Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/74b996-80ee-4c39-8e74-350e681b99d1/1/TtA31O4-XScGWtgDVlgqL9wrSI0.mft
File: TtA31O4-XScGWtgDVlgqL9wrSI0.mft (raw, json)
Hash identifier: 8uETFxBrfT6jsxMqVejUT3KkEpcVrX77wlkTeK0gZ6E=
Subject key identifier: 58:2F:24:FF:20:D8:C3:27:FA:3C:55:DA:E1:CB:E8:96:E8:59:4A:83
Authority key identifier: 4E:D0:37:D4:EE:3E:5D:27:06:5A:D8:03:56:58:2A:2F:DC:2B:48:8D
Certificate issuer: /CN=4ed037d4ee3e5d27065ad80356582a2fdc2b488d
Certificate serial: 019F935AE2EEF626A23C691B10987AAC26DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TtA31O4-XScGWtgDVlgqL9wrSI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/74b996-80ee-4c39-8e74-350e681b99d1/1/TtA31O4-XScGWtgDVlgqL9wrSI0.mft
Manifest number: 1345
Signing time: Fri 24 Jul 2026 09:00:34 +0000
Manifest this update: Fri 24 Jul 2026 09:00:34 +0000
Manifest next update: Sat 25 Jul 2026 09:00:34 +0000
Files and hashes: 1: TtA31O4-XScGWtgDVlgqL9wrSI0.crl (hash: QDquwWabBEBFgwQTAgmRQqzZjgimK/BUi95nMHW10j8=)
2: dkZVoeRJR-__79SdUjWpgfrqgX0.roa (hash: hRQs/VOKf6Kl6D61x2oomcbiDqJtvslx7y4t6WRaaHw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/74b996-80ee-4c39-8e74-350e681b99d1/1/TtA31O4-XScGWtgDVlgqL9wrSI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/74b996-80ee-4c39-8e74-350e681b99d1/1/TtA31O4-XScGWtgDVlgqL9wrSI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/TtA31O4-XScGWtgDVlgqL9wrSI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:5a:e2:ee:f6:26:a2:3c:69:1b:10:98:7a:ac:26:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ed037d4ee3e5d27065ad80356582a2fdc2b488d
Validity
Not Before: Jul 24 09:00:34 2026 GMT
Not After : Jul 25 09:00:34 2026 GMT
Subject: CN=582f24ff20d8c327fa3c55dae1cbe896e8594a83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:b1:e8:23:da:43:5f:8c:d3:9e:5c:8a:d3:14:
dd:14:9d:fe:d4:1d:ca:e6:6c:49:9b:51:d8:e2:51:
ef:11:fe:1a:a4:11:3d:dd:ca:df:61:31:14:94:6b:
aa:9b:81:5d:35:71:99:59:6d:20:27:55:37:cf:6d:
62:1d:a4:f6:f5:03:85:bb:bf:72:58:de:df:98:d5:
b7:d5:60:1f:c7:21:d2:81:e2:64:48:5c:19:75:c3:
fb:45:30:66:84:30:8d:90:2d:0c:59:5c:f7:0e:2b:
66:4c:6f:92:0b:5e:da:75:9e:da:b4:d8:5a:c1:68:
7b:65:c1:77:6a:5b:1a:74:76:60:fb:1f:70:d7:c3:
72:1f:08:e6:8f:cb:34:f3:55:87:98:85:79:7b:d6:
48:26:a4:59:07:a3:65:22:51:0a:ef:59:47:41:a8:
79:39:d9:4b:b6:0f:7c:db:dd:6a:32:f2:6a:99:5f:
72:fc:5c:72:e7:06:83:fb:c2:f6:57:06:46:c6:2a:
5d:27:05:64:aa:ca:34:b7:58:d9:cd:cb:e4:3f:12:
d5:9c:1d:3c:19:c5:d9:f4:d4:b1:51:a3:d0:91:aa:
29:d4:90:c0:e4:a8:f4:6a:da:62:0f:0e:74:ee:5e:
ec:eb:b8:22:1f:92:b9:2e:a1:9f:84:cf:12:f5:64:
a0:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:2F:24:FF:20:D8:C3:27:FA:3C:55:DA:E1:CB:E8:96:E8:59:4A:83
X509v3 Authority Key Identifier:
keyid:4E:D0:37:D4:EE:3E:5D:27:06:5A:D8:03:56:58:2A:2F:DC:2B:48:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TtA31O4-XScGWtgDVlgqL9wrSI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/74b996-80ee-4c39-8e74-350e681b99d1/1/TtA31O4-XScGWtgDVlgqL9wrSI0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/74b996-80ee-4c39-8e74-350e681b99d1/1/TtA31O4-XScGWtgDVlgqL9wrSI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:7e:e1:a7:6f:0f:13:76:83:14:72:1e:f7:a6:32:47:5d:f9:
be:02:18:a7:21:bc:c7:08:09:23:dd:97:3b:dd:4f:04:56:59:
59:bb:73:45:1b:47:8c:93:a6:11:7f:a7:8b:c1:bb:67:80:5e:
37:48:cc:9d:35:ca:89:88:62:8d:d9:8f:f8:3c:26:ce:47:54:
20:da:ff:4f:ca:da:95:11:81:dc:b5:67:55:0f:1c:32:c2:e8:
db:be:c4:ba:89:02:b1:39:cc:af:47:87:0c:2d:1c:c5:62:31:
f6:b3:d5:52:aa:45:49:b6:a6:cd:93:e9:33:4b:b6:0d:4a:e0:
64:02:97:41:28:85:0b:cc:cc:1f:d2:41:79:f9:1d:43:a8:6a:
61:d4:b3:60:9c:b4:41:a3:8a:c0:8b:cf:00:45:05:2c:02:90:
51:ed:a1:6b:aa:8a:a0:47:63:72:91:0f:b6:ba:63:e5:bd:66:
70:66:70:c7:31:30:45:56:1c:4c:c8:bd:6c:41:26:13:25:04:
66:92:6f:d4:1f:d8:bf:fd:a5:e4:29:17:3c:ec:f3:ca:52:7f:
99:f3:70:c6:f3:c7:8b:1b:e8:90:99:bc:a9:f0:27:35:7e:4d:
55:dc:4a:45:65:dd:09:25:c4:86:74:6e:23:c3:e8:91:6d:c5:
cc:59:e3:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:10:22 2026 by rpki-client