Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/f0dd5f-b972-410b-9907-166fb9db6db3/1/TTAqLdUXpho7lSdG8u6fvkNtY0k.mft
File: TTAqLdUXpho7lSdG8u6fvkNtY0k.mft (raw, json)
Hash identifier: uTi09V6xttZoveaM0mtqBMO9HbM5yDHZRamsTa5KCQY=
Subject key identifier: 25:19:B8:A8:4B:AA:B5:55:A3:B0:AC:78:35:2F:B3:38:C9:B5:A1:73
Authority key identifier: 4D:30:2A:2D:D5:17:A6:1A:3B:95:27:46:F2:EE:9F:BE:43:6D:63:49
Certificate issuer: /CN=4d302a2dd517a61a3b952746f2ee9fbe436d6349
Certificate serial: 019D292917BD3A4FA980CB319C7F1448AD95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TTAqLdUXpho7lSdG8u6fvkNtY0k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/f0dd5f-b972-410b-9907-166fb9db6db3/1/TTAqLdUXpho7lSdG8u6fvkNtY0k.mft
Manifest number: 188C
Signing time: Thu 26 Mar 2026 08:00:52 +0000
Manifest this update: Thu 26 Mar 2026 08:00:52 +0000
Manifest next update: Fri 27 Mar 2026 08:00:52 +0000
Files and hashes: 1: MKcSKQuThlhl7-lUDky950t59Bo.roa (hash: fmVr/24w+km0YFsLjQinoWMje0xwl7aW8GTMFVmYXv4=)
2: Nj8TjPnXMYEU1O-KPe0uF1aj5lI.roa (hash: 2REceW8NS4BgdGbGaQMtAyU9R7M7AyhHdxZZ2m9dzWY=)
3: TTAqLdUXpho7lSdG8u6fvkNtY0k.crl (hash: 23RIFZk5mCCKXiXLMvF0jYpYm7mdTpO/CJ3jYEgMI4A=)
4: XIFzkJPJ71521E26Mrj2xnc0JrU.asa (hash: VlbNe+O5EvKvAXRSzSuJJZA5UZMsBVV8HUf17LLjU3c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/f0dd5f-b972-410b-9907-166fb9db6db3/1/TTAqLdUXpho7lSdG8u6fvkNtY0k.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/f0dd5f-b972-410b-9907-166fb9db6db3/1/TTAqLdUXpho7lSdG8u6fvkNtY0k.mft
rsync://rpki.ripe.net/repository/DEFAULT/TTAqLdUXpho7lSdG8u6fvkNtY0k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 08:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:29:17:bd:3a:4f:a9:80:cb:31:9c:7f:14:48:ad:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d302a2dd517a61a3b952746f2ee9fbe436d6349
Validity
Not Before: Mar 26 08:00:52 2026 GMT
Not After : Mar 27 08:00:52 2026 GMT
Subject: CN=2519b8a84baab555a3b0ac78352fb338c9b5a173
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:d1:57:a7:b0:6e:d5:df:25:66:e4:83:e1:0d:
fa:d1:88:7a:68:03:4a:4c:a4:72:f0:a7:7d:17:74:
d6:5f:59:b8:91:c6:7e:cc:5a:16:28:b4:37:d3:a6:
79:8c:a6:8b:d3:ae:a5:a8:c2:dd:1c:78:09:bd:52:
40:4e:60:16:e3:6f:a6:53:d5:27:e9:2a:9d:0b:34:
c5:65:ac:10:35:5c:14:98:9e:5e:77:40:90:94:42:
69:be:6d:b6:32:49:11:a5:e2:91:09:a2:9c:7d:80:
8b:14:b3:e0:66:d2:df:c2:ea:22:b2:60:db:af:d5:
df:4d:7f:62:46:a1:39:5c:87:c7:33:07:69:8d:e7:
2a:83:7f:01:99:77:77:90:e9:39:30:9a:a6:22:61:
4a:78:a5:e5:92:88:7d:20:e2:0a:fb:c1:e1:91:a3:
a1:8f:2a:01:94:c8:81:48:95:95:3d:fe:6b:7c:dc:
f0:e3:24:1b:94:b0:dc:83:43:9a:16:71:9f:59:67:
74:4a:61:fe:49:49:a1:5b:29:9c:a4:58:3e:91:7d:
68:7f:90:d3:6b:55:bf:92:24:3f:43:0f:0a:e1:22:
de:31:20:9e:0d:9e:9c:23:6d:f9:ec:83:84:51:e7:
4d:9b:e5:22:df:c5:ed:8f:6b:ec:e4:52:40:c1:51:
06:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:19:B8:A8:4B:AA:B5:55:A3:B0:AC:78:35:2F:B3:38:C9:B5:A1:73
X509v3 Authority Key Identifier:
keyid:4D:30:2A:2D:D5:17:A6:1A:3B:95:27:46:F2:EE:9F:BE:43:6D:63:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TTAqLdUXpho7lSdG8u6fvkNtY0k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/f0dd5f-b972-410b-9907-166fb9db6db3/1/TTAqLdUXpho7lSdG8u6fvkNtY0k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/f0dd5f-b972-410b-9907-166fb9db6db3/1/TTAqLdUXpho7lSdG8u6fvkNtY0k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:71:03:78:a7:67:aa:4c:e5:5b:09:1b:a8:95:aa:43:19:be:
30:e7:d5:a8:bf:f7:69:54:35:7c:14:94:eb:f6:c0:53:82:e2:
53:b8:ac:f0:5e:8d:57:32:72:aa:61:24:84:1a:b8:4e:6e:a0:
1c:d4:26:8e:13:ec:6e:dd:14:cc:5c:17:4c:22:dd:12:e9:b2:
16:81:f6:f6:46:5b:0f:60:63:ac:5d:fb:ba:3b:aa:f2:d1:45:
6a:4b:60:80:a3:30:31:72:88:16:37:8b:c6:0b:56:b7:49:23:
4f:96:87:ba:76:3f:1e:e4:49:fd:9c:3a:28:95:b6:95:1f:1d:
36:ff:a1:b0:79:fd:01:1f:18:d2:db:cf:6e:6c:ef:e6:bc:12:
79:ad:bf:02:fc:6e:5a:a4:ce:2d:50:af:0c:cc:92:18:cc:73:
44:e9:79:ec:a8:1f:7c:44:fd:1e:c9:50:cb:aa:55:5d:96:68:
c1:02:3c:a8:aa:e5:4c:19:e2:7f:56:fa:40:26:f4:51:39:ec:
b2:10:70:98:ef:b3:b0:5c:87:29:d3:3c:89:93:ef:cf:73:93:
8d:9e:d3:17:e0:08:73:1b:b5:64:d8:26:da:72:20:30:2d:8f:
b2:a9:21:d2:89:cc:6d:7a:79:39:12:e9:66:eb:3a:76:b0:6b:
e3:ac:f7:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:35:29 2026 by rpki-client