Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/017c37-61b6-4d40-881a-53a084390527/1/TtMkzMCQuDGCmReur3ODTwg0Ss4.mft
File: TtMkzMCQuDGCmReur3ODTwg0Ss4.mft (raw, json)
Hash identifier: C4uerSbjSQU+PPO1qs1K237SwhEt4SiN7fbag6ezTok=
Subject key identifier: F1:1B:F5:19:5F:4D:FB:CD:7A:75:CE:0E:FB:6D:BB:40:F4:55:6C:4C
Authority key identifier: 4E:D3:24:CC:C0:90:B8:31:82:99:17:AE:AF:73:83:4F:08:34:4A:CE
Certificate issuer: /CN=4ed324ccc090b831829917aeaf73834f08344ace
Certificate serial: 019CAF4880B1F0567599B66F20D2FA680D9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TtMkzMCQuDGCmReur3ODTwg0Ss4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/017c37-61b6-4d40-881a-53a084390527/1/TtMkzMCQuDGCmReur3ODTwg0Ss4.mft
Manifest number: 0358
Signing time: Mon 02 Mar 2026 16:01:30 +0000
Manifest this update: Mon 02 Mar 2026 16:01:30 +0000
Manifest next update: Tue 03 Mar 2026 16:01:30 +0000
Files and hashes: 1: C6nXsG6UDvJjYHmVMk3MguMztUw.roa (hash: DZ6jiw9DI8ZM7KfN0j9o/vZRidGddKGFVOWlQEbKrbI=)
2: TtMkzMCQuDGCmReur3ODTwg0Ss4.crl (hash: a0jaxFduyWFdkrvGqkkM+E7V8eJagl8IQVJ2EihwdpM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/017c37-61b6-4d40-881a-53a084390527/1/TtMkzMCQuDGCmReur3ODTwg0Ss4.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/017c37-61b6-4d40-881a-53a084390527/1/TtMkzMCQuDGCmReur3ODTwg0Ss4.mft
rsync://rpki.ripe.net/repository/DEFAULT/TtMkzMCQuDGCmReur3ODTwg0Ss4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 15:05:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:af:48:80:b1:f0:56:75:99:b6:6f:20:d2:fa:68:0d:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ed324ccc090b831829917aeaf73834f08344ace
Validity
Not Before: Mar 2 16:01:30 2026 GMT
Not After : Mar 3 16:01:30 2026 GMT
Subject: CN=f11bf5195f4dfbcd7a75ce0efb6dbb40f4556c4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:52:18:f8:9f:b1:5f:8d:de:8b:66:2e:78:19:
27:b2:5a:86:b2:a6:5c:62:07:9e:e0:62:95:19:b1:
a9:53:56:52:c7:dd:f3:63:35:6b:1e:35:b0:0b:a8:
9a:35:c5:ed:be:5f:8b:7a:be:6f:b1:b8:42:7b:2f:
7d:cb:14:2b:26:50:14:75:ab:39:f7:ce:b8:1f:60:
3f:19:dd:3f:4d:99:c4:2f:da:15:83:99:9f:c7:58:
32:f1:9d:22:31:06:c8:6f:15:1b:c2:e5:b9:90:3e:
85:06:52:f9:10:a5:9f:10:ce:6f:96:8b:85:25:72:
dd:3c:b9:c9:b8:f8:26:2c:c9:a4:66:01:74:98:3b:
73:7b:9a:4d:63:fe:fc:52:0d:e0:23:30:d5:10:23:
1b:91:c4:29:eb:c4:03:b2:89:47:7f:bd:b6:10:6b:
11:66:8d:d9:22:87:0a:41:6f:c6:0a:fd:7f:58:c8:
4a:85:b5:96:1c:0e:b3:ed:24:af:2b:09:0b:ac:18:
1a:5a:91:1d:c1:0b:c1:3e:a8:c6:43:ba:e2:02:23:
99:fa:ca:f5:52:10:8c:c4:07:e9:6c:79:ce:c8:40:
fe:e2:4b:5b:fe:81:aa:05:19:11:1f:84:a3:73:6b:
92:86:64:7b:f9:3b:2d:45:12:a6:8a:51:1c:5b:19:
ff:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:1B:F5:19:5F:4D:FB:CD:7A:75:CE:0E:FB:6D:BB:40:F4:55:6C:4C
X509v3 Authority Key Identifier:
keyid:4E:D3:24:CC:C0:90:B8:31:82:99:17:AE:AF:73:83:4F:08:34:4A:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TtMkzMCQuDGCmReur3ODTwg0Ss4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/017c37-61b6-4d40-881a-53a084390527/1/TtMkzMCQuDGCmReur3ODTwg0Ss4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/017c37-61b6-4d40-881a-53a084390527/1/TtMkzMCQuDGCmReur3ODTwg0Ss4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:c6:54:d3:6e:e2:7c:77:c1:58:14:c6:f6:b0:1a:15:04:e9:
77:37:f3:d7:f8:3d:3a:61:55:83:a0:42:8a:30:a3:ec:52:50:
01:72:d7:97:ae:d0:04:f7:28:29:ea:51:c5:e4:82:87:46:bf:
4a:1a:1a:f0:4e:6e:03:b5:09:3e:b3:ea:08:db:64:74:35:78:
8d:39:11:26:e7:fe:c8:1e:21:7c:35:04:cc:b9:04:ff:6a:13:
b1:f3:b0:a4:b6:2c:ae:98:77:07:6d:9c:7f:f6:91:a4:71:6f:
7e:0d:73:17:50:fd:ef:e1:97:9e:de:6a:12:c5:72:21:d3:ac:
0c:23:ee:8b:30:fc:99:26:ed:aa:cc:e5:69:cd:1c:76:cb:19:
37:0e:c2:74:7b:b2:4d:93:29:ee:88:d0:fb:a0:36:24:a1:e6:
18:c5:12:66:c8:52:eb:f0:42:71:c9:98:63:f4:dc:2b:fa:44:
49:b6:ce:9f:b5:32:98:8a:9d:3c:12:d7:25:b2:ac:9d:9f:76:
7b:8e:0a:3d:64:5c:f0:03:67:82:f3:aa:4a:8a:c7:25:15:da:
76:82:1c:04:5e:2d:d7:09:fb:a1:c5:bd:f7:4a:43:29:51:5f:
df:d7:9a:4b:6d:75:7c:6a:d6:84:c0:a4:28:0a:ce:9a:c1:78:
af:8c:12:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 21:10:41 2026 by rpki-client