Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/017c37-61b6-4d40-881a-53a084390527/1/TtMkzMCQuDGCmReur3ODTwg0Ss4.mft
File: TtMkzMCQuDGCmReur3ODTwg0Ss4.mft (raw, json)
Hash identifier: ykSeGD4DFtJN2lI/HSHfmAH4j3iLWUCcpWcjeNv/3Do=
Subject key identifier: F7:10:5D:4E:92:F5:2F:15:43:FA:5D:9A:C2:7E:7C:5B:5D:C4:02:E2
Authority key identifier: 4E:D3:24:CC:C0:90:B8:31:82:99:17:AE:AF:73:83:4F:08:34:4A:CE
Certificate issuer: /CN=4ed324ccc090b831829917aeaf73834f08344ace
Certificate serial: 019D9CD1AFAE56AEBD11C8BEE176FED5F49E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TtMkzMCQuDGCmReur3ODTwg0Ss4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/017c37-61b6-4d40-881a-53a084390527/1/TtMkzMCQuDGCmReur3ODTwg0Ss4.mft
Manifest number: 03D3
Signing time: Fri 17 Apr 2026 19:01:20 +0000
Manifest this update: Fri 17 Apr 2026 19:01:20 +0000
Manifest next update: Sat 18 Apr 2026 19:01:20 +0000
Files and hashes: 1: C6nXsG6UDvJjYHmVMk3MguMztUw.roa (hash: DZ6jiw9DI8ZM7KfN0j9o/vZRidGddKGFVOWlQEbKrbI=)
2: TtMkzMCQuDGCmReur3ODTwg0Ss4.crl (hash: RWTRIvb2E4U5lfSmsS0BMtYz14QmLFt/NwkGlIYfRUw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/017c37-61b6-4d40-881a-53a084390527/1/TtMkzMCQuDGCmReur3ODTwg0Ss4.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/017c37-61b6-4d40-881a-53a084390527/1/TtMkzMCQuDGCmReur3ODTwg0Ss4.mft
rsync://rpki.ripe.net/repository/DEFAULT/TtMkzMCQuDGCmReur3ODTwg0Ss4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:d1:af:ae:56:ae:bd:11:c8:be:e1:76:fe:d5:f4:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ed324ccc090b831829917aeaf73834f08344ace
Validity
Not Before: Apr 17 19:01:20 2026 GMT
Not After : Apr 18 19:01:20 2026 GMT
Subject: CN=f7105d4e92f52f1543fa5d9ac27e7c5b5dc402e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ab:9c:08:a3:6d:55:d8:1a:12:d0:a9:2a:c7:
d4:39:aa:f3:34:80:66:c1:4a:e2:dc:d9:4c:34:78:
87:7b:96:67:4a:39:88:d6:12:39:98:b3:24:9f:a9:
62:45:c9:79:90:7f:09:2f:f5:91:79:14:2f:f2:cf:
09:f7:49:7a:1e:8e:3c:0a:81:43:9f:e6:f2:54:7f:
f1:6b:15:1a:d3:95:da:90:ea:e0:ce:ef:7a:fd:19:
17:ca:f0:da:46:38:fa:1a:38:9b:50:af:9b:b1:71:
ac:d3:d7:93:8f:91:d6:e6:b7:23:34:6b:0c:c9:7a:
51:a3:50:67:c9:75:11:a5:6d:3b:82:11:f3:6b:09:
b3:42:f4:08:c9:9f:5a:52:e5:a6:64:49:fd:d0:57:
a8:f4:cd:6a:bb:b6:6a:f0:59:f8:82:d7:ae:b5:40:
ae:98:5c:c4:28:1c:0c:a6:5f:81:8f:7b:1e:96:ef:
99:82:71:18:81:18:fd:e5:58:3a:fd:7f:83:26:30:
4d:4d:f2:71:4c:0a:96:b7:6c:60:43:0a:f0:ed:20:
6a:31:8c:03:02:8a:ea:c2:a5:4e:d5:20:c7:aa:98:
16:f1:f2:c1:19:5a:c1:22:97:04:fe:c6:a9:d6:61:
24:00:d7:71:02:f4:62:28:65:bb:5c:65:43:0a:af:
cb:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:10:5D:4E:92:F5:2F:15:43:FA:5D:9A:C2:7E:7C:5B:5D:C4:02:E2
X509v3 Authority Key Identifier:
keyid:4E:D3:24:CC:C0:90:B8:31:82:99:17:AE:AF:73:83:4F:08:34:4A:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TtMkzMCQuDGCmReur3ODTwg0Ss4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/017c37-61b6-4d40-881a-53a084390527/1/TtMkzMCQuDGCmReur3ODTwg0Ss4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/017c37-61b6-4d40-881a-53a084390527/1/TtMkzMCQuDGCmReur3ODTwg0Ss4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:96:80:2e:03:8b:bf:80:b0:62:c7:29:2f:ab:d4:2c:07:59:
dc:9f:12:4a:ea:8a:45:bc:d8:52:6a:b8:4a:e0:0d:4e:fc:44:
5f:73:89:65:c0:46:fa:20:e9:a8:b7:1b:73:09:e5:16:f8:f7:
71:14:dd:7a:b5:c7:96:ca:47:c5:18:06:0b:2d:71:02:cc:db:
6a:fe:15:97:ef:1b:43:61:70:19:08:ac:ae:0b:11:5e:61:6d:
f3:28:00:e4:34:24:b2:b8:84:ef:92:37:22:8f:4e:a2:6d:25:
3d:e6:ed:4e:78:6d:6b:a9:4b:56:85:2c:9f:2d:d9:b3:dc:30:
1c:35:f2:6d:5d:52:bd:b8:fd:63:68:c8:54:23:cc:f9:6e:b5:
b9:c2:98:e2:cd:94:53:6c:8d:dd:ae:4b:6f:9b:ca:fb:02:86:
cc:95:92:2d:c3:e9:dd:5f:e8:ef:b8:7e:03:ec:08:ab:8b:4a:
47:d9:97:07:cf:c3:22:a8:a0:7e:6a:eb:71:c3:f7:80:fb:ac:
d6:85:ea:2a:cd:66:66:66:f3:70:cd:6d:35:27:75:0b:71:bb:
62:b4:c2:2b:89:b6:39:a0:af:fb:b4:f6:52:dc:f5:83:42:91:
59:58:b9:55:26:92:83:84:a6:af:78:a3:df:42:ee:a2:a7:f1:
ac:53:42:42
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2c0a+uVq69Eci+4Xb+1fSeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRlZDMyNGNjYzA5MGI4MzE4Mjk5MTdhZWFmNzM4MzRmMDgz
NDRhY2UwHhcNMjYwNDE3MTkwMTIwWhcNMjYwNDE4MTkwMTIwWjAzMTEwLwYDVQQD
EyhmNzEwNWQ0ZTkyZjUyZjE1NDNmYTVkOWFjMjdlN2M1YjVkYzQwMmUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqqucCKNtVdgaEtCpKsfUOarzNIBm
wUri3NlMNHiHe5ZnSjmI1hI5mLMkn6liRcl5kH8JL/WReRQv8s8J90l6Ho48CoFD
n+byVH/xaxUa05XakOrgzu96/RkXyvDaRjj6GjibUK+bsXGs09eTj5HW5rcjNGsM
yXpRo1BnyXURpW07ghHzawmzQvQIyZ9aUuWmZEn90Feo9M1qu7Zq8Fn4gteutUCu
mFzEKBwMpl+Bj3selu+ZgnEYgRj95Vg6/X+DJjBNTfJxTAqWt2xgQwrw7SBqMYwD
AorqwqVO1SDHqpgW8fLBGVrBIpcE/sap1mEkANdxAvRiKGW7XGVDCq/LJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPcQXU6S9S8VQ/pdmsJ+fFtdxALiMB8GA1UdIwQY
MBaAFE7TJMzAkLgxgpkXrq9zg08INErOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHRNa3pNQ1F1REdDbVJldXIzT0RUd2cwU3M0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy8wMTdjMzctNjFiNi00ZDQwLTg4MWEt
NTNhMDg0MzkwNTI3LzEvVHRNa3pNQ1F1REdDbVJldXIzT0RUd2cwU3M0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYy8wMTdjMzctNjFiNi00ZDQwLTg4MWEtNTNhMDg0MzkwNTI3
LzEvVHRNa3pNQ1F1REdDbVJldXIzT0RUd2cwU3M0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJJaALgOL
v4CwYscpL6vULAdZ3J8SSuqKRbzYUmq4SuANTvxEX3OJZcBG+iDpqLcbcwnlFvj3
cRTderXHlspHxRgGCy1xAszbav4Vl+8bQ2FwGQisrgsRXmFt8ygA5DQksriE75I3
Io9Oom0lPebtTnhta6lLVoUsny3Zs9wwHDXybV1Svbj9Y2jIVCPM+W61ucKY4s2U
U2yN3a5Lb5vK+wKGzJWSLcPp3V/o77h+A+wIq4tKR9mXB8/DIqigfmrrccP3gPus
1oXqKs1mZmbzcM1tNSd1C3G7YrTCK4m2OaCv+7T2Utz1g0KRWVi5VSaSg4Smr3ij
30LuoqfxrFNCQg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 23:38:08 2026 by rpki-client