Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/f0dd5f-b972-410b-9907-166fb9db6db3/1/TTAqLdUXpho7lSdG8u6fvkNtY0k.mft
File: TTAqLdUXpho7lSdG8u6fvkNtY0k.mft (raw, json)
Hash identifier: ur6/2CGTkFq/r5lDi2+T9v9okWQzvEmtku5EWhk7QSA=
Subject key identifier: 61:6B:E5:DE:7C:20:7A:E2:53:82:3F:6C:DF:7A:5D:E1:BC:75:FF:E0
Authority key identifier: 4D:30:2A:2D:D5:17:A6:1A:3B:95:27:46:F2:EE:9F:BE:43:6D:63:49
Certificate issuer: /CN=4d302a2dd517a61a3b952746f2ee9fbe436d6349
Certificate serial: 019F9090BD5C1418248BBC5DF479B0D72FDE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TTAqLdUXpho7lSdG8u6fvkNtY0k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/f0dd5f-b972-410b-9907-166fb9db6db3/1/TTAqLdUXpho7lSdG8u6fvkNtY0k.mft
Manifest number: 19CD
Signing time: Thu 23 Jul 2026 20:00:32 +0000
Manifest this update: Thu 23 Jul 2026 20:00:32 +0000
Manifest next update: Fri 24 Jul 2026 20:00:32 +0000
Files and hashes: 1: 3XQl2aZGjx0G4B6lNhjKCU52GfY.roa (hash: FT3KtfFmeYDjTpv2vREaKYo1FYKB1NfeU+bTJfNupFI=)
2: BtjheHtMrVrls5cRXqprBV_cY_E.roa (hash: 0/bLQWtIHEPcsIkY5+SuruKHSF6pye9PcBvY10R3rFA=)
3: MKcSKQuThlhl7-lUDky950t59Bo.roa (hash: fmVr/24w+km0YFsLjQinoWMje0xwl7aW8GTMFVmYXv4=)
4: TTAqLdUXpho7lSdG8u6fvkNtY0k.crl (hash: fLSb+oHvjjvzVjYDEfHHVQr0w3j7tmxTiqLssx9/aLU=)
5: XIFzkJPJ71521E26Mrj2xnc0JrU.asa (hash: VlbNe+O5EvKvAXRSzSuJJZA5UZMsBVV8HUf17LLjU3c=)
6: btNWOWDT0MwxaxnuKalIShgF76M.roa (hash: +XzTFhG5C/Y9XMQYyxlHrlhbiNm3k0WsQB2hF0bjvaI=)
7: chjNAC8nAY_1idgxZ4cutOeVbAY.roa (hash: jS+FDp72Ee84TtCvWXMWI7/kBBph6ZyKnK6dpccqwmo=)
8: ev8fsS2pQVCaQ4feU5zWLckpMSc.roa (hash: N1tvT2Z1uLP/2N8fWYJQhCEwoN2M5Na1KjKaQbkdT3I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/f0dd5f-b972-410b-9907-166fb9db6db3/1/TTAqLdUXpho7lSdG8u6fvkNtY0k.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/f0dd5f-b972-410b-9907-166fb9db6db3/1/TTAqLdUXpho7lSdG8u6fvkNtY0k.mft
rsync://rpki.ripe.net/repository/DEFAULT/TTAqLdUXpho7lSdG8u6fvkNtY0k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:90:bd:5c:14:18:24:8b:bc:5d:f4:79:b0:d7:2f:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d302a2dd517a61a3b952746f2ee9fbe436d6349
Validity
Not Before: Jul 23 20:00:32 2026 GMT
Not After : Jul 24 20:00:32 2026 GMT
Subject: CN=616be5de7c207ae253823f6cdf7a5de1bc75ffe0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:cf:bc:1b:d1:af:b4:9e:34:56:88:60:6f:32:
e2:3d:a3:04:1a:fc:b2:73:ac:80:5f:bd:23:6e:e5:
17:23:90:2e:97:5d:c4:7b:2a:65:4b:ab:0a:a7:1b:
71:d3:13:0e:db:63:24:6d:c1:ff:74:58:cd:ce:20:
16:ed:d7:00:65:13:27:ff:c8:99:97:b0:e8:bf:22:
02:51:d3:31:48:ea:b4:dd:4f:75:41:63:ac:c4:8b:
f0:f5:d0:9a:d7:c7:43:d9:b4:d3:4d:16:54:af:10:
8c:f6:f3:06:68:b4:b6:61:c7:e4:d9:76:ba:ad:74:
47:60:78:4b:c3:b8:12:01:48:ee:66:1b:14:5f:9a:
f9:8b:73:b1:0d:78:c1:3e:4a:1e:4b:a9:88:9a:d9:
29:a5:35:6a:99:d0:1f:71:76:ac:3a:e2:b2:b5:2b:
30:ff:96:62:38:e5:10:1d:20:49:0d:c6:f9:cf:5b:
20:46:44:e2:da:96:76:c5:61:16:df:5e:83:3d:7b:
b6:e5:07:2f:17:64:bf:65:dd:49:d7:55:49:84:ad:
8d:a6:c5:65:f9:dd:f7:a2:3c:84:47:4a:72:ef:b7:
96:47:3b:c7:11:d9:0d:d1:50:d5:5c:6f:5d:75:1e:
d9:7a:72:e1:c7:51:2c:91:26:ae:92:08:7e:c6:77:
6a:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:6B:E5:DE:7C:20:7A:E2:53:82:3F:6C:DF:7A:5D:E1:BC:75:FF:E0
X509v3 Authority Key Identifier:
keyid:4D:30:2A:2D:D5:17:A6:1A:3B:95:27:46:F2:EE:9F:BE:43:6D:63:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TTAqLdUXpho7lSdG8u6fvkNtY0k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/f0dd5f-b972-410b-9907-166fb9db6db3/1/TTAqLdUXpho7lSdG8u6fvkNtY0k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/f0dd5f-b972-410b-9907-166fb9db6db3/1/TTAqLdUXpho7lSdG8u6fvkNtY0k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:77:21:11:3c:5e:9a:0f:e0:69:0b:89:b8:ff:1d:74:62:f2:
9c:0b:2f:ba:ea:ea:68:ed:2a:95:ba:8b:5f:a3:34:91:fc:44:
61:7c:70:f9:8d:e7:ac:1e:85:e9:ca:46:a1:2e:9e:6c:a8:60:
b3:ab:90:70:eb:a1:ad:3c:df:a1:ff:f6:50:3e:34:4e:b5:4a:
83:dc:dd:ad:17:b6:10:7e:a1:ef:88:c2:e4:80:91:85:5b:44:
f4:74:5e:c0:7c:6b:fd:13:dc:8c:e0:61:b8:bb:c4:57:bc:36:
6c:88:c9:3f:b3:24:33:9a:c7:54:2c:fb:e9:9e:a3:6b:c8:e8:
ff:48:d3:b0:0f:69:94:32:3d:73:7c:af:16:50:1a:9f:c2:7b:
98:5b:5c:49:14:10:44:d4:a6:1d:96:90:78:e7:10:58:1a:5e:
02:5e:90:fe:ce:96:84:b0:6e:40:f5:38:24:26:69:69:88:bf:
ec:54:1b:22:c5:d1:cf:60:40:18:57:58:07:88:0b:64:92:ba:
e2:b5:dc:15:a4:71:96:31:ba:e3:fd:e5:36:b9:60:40:bb:43:
ec:69:31:80:12:96:e1:37:21:fa:9b:ff:07:7a:f5:7d:f2:a2:
a5:bb:cc:29:10:ba:1d:1a:d0:13:47:6c:48:04:1f:f3:17:47:
8a:ca:22:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:45:18 2026 by rpki-client