Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dc/017c37-61b6-4d40-881a-53a084390527/1/TtMkzMCQuDGCmReur3ODTwg0Ss4.mft
File: TtMkzMCQuDGCmReur3ODTwg0Ss4.mft (raw, json)
Hash identifier: HRs0eGcpvn1ymPJ1Ne/hJ/7qCY1+jXLkKLmTZZEEZA0=
Subject key identifier: F5:BE:33:EE:2C:F2:42:47:51:52:48:F0:00:DE:6D:F3:CB:21:DA:E1
Authority key identifier: 4E:D3:24:CC:C0:90:B8:31:82:99:17:AE:AF:73:83:4F:08:34:4A:CE
Certificate issuer: /CN=4ed324ccc090b831829917aeaf73834f08344ace
Certificate serial: 01A1287A4831BD6CB9DDA4D0A8770B254B4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TtMkzMCQuDGCmReur3ODTwg0Ss4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/017c37-61b6-4d40-881a-53a084390527/1/TtMkzMCQuDGCmReur3ODTwg0Ss4.mft
Manifest number: 05A9
Signing time: Sun 11 Oct 2026 01:01:04 +0000
Manifest this update: Sun 11 Oct 2026 01:01:04 +0000
Manifest next update: Mon 12 Oct 2026 01:01:04 +0000
Files and hashes: 1: C6nXsG6UDvJjYHmVMk3MguMztUw.roa (hash: DZ6jiw9DI8ZM7KfN0j9o/vZRidGddKGFVOWlQEbKrbI=)
2: TtMkzMCQuDGCmReur3ODTwg0Ss4.crl (hash: GB/tcpkxhErYzE2OkFAyLmfVjOZIaExDAJ35LOOG7fY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/017c37-61b6-4d40-881a-53a084390527/1/TtMkzMCQuDGCmReur3ODTwg0Ss4.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/017c37-61b6-4d40-881a-53a084390527/1/TtMkzMCQuDGCmReur3ODTwg0Ss4.mft
rsync://rpki.ripe.net/repository/DEFAULT/TtMkzMCQuDGCmReur3ODTwg0Ss4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 01:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:28:7a:48:31:bd:6c:b9:dd:a4:d0:a8:77:0b:25:4b:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ed324ccc090b831829917aeaf73834f08344ace
Validity
Not Before: Oct 11 01:01:04 2026 GMT
Not After : Oct 12 01:01:04 2026 GMT
Subject: CN=f5be33ee2cf24247515248f000de6df3cb21dae1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:04:64:ff:d5:b8:52:25:34:f7:6d:55:2a:0e:
79:8d:64:b4:19:9e:c2:b4:6b:33:c5:90:ca:c4:06:
dc:47:ae:02:53:46:4f:03:f8:22:70:8a:c8:3e:b1:
2c:2e:4e:ba:d9:39:da:45:88:b5:25:23:8c:8f:4b:
4f:a9:8c:d7:34:2e:03:05:73:eb:bb:7f:b3:eb:23:
90:35:b8:6d:b4:6b:1b:a8:c0:e9:d0:ca:dc:67:5c:
d8:40:b1:a7:65:0d:d9:48:af:c8:0e:b5:b9:29:71:
d9:56:bb:21:aa:9a:42:ba:78:12:b3:f6:bd:b3:e0:
87:04:6c:3a:3f:3f:5f:f0:be:da:c4:c3:37:38:56:
26:5f:6b:57:aa:91:89:e4:b3:36:4b:2c:81:d0:fa:
4c:30:11:e4:82:62:3b:4e:10:0c:a7:39:81:10:4c:
2d:a7:e4:de:cb:7e:2b:06:eb:fb:34:02:68:60:d0:
c6:e3:58:55:1f:e1:a8:3e:23:f9:ce:23:c8:3a:2c:
7a:cf:7c:27:29:aa:41:46:6a:5c:bf:77:ba:63:6a:
fa:b5:c6:72:f3:fd:11:89:08:9f:15:7d:1c:9f:39:
5f:5f:40:1b:9e:8c:a0:61:8d:7f:02:77:37:75:29:
4d:97:b3:ba:c0:60:68:47:3a:a4:4c:a4:0f:03:26:
1c:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:BE:33:EE:2C:F2:42:47:51:52:48:F0:00:DE:6D:F3:CB:21:DA:E1
X509v3 Authority Key Identifier:
keyid:4E:D3:24:CC:C0:90:B8:31:82:99:17:AE:AF:73:83:4F:08:34:4A:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TtMkzMCQuDGCmReur3ODTwg0Ss4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/017c37-61b6-4d40-881a-53a084390527/1/TtMkzMCQuDGCmReur3ODTwg0Ss4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/017c37-61b6-4d40-881a-53a084390527/1/TtMkzMCQuDGCmReur3ODTwg0Ss4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:1f:f5:ea:39:5a:08:3b:6f:28:2f:35:e4:e4:f0:8e:36:f3:
25:36:93:d1:f4:b2:dd:2e:28:fa:d3:28:82:fa:fd:e6:68:5b:
0d:58:9e:d7:ec:1e:ef:0f:f9:b6:ac:c7:cb:8c:d6:1d:51:66:
31:70:31:49:87:3b:fa:cb:87:80:39:08:2a:ef:c9:85:50:7c:
34:a0:2e:cc:4a:74:2e:b6:5d:94:54:78:f6:34:fa:74:f3:4d:
3c:be:ee:d5:d6:83:ea:d9:3e:c4:be:41:42:be:27:d5:88:dc:
56:1b:48:80:f8:c5:f9:5b:73:8c:2d:d3:33:a8:41:c5:aa:24:
35:73:a7:35:e4:4a:4f:dc:bc:a4:a3:13:ee:04:b7:8e:16:6d:
5c:f7:3b:7d:bc:f9:f1:55:79:3f:2a:d1:16:c6:78:fb:2b:6d:
a0:db:8a:57:bd:90:e7:f2:86:26:89:46:6f:4a:1f:89:2d:b6:
79:cb:b1:54:8a:77:8b:89:e0:83:aa:b2:9f:b8:f2:9b:ed:ca:
cd:10:2c:ff:d7:35:4e:7d:d5:41:04:4a:92:42:f5:d6:c6:06:
38:c4:36:a8:ae:4d:fe:29:4c:fe:1c:4c:81:9b:5d:65:82:e2:
8b:09:ae:9e:ca:7c:7b:9a:95:19:8e:e1:0d:ac:0a:48:cf:49:
6a:a4:c7:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 10:24:59 2026 by rpki-client