Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/74b996-80ee-4c39-8e74-350e681b99d1/1/TtA31O4-XScGWtgDVlgqL9wrSI0.mft
File: TtA31O4-XScGWtgDVlgqL9wrSI0.mft (raw, json)
Hash identifier: bTYeJGC3utcWrBw/ngCOj7LpfpY2E5Grb8ixVM4IUYQ=
Subject key identifier: 51:51:B5:AE:F0:C1:71:DA:7A:E8:AC:48:89:E7:D6:82:E5:8A:86:64
Authority key identifier: 4E:D0:37:D4:EE:3E:5D:27:06:5A:D8:03:56:58:2A:2F:DC:2B:48:8D
Certificate issuer: /CN=4ed037d4ee3e5d27065ad80356582a2fdc2b488d
Certificate serial: 019CADC8530EB440920CE778798FD8896DF8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TtA31O4-XScGWtgDVlgqL9wrSI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/74b996-80ee-4c39-8e74-350e681b99d1/1/TtA31O4-XScGWtgDVlgqL9wrSI0.mft
Manifest number: 11C5
Signing time: Mon 02 Mar 2026 09:01:52 +0000
Manifest this update: Mon 02 Mar 2026 09:01:52 +0000
Manifest next update: Tue 03 Mar 2026 09:01:52 +0000
Files and hashes: 1: TtA31O4-XScGWtgDVlgqL9wrSI0.crl (hash: 4CHOdPlWnwiqwAZsVEF2vRI9mwnZlpfif2D584wKTGk=)
2: dkZVoeRJR-__79SdUjWpgfrqgX0.roa (hash: hRQs/VOKf6Kl6D61x2oomcbiDqJtvslx7y4t6WRaaHw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/74b996-80ee-4c39-8e74-350e681b99d1/1/TtA31O4-XScGWtgDVlgqL9wrSI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/74b996-80ee-4c39-8e74-350e681b99d1/1/TtA31O4-XScGWtgDVlgqL9wrSI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/TtA31O4-XScGWtgDVlgqL9wrSI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:01:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:c8:53:0e:b4:40:92:0c:e7:78:79:8f:d8:89:6d:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ed037d4ee3e5d27065ad80356582a2fdc2b488d
Validity
Not Before: Mar 2 09:01:52 2026 GMT
Not After : Mar 3 09:01:52 2026 GMT
Subject: CN=5151b5aef0c171da7ae8ac4889e7d682e58a8664
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:74:2e:9b:eb:9c:7c:86:bb:64:4a:aa:aa:a6:
ad:1a:49:b7:1d:14:a0:38:26:77:87:6b:47:f4:84:
41:e3:67:97:8f:d3:92:ec:02:b3:67:9f:6a:44:71:
e0:48:68:63:e6:76:c8:27:29:5a:ab:3a:fc:f9:50:
74:64:a3:5c:da:13:27:f2:5d:5a:9f:17:d7:c2:f0:
4e:a0:6e:4c:b8:fa:d6:7a:a6:bc:78:28:e0:b2:34:
0b:71:e2:8c:7c:db:b9:e7:48:2a:98:9c:44:69:89:
8b:21:18:63:e5:1a:75:49:50:08:e2:4d:59:9a:8d:
ea:07:f2:97:4e:d6:fc:77:e3:42:24:81:32:b3:80:
41:0f:1b:28:58:7a:2d:a3:9d:c7:ab:09:30:be:2b:
7c:19:5d:bc:88:b9:03:39:07:b7:84:40:fa:eb:38:
79:5f:09:7a:94:56:cf:1f:cb:4a:97:8e:95:14:70:
d4:92:05:64:05:18:de:24:37:53:c0:c0:31:c9:f2:
b5:3b:fc:e7:3b:11:0d:1d:d2:35:fb:7e:c1:32:11:
35:aa:f9:19:eb:ef:96:2c:85:25:15:33:85:05:e0:
96:ea:f1:ff:d9:e4:04:18:b3:87:27:41:09:3b:9c:
06:b6:62:42:9c:f3:40:be:b6:16:bd:dd:a3:4f:61:
82:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:51:B5:AE:F0:C1:71:DA:7A:E8:AC:48:89:E7:D6:82:E5:8A:86:64
X509v3 Authority Key Identifier:
keyid:4E:D0:37:D4:EE:3E:5D:27:06:5A:D8:03:56:58:2A:2F:DC:2B:48:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TtA31O4-XScGWtgDVlgqL9wrSI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/74b996-80ee-4c39-8e74-350e681b99d1/1/TtA31O4-XScGWtgDVlgqL9wrSI0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/74b996-80ee-4c39-8e74-350e681b99d1/1/TtA31O4-XScGWtgDVlgqL9wrSI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:fd:b2:10:86:7e:28:05:cc:35:1e:e0:82:11:26:41:88:20:
db:cd:8a:cb:aa:ca:af:72:8d:06:a9:14:d9:0a:30:97:6d:9c:
7a:de:a3:66:df:d0:1b:15:0a:74:b0:77:f9:0e:7b:86:b8:2e:
d4:c9:05:55:7f:e1:e2:cd:26:91:13:4f:52:61:9e:56:e2:06:
c7:02:1c:ab:d9:84:af:22:ac:67:92:44:6e:bc:17:25:29:73:
da:1a:ac:39:ac:c0:48:af:c5:00:1c:4d:49:92:ea:97:52:c0:
a4:d4:3c:38:a3:3a:68:37:49:cc:81:8a:05:41:c1:12:f7:d6:
5c:34:f9:49:5b:c6:45:80:cf:fd:35:88:3f:17:85:72:b8:bf:
42:37:3d:a1:8e:e3:5d:ef:5c:82:e5:d6:fe:ac:6c:16:8b:3c:
4d:6a:f1:05:60:6b:de:31:9c:7f:0f:10:ad:9a:32:eb:1e:b9:
9d:54:27:bd:36:6b:e9:60:24:82:dd:25:ec:e2:ae:1c:ec:28:
dc:66:87:7b:55:0c:22:21:95:f0:f8:c8:ff:e1:ed:13:9b:62:
00:e1:18:e0:c2:0e:d9:c8:2c:0e:3f:79:78:6c:97:7c:17:56:
52:11:cd:c5:b4:4b:22:6b:90:ea:d0:78:c6:01:55:ce:81:50:
72:e1:ac:b2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZytyFMOtECSDOd4eY/YiW34MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRlZDAzN2Q0ZWUzZTVkMjcwNjVhZDgwMzU2NTgyYTJmZGMy
YjQ4OGQwHhcNMjYwMzAyMDkwMTUyWhcNMjYwMzAzMDkwMTUyWjAzMTEwLwYDVQQD
Eyg1MTUxYjVhZWYwYzE3MWRhN2FlOGFjNDg4OWU3ZDY4MmU1OGE4NjY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjnQum+ucfIa7ZEqqqqatGkm3HRSg
OCZ3h2tH9IRB42eXj9OS7AKzZ59qRHHgSGhj5nbIJylaqzr8+VB0ZKNc2hMn8l1a
nxfXwvBOoG5MuPrWeqa8eCjgsjQLceKMfNu550gqmJxEaYmLIRhj5Rp1SVAI4k1Z
mo3qB/KXTtb8d+NCJIEys4BBDxsoWHoto53Hqwkwvit8GV28iLkDOQe3hED66zh5
Xwl6lFbPH8tKl46VFHDUkgVkBRjeJDdTwMAxyfK1O/znOxENHdI1+37BMhE1qvkZ
6++WLIUlFTOFBeCW6vH/2eQEGLOHJ0EJO5wGtmJCnPNAvrYWvd2jT2GCJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFFRta7wwXHaeuisSInn1oLlioZkMB8GA1UdIwQY
MBaAFE7QN9TuPl0nBlrYA1ZYKi/cK0iNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHRBMzFPNC1YU2NHV3RnRFZsZ3FMOXdyU0kwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS83NGI5OTYtODBlZS00YzM5LThlNzQt
MzUwZTY4MWI5OWQxLzEvVHRBMzFPNC1YU2NHV3RnRFZsZ3FMOXdyU0kwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82YS83NGI5OTYtODBlZS00YzM5LThlNzQtMzUwZTY4MWI5OWQx
LzEvVHRBMzFPNC1YU2NHV3RnRFZsZ3FMOXdyU0kwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdf2yEIZ+
KAXMNR7gghEmQYgg282Ky6rKr3KNBqkU2Qowl22cet6jZt/QGxUKdLB3+Q57hrgu
1MkFVX/h4s0mkRNPUmGeVuIGxwIcq9mEryKsZ5JEbrwXJSlz2hqsOazASK/FABxN
SZLql1LApNQ8OKM6aDdJzIGKBUHBEvfWXDT5SVvGRYDP/TWIPxeFcri/Qjc9oY7j
Xe9cguXW/qxsFos8TWrxBWBr3jGcfw8QrZoy6x65nVQnvTZr6WAkgt0l7OKuHOwo
3GaHe1UMIiGV8PjI/+HtE5tiAOEY4MIO2cgsDj95eGyXfBdWUhHNxbRLImuQ6tB4
xgFVzoFQcuGssg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 17:13:28 2026 by rpki-client