Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/f0dd5f-b972-410b-9907-166fb9db6db3/1/TTAqLdUXpho7lSdG8u6fvkNtY0k.mft
File: TTAqLdUXpho7lSdG8u6fvkNtY0k.mft (raw, json)
Hash identifier: YbiwUTHSUm0csHhi0j7UgaQWCf8C5Rgp9RjF7wdzxB4=
Subject key identifier: AE:1A:31:04:6A:75:4F:43:21:05:62:D3:D5:1D:BE:C1:7C:E2:A1:A4
Authority key identifier: 4D:30:2A:2D:D5:17:A6:1A:3B:95:27:46:F2:EE:9F:BE:43:6D:63:49
Certificate issuer: /CN=4d302a2dd517a61a3b952746f2ee9fbe436d6349
Certificate serial: 019D992B95DA3B33DFC0118D3784DFC34919
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TTAqLdUXpho7lSdG8u6fvkNtY0k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/f0dd5f-b972-410b-9907-166fb9db6db3/1/TTAqLdUXpho7lSdG8u6fvkNtY0k.mft
Manifest number: 18C6
Signing time: Fri 17 Apr 2026 02:01:03 +0000
Manifest this update: Fri 17 Apr 2026 02:01:03 +0000
Manifest next update: Sat 18 Apr 2026 02:01:03 +0000
Files and hashes: 1: MKcSKQuThlhl7-lUDky950t59Bo.roa (hash: fmVr/24w+km0YFsLjQinoWMje0xwl7aW8GTMFVmYXv4=)
2: Nj8TjPnXMYEU1O-KPe0uF1aj5lI.roa (hash: 2REceW8NS4BgdGbGaQMtAyU9R7M7AyhHdxZZ2m9dzWY=)
3: TTAqLdUXpho7lSdG8u6fvkNtY0k.crl (hash: HYLcHB/RLM5zped8T3rAOHLERTYjCJqH0y9yNOb4h9U=)
4: XIFzkJPJ71521E26Mrj2xnc0JrU.asa (hash: VlbNe+O5EvKvAXRSzSuJJZA5UZMsBVV8HUf17LLjU3c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/f0dd5f-b972-410b-9907-166fb9db6db3/1/TTAqLdUXpho7lSdG8u6fvkNtY0k.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/f0dd5f-b972-410b-9907-166fb9db6db3/1/TTAqLdUXpho7lSdG8u6fvkNtY0k.mft
rsync://rpki.ripe.net/repository/DEFAULT/TTAqLdUXpho7lSdG8u6fvkNtY0k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2b:95:da:3b:33:df:c0:11:8d:37:84:df:c3:49:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d302a2dd517a61a3b952746f2ee9fbe436d6349
Validity
Not Before: Apr 17 02:01:03 2026 GMT
Not After : Apr 18 02:01:03 2026 GMT
Subject: CN=ae1a31046a754f43210562d3d51dbec17ce2a1a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:84:e9:b1:e2:64:ac:32:15:12:a4:86:8e:69:
65:e9:02:ea:57:c1:9d:2b:f8:cb:66:a7:9c:4b:2d:
2f:94:7f:97:f2:45:f2:ed:40:29:cd:f1:2e:41:7a:
08:44:d6:0d:ad:70:eb:a6:b8:a9:1f:8d:74:11:e0:
96:fb:a3:8c:ff:ae:b5:65:83:2d:57:ea:95:5b:b1:
1b:76:8d:0b:04:a1:b6:43:78:3c:5f:4a:39:b2:e1:
83:43:e5:17:a0:42:c9:20:48:35:0b:60:67:e1:1b:
73:6a:d6:8c:3a:24:c2:61:4f:41:46:39:2a:6c:48:
63:71:2c:5a:41:73:d5:46:2c:a4:6c:f0:f7:9f:38:
9f:e7:63:44:78:83:ad:94:db:51:1f:15:9b:ce:a0:
c6:9f:78:73:3f:b3:55:5e:1d:c9:ac:a3:e3:c9:02:
26:35:f9:c3:63:5a:f0:1c:1e:66:8e:a0:74:40:06:
c4:0f:92:3e:ce:57:ed:66:2c:e2:8b:09:97:b2:d6:
af:95:74:26:5b:7f:91:39:7a:8a:e2:79:bc:48:05:
01:11:23:2e:b4:b3:f7:52:c7:a0:10:65:47:a3:72:
ff:19:15:30:e1:88:73:0b:09:71:6b:ce:b3:97:41:
0b:2f:00:d1:f0:22:5a:4e:02:18:69:8e:9a:10:35:
9c:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:1A:31:04:6A:75:4F:43:21:05:62:D3:D5:1D:BE:C1:7C:E2:A1:A4
X509v3 Authority Key Identifier:
keyid:4D:30:2A:2D:D5:17:A6:1A:3B:95:27:46:F2:EE:9F:BE:43:6D:63:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TTAqLdUXpho7lSdG8u6fvkNtY0k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/f0dd5f-b972-410b-9907-166fb9db6db3/1/TTAqLdUXpho7lSdG8u6fvkNtY0k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/f0dd5f-b972-410b-9907-166fb9db6db3/1/TTAqLdUXpho7lSdG8u6fvkNtY0k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:53:69:82:46:c9:38:ca:72:01:c3:ea:16:73:28:e9:47:c9:
a0:01:ac:0f:31:52:65:62:b3:73:82:86:59:6a:63:01:e7:a0:
29:0e:63:62:ae:b3:b9:2e:c2:8a:ad:19:ef:2f:22:d2:ef:2e:
37:ab:0c:99:c5:b1:57:c9:20:50:12:25:49:dc:d6:04:a0:d9:
de:44:7e:18:cb:e8:31:0c:aa:90:97:9a:4f:b1:5f:42:27:9d:
b7:9e:67:62:7c:fe:7c:52:0d:39:6c:ff:ef:6f:19:b4:7d:38:
f6:ca:4d:a7:b4:37:c6:17:08:3f:07:17:8e:c3:6a:e3:6b:60:
2c:6c:29:c3:2b:9c:af:ca:e3:f7:5f:b5:fa:d8:8b:55:e3:1d:
c8:04:2e:85:aa:f3:b3:86:28:57:09:30:cd:ba:eb:99:b6:c7:
20:95:22:fe:3c:61:53:12:f5:0b:ef:fc:6b:f2:e1:27:39:38:
fa:d8:24:e8:f5:0b:2f:6d:22:31:d4:3b:e9:8f:f7:a4:41:30:
09:db:6a:ef:48:5a:a7:20:d6:79:0c:1f:91:ad:3f:10:c1:0f:
4f:f9:d1:ff:84:73:b7:f5:16:a5:ec:79:8b:1d:5e:73:7d:66:
ad:08:a2:e6:bf:65:dc:da:8d:4e:7b:d1:35:74:d7:32:ad:32:
65:f1:e4:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:05:51 2026 by rpki-client