Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/516d35-5711-49a6-8ca0-55ff65f6bc12/1/aTddinP2XuMh63wI24OAslhkuRI.mft
File: aTddinP2XuMh63wI24OAslhkuRI.mft (raw, json)
Hash identifier: 6hOseYP8WJ+2102fg+LOjvy+jYWG6AG0CYsNLUFQp2k=
Subject key identifier: 0D:11:63:AF:55:81:F3:0C:99:1E:5B:B9:BA:FC:1B:16:8F:C2:CF:2A
Authority key identifier: 69:37:5D:8A:73:F6:5E:E3:21:EB:7C:08:DB:83:80:B2:58:64:B9:12
Certificate issuer: /CN=69375d8a73f65ee321eb7c08db8380b25864b912
Certificate serial: 019CF3F275988AE10405F68413F5FDEBAAB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aTddinP2XuMh63wI24OAslhkuRI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/516d35-5711-49a6-8ca0-55ff65f6bc12/1/aTddinP2XuMh63wI24OAslhkuRI.mft
Manifest number: 42
Signing time: Mon 16 Mar 2026 00:01:19 +0000
Manifest this update: Mon 16 Mar 2026 00:01:19 +0000
Manifest next update: Tue 17 Mar 2026 00:01:19 +0000
Files and hashes: 1: KAS5oJnMRBLN3CMFfME2h-Rh7mU.roa (hash: LS/iW/nevmUgfZkUxmuVR5hiIsYE32zEMVLICjYAf/4=)
2: aTddinP2XuMh63wI24OAslhkuRI.crl (hash: 59aykZGOVcnjS/PkAkBH/AJpxP8ls3hRQBz9WH2itMs=)
3: rQM6hcyKgdO32uWWqq-FwzbquX0.asa (hash: zP7bH4dme0HxeY/+twvXjeQeEdIkjoodZuLEIhQlKzM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/516d35-5711-49a6-8ca0-55ff65f6bc12/1/aTddinP2XuMh63wI24OAslhkuRI.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/516d35-5711-49a6-8ca0-55ff65f6bc12/1/aTddinP2XuMh63wI24OAslhkuRI.mft
rsync://rpki.ripe.net/repository/DEFAULT/aTddinP2XuMh63wI24OAslhkuRI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Mar 2026 00:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:f3:f2:75:98:8a:e1:04:05:f6:84:13:f5:fd:eb:aa:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69375d8a73f65ee321eb7c08db8380b25864b912
Validity
Not Before: Mar 16 00:01:19 2026 GMT
Not After : Mar 17 00:01:19 2026 GMT
Subject: CN=0d1163af5581f30c991e5bb9bafc1b168fc2cf2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ad:94:37:0a:59:1e:c9:c8:97:16:e0:81:9d:
4c:54:24:84:4a:40:e1:80:76:67:60:4c:46:fe:74:
26:9a:99:03:0b:3f:e1:1f:1a:71:2b:c2:88:98:3a:
e3:87:e3:d1:3f:40:4a:6f:08:d3:87:56:9a:82:5d:
17:1d:24:04:66:06:e7:5f:8b:e4:a4:1c:09:36:fb:
a7:75:8d:45:31:0e:44:0f:eb:16:6d:8c:5d:20:8f:
2f:63:11:12:6f:f3:f3:36:b6:09:61:5b:60:23:50:
08:f1:72:df:f7:49:2c:40:26:21:2c:34:e9:10:66:
5c:e3:5d:41:ed:c2:2f:0c:05:04:d1:5a:a6:89:20:
20:13:25:d2:2d:44:ce:93:4d:22:7b:4d:86:ab:cf:
8f:27:a2:e1:39:8a:d7:f1:e0:8b:51:12:4e:81:01:
06:87:bb:9a:9f:18:5d:e1:34:7f:ea:b9:a6:c6:3b:
c1:79:04:6d:32:9d:7a:a3:92:e4:4b:6a:10:1c:28:
3a:fd:6f:04:de:e1:f9:8f:28:83:ca:4f:4a:92:c7:
20:35:9e:65:b1:54:2f:8e:e6:1e:1e:5d:12:5d:17:
31:b8:88:6a:34:de:0e:56:2e:fb:3b:57:d3:e3:bc:
04:8e:e3:08:6e:35:5f:a8:0c:37:ae:94:9d:bf:3f:
ca:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:11:63:AF:55:81:F3:0C:99:1E:5B:B9:BA:FC:1B:16:8F:C2:CF:2A
X509v3 Authority Key Identifier:
keyid:69:37:5D:8A:73:F6:5E:E3:21:EB:7C:08:DB:83:80:B2:58:64:B9:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aTddinP2XuMh63wI24OAslhkuRI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/516d35-5711-49a6-8ca0-55ff65f6bc12/1/aTddinP2XuMh63wI24OAslhkuRI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/516d35-5711-49a6-8ca0-55ff65f6bc12/1/aTddinP2XuMh63wI24OAslhkuRI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:52:96:13:4f:12:1f:92:f2:27:ff:ca:c6:80:0c:62:ab:27:
0e:05:fc:48:44:a3:1b:16:30:79:d0:e2:d6:58:2e:a1:47:49:
0a:47:a3:cf:78:bd:e0:e3:2e:70:ec:9e:28:d7:cc:95:05:11:
cc:1d:c5:d2:db:bc:c1:05:bd:1c:e1:85:1b:2f:78:4b:8e:5f:
a3:cb:63:db:de:79:e7:8d:58:b7:8b:4b:bc:03:8e:04:19:9c:
e1:b7:11:98:a6:0b:aa:ff:4a:25:27:dc:85:08:62:3d:c4:66:
96:cf:fe:c2:eb:2c:63:1d:49:f3:ee:7d:00:d8:1b:68:8a:0a:
93:f5:88:25:71:12:88:b4:ce:66:78:78:4e:0f:90:07:d7:0e:
2e:a5:55:4a:a9:58:d0:0c:6c:ce:fb:2f:85:10:ef:41:42:2e:
e7:fd:73:b1:26:e4:19:5d:42:6c:10:70:cf:f4:e9:a4:19:eb:
61:ac:30:a7:5a:dc:90:32:11:fe:3a:11:2f:72:81:68:77:8e:
99:09:1c:bf:bb:50:be:88:bc:fa:bf:d5:72:c9:4b:a2:b6:f2:
06:09:35:7f:90:21:98:8d:f2:42:76:64:ec:d8:21:51:f1:ef:
5b:5b:f4:19:59:73:47:39:da:d1:f7:4b:66:1b:14:30:62:b5:
10:15:7a:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 16 08:00:16 2026 by rpki-client