Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4a/12ecc7-94a3-4af6-b6d3-cbf1d75cd427/1/TTYgWceTa1QgqzM4uWIzYdrtsM0.mft
File: TTYgWceTa1QgqzM4uWIzYdrtsM0.mft (raw, json)
Hash identifier: doBO5lbFjXEDrHt+iNeYelTjpFn/XYmCCCsme5juhqc=
Subject key identifier: 2D:B4:E3:7E:24:E6:F3:71:9C:6C:D6:14:87:5B:E3:38:9A:9C:67:AC
Authority key identifier: 4D:36:20:59:C7:93:6B:54:20:AB:33:38:B9:62:33:61:DA:ED:B0:CD
Certificate issuer: /CN=4d362059c7936b5420ab3338b9623361daedb0cd
Certificate serial: 01A0C6A16B1C66C7D38A4243B0FC49EEDC2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TTYgWceTa1QgqzM4uWIzYdrtsM0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/12ecc7-94a3-4af6-b6d3-cbf1d75cd427/1/TTYgWceTa1QgqzM4uWIzYdrtsM0.mft
Manifest number: 16
Signing time: Tue 22 Sep 2026 01:01:02 +0000
Manifest this update: Tue 22 Sep 2026 01:01:02 +0000
Manifest next update: Wed 23 Sep 2026 01:01:02 +0000
Files and hashes: 1: TTYgWceTa1QgqzM4uWIzYdrtsM0.crl (hash: tL9Knc51xE3Eqj9Jy5Z7vYEdEI5yMTefJ8qLs4FqJeU=)
2: hipI7kuhHGagLEQaTk386Y4VQzE.roa (hash: toft6Vnd44UVq1KAnZBMB9tIie+P6wNnrRpX3Oq4kG4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/12ecc7-94a3-4af6-b6d3-cbf1d75cd427/1/TTYgWceTa1QgqzM4uWIzYdrtsM0.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/12ecc7-94a3-4af6-b6d3-cbf1d75cd427/1/TTYgWceTa1QgqzM4uWIzYdrtsM0.mft
rsync://rpki.ripe.net/repository/DEFAULT/TTYgWceTa1QgqzM4uWIzYdrtsM0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 19:45:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c6:a1:6b:1c:66:c7:d3:8a:42:43:b0:fc:49:ee:dc:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d362059c7936b5420ab3338b9623361daedb0cd
Validity
Not Before: Sep 22 01:01:02 2026 GMT
Not After : Sep 23 01:01:02 2026 GMT
Subject: CN=2db4e37e24e6f3719c6cd614875be3389a9c67ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:65:e7:f8:8c:72:f6:6e:df:38:9f:e0:ff:0e:
2f:ef:da:39:d1:b7:61:ed:90:65:7a:0f:b4:ae:3c:
37:29:96:5e:1e:21:74:9f:d6:7a:33:9d:e0:90:a7:
b4:32:cb:44:02:a9:e2:0e:ad:ee:31:81:8a:2c:2c:
67:6a:3b:c3:5a:e7:a4:77:cb:cf:de:cb:9d:eb:89:
aa:27:26:29:bd:8a:05:9a:90:25:54:df:30:16:80:
fe:b3:8f:03:af:80:ce:de:0e:54:8a:7e:b7:b9:01:
be:a1:ec:ef:bf:97:c8:12:1d:00:72:f6:08:ba:27:
a6:e6:39:b2:0f:81:dc:49:fe:a0:1a:14:60:d6:f6:
ce:be:9d:c7:a1:ef:f1:c3:ef:f3:b7:ee:a0:66:10:
eb:5e:07:d8:3a:05:0e:3c:e5:e1:c4:0c:57:0f:7c:
82:7a:ce:9b:74:10:1d:05:b8:52:ae:77:c0:2a:08:
cc:79:6e:09:19:a7:ef:02:2f:88:67:ec:a4:e8:09:
ae:03:f8:7a:8b:b7:39:4c:4e:38:d6:f3:cd:6f:c0:
e3:1a:6d:df:ad:da:15:d5:32:a9:c9:64:14:9f:37:
17:70:98:c2:1e:42:ca:43:fa:38:73:12:53:d1:40:
00:cf:6c:21:b1:f0:b2:b1:f9:96:e6:c8:fa:cf:07:
7e:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:B4:E3:7E:24:E6:F3:71:9C:6C:D6:14:87:5B:E3:38:9A:9C:67:AC
X509v3 Authority Key Identifier:
keyid:4D:36:20:59:C7:93:6B:54:20:AB:33:38:B9:62:33:61:DA:ED:B0:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TTYgWceTa1QgqzM4uWIzYdrtsM0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/12ecc7-94a3-4af6-b6d3-cbf1d75cd427/1/TTYgWceTa1QgqzM4uWIzYdrtsM0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/12ecc7-94a3-4af6-b6d3-cbf1d75cd427/1/TTYgWceTa1QgqzM4uWIzYdrtsM0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:2e:aa:dd:15:75:bc:34:68:b2:d4:00:ae:a2:6d:03:df:72:
7c:7a:57:39:73:23:a2:6d:f6:68:65:49:4b:8d:df:cb:c5:99:
a0:09:e5:84:42:52:64:3e:f5:03:8f:1e:14:96:3b:85:3e:df:
d4:ba:ec:c5:bc:4f:5d:e1:3d:ea:64:50:aa:82:41:12:33:5e:
c8:4d:c1:c0:62:56:a9:16:f9:0b:a5:ef:a3:5f:8a:22:7b:16:
11:65:43:ac:09:e0:f7:0d:57:5b:98:5b:63:b4:a3:38:61:2e:
81:b1:5e:1c:5a:1f:18:4f:d5:9c:b4:63:15:7c:ca:54:70:ef:
1f:24:87:90:ab:03:97:23:72:de:31:ca:c7:13:79:55:37:66:
0f:ca:93:4b:fe:7a:1f:e9:25:83:f4:9b:31:73:35:be:d1:80:
9d:2b:2b:0d:95:1b:bb:84:89:6f:0f:13:bb:98:73:2e:fe:8a:
05:67:37:e6:f6:37:2b:8c:74:52:97:7f:80:6d:20:5c:a6:cd:
0d:e8:8a:49:ba:64:c9:43:67:e7:73:ba:9a:89:e3:98:2d:7e:
42:c1:02:8b:20:a2:11:86:50:b4:81:34:ad:85:f7:08:70:b1:
9f:3b:a9:f1:85:9a:09:b6:51:4c:d1:b5:52:fe:88:82:fb:65:
09:ab:5b:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 05:40:27 2026 by rpki-client