Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/017c37-61b6-4d40-881a-53a084390527/1/TtMkzMCQuDGCmReur3ODTwg0Ss4.mft
File: TtMkzMCQuDGCmReur3ODTwg0Ss4.mft (raw, json)
Hash identifier: DgBlJ/guqjD5nW+gvz5THzqK1Insw4uDfNqEnZH51LI=
Subject key identifier: 0C:69:99:D1:AB:FC:7D:58:95:25:5B:94:2D:58:38:15:7B:07:A0:23
Authority key identifier: 4E:D3:24:CC:C0:90:B8:31:82:99:17:AE:AF:73:83:4F:08:34:4A:CE
Certificate issuer: /CN=4ed324ccc090b831829917aeaf73834f08344ace
Certificate serial: 019D28F2A4E7413F21F68F007CA6DD504DA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TtMkzMCQuDGCmReur3ODTwg0Ss4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/017c37-61b6-4d40-881a-53a084390527/1/TtMkzMCQuDGCmReur3ODTwg0Ss4.mft
Manifest number: 0397
Signing time: Thu 26 Mar 2026 07:01:23 +0000
Manifest this update: Thu 26 Mar 2026 07:01:23 +0000
Manifest next update: Fri 27 Mar 2026 07:01:23 +0000
Files and hashes: 1: C6nXsG6UDvJjYHmVMk3MguMztUw.roa (hash: DZ6jiw9DI8ZM7KfN0j9o/vZRidGddKGFVOWlQEbKrbI=)
2: TtMkzMCQuDGCmReur3ODTwg0Ss4.crl (hash: vNmFbZWL4wz3IXQoYxQrw+NxubdOnOR8tNwKNzuhD/E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/017c37-61b6-4d40-881a-53a084390527/1/TtMkzMCQuDGCmReur3ODTwg0Ss4.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/017c37-61b6-4d40-881a-53a084390527/1/TtMkzMCQuDGCmReur3ODTwg0Ss4.mft
rsync://rpki.ripe.net/repository/DEFAULT/TtMkzMCQuDGCmReur3ODTwg0Ss4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:a4:e7:41:3f:21:f6:8f:00:7c:a6:dd:50:4d:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ed324ccc090b831829917aeaf73834f08344ace
Validity
Not Before: Mar 26 07:01:23 2026 GMT
Not After : Mar 27 07:01:23 2026 GMT
Subject: CN=0c6999d1abfc7d5895255b942d5838157b07a023
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:c3:2e:24:e4:e5:8d:c7:23:3b:0c:56:08:fc:
da:70:ae:99:61:2c:6f:d0:e3:0f:59:29:3d:0c:50:
87:f3:41:75:c2:f2:e0:51:01:e0:5d:f9:62:8d:ec:
ff:50:99:dd:29:2f:cf:46:16:12:a8:29:64:c5:db:
a5:31:83:08:b1:d9:67:2b:e2:da:23:d0:12:65:b9:
93:31:d8:5f:e7:2a:bd:a6:69:9c:eb:78:57:63:cf:
bc:09:1c:50:57:23:69:cc:57:c9:34:d3:13:6b:c1:
28:be:89:e8:1b:1c:9a:f1:08:92:92:1d:41:fd:8f:
cf:82:89:45:8a:11:85:d8:68:73:4f:c4:0e:3e:cc:
10:8b:30:de:6d:ad:36:83:bc:c5:f7:19:ef:a4:6e:
6c:c1:0b:36:8e:b9:9b:e0:31:64:5b:a4:49:95:d1:
76:d8:29:07:81:65:5d:b1:d0:37:d8:e0:19:c2:d4:
9a:a2:14:d7:9a:83:a1:27:cb:b8:c1:03:4b:00:e7:
ea:33:c0:22:9d:c7:c7:3a:a5:0a:df:a3:45:c3:a4:
cc:4a:ed:81:a6:97:9e:79:4c:ca:8e:40:a3:46:3b:
3a:6e:de:fa:c2:3c:0f:4a:87:37:ad:ac:c6:d1:f3:
3e:b1:b1:ba:89:d9:e9:6a:82:a1:db:42:7a:df:e3:
65:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:69:99:D1:AB:FC:7D:58:95:25:5B:94:2D:58:38:15:7B:07:A0:23
X509v3 Authority Key Identifier:
keyid:4E:D3:24:CC:C0:90:B8:31:82:99:17:AE:AF:73:83:4F:08:34:4A:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TtMkzMCQuDGCmReur3ODTwg0Ss4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/017c37-61b6-4d40-881a-53a084390527/1/TtMkzMCQuDGCmReur3ODTwg0Ss4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/017c37-61b6-4d40-881a-53a084390527/1/TtMkzMCQuDGCmReur3ODTwg0Ss4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:e9:2e:de:55:dd:29:1f:07:53:73:7d:ca:27:dd:39:31:27:
7e:3b:6b:0f:16:f9:74:cc:10:77:04:5c:5f:e5:1e:73:28:0a:
8e:87:28:dc:fc:1f:95:22:b7:e4:a7:7e:80:4e:42:80:35:ba:
c2:9c:db:7a:21:59:af:d9:04:6e:a3:c1:7f:55:e6:d9:6e:1d:
33:ff:4b:0a:de:f2:08:5e:1c:6f:0e:d8:64:de:8e:38:ff:7e:
74:af:f4:a6:c3:27:a4:3a:98:66:b8:2c:5a:ab:4c:7a:b4:cf:
4c:f2:7d:a6:a9:71:de:e9:e1:f5:1c:f4:1b:b6:92:93:07:c5:
2d:c7:8b:ef:0c:63:4e:bd:87:81:52:07:ee:0b:1a:5a:f1:91:
a0:58:de:ba:3c:73:26:16:4e:31:ef:ef:eb:b0:ad:a3:70:25:
0b:85:e4:dd:26:f6:54:ae:e2:05:5e:5f:56:81:dc:f5:78:62:
56:0f:02:53:fe:2f:c4:83:f8:85:1b:27:e5:4f:6b:a5:8c:84:
96:48:3c:56:57:4f:06:a0:bc:37:4f:1e:03:cc:7e:f8:f0:37:
fb:c8:a8:4a:62:ba:9b:55:6f:02:ff:32:9e:2e:b6:28:cb:ec:
c2:a6:43:f8:16:7f:88:56:17:ce:ed:bd:b5:7e:4a:76:c1:ef:
c4:10:ba:1e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0o8qTnQT8h9o8AfKbdUE2oMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRlZDMyNGNjYzA5MGI4MzE4Mjk5MTdhZWFmNzM4MzRmMDgz
NDRhY2UwHhcNMjYwMzI2MDcwMTIzWhcNMjYwMzI3MDcwMTIzWjAzMTEwLwYDVQQD
EygwYzY5OTlkMWFiZmM3ZDU4OTUyNTViOTQyZDU4MzgxNTdiMDdhMDIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlMMuJOTljccjOwxWCPzacK6ZYSxv
0OMPWSk9DFCH80F1wvLgUQHgXflijez/UJndKS/PRhYSqClkxdulMYMIsdlnK+La
I9ASZbmTMdhf5yq9pmmc63hXY8+8CRxQVyNpzFfJNNMTa8EovonoGxya8QiSkh1B
/Y/PgolFihGF2GhzT8QOPswQizDeba02g7zF9xnvpG5swQs2jrmb4DFkW6RJldF2
2CkHgWVdsdA32OAZwtSaohTXmoOhJ8u4wQNLAOfqM8AincfHOqUK36NFw6TMSu2B
ppeeeUzKjkCjRjs6bt76wjwPSoc3razG0fM+sbG6idnpaoKh20J63+NljwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAxpmdGr/H1YlSVblC1YOBV7B6AjMB8GA1UdIwQY
MBaAFE7TJMzAkLgxgpkXrq9zg08INErOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHRNa3pNQ1F1REdDbVJldXIzT0RUd2cwU3M0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy8wMTdjMzctNjFiNi00ZDQwLTg4MWEt
NTNhMDg0MzkwNTI3LzEvVHRNa3pNQ1F1REdDbVJldXIzT0RUd2cwU3M0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYy8wMTdjMzctNjFiNi00ZDQwLTg4MWEtNTNhMDg0MzkwNTI3
LzEvVHRNa3pNQ1F1REdDbVJldXIzT0RUd2cwU3M0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASOku3lXd
KR8HU3N9yifdOTEnfjtrDxb5dMwQdwRcX+UecygKjoco3PwflSK35Kd+gE5CgDW6
wpzbeiFZr9kEbqPBf1Xm2W4dM/9LCt7yCF4cbw7YZN6OOP9+dK/0psMnpDqYZrgs
WqtMerTPTPJ9pqlx3unh9Rz0G7aSkwfFLceL7wxjTr2HgVIH7gsaWvGRoFjeujxz
JhZOMe/v67Cto3AlC4Xk3Sb2VK7iBV5fVoHc9XhiVg8CU/4vxIP4hRsn5U9rpYyE
lkg8VldPBqC8N08eA8x++PA3+8ioSmK6m1VvAv8yni62KMvswqZD+BZ/iFYXzu29
tX5KdsHvxBC6Hg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 11:35:09 2026 by rpki-client