Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/459e63-40b8-4536-84b4-aa81b9603857/1/TtHX3yWkqdXnJ8QvVenjGD02qTo.mft
File: TtHX3yWkqdXnJ8QvVenjGD02qTo.mft (raw, json)
Hash identifier: fjfyCYTrMpepRnDI61Mt+22uStEaISWC2AScHUId1r0=
Subject key identifier: 07:4C:0F:45:69:81:59:F5:6B:05:C3:AB:93:CB:42:75:9D:84:12:0C
Authority key identifier: 4E:D1:D7:DF:25:A4:A9:D5:E7:27:C4:2F:55:E9:E3:18:3D:36:A9:3A
Certificate issuer: /CN=4ed1d7df25a4a9d5e727c42f55e9e3183d36a93a
Certificate serial: 019D288481EB28304FF23F86C378AE995696
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TtHX3yWkqdXnJ8QvVenjGD02qTo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/459e63-40b8-4536-84b4-aa81b9603857/1/TtHX3yWkqdXnJ8QvVenjGD02qTo.mft
Manifest number: 1212
Signing time: Thu 26 Mar 2026 05:01:05 +0000
Manifest this update: Thu 26 Mar 2026 05:01:05 +0000
Manifest next update: Fri 27 Mar 2026 05:01:05 +0000
Files and hashes: 1: TtHX3yWkqdXnJ8QvVenjGD02qTo.crl (hash: qmem7RRb9F9WgRwHopo8fQd+MjXnyUgHBdKA2seNzWM=)
2: taVJ-Q2hMTd13C7NB7DobfbxLWA.roa (hash: /rtclsT6DmoztL99hwNHoG6rHBH4YjW2YpA+4zkm4f4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/459e63-40b8-4536-84b4-aa81b9603857/1/TtHX3yWkqdXnJ8QvVenjGD02qTo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/459e63-40b8-4536-84b4-aa81b9603857/1/TtHX3yWkqdXnJ8QvVenjGD02qTo.mft
rsync://rpki.ripe.net/repository/DEFAULT/TtHX3yWkqdXnJ8QvVenjGD02qTo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:81:eb:28:30:4f:f2:3f:86:c3:78:ae:99:56:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ed1d7df25a4a9d5e727c42f55e9e3183d36a93a
Validity
Not Before: Mar 26 05:01:05 2026 GMT
Not After : Mar 27 05:01:05 2026 GMT
Subject: CN=074c0f45698159f56b05c3ab93cb42759d84120c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:da:cd:92:79:96:24:34:45:8d:48:42:3d:09:
10:51:c4:5e:02:47:7c:5b:2f:62:bc:ce:00:52:73:
f3:9d:78:67:2a:3a:3c:da:fe:08:2c:81:43:f0:2b:
36:70:b8:46:e7:cd:03:8e:76:11:74:e8:29:d4:5f:
2f:d4:98:d7:93:c8:0a:22:18:99:94:a3:e9:7e:8d:
e8:cd:df:28:db:08:a2:59:cf:a5:a5:d5:d7:ff:c9:
22:bd:db:6d:4d:d8:f1:61:c9:3e:ff:95:18:05:c0:
6c:19:2e:e0:af:eb:cd:e8:b8:c7:c7:2c:99:0b:4b:
41:cb:c8:ef:ff:f7:9b:6a:a3:54:de:da:ac:a9:71:
e6:e2:24:78:43:bf:f7:61:f3:0d:f4:9c:74:30:5a:
e5:1e:7f:fb:99:bf:c6:b9:a0:63:61:2b:75:6b:73:
97:81:f2:38:d7:4c:4a:62:6b:ac:39:f6:3e:82:58:
29:9c:3a:aa:87:30:ba:21:49:38:8e:2a:de:1c:9a:
9a:c5:2e:e4:d7:88:69:10:af:51:ee:63:bb:3d:25:
e6:53:b2:4c:c3:3b:50:05:ea:98:f2:c8:92:6a:bb:
63:0c:0e:56:8f:77:f4:99:57:5a:6f:fc:b8:77:cd:
5a:53:05:c1:37:da:e7:c6:7b:63:6a:81:6b:a7:43:
19:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:4C:0F:45:69:81:59:F5:6B:05:C3:AB:93:CB:42:75:9D:84:12:0C
X509v3 Authority Key Identifier:
keyid:4E:D1:D7:DF:25:A4:A9:D5:E7:27:C4:2F:55:E9:E3:18:3D:36:A9:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TtHX3yWkqdXnJ8QvVenjGD02qTo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/459e63-40b8-4536-84b4-aa81b9603857/1/TtHX3yWkqdXnJ8QvVenjGD02qTo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/459e63-40b8-4536-84b4-aa81b9603857/1/TtHX3yWkqdXnJ8QvVenjGD02qTo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c6:55:10:fc:62:82:7a:5f:cc:a3:32:d2:db:91:e6:21:8a:0c:
04:61:ce:cd:d0:b7:bd:8c:1a:f6:d8:9c:49:96:33:8a:76:43:
bc:2c:73:9c:de:96:a0:7a:b1:01:b4:b0:50:20:1f:78:af:25:
a1:2b:c2:a7:af:b9:66:29:33:65:e0:d3:9f:6d:a6:a6:a0:2a:
65:1f:e3:09:20:73:ef:03:65:2f:3f:2d:54:da:74:30:1b:8c:
d4:a2:c5:67:91:b2:c2:50:9d:55:27:35:c8:17:a0:8f:04:48:
f2:4a:b3:16:2c:fe:67:68:86:48:cd:db:09:e2:f0:9a:ae:43:
15:b7:67:cd:ab:4f:2f:e9:c7:e6:4d:0b:0d:99:e9:7a:e9:02:
43:1f:82:aa:bc:ad:28:08:35:0f:49:67:87:e4:6b:22:0d:fe:
c0:bd:3e:c8:6e:14:b7:f3:a0:dc:e6:39:0b:8a:f9:a8:60:fb:
d8:22:4d:e9:82:60:f5:dd:a1:98:c5:35:4e:8f:7a:6e:66:b1:
3f:64:a1:bb:b0:04:ab:70:dc:97:0a:17:d9:f4:75:43:a3:29:
6f:ed:67:5e:3a:74:f9:24:2b:53:03:9e:8a:b5:41:de:66:be:
14:85:cc:01:c0:d6:87:b3:31:ef:95:86:ff:7c:a9:c0:47:20:
75:62:c9:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:31:13 2026 by rpki-client