Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/459e63-40b8-4536-84b4-aa81b9603857/1/TtHX3yWkqdXnJ8QvVenjGD02qTo.mft
File: TtHX3yWkqdXnJ8QvVenjGD02qTo.mft (raw, json)
Hash identifier: HkObeWjxWbSAbriHYkaBTBFO0d+r1o3OANAQkB9/zB0=
Subject key identifier: FA:4F:3F:7E:59:B1:C8:DB:CD:9E:A0:5B:01:BE:26:1A:02:61:05:F8
Authority key identifier: 4E:D1:D7:DF:25:A4:A9:D5:E7:27:C4:2F:55:E9:E3:18:3D:36:A9:3A
Certificate issuer: /CN=4ed1d7df25a4a9d5e727c42f55e9e3183d36a93a
Certificate serial: 019D9C63040295426BEBFFA8705BC57D23E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TtHX3yWkqdXnJ8QvVenjGD02qTo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/459e63-40b8-4536-84b4-aa81b9603857/1/TtHX3yWkqdXnJ8QvVenjGD02qTo.mft
Manifest number: 124E
Signing time: Fri 17 Apr 2026 17:00:27 +0000
Manifest this update: Fri 17 Apr 2026 17:00:27 +0000
Manifest next update: Sat 18 Apr 2026 17:00:27 +0000
Files and hashes: 1: TtHX3yWkqdXnJ8QvVenjGD02qTo.crl (hash: a+bkSP81d2WmSvRK6LKt7HewRYP6x7OwZiFLnvt/fKc=)
2: taVJ-Q2hMTd13C7NB7DobfbxLWA.roa (hash: /rtclsT6DmoztL99hwNHoG6rHBH4YjW2YpA+4zkm4f4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/459e63-40b8-4536-84b4-aa81b9603857/1/TtHX3yWkqdXnJ8QvVenjGD02qTo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/459e63-40b8-4536-84b4-aa81b9603857/1/TtHX3yWkqdXnJ8QvVenjGD02qTo.mft
rsync://rpki.ripe.net/repository/DEFAULT/TtHX3yWkqdXnJ8QvVenjGD02qTo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:63:04:02:95:42:6b:eb:ff:a8:70:5b:c5:7d:23:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ed1d7df25a4a9d5e727c42f55e9e3183d36a93a
Validity
Not Before: Apr 17 17:00:27 2026 GMT
Not After : Apr 18 17:00:27 2026 GMT
Subject: CN=fa4f3f7e59b1c8dbcd9ea05b01be261a026105f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:25:77:76:e1:02:e6:53:13:1d:a7:63:6e:2e:
e4:0f:16:33:63:4e:23:a7:8f:00:e1:3d:df:1d:a8:
e9:74:d6:a3:99:76:13:b5:f9:0a:45:f9:30:4f:bf:
27:81:c5:35:77:db:11:92:39:4a:72:3e:1f:ff:71:
3c:19:51:5e:23:30:5e:aa:6f:b2:ea:d4:ee:3d:2f:
1e:f6:a5:69:c2:2c:99:d8:a1:28:ff:c0:8f:0e:c6:
83:95:0b:f1:dc:e6:17:ba:30:21:00:25:d6:ae:9e:
c2:9a:49:2a:90:df:32:09:60:19:ad:c6:23:33:16:
81:fe:21:bd:62:96:ca:2b:27:87:02:2a:80:78:bc:
39:63:9d:42:bb:ae:25:01:f7:da:93:3d:9a:d0:46:
e8:18:7a:16:d6:dc:58:e0:4c:59:26:72:11:a6:e9:
1f:b6:b2:d3:c2:38:f0:fb:39:f8:a6:93:36:cb:50:
ba:b9:a3:4b:1b:5b:02:00:32:7f:61:35:3e:aa:bf:
60:f1:32:ff:27:eb:66:09:bc:1f:5c:57:5d:a9:df:
3f:87:f0:02:98:3b:e8:86:d4:24:3a:a1:d9:05:bb:
41:85:f6:c8:b5:7d:96:1c:96:55:bb:56:54:dd:5a:
4d:d0:74:92:10:15:13:70:b6:ec:5f:6b:bd:c7:8a:
1d:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:4F:3F:7E:59:B1:C8:DB:CD:9E:A0:5B:01:BE:26:1A:02:61:05:F8
X509v3 Authority Key Identifier:
keyid:4E:D1:D7:DF:25:A4:A9:D5:E7:27:C4:2F:55:E9:E3:18:3D:36:A9:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TtHX3yWkqdXnJ8QvVenjGD02qTo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/459e63-40b8-4536-84b4-aa81b9603857/1/TtHX3yWkqdXnJ8QvVenjGD02qTo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/459e63-40b8-4536-84b4-aa81b9603857/1/TtHX3yWkqdXnJ8QvVenjGD02qTo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:77:cc:d3:c8:45:93:29:5b:dc:de:fd:7b:06:fe:33:29:10:
6b:bf:e1:2b:fd:b9:a6:c1:62:e8:d3:a7:13:44:65:72:39:d6:
6f:33:bd:3d:06:a8:31:2c:12:6b:ac:b7:9b:b3:65:9a:88:8a:
60:27:3b:17:95:f7:96:cb:00:6f:94:6f:9b:a6:21:89:68:ff:
24:11:df:db:85:e2:9c:d5:be:49:95:22:92:e8:ae:c3:2e:d1:
e3:58:76:ff:e9:93:81:1b:87:5e:0b:90:b6:6e:7f:4a:d7:97:
49:a0:24:9a:a1:6e:3a:49:5a:de:33:15:12:e9:45:ee:2a:e9:
5a:21:db:b2:11:77:37:30:e2:57:ff:c4:75:ae:43:0d:d7:09:
59:8a:0e:81:3c:43:a4:c8:96:51:85:79:a2:bb:49:f3:b1:f8:
a9:ce:f3:9a:6b:98:d5:c2:57:37:c3:f2:9e:1d:78:85:64:68:
b6:e1:a4:55:34:25:dd:ce:2e:dd:5c:ee:8a:ac:27:2c:29:b5:
36:eb:7e:48:73:32:6d:86:38:9c:09:1c:bb:73:e8:a9:9e:6a:
8e:ab:0c:83:32:77:f5:ca:4e:2c:44:5e:98:e7:44:fb:42:53:
f6:2e:e5:52:c5:20:6c:ba:ee:bd:f5:b4:b5:ca:b0:cf:08:54:
37:44:71:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:31:16 2026 by rpki-client