Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/686d4b-f15b-4530-b91b-e0c406b64672/1/TtTTbmM3JKGxeUm8QiR2lk518GU.mft
File: TtTTbmM3JKGxeUm8QiR2lk518GU.mft (raw, json)
Hash identifier: QUGbOXtR976dqn9V6z8oXREPcn45Q6ahxWKHfHCbgeo=
Subject key identifier: F6:2D:A8:5C:9F:3E:DD:8D:71:F8:D2:88:53:67:B1:52:F3:4B:54:EF
Authority key identifier: 4E:D4:D3:6E:63:37:24:A1:B1:79:49:BC:42:24:76:96:4E:75:F0:65
Certificate issuer: /CN=4ed4d36e633724a1b17949bc422476964e75f065
Certificate serial: 019D9A3F2B62145EC50A2F44E79C8201DD5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TtTTbmM3JKGxeUm8QiR2lk518GU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/686d4b-f15b-4530-b91b-e0c406b64672/1/TtTTbmM3JKGxeUm8QiR2lk518GU.mft
Manifest number: 18C3
Signing time: Fri 17 Apr 2026 07:02:04 +0000
Manifest this update: Fri 17 Apr 2026 07:02:04 +0000
Manifest next update: Sat 18 Apr 2026 07:02:04 +0000
Files and hashes: 1: TtTTbmM3JKGxeUm8QiR2lk518GU.crl (hash: a+Yq5XXXgLKroWtHteiKNOfb6O1eDs6G+53RZZhh/8c=)
2: ciYm9mEV2L9eSrKsaReboOeTaEs.roa (hash: y10S4mN+BJMChkxSiJiAL2EsRGyVDqBF8+UMGdjCK70=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/686d4b-f15b-4530-b91b-e0c406b64672/1/TtTTbmM3JKGxeUm8QiR2lk518GU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/686d4b-f15b-4530-b91b-e0c406b64672/1/TtTTbmM3JKGxeUm8QiR2lk518GU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TtTTbmM3JKGxeUm8QiR2lk518GU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3f:2b:62:14:5e:c5:0a:2f:44:e7:9c:82:01:dd:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ed4d36e633724a1b17949bc422476964e75f065
Validity
Not Before: Apr 17 07:02:04 2026 GMT
Not After : Apr 18 07:02:04 2026 GMT
Subject: CN=f62da85c9f3edd8d71f8d2885367b152f34b54ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:03:de:3c:23:75:f3:af:bd:02:e8:0e:2a:3f:
e6:98:5b:8f:41:9a:b7:6a:20:d0:a3:68:c2:2c:6e:
58:3a:a2:52:fe:23:ae:02:50:9b:66:51:6e:6b:4f:
77:a5:a7:f4:32:a0:16:c7:41:d1:5b:9a:9c:86:fe:
fe:14:ae:12:70:2d:6d:ff:f5:9a:9c:8a:bd:b9:76:
81:a0:67:89:9c:30:d9:ee:60:f9:62:d1:1a:4f:e4:
17:d6:9d:f6:3f:89:3f:46:3a:1c:75:02:e4:f6:b6:
fa:49:cf:e1:c4:ef:17:51:42:79:59:f9:40:af:2a:
95:80:0c:c1:e7:36:e8:3b:c3:f6:8e:4f:9a:85:65:
ee:8f:d5:fe:05:bb:2e:20:3c:1c:dd:65:27:69:4b:
94:78:fb:51:28:81:89:c8:43:fe:50:8a:1d:93:f6:
70:13:8a:01:1c:8e:b4:1f:de:63:75:0b:b4:17:dd:
75:81:a0:2d:d3:c5:87:9f:1a:8e:fc:1b:69:3a:f7:
4e:13:b7:1f:a1:6f:3f:c8:39:dd:11:91:24:bd:99:
ff:ab:39:b8:3b:7f:09:cf:35:dd:ba:e8:4c:57:7a:
82:9b:26:2b:12:05:55:dc:b3:8a:b5:d6:8e:65:fd:
65:ae:70:f2:ea:05:0e:7b:b0:b7:7c:9d:6a:b8:0d:
23:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:2D:A8:5C:9F:3E:DD:8D:71:F8:D2:88:53:67:B1:52:F3:4B:54:EF
X509v3 Authority Key Identifier:
keyid:4E:D4:D3:6E:63:37:24:A1:B1:79:49:BC:42:24:76:96:4E:75:F0:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TtTTbmM3JKGxeUm8QiR2lk518GU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/686d4b-f15b-4530-b91b-e0c406b64672/1/TtTTbmM3JKGxeUm8QiR2lk518GU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/686d4b-f15b-4530-b91b-e0c406b64672/1/TtTTbmM3JKGxeUm8QiR2lk518GU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:88:bb:92:28:ec:b7:cb:2a:11:90:94:d9:5f:5c:f5:db:55:
95:d4:03:49:32:11:23:95:b6:e8:15:8c:67:08:e8:2d:21:9f:
75:1e:e6:17:5b:fc:25:86:68:40:b5:c9:3e:84:27:e4:58:7c:
4b:5d:23:3d:1e:61:ea:da:45:6e:3f:30:da:1c:f6:59:72:68:
68:1b:47:2f:b0:57:08:b0:ae:5a:f2:d3:4e:37:e8:72:7d:cf:
25:13:bf:2a:0b:13:5d:04:70:6d:0e:d5:4b:e9:5e:33:b1:31:
0a:65:62:66:30:a1:9e:92:a9:86:f9:32:34:3d:aa:4e:c7:f3:
90:ca:b1:b5:a0:45:9e:fd:96:6b:c7:2e:f1:9c:bf:af:21:ac:
c3:fa:09:2d:98:93:f4:04:36:ce:61:7c:20:bb:6a:b8:7c:68:
f2:6e:0a:19:75:c4:a6:47:f3:46:9d:2a:29:c7:60:02:31:32:
98:69:dd:e8:56:d7:2d:c1:a2:23:0b:2a:59:c0:b7:e8:c4:c4:
d5:c7:97:75:67:d6:47:26:ad:d2:e8:7f:f5:fc:0e:75:58:8d:
71:05:9a:8c:62:53:d9:30:e9:aa:d0:38:4c:05:26:83:52:52:
9a:f2:89:81:6f:22:97:95:b3:a9:8e:7f:bc:52:85:5f:45:01:
c5:19:ff:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:00:57 2026 by rpki-client