Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/84a5dd-5cf2-4857-bd93-3c711a15fa5c/1/ttaENqdjOfZxRBz71QrUAdPAD_8.mft
File: ttaENqdjOfZxRBz71QrUAdPAD_8.mft (raw, json)
Hash identifier: BLGpjQSWjxOf9ij5d1IKb/+pD/FUCiPy4DMeXGkiQgk=
Subject key identifier: 33:CE:A4:6B:1C:06:95:58:1B:88:90:49:DA:85:60:1A:63:3A:21:72
Authority key identifier: B6:D6:84:36:A7:63:39:F6:71:44:1C:FB:D5:0A:D4:01:D3:C0:0F:FF
Certificate issuer: /CN=b6d68436a76339f671441cfbd50ad401d3c00fff
Certificate serial: 019CAB33F63277F9A820B28E685DDD566629
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ttaENqdjOfZxRBz71QrUAdPAD_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/84a5dd-5cf2-4857-bd93-3c711a15fa5c/1/ttaENqdjOfZxRBz71QrUAdPAD_8.mft
Manifest number: 15B1
Signing time: Sun 01 Mar 2026 21:00:35 +0000
Manifest this update: Sun 01 Mar 2026 21:00:35 +0000
Manifest next update: Mon 02 Mar 2026 21:00:35 +0000
Files and hashes: 1: BnG9xCYyBYlPUND8AWN9uHS5IZo.roa (hash: qw7izOSv6K3vaghtKBPoCLVyOeT33jc/k8obXSbsCcU=)
2: ttaENqdjOfZxRBz71QrUAdPAD_8.crl (hash: uownwPc31OuUXlVdaqod1yHpntpwfxLvDkmrVUZndOo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/84a5dd-5cf2-4857-bd93-3c711a15fa5c/1/ttaENqdjOfZxRBz71QrUAdPAD_8.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/84a5dd-5cf2-4857-bd93-3c711a15fa5c/1/ttaENqdjOfZxRBz71QrUAdPAD_8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ttaENqdjOfZxRBz71QrUAdPAD_8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 21:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:33:f6:32:77:f9:a8:20:b2:8e:68:5d:dd:56:66:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6d68436a76339f671441cfbd50ad401d3c00fff
Validity
Not Before: Mar 1 21:00:35 2026 GMT
Not After : Mar 2 21:00:35 2026 GMT
Subject: CN=33cea46b1c0695581b889049da85601a633a2172
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:13:76:e2:81:bf:30:4d:cf:f1:24:33:de:c2:
17:bd:34:91:2d:27:ee:4f:6f:46:a1:f0:59:b8:7e:
e2:fd:30:3b:11:dc:2f:69:f3:6e:74:74:6f:fd:91:
c1:b1:21:2d:52:6d:70:ec:1e:c5:f5:67:cf:ef:6d:
e9:dc:12:2c:13:32:d7:aa:97:5a:1b:c9:f6:4b:db:
59:d7:e5:91:4a:03:dc:28:0f:8f:04:da:a9:6b:26:
56:ee:fd:ab:63:68:ea:9f:1e:0e:9b:b4:b1:4d:52:
6e:6b:4e:af:68:c8:dc:ab:5e:59:9e:85:18:51:7c:
7a:79:b4:c5:9c:23:21:15:1d:7b:d0:eb:69:83:6c:
9e:1a:f5:26:f0:e3:eb:20:f8:df:41:0a:74:85:08:
23:32:ea:d5:45:52:a1:99:79:e6:14:1d:75:e1:d1:
93:52:40:b9:82:9d:57:4c:f9:cb:02:b9:2d:74:d2:
c8:86:de:f4:b0:e6:65:9e:76:4d:fd:bb:74:90:c6:
27:c0:5e:b8:1d:ff:ae:30:c1:ad:2f:05:78:17:f3:
a3:71:7c:20:14:45:23:5c:50:14:88:80:89:55:cf:
05:27:a2:c0:e6:c3:e4:6d:69:a6:41:3a:34:b8:0f:
37:b5:b7:c4:ae:90:e7:76:c8:c6:a2:ba:02:9d:cd:
0b:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:CE:A4:6B:1C:06:95:58:1B:88:90:49:DA:85:60:1A:63:3A:21:72
X509v3 Authority Key Identifier:
keyid:B6:D6:84:36:A7:63:39:F6:71:44:1C:FB:D5:0A:D4:01:D3:C0:0F:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ttaENqdjOfZxRBz71QrUAdPAD_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/84a5dd-5cf2-4857-bd93-3c711a15fa5c/1/ttaENqdjOfZxRBz71QrUAdPAD_8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/84a5dd-5cf2-4857-bd93-3c711a15fa5c/1/ttaENqdjOfZxRBz71QrUAdPAD_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:f4:6c:9f:a3:5b:0e:6c:49:87:8d:bf:f5:9b:63:de:24:f5:
23:87:50:ea:22:b5:39:c8:c9:6d:42:32:02:c4:41:7a:3e:b7:
6d:f3:93:7f:6c:5f:23:0f:b3:c3:d3:f4:2b:d1:1b:9f:b2:51:
17:90:f5:2d:ca:99:d6:32:e7:83:51:40:d1:f0:ff:0b:ed:bd:
a7:4e:cf:64:bf:40:c9:36:4a:13:27:f2:b2:7b:ed:3e:0f:f8:
14:38:69:76:57:78:16:18:de:2a:72:02:ea:27:6a:51:39:ef:
fe:e3:99:cc:e5:a1:94:7a:ad:0a:38:39:50:86:23:45:8c:a8:
ac:bc:36:a0:a2:05:3e:cc:a7:81:5a:8e:86:fa:24:51:e9:1f:
dd:35:fa:ee:2a:c0:a2:7a:0b:09:12:a3:3d:4a:41:b5:be:09:
13:13:a0:96:a5:3d:d5:af:6b:78:8f:87:e7:d3:0b:86:35:81:
71:5c:75:6b:91:33:91:68:1a:da:8f:7f:4d:b4:a6:64:af:44:
d7:aa:b5:aa:6d:d0:47:a4:6c:24:f6:10:11:15:7b:ef:19:3f:
ed:dc:66:56:4a:5a:89:f6:1e:0f:5d:47:f0:6f:22:e4:9e:09:
e0:73:70:24:58:68:07:67:27:3e:21:cc:8b:b3:5e:82:86:29:
31:6e:c4:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:52:50 2026 by rpki-client