Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dc/017c37-61b6-4d40-881a-53a084390527/1/TtMkzMCQuDGCmReur3ODTwg0Ss4.mft
File: TtMkzMCQuDGCmReur3ODTwg0Ss4.mft (raw, json)
Hash identifier: dhYykiknX8bxelHju+uOPcy4P5uJowc1dGhPLWpQmQ0=
Subject key identifier: 4E:A4:BF:FB:24:82:5F:8B:29:4D:8C:B5:DB:5A:47:74:38:9F:48:38
Authority key identifier: 4E:D3:24:CC:C0:90:B8:31:82:99:17:AE:AF:73:83:4F:08:34:4A:CE
Certificate issuer: /CN=4ed324ccc090b831829917aeaf73834f08344ace
Certificate serial: 01A0EC9CD7611093196CD9BB66F3D9F2FFE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TtMkzMCQuDGCmReur3ODTwg0Ss4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/017c37-61b6-4d40-881a-53a084390527/1/TtMkzMCQuDGCmReur3ODTwg0Ss4.mft
Manifest number: 058A
Signing time: Tue 29 Sep 2026 10:01:36 +0000
Manifest this update: Tue 29 Sep 2026 10:01:36 +0000
Manifest next update: Wed 30 Sep 2026 10:01:36 +0000
Files and hashes: 1: C6nXsG6UDvJjYHmVMk3MguMztUw.roa (hash: DZ6jiw9DI8ZM7KfN0j9o/vZRidGddKGFVOWlQEbKrbI=)
2: TtMkzMCQuDGCmReur3ODTwg0Ss4.crl (hash: jfREeWM6QvzXduc+yDOI4sEq+YjdHVp1rV77Ud8BgAQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/017c37-61b6-4d40-881a-53a084390527/1/TtMkzMCQuDGCmReur3ODTwg0Ss4.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/017c37-61b6-4d40-881a-53a084390527/1/TtMkzMCQuDGCmReur3ODTwg0Ss4.mft
rsync://rpki.ripe.net/repository/DEFAULT/TtMkzMCQuDGCmReur3ODTwg0Ss4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 08:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ec:9c:d7:61:10:93:19:6c:d9:bb:66:f3:d9:f2:ff:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ed324ccc090b831829917aeaf73834f08344ace
Validity
Not Before: Sep 29 10:01:36 2026 GMT
Not After : Sep 30 10:01:36 2026 GMT
Subject: CN=4ea4bffb24825f8b294d8cb5db5a4774389f4838
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:b1:27:6f:0f:84:ae:fb:6b:7f:33:2f:2f:58:
fc:df:4f:d0:37:e7:59:b0:d8:6e:7a:8a:44:48:7a:
94:8b:96:b1:b3:08:1e:18:7b:a3:23:c7:87:d0:74:
ee:c3:3b:29:75:42:d4:bd:8a:88:2a:7e:6b:10:95:
31:02:b4:77:3d:14:40:75:be:68:bb:1b:15:26:54:
0c:2a:68:de:58:63:b4:59:f3:fd:88:49:b1:65:2c:
3c:84:03:eb:7e:a3:d6:93:69:85:a8:65:8c:4a:a7:
4b:a7:71:5c:ff:0e:fe:79:00:30:61:c4:1b:6e:85:
67:46:6c:d0:1d:aa:be:ab:f0:41:2d:a4:31:09:ca:
c3:26:34:8e:79:4a:23:b9:ef:cd:22:79:bd:4e:40:
28:29:f6:7d:c0:7d:2f:9a:14:4d:b1:38:97:28:b1:
4a:2e:51:4b:99:73:7c:4c:fb:3d:4c:82:a8:9c:cb:
89:38:8a:6c:bb:d1:f4:06:97:a2:dc:14:f0:79:55:
7c:cc:36:cf:9b:3e:a3:60:ec:77:1c:4f:43:cd:dc:
c3:83:13:5b:4c:d4:11:c3:c6:1f:3e:7b:b5:30:8b:
40:98:fa:de:c1:39:fe:7a:61:01:08:bd:ab:98:6b:
6d:3a:80:28:66:e2:0c:09:bf:96:db:df:76:7f:cb:
0c:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:A4:BF:FB:24:82:5F:8B:29:4D:8C:B5:DB:5A:47:74:38:9F:48:38
X509v3 Authority Key Identifier:
keyid:4E:D3:24:CC:C0:90:B8:31:82:99:17:AE:AF:73:83:4F:08:34:4A:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TtMkzMCQuDGCmReur3ODTwg0Ss4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/017c37-61b6-4d40-881a-53a084390527/1/TtMkzMCQuDGCmReur3ODTwg0Ss4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/017c37-61b6-4d40-881a-53a084390527/1/TtMkzMCQuDGCmReur3ODTwg0Ss4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:36:fb:28:89:3e:91:40:76:81:98:9f:ae:0f:84:c7:75:eb:
ca:56:68:f9:ac:4b:6b:22:cd:a7:a1:22:87:29:34:bc:c1:cb:
d8:54:e4:58:93:86:92:81:5e:37:eb:b4:5a:2c:88:f2:11:52:
30:62:70:e5:93:22:90:00:97:9e:ed:b3:94:2c:04:78:54:39:
d8:81:90:51:d8:76:ac:ad:81:68:64:34:b1:cc:03:5b:7e:34:
30:1d:c1:bd:da:84:cc:22:75:a2:a6:9b:2e:61:a1:c4:87:cb:
98:fc:cc:92:2c:b6:8f:22:3b:58:99:9d:c8:dc:5b:c7:f0:91:
8d:28:ad:95:5d:08:e7:ff:50:df:b4:87:4b:70:17:72:bd:05:
da:9e:d3:bc:b1:a7:cd:b0:00:e4:16:fc:6b:c7:93:4b:cb:66:
3b:c4:22:b9:a2:f5:66:0c:a7:ab:d0:6a:a0:0e:ac:dd:b6:c2:
f2:80:29:76:38:d0:64:a2:17:00:6b:64:76:db:61:43:93:25:
9b:01:fa:5d:ad:a3:1e:06:10:cd:34:bf:11:87:e0:92:04:d6:
56:cb:4c:a0:29:a3:db:22:6e:92:34:ea:30:76:a9:1e:a7:9b:
97:84:28:2e:2e:88:3f:fe:a6:d6:28:14:3b:bd:0e:6c:91:58:
94:6f:ff:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 13:07:31 2026 by rpki-client