:2e:48:
d2:ab:e4:d8:6b:a0:29:38:9c:92:1f:7a:07:dc:e3:
cc:4b:a9:2d:06:4a:a6:17:17:53:d7:37:77:da:df:
2f:eb:74:b5:da:c3:55:fa:5a:60:24:29:95:c5:2e:
10:8d:39:99:24:64:36:f1:0a:31:60:95:08:b6:24:
54:4d:68:cd:25:51:c0:b9:e9:d5:82:09:6c:6c:aa:
89:95:81:e4:83:10:bf:6f:f7:05:21:64:d0:25:91:
a7:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:E0:00:2D:F7:49:32:60:9D:52:78:83:D9:47:2F:A6:81:C7:06:0E
X509v3 Authority Key Identifier:
keyid:4E:D0:37:D4:EE:3E:5D:27:06:5A:D8:03:56:58:2A:2F:DC:2B:48:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TtA31O4-XScGWtgDVlgqL9wrSI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/74b996-80ee-4c39-8e74-350e681b99d1/1/TtA31O4-XScGWtgDVlgqL9wrSI0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/74b996-80ee-4c39-8e74-350e681b99d1/1/TtA31O4-XScGWtgDVlgqL9wrSI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:e3:07:7c:36:48:c8:fb:bb:21:d6:f0:1c:12:8c:50:c5:d9:
86:74:f0:dc:6f:44:8d:84:c0:05:1b:66:fb:89:d7:c5:0a:b1:
c6:24:7e:a7:7b:ce:63:d4:26:a7:22:1f:9a:11:9b:75:0f:61:
ce:fe:e2:9d:c3:cd:f8:44:29:0f:5b:43:57:55:59:d3:5f:de:
1b:18:c2:79:30:d4:10:64:f8:79:c5:a1:5d:52:33:25:aa:80:
4a:aa:15:f6:79:ba:84:95:b8:4c:e8:2f:94:6e:2d:41:e5:f8:
de:f7:39:8b:79:17:9b:3c:3f:8e:d1:76:17:23:e0:24:8f:90:
50:5c:fd:2f:17:d5:a5:c8:76:03:c9:7d:b5:be:0d:37:a4:00:
56:a7:fa:a0:03:46:13:29:eb:aa:f3:1f:eb:6f:51:3a:e0:b3:
64:77:a4:c5:f7:f7:0d:4d:f5:7b:8a:db:5b:58:e7:36:c9:05:
f5:c3:50:9e:22:4b:44:59:8e:f2:90:97:c5:47:42:9a:d7:8d:
4e:b5:8d:49:60:e2:2f:8d:06:a8:aa:68:63:f5:79:06:1e:0f:
5d:cf:bc:f9:07:03:27:45:fa:68:0c:cf:00:e2:98:5f:59:7e:
dd:5f:f5:b5:bb:00:93:3b:94:f1:41:7c:fc:e8:95:c4:6a:55:
c4:cd:89:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 15:28:43 2026 by rpki-client