Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/84a5dd-5cf2-4857-bd93-3c711a15fa5c/1/ttaENqdjOfZxRBz71QrUAdPAD_8.mft
File: ttaENqdjOfZxRBz71QrUAdPAD_8.mft (raw, json)
Hash identifier: C6tK2YB/SSO8rl+HiXyKmzrhohCAY+8OdHK/VnRWigE=
Subject key identifier: 52:94:72:52:C0:5D:DA:EE:CA:8C:AC:AC:58:D9:EC:B6:A0:FA:35:5E
Authority key identifier: B6:D6:84:36:A7:63:39:F6:71:44:1C:FB:D5:0A:D4:01:D3:C0:0F:FF
Certificate issuer: /CN=b6d68436a76339f671441cfbd50ad401d3c00fff
Certificate serial: 019D9AAC170881E66EC9195FA37827F56BA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ttaENqdjOfZxRBz71QrUAdPAD_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/84a5dd-5cf2-4857-bd93-3c711a15fa5c/1/ttaENqdjOfZxRBz71QrUAdPAD_8.mft
Manifest number: 162D
Signing time: Fri 17 Apr 2026 09:01:02 +0000
Manifest this update: Fri 17 Apr 2026 09:01:02 +0000
Manifest next update: Sat 18 Apr 2026 09:01:02 +0000
Files and hashes: 1: BnG9xCYyBYlPUND8AWN9uHS5IZo.roa (hash: qw7izOSv6K3vaghtKBPoCLVyOeT33jc/k8obXSbsCcU=)
2: ttaENqdjOfZxRBz71QrUAdPAD_8.crl (hash: 2vuYgtw59cSJQ2zF+YV+3zbVwDtVC7mG7oht9xYX8NA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/84a5dd-5cf2-4857-bd93-3c711a15fa5c/1/ttaENqdjOfZxRBz71QrUAdPAD_8.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/84a5dd-5cf2-4857-bd93-3c711a15fa5c/1/ttaENqdjOfZxRBz71QrUAdPAD_8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ttaENqdjOfZxRBz71QrUAdPAD_8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ac:17:08:81:e6:6e:c9:19:5f:a3:78:27:f5:6b:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6d68436a76339f671441cfbd50ad401d3c00fff
Validity
Not Before: Apr 17 09:01:02 2026 GMT
Not After : Apr 18 09:01:02 2026 GMT
Subject: CN=52947252c05ddaeeca8cacac58d9ecb6a0fa355e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:83:f6:69:77:ac:37:4c:c4:b0:ab:7d:cc:73:
db:36:97:c9:23:dd:8f:d2:dc:1e:6a:d2:c8:df:1b:
14:ff:93:5a:2e:bc:04:01:1f:d4:f3:0e:f7:a2:a1:
f9:1f:21:44:81:90:ec:2c:ab:36:e4:dc:c1:d7:40:
57:17:c6:d6:16:15:a9:ee:b0:60:71:19:63:7c:49:
b6:98:75:bd:79:da:bf:e8:a0:43:b7:69:84:1e:44:
a2:dd:d5:67:4c:f6:6c:36:53:4c:e6:d5:1c:f7:79:
ec:48:e4:97:3c:20:3e:d1:e7:4d:83:3d:45:fa:63:
64:83:f1:09:4e:c2:32:8c:7c:27:18:1f:29:af:f9:
50:59:1e:76:b0:f2:71:c2:0f:6f:91:f4:6d:b6:04:
c9:cc:a5:a8:19:67:ae:54:33:cc:20:bc:ac:0c:17:
f6:60:ef:2b:bc:cb:4a:4a:c9:89:81:45:ef:2e:f3:
4f:45:58:e5:9d:b7:2d:8c:50:6e:1c:fd:72:39:8a:
67:21:fa:bf:b8:1e:6d:d4:f3:7a:f2:7e:fd:32:1c:
22:d6:64:82:c4:76:e0:b9:ef:ae:4f:07:96:42:45:
6a:d9:9c:be:c6:ea:da:4c:72:8b:cf:12:23:99:07:
11:44:9c:a7:79:02:81:df:f6:be:90:df:bc:1a:06:
29:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:94:72:52:C0:5D:DA:EE:CA:8C:AC:AC:58:D9:EC:B6:A0:FA:35:5E
X509v3 Authority Key Identifier:
keyid:B6:D6:84:36:A7:63:39:F6:71:44:1C:FB:D5:0A:D4:01:D3:C0:0F:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ttaENqdjOfZxRBz71QrUAdPAD_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/84a5dd-5cf2-4857-bd93-3c711a15fa5c/1/ttaENqdjOfZxRBz71QrUAdPAD_8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/84a5dd-5cf2-4857-bd93-3c711a15fa5c/1/ttaENqdjOfZxRBz71QrUAdPAD_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:9f:8a:ae:28:1e:34:fd:e1:83:3f:92:64:55:e4:f5:b4:7c:
c6:13:dd:50:cb:d2:ba:5d:40:bb:c2:1c:88:f6:12:1b:52:98:
42:5a:3d:1b:ce:06:51:d7:08:8d:d5:c0:e8:07:ad:fc:f3:3e:
b3:3a:ff:05:39:8b:d2:c9:6b:73:50:88:a3:68:62:ba:ec:30:
f0:56:ee:71:79:cd:c7:13:5c:78:74:8d:6f:42:be:6e:74:d2:
ad:1b:43:0f:2a:cf:17:f9:a5:a1:a1:56:ea:8e:04:23:9a:77:
a8:a7:93:9c:11:19:a7:6f:e0:7b:46:36:34:78:f1:fa:91:8a:
c9:d6:bf:8c:d4:f2:7d:57:1f:1b:8c:0a:d5:65:99:9d:5e:60:
68:f5:73:14:2b:34:78:07:6c:73:9a:86:a8:81:b8:ec:e3:8e:
16:3c:b1:2d:9a:46:3d:1e:55:9b:76:2a:02:39:e6:bb:da:bf:
9f:90:bd:12:f8:57:e5:ff:6c:42:15:bc:20:79:13:58:89:be:
30:5a:9e:d6:8c:b0:bc:ac:ea:5f:54:63:25:c7:72:81:7a:75:
f0:73:7b:3b:ef:bf:0e:37:a2:42:5e:16:9c:ef:40:95:fd:1e:
57:ad:d9:bb:8e:e9:41:63:69:d8:b3:48:bd:70:09:0d:f8:8c:
b9:23:cc:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:35:25 2026 by rpki-client