Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a2/87dadf-29d9-49d3-8ac6-4cc40ffd796d/1/TtDR6dtwOHtHkQsCFmwVFVR5now.mft
File: TtDR6dtwOHtHkQsCFmwVFVR5now.mft (raw, json)
Hash identifier: E54PBUv2iFufrds45l4u9dXHgSw9k8Djb82R0DFpMzU=
Subject key identifier: 10:C8:28:7B:D4:2D:C3:40:0D:EC:FC:FC:1E:D2:52:E1:9A:FC:A3:18
Authority key identifier: 4E:D0:D1:E9:DB:70:38:7B:47:91:0B:02:16:6C:15:15:54:79:9E:8C
Certificate issuer: /CN=4ed0d1e9db70387b47910b02166c151554799e8c
Certificate serial: 01A0C28E2A93EA01EC273E37053D1DAD3656
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TtDR6dtwOHtHkQsCFmwVFVR5now.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/87dadf-29d9-49d3-8ac6-4cc40ffd796d/1/TtDR6dtwOHtHkQsCFmwVFVR5now.mft
Manifest number: DE
Signing time: Mon 21 Sep 2026 06:01:31 +0000
Manifest this update: Mon 21 Sep 2026 06:01:31 +0000
Manifest next update: Tue 22 Sep 2026 06:01:31 +0000
Files and hashes: 1: GarD_CcyC8vH0Ew6FZexXJqsz3o.roa (hash: +xW0rSQLKtAW1Hp3b5Pv8qHOc3WB4PYX3/XibxiP1hA=)
2: TtDR6dtwOHtHkQsCFmwVFVR5now.crl (hash: mlBSlVvEI+xZxHLvk4I4WAOdjJg+wLp2QdA+tRfFaFM=)
3: br6axYGXcxv_9-Dchpg7P4DBzJE.roa (hash: 9eR+zwavNrHlgbbzIncH+OZak7hXd7F3p0WzOsUw9aE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/87dadf-29d9-49d3-8ac6-4cc40ffd796d/1/TtDR6dtwOHtHkQsCFmwVFVR5now.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/87dadf-29d9-49d3-8ac6-4cc40ffd796d/1/TtDR6dtwOHtHkQsCFmwVFVR5now.mft
rsync://rpki.ripe.net/repository/DEFAULT/TtDR6dtwOHtHkQsCFmwVFVR5now.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:8e:2a:93:ea:01:ec:27:3e:37:05:3d:1d:ad:36:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ed0d1e9db70387b47910b02166c151554799e8c
Validity
Not Before: Sep 21 06:01:31 2026 GMT
Not After : Sep 22 06:01:31 2026 GMT
Subject: CN=10c8287bd42dc3400decfcfc1ed252e19afca318
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:5f:a2:76:71:f5:45:ac:45:f2:37:1d:af:28:
79:3b:69:94:9d:8a:b8:7f:fb:c6:6d:37:54:f5:89:
3b:3f:98:e1:f4:25:53:f8:b7:0b:67:bc:8a:80:39:
2d:92:05:d1:8a:99:52:83:91:b5:39:11:4f:70:59:
29:59:39:e5:7a:67:46:a1:19:a8:97:6e:65:f3:cb:
84:70:96:c0:65:41:9c:bb:b6:4a:67:7a:e3:e6:3c:
14:5d:21:2b:b5:4d:9a:bf:c2:94:3d:33:cf:0e:94:
11:06:cb:a7:10:39:c4:db:d1:99:8e:a0:c4:59:1e:
40:ab:03:71:e4:28:e1:cd:bb:75:f8:21:c7:7f:c6:
f6:36:47:f1:5a:18:48:9b:a1:f6:03:00:65:5e:b4:
c2:d6:91:ea:c5:21:d3:70:27:a2:83:d2:8b:9e:4c:
e9:af:af:33:8e:d1:f8:c9:ed:55:63:57:80:1f:f3:
2e:17:3b:56:83:d4:16:13:6c:b8:a5:e2:28:f9:2e:
c5:02:ff:45:0b:a6:ce:30:c8:2c:9e:17:6c:3e:36:
0b:66:e9:dc:3d:b8:c6:be:66:63:0b:38:8e:01:c4:
19:ca:06:98:2d:7e:c7:72:04:fd:d6:79:af:26:b4:
7d:9b:d3:d9:42:5f:68:cf:f7:98:ea:d1:62:57:2c:
1f:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:C8:28:7B:D4:2D:C3:40:0D:EC:FC:FC:1E:D2:52:E1:9A:FC:A3:18
X509v3 Authority Key Identifier:
keyid:4E:D0:D1:E9:DB:70:38:7B:47:91:0B:02:16:6C:15:15:54:79:9E:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TtDR6dtwOHtHkQsCFmwVFVR5now.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/87dadf-29d9-49d3-8ac6-4cc40ffd796d/1/TtDR6dtwOHtHkQsCFmwVFVR5now.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/87dadf-29d9-49d3-8ac6-4cc40ffd796d/1/TtDR6dtwOHtHkQsCFmwVFVR5now.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:d6:4f:84:60:0d:8d:fb:5c:d9:3f:19:8c:41:cf:01:59:8c:
f1:97:9c:f7:60:a4:10:9f:93:75:70:39:95:9b:a5:8e:df:b6:
73:91:48:17:af:6f:66:13:b2:9b:90:00:0c:49:59:6a:6d:c0:
ac:ab:42:78:c4:9f:42:5f:05:bf:72:56:0e:79:79:ab:35:26:
67:87:1f:b4:50:87:71:b1:39:e6:07:e3:f3:b7:c7:a6:b2:f8:
8f:46:0e:22:41:9b:51:27:16:cf:86:29:91:14:94:68:c7:b7:
8c:74:62:b6:55:42:b7:11:d9:6e:d5:7c:93:7a:a7:86:ac:7c:
a7:b0:6f:ec:b5:ce:b3:80:40:c1:cd:61:f8:7a:e2:26:fa:e1:
c0:41:3d:d2:d9:41:41:06:2e:51:2f:e5:36:35:fe:3a:ac:36:
08:ff:6d:ed:bc:7b:f2:90:12:88:06:0d:2f:3a:7c:88:76:49:
94:57:7a:13:4e:6c:5b:d0:ab:ac:65:2d:39:f0:89:71:f2:2c:
06:18:09:ae:ab:89:ac:66:c8:ac:cf:3f:57:36:41:37:32:3f:
c0:66:ce:38:bc:6b:da:cf:b6:6b:47:d5:5d:a6:00:94:8b:40:
b7:16:dd:06:d5:fa:a4:8f:c9:5b:7e:2b:7d:2f:27:38:24:2e:
7a:1c:4a:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 11:09:40 2026 by rpki-client