Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/459e63-40b8-4536-84b4-aa81b9603857/1/TtHX3yWkqdXnJ8QvVenjGD02qTo.mft
File: TtHX3yWkqdXnJ8QvVenjGD02qTo.mft (raw, json)
Hash identifier: nddzuHiKbbnALbd+ooLi3ggHtyuL6kIb6c3eAWQ60jE=
Subject key identifier: C9:AE:76:F6:89:4C:60:EE:0F:01:3D:42:60:CD:55:2C:22:8C:38:8F
Authority key identifier: 4E:D1:D7:DF:25:A4:A9:D5:E7:27:C4:2F:55:E9:E3:18:3D:36:A9:3A
Certificate issuer: /CN=4ed1d7df25a4a9d5e727c42f55e9e3183d36a93a
Certificate serial: 019CACEBE59BFB8B8E340FC3795C7F6B412C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TtHX3yWkqdXnJ8QvVenjGD02qTo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/459e63-40b8-4536-84b4-aa81b9603857/1/TtHX3yWkqdXnJ8QvVenjGD02qTo.mft
Manifest number: 11D2
Signing time: Mon 02 Mar 2026 05:01:06 +0000
Manifest this update: Mon 02 Mar 2026 05:01:06 +0000
Manifest next update: Tue 03 Mar 2026 05:01:06 +0000
Files and hashes: 1: TtHX3yWkqdXnJ8QvVenjGD02qTo.crl (hash: GLzG/+EsRj0znBZ3OsUQBHSx4GkA/Hiiczwv0g2uuvY=)
2: taVJ-Q2hMTd13C7NB7DobfbxLWA.roa (hash: /rtclsT6DmoztL99hwNHoG6rHBH4YjW2YpA+4zkm4f4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/459e63-40b8-4536-84b4-aa81b9603857/1/TtHX3yWkqdXnJ8QvVenjGD02qTo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/459e63-40b8-4536-84b4-aa81b9603857/1/TtHX3yWkqdXnJ8QvVenjGD02qTo.mft
rsync://rpki.ripe.net/repository/DEFAULT/TtHX3yWkqdXnJ8QvVenjGD02qTo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:eb:e5:9b:fb:8b:8e:34:0f:c3:79:5c:7f:6b:41:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ed1d7df25a4a9d5e727c42f55e9e3183d36a93a
Validity
Not Before: Mar 2 05:01:06 2026 GMT
Not After : Mar 3 05:01:06 2026 GMT
Subject: CN=c9ae76f6894c60ee0f013d4260cd552c228c388f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:cf:8e:52:6b:36:61:0d:bf:85:d1:b3:5b:16:
8b:33:6b:50:56:3e:25:d6:b1:57:13:29:77:fe:80:
cf:24:3e:61:fb:db:48:84:be:00:81:66:5f:36:9c:
3d:ed:3a:36:cf:df:b2:7c:f3:57:89:3f:46:b5:21:
23:73:b1:0b:37:33:82:5d:c0:28:6d:d3:97:26:11:
83:46:7a:ed:f7:6c:31:36:54:b0:e9:f7:08:b9:a1:
33:73:df:72:1c:7e:32:69:4f:14:12:07:83:3a:eb:
1f:24:d5:a2:54:b4:7c:71:83:a4:88:df:fa:56:d7:
77:63:e0:70:53:05:7e:c2:1e:96:31:b7:cc:5a:e9:
eb:89:f6:03:71:26:2f:da:3f:cf:87:61:26:1e:23:
fc:82:1a:7f:b6:43:8e:19:41:fd:10:02:4a:7a:0d:
47:06:ed:a0:43:ce:86:ce:af:2b:75:e9:32:ed:48:
a5:f8:34:3b:da:be:85:17:10:ec:ef:b4:c3:71:1f:
4b:4b:e5:fe:b9:62:36:2f:94:b4:51:18:3c:4e:ab:
43:51:6e:72:ab:6b:15:c7:38:d1:ad:2f:36:b2:f2:
da:9b:a7:56:f8:b7:a3:f0:6e:c8:60:4d:90:d3:9c:
4f:41:12:e9:d4:27:79:95:58:9e:d1:8b:a1:d5:a1:
64:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:AE:76:F6:89:4C:60:EE:0F:01:3D:42:60:CD:55:2C:22:8C:38:8F
X509v3 Authority Key Identifier:
keyid:4E:D1:D7:DF:25:A4:A9:D5:E7:27:C4:2F:55:E9:E3:18:3D:36:A9:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TtHX3yWkqdXnJ8QvVenjGD02qTo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/459e63-40b8-4536-84b4-aa81b9603857/1/TtHX3yWkqdXnJ8QvVenjGD02qTo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/459e63-40b8-4536-84b4-aa81b9603857/1/TtHX3yWkqdXnJ8QvVenjGD02qTo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:f9:76:ce:1f:94:ec:76:b4:c2:d1:0c:8a:cc:70:50:4e:e1:
27:00:4c:14:5f:f0:7e:f4:aa:5b:58:5f:2c:3f:ee:72:a6:7e:
f5:43:2c:bb:55:07:30:c0:af:48:44:d0:3d:ec:0a:da:58:44:
8a:80:70:35:e1:49:5d:4e:4c:33:6d:a6:e2:db:89:8a:b2:87:
97:fe:67:e3:c9:7f:3d:ea:cd:2c:e0:11:1b:79:d0:82:e8:57:
39:51:90:07:78:1f:f2:06:c1:c6:07:4b:b0:b0:e0:fd:d7:49:
82:98:94:63:09:dd:f2:d2:41:ef:b3:b2:d8:24:89:d5:e6:62:
6e:7a:e8:e3:15:9b:0e:9c:0a:82:12:5d:7e:1d:5e:b7:f9:ed:
a9:ff:f8:88:e2:d3:6c:80:57:4f:7d:98:42:3d:c9:78:7b:c3:
42:0a:9b:db:b4:2a:df:a5:d0:58:fa:10:79:15:9a:c3:e2:e6:
63:fa:b2:43:f5:61:33:c2:84:bc:db:23:6c:70:08:99:19:bf:
b7:b5:d2:56:b0:b0:05:19:e6:59:c7:58:d3:44:dd:56:72:49:
be:77:82:46:6e:94:c9:57:72:89:da:b3:91:ff:b6:49:db:08:
2e:26:d9:a9:8d:5a:f8:ec:f4:10:dc:b0:eb:14:1f:30:3b:13:
c4:06:58:4e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZys6+Wb+4uONA/DeVx/a0EsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRlZDFkN2RmMjVhNGE5ZDVlNzI3YzQyZjU1ZTllMzE4M2Qz
NmE5M2EwHhcNMjYwMzAyMDUwMTA2WhcNMjYwMzAzMDUwMTA2WjAzMTEwLwYDVQQD
EyhjOWFlNzZmNjg5NGM2MGVlMGYwMTNkNDI2MGNkNTUyYzIyOGMzODhmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsc+OUms2YQ2/hdGzWxaLM2tQVj4l
1rFXEyl3/oDPJD5h+9tIhL4AgWZfNpw97To2z9+yfPNXiT9GtSEjc7ELNzOCXcAo
bdOXJhGDRnrt92wxNlSw6fcIuaEzc99yHH4yaU8UEgeDOusfJNWiVLR8cYOkiN/6
Vtd3Y+BwUwV+wh6WMbfMWunrifYDcSYv2j/Ph2EmHiP8ghp/tkOOGUH9EAJKeg1H
Bu2gQ86Gzq8rdeky7Uil+DQ72r6FFxDs77TDcR9LS+X+uWI2L5S0URg8TqtDUW5y
q2sVxzjRrS82svLam6dW+Lej8G7IYE2Q05xPQRLp1Cd5lVie0Yuh1aFkBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMmudvaJTGDuDwE9QmDNVSwijDiPMB8GA1UdIwQY
MBaAFE7R198lpKnV5yfEL1Xp4xg9Nqk6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHRIWDN5V2txZFhuSjhRdlZlbmpHRDAycVRvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi80NTllNjMtNDBiOC00NTM2LTg0YjQt
YWE4MWI5NjAzODU3LzEvVHRIWDN5V2txZFhuSjhRdlZlbmpHRDAycVRvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi80NTllNjMtNDBiOC00NTM2LTg0YjQtYWE4MWI5NjAzODU3
LzEvVHRIWDN5V2txZFhuSjhRdlZlbmpHRDAycVRvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcfl2zh+U
7Ha0wtEMisxwUE7hJwBMFF/wfvSqW1hfLD/ucqZ+9UMsu1UHMMCvSETQPewK2lhE
ioBwNeFJXU5MM22m4tuJirKHl/5n48l/PerNLOARG3nQguhXOVGQB3gf8gbBxgdL
sLDg/ddJgpiUYwnd8tJB77Oy2CSJ1eZibnro4xWbDpwKghJdfh1et/ntqf/4iOLT
bIBXT32YQj3JeHvDQgqb27Qq36XQWPoQeRWaw+LmY/qyQ/VhM8KEvNsjbHAImRm/
t7XSVrCwBRnmWcdY00TdVnJJvneCRm6UyVdyidqzkf+2SdsILibZqY1a+Oz0ENyw
6xQfMDsTxAZYTg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 09:31:45 2026 by rpki-client