Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/686d4b-f15b-4530-b91b-e0c406b64672/1/TtTTbmM3JKGxeUm8QiR2lk518GU.mft
File: TtTTbmM3JKGxeUm8QiR2lk518GU.mft (raw, json)
Hash identifier: aUkDp38F75pSNMMtuq8Auna8BsrXJh5744Z5h3A2kdo=
Subject key identifier: BD:D4:29:DD:4C:5F:59:DB:8B:F7:D5:92:12:72:14:2E:9A:0D:04:7F
Authority key identifier: 4E:D4:D3:6E:63:37:24:A1:B1:79:49:BC:42:24:76:96:4E:75:F0:65
Certificate issuer: /CN=4ed4d36e633724a1b17949bc422476964e75f065
Certificate serial: 019D284E56F2149E55DC66A9ED74364A6F02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TtTTbmM3JKGxeUm8QiR2lk518GU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/686d4b-f15b-4530-b91b-e0c406b64672/1/TtTTbmM3JKGxeUm8QiR2lk518GU.mft
Manifest number: 1888
Signing time: Thu 26 Mar 2026 04:01:55 +0000
Manifest this update: Thu 26 Mar 2026 04:01:55 +0000
Manifest next update: Fri 27 Mar 2026 04:01:55 +0000
Files and hashes: 1: TtTTbmM3JKGxeUm8QiR2lk518GU.crl (hash: X7+odpQSE8MUtTngjEMrYHALIVxxMrSKHTpMZ9Cvhc8=)
2: ciYm9mEV2L9eSrKsaReboOeTaEs.roa (hash: y10S4mN+BJMChkxSiJiAL2EsRGyVDqBF8+UMGdjCK70=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/686d4b-f15b-4530-b91b-e0c406b64672/1/TtTTbmM3JKGxeUm8QiR2lk518GU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/686d4b-f15b-4530-b91b-e0c406b64672/1/TtTTbmM3JKGxeUm8QiR2lk518GU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TtTTbmM3JKGxeUm8QiR2lk518GU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 04:01:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4e:56:f2:14:9e:55:dc:66:a9:ed:74:36:4a:6f:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ed4d36e633724a1b17949bc422476964e75f065
Validity
Not Before: Mar 26 04:01:55 2026 GMT
Not After : Mar 27 04:01:55 2026 GMT
Subject: CN=bdd429dd4c5f59db8bf7d5921272142e9a0d047f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:f1:26:03:9b:40:02:f3:93:8d:01:0f:a6:5b:
29:bd:c0:d4:f0:59:69:2f:37:08:b1:4f:4b:81:bc:
c1:16:88:16:e2:41:81:56:8b:37:82:c7:6f:ee:f7:
c1:36:b1:18:9b:37:7f:87:f0:69:4a:7c:e4:71:ad:
19:b7:9f:ed:49:9f:35:d8:34:b9:2f:92:d9:9c:3a:
ef:65:dc:8c:97:4b:13:30:7a:ac:68:95:58:5d:eb:
a5:f6:13:b8:24:94:d0:7d:2a:0f:14:ac:51:1b:c0:
5e:e6:7b:42:54:5a:03:57:88:32:6c:e3:f1:d8:df:
dc:34:c8:d8:74:4e:c8:d7:d6:84:66:41:d1:24:2e:
7e:94:4a:53:93:55:00:c7:07:c1:5d:09:67:5d:c5:
f8:b5:b6:85:4b:8c:fe:ec:4e:af:02:8c:a8:6d:9e:
22:e4:6c:de:57:6c:23:cb:9b:5b:2d:47:84:b9:e9:
82:bd:d4:0c:96:64:6c:06:f7:3f:0a:ab:5d:d5:54:
00:e9:c5:84:f5:87:3e:4f:c4:8f:c4:60:30:04:d5:
4a:92:ce:5c:fb:3e:a5:ea:ee:0a:c6:12:1b:fa:d6:
01:3a:56:7f:fe:9c:cd:a5:70:ef:a8:d5:62:38:6c:
7b:d0:c1:7f:c0:50:37:29:a0:03:76:ac:2f:ba:95:
e8:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:D4:29:DD:4C:5F:59:DB:8B:F7:D5:92:12:72:14:2E:9A:0D:04:7F
X509v3 Authority Key Identifier:
keyid:4E:D4:D3:6E:63:37:24:A1:B1:79:49:BC:42:24:76:96:4E:75:F0:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TtTTbmM3JKGxeUm8QiR2lk518GU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/686d4b-f15b-4530-b91b-e0c406b64672/1/TtTTbmM3JKGxeUm8QiR2lk518GU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/686d4b-f15b-4530-b91b-e0c406b64672/1/TtTTbmM3JKGxeUm8QiR2lk518GU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:aa:0f:d3:ab:25:36:22:74:46:24:af:f8:17:44:4b:09:25:
2c:49:77:28:07:2d:40:1f:77:3a:1e:7e:9a:eb:a0:89:0c:21:
7d:57:ea:b4:68:2e:49:b3:7f:b0:c5:30:65:e7:10:bc:34:a3:
a3:eb:78:52:f8:a8:43:22:2b:bd:3c:f1:44:63:68:96:bd:61:
70:b2:5f:87:79:2b:f1:af:64:05:bb:1a:f9:b2:6e:b6:cb:9e:
28:f6:4e:51:27:f5:c0:7a:4a:a1:73:00:eb:8a:db:d2:c4:e4:
12:2f:ba:92:14:30:4c:d8:79:e6:9a:88:a8:75:99:28:9b:85:
0f:be:7e:92:57:ea:6f:59:0e:82:d8:26:f9:bf:aa:13:36:d8:
3b:2f:c1:45:85:8b:19:3a:e2:ba:d1:62:52:06:ab:1a:e0:29:
f2:c8:9d:5d:7f:7f:c9:13:49:45:bc:aa:31:c4:f9:63:66:60:
5a:7b:e7:4d:c9:cb:8f:8f:1e:c9:12:8a:2d:27:38:c0:2a:90:
f0:51:be:6e:d7:d7:01:2a:21:40:85:ef:3d:79:80:39:06:fc:
5f:5d:3f:5e:11:8d:e3:47:41:b9:f6:de:26:97:88:13:28:aa:
0d:62:46:1d:de:b2:41:fa:43:e5:61:58:67:d4:4a:71:9f:b0:
c4:84:60:15
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0oTlbyFJ5V3Gap7XQ2Sm8CMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRlZDRkMzZlNjMzNzI0YTFiMTc5NDliYzQyMjQ3Njk2NGU3
NWYwNjUwHhcNMjYwMzI2MDQwMTU1WhcNMjYwMzI3MDQwMTU1WjAzMTEwLwYDVQQD
EyhiZGQ0MjlkZDRjNWY1OWRiOGJmN2Q1OTIxMjcyMTQyZTlhMGQwNDdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3vEmA5tAAvOTjQEPplspvcDU8Flp
LzcIsU9LgbzBFogW4kGBVos3gsdv7vfBNrEYmzd/h/BpSnzkca0Zt5/tSZ812DS5
L5LZnDrvZdyMl0sTMHqsaJVYXeul9hO4JJTQfSoPFKxRG8Be5ntCVFoDV4gybOPx
2N/cNMjYdE7I19aEZkHRJC5+lEpTk1UAxwfBXQlnXcX4tbaFS4z+7E6vAoyobZ4i
5GzeV2wjy5tbLUeEuemCvdQMlmRsBvc/Cqtd1VQA6cWE9Yc+T8SPxGAwBNVKks5c
+z6l6u4KxhIb+tYBOlZ//pzNpXDvqNViOGx70MF/wFA3KaADdqwvupXoKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL3UKd1MX1nbi/fVkhJyFC6aDQR/MB8GA1UdIwQY
MBaAFE7U025jNyShsXlJvEIkdpZOdfBlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHRUVGJtTTNKS0d4ZVVtOFFpUjJsazUxOEdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy82ODZkNGItZjE1Yi00NTMwLWI5MWIt
ZTBjNDA2YjY0NjcyLzEvVHRUVGJtTTNKS0d4ZVVtOFFpUjJsazUxOEdVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy82ODZkNGItZjE1Yi00NTMwLWI5MWItZTBjNDA2YjY0Njcy
LzEvVHRUVGJtTTNKS0d4ZVVtOFFpUjJsazUxOEdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALqoP06sl
NiJ0RiSv+BdESwklLEl3KActQB93Oh5+muugiQwhfVfqtGguSbN/sMUwZecQvDSj
o+t4UvioQyIrvTzxRGNolr1hcLJfh3kr8a9kBbsa+bJutsueKPZOUSf1wHpKoXMA
64rb0sTkEi+6khQwTNh55pqIqHWZKJuFD75+klfqb1kOgtgm+b+qEzbYOy/BRYWL
GTriutFiUgarGuAp8sidXX9/yRNJRbyqMcT5Y2ZgWnvnTcnLj48eyRKKLSc4wCqQ
8FG+btfXASohQIXvPXmAOQb8X10/XhGN40dBufbeJpeIEyiqDWJGHd6yQfpD5WFY
Z9RKcZ+wxIRgFQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 16:20:34 2026 by rpki-client