Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/35bee9-843f-4d38-9286-7aa49becf467/1/Tt5MZdc1r3knftFOtsTPVATHiNU.mft
File: Tt5MZdc1r3knftFOtsTPVATHiNU.mft (raw, json)
Hash identifier: gq54AdIFA9Wd2pdsrKGfv0jUiz/xboH5BXgI9LXq038=
Subject key identifier: 86:8D:0F:42:20:CB:93:9D:5E:92:9C:0D:58:38:79:DA:EA:AE:EC:88
Authority key identifier: 4E:DE:4C:65:D7:35:AF:79:27:7E:D1:4E:B6:C4:CF:54:04:C7:88:D5
Certificate issuer: /CN=4ede4c65d735af79277ed14eb6c4cf5404c788d5
Certificate serial: 019CAA21E0A2723F91E42BBE08D165211F77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tt5MZdc1r3knftFOtsTPVATHiNU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/35bee9-843f-4d38-9286-7aa49becf467/1/Tt5MZdc1r3knftFOtsTPVATHiNU.mft
Manifest number: 0A86
Signing time: Sun 01 Mar 2026 16:01:12 +0000
Manifest this update: Sun 01 Mar 2026 16:01:12 +0000
Manifest next update: Mon 02 Mar 2026 16:01:12 +0000
Files and hashes: 1: TdYAourfzXro8X37Y0IoM8aZBEo.roa (hash: gZYndkQ6uGvgPeqwt5brtKCHj9NVuSxL2FUpX4xFOEs=)
2: Tt5MZdc1r3knftFOtsTPVATHiNU.crl (hash: SFkNiPjsDiO8WnPZaQ9sgc3gubPQHgsDVQt4otXiq+k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/35bee9-843f-4d38-9286-7aa49becf467/1/Tt5MZdc1r3knftFOtsTPVATHiNU.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/35bee9-843f-4d38-9286-7aa49becf467/1/Tt5MZdc1r3knftFOtsTPVATHiNU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tt5MZdc1r3knftFOtsTPVATHiNU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 16:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:21:e0:a2:72:3f:91:e4:2b:be:08:d1:65:21:1f:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ede4c65d735af79277ed14eb6c4cf5404c788d5
Validity
Not Before: Mar 1 16:01:12 2026 GMT
Not After : Mar 2 16:01:12 2026 GMT
Subject: CN=868d0f4220cb939d5e929c0d583879daeaaeec88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:15:8e:8e:4a:dd:07:0b:2e:99:35:2e:a3:08:
e6:ae:ee:61:aa:fe:3b:b3:7d:da:08:3b:03:12:01:
3f:83:82:31:13:2e:06:0e:37:22:6f:f7:60:5e:63:
78:7e:52:fa:c6:2f:4a:d9:c7:73:bb:94:cc:04:2b:
7d:d4:38:47:9a:4d:38:c3:34:8f:55:a7:da:15:43:
4a:7d:ba:83:14:ec:98:2e:c7:3f:c5:60:da:d2:29:
49:6a:3a:b6:3e:e1:2f:ad:36:6d:80:2d:02:52:7e:
45:86:ea:e5:6f:c5:dc:d2:81:db:0c:f7:f3:07:1d:
55:78:a2:e2:e9:e5:b8:17:72:0f:ee:aa:b6:ad:81:
d7:1b:a3:29:a3:df:a8:bd:33:20:3c:94:e3:73:45:
ee:5a:31:fd:41:22:b3:ec:b5:2f:21:f2:15:42:07:
50:67:5c:8c:27:9e:06:45:27:a5:70:b9:6c:eb:66:
0c:85:54:cc:bf:e6:e0:e7:de:8e:23:a2:2c:5b:eb:
50:c3:46:c7:66:26:47:c8:0c:50:77:01:e5:f7:22:
f8:0a:95:12:61:6e:ea:03:d2:2d:ac:94:8c:07:ac:
60:4c:84:1b:3e:13:e0:a6:cb:53:a6:45:d5:0a:44:
2a:ea:a1:5e:bd:9a:7e:54:53:06:22:92:91:d9:3c:
fa:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:8D:0F:42:20:CB:93:9D:5E:92:9C:0D:58:38:79:DA:EA:AE:EC:88
X509v3 Authority Key Identifier:
keyid:4E:DE:4C:65:D7:35:AF:79:27:7E:D1:4E:B6:C4:CF:54:04:C7:88:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tt5MZdc1r3knftFOtsTPVATHiNU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/35bee9-843f-4d38-9286-7aa49becf467/1/Tt5MZdc1r3knftFOtsTPVATHiNU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/35bee9-843f-4d38-9286-7aa49becf467/1/Tt5MZdc1r3knftFOtsTPVATHiNU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:a5:cd:92:70:fc:32:ca:d0:18:e1:4c:5c:47:28:d7:c7:f0:
de:c9:07:c6:b4:07:14:9b:ab:f0:4c:d3:15:0e:df:84:0e:b4:
71:c9:68:d7:9f:9f:0e:65:43:5d:9d:bc:b4:a1:3e:7f:36:3a:
1b:00:02:a7:db:36:3b:a5:cd:06:83:95:18:78:5c:09:8e:9f:
1c:5b:1d:51:2a:30:40:17:68:22:b8:0c:1b:ce:bc:b5:30:44:
83:b4:00:a4:a8:d5:98:65:d5:dd:29:0e:ff:d4:96:bb:0d:0b:
89:ee:42:76:21:1b:58:9e:5c:b4:de:2d:a6:9f:da:c5:2a:6e:
81:9c:95:2d:13:35:64:bb:f8:16:39:58:36:6d:98:43:5f:aa:
29:ec:6c:9b:a5:4e:9a:94:a7:fe:57:ac:cc:57:c1:74:b9:34:
fb:c4:ff:74:d2:4e:3f:55:57:5e:5b:98:7f:4a:03:ea:b5:72:
b6:a5:b8:74:d1:3d:89:0e:7d:14:57:3d:79:1f:a9:1e:e2:51:
ef:3f:5e:17:78:ff:e9:8d:7f:08:14:5a:c7:1d:f5:e5:45:ca:
55:9f:c9:f7:af:15:69:66:3f:ae:b3:46:8c:9e:32:c2:72:75:
d6:58:28:9b:b1:a4:09:ad:de:d5:c8:cf:a6:1e:a9:bc:2c:4e:
d2:37:f4:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:00:08 2026 by rpki-client