Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/74b996-80ee-4c39-8e74-350e681b99d1/1/TtA31O4-XScGWtgDVlgqL9wrSI0.mft
File: TtA31O4-XScGWtgDVlgqL9wrSI0.mft (raw, json)
Hash identifier: Mv5QOPezXHdbZqFxrztlR9/BeEciGUMJp7oHadQgY1s=
Subject key identifier: 5C:51:F3:FA:B4:D0:FA:09:A6:90:3F:58:21:7E:F0:F8:4F:B6:11:29
Authority key identifier: 4E:D0:37:D4:EE:3E:5D:27:06:5A:D8:03:56:58:2A:2F:DC:2B:48:8D
Certificate issuer: /CN=4ed037d4ee3e5d27065ad80356582a2fdc2b488d
Certificate serial: 019D9B51669D09C3675E96258DC28F218099
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TtA31O4-XScGWtgDVlgqL9wrSI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/74b996-80ee-4c39-8e74-350e681b99d1/1/TtA31O4-XScGWtgDVlgqL9wrSI0.mft
Manifest number: 1240
Signing time: Fri 17 Apr 2026 12:01:35 +0000
Manifest this update: Fri 17 Apr 2026 12:01:35 +0000
Manifest next update: Sat 18 Apr 2026 12:01:35 +0000
Files and hashes: 1: TtA31O4-XScGWtgDVlgqL9wrSI0.crl (hash: LMRSW3nvlDtzk/lLtxiMC6QIzb0FVqXgHBD6VrlWHAo=)
2: dkZVoeRJR-__79SdUjWpgfrqgX0.roa (hash: hRQs/VOKf6Kl6D61x2oomcbiDqJtvslx7y4t6WRaaHw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/74b996-80ee-4c39-8e74-350e681b99d1/1/TtA31O4-XScGWtgDVlgqL9wrSI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/74b996-80ee-4c39-8e74-350e681b99d1/1/TtA31O4-XScGWtgDVlgqL9wrSI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/TtA31O4-XScGWtgDVlgqL9wrSI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 12:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:51:66:9d:09:c3:67:5e:96:25:8d:c2:8f:21:80:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ed037d4ee3e5d27065ad80356582a2fdc2b488d
Validity
Not Before: Apr 17 12:01:35 2026 GMT
Not After : Apr 18 12:01:35 2026 GMT
Subject: CN=5c51f3fab4d0fa09a6903f58217ef0f84fb61129
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:ec:ad:82:50:39:4e:27:72:cc:5a:c0:66:f3:
90:16:33:bf:43:22:a6:e8:3c:a6:55:09:c9:67:38:
14:8e:53:18:1b:1a:a6:a7:52:e8:07:68:8d:3d:d0:
20:05:cb:ed:91:c4:58:87:9c:fa:92:98:4e:61:72:
50:10:16:05:a4:b4:1a:3b:dd:65:cf:74:2a:4c:19:
a1:55:f1:7f:66:cf:12:2d:31:56:11:10:2c:ca:aa:
53:69:d8:8f:cb:ee:b8:68:99:2e:bb:b4:30:c0:0a:
2d:7b:03:73:f6:39:a5:53:bc:14:9c:d4:0a:af:7a:
fd:09:2a:b5:a4:a8:9a:6b:59:26:55:7e:54:4d:41:
95:5d:e8:cb:f8:e2:99:11:31:5e:d9:00:42:48:d2:
d0:01:6e:b0:e2:b3:0e:7b:7a:48:60:9a:a2:90:1c:
bc:f2:88:5f:ef:c9:3b:20:ad:66:bb:92:24:18:d1:
63:0b:47:ba:34:43:96:d2:96:c2:b5:14:0d:40:42:
11:31:91:ca:4e:63:e1:2b:6d:98:eb:58:66:63:dc:
57:4f:e6:32:ff:bf:21:97:bf:6e:28:b7:77:56:72:
a3:3a:f2:94:8b:2f:12:6d:25:71:d7:fd:2e:33:83:
46:78:b5:c3:f7:c8:02:52:29:8c:77:7c:55:51:53:
cb:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:51:F3:FA:B4:D0:FA:09:A6:90:3F:58:21:7E:F0:F8:4F:B6:11:29
X509v3 Authority Key Identifier:
keyid:4E:D0:37:D4:EE:3E:5D:27:06:5A:D8:03:56:58:2A:2F:DC:2B:48:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TtA31O4-XScGWtgDVlgqL9wrSI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/74b996-80ee-4c39-8e74-350e681b99d1/1/TtA31O4-XScGWtgDVlgqL9wrSI0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/74b996-80ee-4c39-8e74-350e681b99d1/1/TtA31O4-XScGWtgDVlgqL9wrSI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:a8:16:4b:4b:ad:2f:6f:4d:14:08:be:73:61:46:8c:1b:5d:
df:cb:68:ca:eb:2f:3a:27:ad:c7:a1:22:cf:ed:ab:f5:c8:f6:
8f:fe:d8:6c:41:98:1c:91:a2:4e:68:f7:e6:55:b6:1c:6d:e6:
c1:a4:5d:a8:83:37:e7:5a:e2:c9:19:71:6e:53:41:de:14:f9:
7d:77:3a:1d:90:cf:21:15:2c:6d:0d:25:d6:08:7a:66:95:20:
49:7d:04:fe:b8:66:33:01:ca:4d:3f:61:e7:66:f3:e1:f0:3e:
5a:f6:00:38:40:a3:b8:19:9b:43:d9:cd:77:fe:ef:d9:2d:63:
49:03:5b:3d:21:30:ab:ad:30:34:01:dd:2f:94:ab:90:42:fd:
7a:fc:35:55:44:a5:25:44:d1:41:18:e3:1e:ab:cb:3b:99:4f:
bb:9d:86:b9:48:61:2b:6e:9e:0c:d8:78:f4:21:af:93:b9:be:
da:6b:26:6c:85:cb:8d:37:99:15:06:92:ef:b4:1e:e7:85:a1:
f0:48:41:fe:bd:01:68:4c:62:7a:31:85:ca:a0:5e:5e:e1:b6:
ec:2d:12:d9:9e:11:76:bb:86:fa:d6:2b:c9:a6:49:9d:13:4e:
ad:a0:d8:5a:ba:d1:19:6e:38:04:b3:4f:e0:f0:b9:02:f9:c1:
8b:07:ef:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:52:58 2026 by rpki-client