Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/f0dd5f-b972-410b-9907-166fb9db6db3/1/TTAqLdUXpho7lSdG8u6fvkNtY0k.mft
File: TTAqLdUXpho7lSdG8u6fvkNtY0k.mft (raw, json)
Hash identifier: 7SpUsI4DgsPPFwXHuMoEB5B+msrPGvEWm22hqz2qEhg=
Subject key identifier: 03:2A:09:68:35:D1:E1:65:58:16:CC:3D:E3:A3:3B:68:28:D2:DA:E4
Authority key identifier: 4D:30:2A:2D:D5:17:A6:1A:3B:95:27:46:F2:EE:9F:BE:43:6D:63:49
Certificate issuer: /CN=4d302a2dd517a61a3b952746f2ee9fbe436d6349
Certificate serial: 019E1C7E0D44068094ED45982F8A2C58D33D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TTAqLdUXpho7lSdG8u6fvkNtY0k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/f0dd5f-b972-410b-9907-166fb9db6db3/1/TTAqLdUXpho7lSdG8u6fvkNtY0k.mft
Manifest number: 190A
Signing time: Tue 12 May 2026 14:01:23 +0000
Manifest this update: Tue 12 May 2026 14:01:23 +0000
Manifest next update: Wed 13 May 2026 14:01:23 +0000
Files and hashes: 1: MKcSKQuThlhl7-lUDky950t59Bo.roa (hash: fmVr/24w+km0YFsLjQinoWMje0xwl7aW8GTMFVmYXv4=)
2: Nj8TjPnXMYEU1O-KPe0uF1aj5lI.roa (hash: 2REceW8NS4BgdGbGaQMtAyU9R7M7AyhHdxZZ2m9dzWY=)
3: TTAqLdUXpho7lSdG8u6fvkNtY0k.crl (hash: yA0lB53jdfpT5eiMNdb3J8PNGjY1g9Ujtx8eSdgq9rA=)
4: XIFzkJPJ71521E26Mrj2xnc0JrU.asa (hash: VlbNe+O5EvKvAXRSzSuJJZA5UZMsBVV8HUf17LLjU3c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/f0dd5f-b972-410b-9907-166fb9db6db3/1/TTAqLdUXpho7lSdG8u6fvkNtY0k.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/f0dd5f-b972-410b-9907-166fb9db6db3/1/TTAqLdUXpho7lSdG8u6fvkNtY0k.mft
rsync://rpki.ripe.net/repository/DEFAULT/TTAqLdUXpho7lSdG8u6fvkNtY0k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:7e:0d:44:06:80:94:ed:45:98:2f:8a:2c:58:d3:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d302a2dd517a61a3b952746f2ee9fbe436d6349
Validity
Not Before: May 12 14:01:23 2026 GMT
Not After : May 13 14:01:23 2026 GMT
Subject: CN=032a096835d1e1655816cc3de3a33b6828d2dae4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:a6:cb:38:15:74:e0:1a:e5:da:d0:b6:ff:8e:
a0:53:d0:94:9f:2f:dd:55:23:50:e1:6a:bb:71:cd:
4b:e3:b7:17:4c:d7:d5:83:6e:db:dc:9a:00:40:53:
d1:88:6f:5c:98:fa:ad:38:a8:21:69:6c:e3:d6:4e:
d3:fe:c2:35:a7:75:36:0c:ef:a6:e4:fc:43:96:19:
ca:7d:a0:df:dc:8e:b9:00:fc:93:b5:70:f8:10:27:
2d:8c:01:09:17:e5:41:43:db:bf:6c:41:e3:24:2b:
0c:2a:99:96:09:d4:ff:0c:d4:97:43:c5:11:7c:56:
f5:70:db:10:c7:57:f0:29:8f:bd:49:9f:aa:c2:10:
90:88:8b:fe:c5:1e:40:3a:0d:55:76:4d:93:3e:e8:
39:43:d0:8b:f0:fd:92:33:40:0a:81:99:0b:84:be:
69:1b:7e:1e:51:7b:8b:71:4a:7a:2f:04:2d:ae:40:
c6:54:00:4d:a9:a1:1d:93:51:64:c9:b2:fc:5f:a4:
66:01:c6:b4:b3:a5:62:c3:ae:ee:a8:5f:17:24:28:
51:9e:c4:8a:9b:4d:7f:8c:8a:21:6d:51:38:51:ae:
62:d6:f6:46:6d:1b:6c:78:6b:cf:b1:e1:0e:ed:44:
b4:fa:b7:f8:ea:d1:4d:fc:39:d6:f9:a4:c6:c9:a2:
e6:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:2A:09:68:35:D1:E1:65:58:16:CC:3D:E3:A3:3B:68:28:D2:DA:E4
X509v3 Authority Key Identifier:
keyid:4D:30:2A:2D:D5:17:A6:1A:3B:95:27:46:F2:EE:9F:BE:43:6D:63:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TTAqLdUXpho7lSdG8u6fvkNtY0k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/f0dd5f-b972-410b-9907-166fb9db6db3/1/TTAqLdUXpho7lSdG8u6fvkNtY0k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/f0dd5f-b972-410b-9907-166fb9db6db3/1/TTAqLdUXpho7lSdG8u6fvkNtY0k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:58:2c:64:1e:2e:72:01:31:f1:bc:0e:3a:32:3c:60:08:5a:
65:33:6e:2a:52:08:4e:43:af:ba:d9:97:f7:a9:2b:55:83:a4:
fb:89:84:e0:11:ff:77:55:9f:f5:1b:11:40:32:fd:ef:28:b2:
ac:da:85:24:46:60:f1:a1:28:dd:73:45:07:3f:f5:23:41:e1:
69:40:f8:58:93:ab:82:6b:84:2f:72:3a:19:b0:5a:47:a8:37:
fd:24:8c:21:1e:31:9f:e2:e4:a0:40:9a:9e:81:f3:b3:f3:6f:
1c:d1:cd:e1:9b:d9:cb:86:58:f9:77:cc:97:83:99:c4:c0:f5:
04:9e:dc:35:53:e7:1b:1c:ad:08:a5:aa:8f:a7:1e:09:75:79:
11:85:6f:8c:ae:54:a9:e4:df:6f:64:ff:cc:87:49:5a:b7:7f:
d2:5a:22:b8:4a:40:23:28:06:4a:0b:68:73:37:f2:f9:c2:c9:
02:02:9a:b9:d1:93:ba:52:82:a3:f5:18:77:42:92:cf:38:03:
02:2e:56:b2:a9:96:5e:a0:ab:5e:d3:17:78:2e:68:48:8f:2e:
da:dd:96:81:20:cf:43:40:29:79:ef:0a:15:a0:52:28:17:00:
f8:5d:4c:e8:8a:4a:84:b9:bd:1b:f0:4d:cb:af:f7:bd:f7:25:
26:0b:d1:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:26:15 2026 by rpki-client