Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/017c37-61b6-4d40-881a-53a084390527/1/TtMkzMCQuDGCmReur3ODTwg0Ss4.mft
File: TtMkzMCQuDGCmReur3ODTwg0Ss4.mft (raw, json)
Hash identifier: 3PdrtTSer1TzhoWQXUgy3DDcLZm3jI9wv/gFjWISdvM=
Subject key identifier: A4:94:2F:33:A4:27:A1:52:90:3B:42:6E:D8:8F:49:38:8A:AC:E1:FA
Authority key identifier: 4E:D3:24:CC:C0:90:B8:31:82:99:17:AE:AF:73:83:4F:08:34:4A:CE
Certificate issuer: /CN=4ed324ccc090b831829917aeaf73834f08344ace
Certificate serial: 019F94DC612A17B462544735EB0997C1AF09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TtMkzMCQuDGCmReur3ODTwg0Ss4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/017c37-61b6-4d40-881a-53a084390527/1/TtMkzMCQuDGCmReur3ODTwg0Ss4.mft
Manifest number: 04D8
Signing time: Fri 24 Jul 2026 16:01:38 +0000
Manifest this update: Fri 24 Jul 2026 16:01:38 +0000
Manifest next update: Sat 25 Jul 2026 16:01:38 +0000
Files and hashes: 1: C6nXsG6UDvJjYHmVMk3MguMztUw.roa (hash: DZ6jiw9DI8ZM7KfN0j9o/vZRidGddKGFVOWlQEbKrbI=)
2: TtMkzMCQuDGCmReur3ODTwg0Ss4.crl (hash: Ik/U3iWcLn865Qow4jYRLJk1Uzy5OXrDZOg8Zk30Ixk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/017c37-61b6-4d40-881a-53a084390527/1/TtMkzMCQuDGCmReur3ODTwg0Ss4.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/017c37-61b6-4d40-881a-53a084390527/1/TtMkzMCQuDGCmReur3ODTwg0Ss4.mft
rsync://rpki.ripe.net/repository/DEFAULT/TtMkzMCQuDGCmReur3ODTwg0Ss4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:dc:61:2a:17:b4:62:54:47:35:eb:09:97:c1:af:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ed324ccc090b831829917aeaf73834f08344ace
Validity
Not Before: Jul 24 16:01:38 2026 GMT
Not After : Jul 25 16:01:38 2026 GMT
Subject: CN=a4942f33a427a152903b426ed88f49388aace1fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e2:2a:0d:0f:cd:be:4d:8d:2e:20:0b:1e:c4:
c3:b1:d0:35:b1:f4:0d:13:a3:56:14:aa:e4:63:dd:
71:fb:85:e2:d5:02:92:72:92:89:56:a1:f2:33:a0:
4f:be:e3:43:b1:bf:a7:9e:32:e8:da:f8:c1:30:c0:
7d:b6:9f:2c:fd:3e:87:72:a1:04:9e:60:5a:40:65:
7f:d6:cd:ec:b1:2e:53:b3:15:76:00:2f:be:bf:b7:
33:24:63:ba:78:ef:e1:a5:56:0b:90:43:a6:24:7a:
e7:ed:f0:4f:91:bc:f0:29:a9:f8:f8:33:85:51:31:
6c:f3:c4:34:ee:ab:cf:42:03:fd:09:1a:8f:80:2e:
1e:31:e3:65:5d:d1:70:ad:fa:05:00:45:49:44:e9:
1a:b6:77:5d:d8:33:11:c6:86:25:8d:2a:38:f8:57:
fd:dd:16:9d:5d:ec:3e:7d:8d:56:dc:98:53:8f:60:
d2:ec:61:d7:68:d1:14:bf:ec:7d:e7:07:24:93:c1:
ba:04:99:f4:ac:c5:23:1e:7b:da:c8:9d:b6:fe:0e:
59:fd:25:d8:fd:ca:5f:5e:20:ff:ba:e3:75:e1:eb:
5e:71:ff:82:0f:b3:73:ec:1f:be:af:3f:c1:14:13:
cc:77:ef:e6:6e:cc:89:54:5d:80:b3:09:41:a7:a0:
13:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:94:2F:33:A4:27:A1:52:90:3B:42:6E:D8:8F:49:38:8A:AC:E1:FA
X509v3 Authority Key Identifier:
keyid:4E:D3:24:CC:C0:90:B8:31:82:99:17:AE:AF:73:83:4F:08:34:4A:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TtMkzMCQuDGCmReur3ODTwg0Ss4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/017c37-61b6-4d40-881a-53a084390527/1/TtMkzMCQuDGCmReur3ODTwg0Ss4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/017c37-61b6-4d40-881a-53a084390527/1/TtMkzMCQuDGCmReur3ODTwg0Ss4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:ca:34:40:58:e5:21:bc:5a:ba:6d:1b:83:9b:64:c2:5f:4c:
bf:02:68:42:94:df:90:fa:15:18:60:d9:6c:48:f9:d5:b4:cd:
6b:32:18:c3:98:9c:2f:e1:02:f5:c1:63:1a:ea:9e:fd:0f:ae:
01:e3:90:21:18:bd:d8:d2:00:a7:4f:4f:13:5b:8d:ee:9a:5c:
62:4c:2d:ee:75:ca:a3:86:76:8a:e5:93:25:f6:d2:25:69:43:
82:2b:09:18:27:08:11:95:2b:32:80:7d:9e:3d:3d:55:af:1f:
3b:95:8c:ff:b6:b8:48:c2:ad:79:44:19:1a:10:72:17:c9:24:
01:1d:3b:3d:32:be:01:28:64:20:70:bf:18:37:b4:c0:46:ca:
0d:dc:f8:2e:69:6f:da:be:a2:69:5a:a5:01:83:af:43:6a:b9:
13:c4:1a:38:48:43:aa:25:dc:9d:85:a2:08:fc:16:97:5d:04:
94:7a:50:c6:db:7f:0b:d7:25:f1:50:2d:f8:43:38:cb:54:d7:
43:cd:72:42:1b:27:89:9d:cd:47:6e:f6:22:2f:c8:e0:d0:14:
0b:93:f6:fd:8c:fb:e3:65:ea:6f:00:21:e2:a3:74:9c:fc:01:
72:9a:47:b5:1e:45:cc:38:17:a7:c9:42:4b:48:fa:96:fa:b2:
6a:52:19:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:39:58 2026 by rpki-client