Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/516d35-5711-49a6-8ca0-55ff65f6bc12/1/aTddinP2XuMh63wI24OAslhkuRI.mft
File: aTddinP2XuMh63wI24OAslhkuRI.mft (raw, json)
Hash identifier: ceC6twlEzQ2l9DQwfkFp3A3LSfDSBp7J4qkGfkI2wMU=
Subject key identifier: A6:21:22:FB:F0:D8:5C:70:F5:FD:7F:C0:31:74:60:B1:9E:FE:0B:28
Authority key identifier: 69:37:5D:8A:73:F6:5E:E3:21:EB:7C:08:DB:83:80:B2:58:64:B9:12
Certificate issuer: /CN=69375d8a73f65ee321eb7c08db8380b25864b912
Certificate serial: 019DDD9F11654BFA5B7A6D1D9738F6AE73AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aTddinP2XuMh63wI24OAslhkuRI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/516d35-5711-49a6-8ca0-55ff65f6bc12/1/aTddinP2XuMh63wI24OAslhkuRI.mft
Manifest number: BB
Signing time: Thu 30 Apr 2026 09:01:22 +0000
Manifest this update: Thu 30 Apr 2026 09:01:22 +0000
Manifest next update: Fri 01 May 2026 09:01:22 +0000
Files and hashes: 1: KAS5oJnMRBLN3CMFfME2h-Rh7mU.roa (hash: LS/iW/nevmUgfZkUxmuVR5hiIsYE32zEMVLICjYAf/4=)
2: aTddinP2XuMh63wI24OAslhkuRI.crl (hash: q1QLrnP0wVA92we6FC6/v5a6hstaKjs/0LtPjFsE3vk=)
3: rQM6hcyKgdO32uWWqq-FwzbquX0.asa (hash: zP7bH4dme0HxeY/+twvXjeQeEdIkjoodZuLEIhQlKzM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/516d35-5711-49a6-8ca0-55ff65f6bc12/1/aTddinP2XuMh63wI24OAslhkuRI.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/516d35-5711-49a6-8ca0-55ff65f6bc12/1/aTddinP2XuMh63wI24OAslhkuRI.mft
rsync://rpki.ripe.net/repository/DEFAULT/aTddinP2XuMh63wI24OAslhkuRI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 01 May 2026 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:dd:9f:11:65:4b:fa:5b:7a:6d:1d:97:38:f6:ae:73:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69375d8a73f65ee321eb7c08db8380b25864b912
Validity
Not Before: Apr 30 09:01:22 2026 GMT
Not After : May 1 09:01:22 2026 GMT
Subject: CN=a62122fbf0d85c70f5fd7fc0317460b19efe0b28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:0f:dc:ab:03:21:0e:a0:37:78:1d:a3:f7:c5:
bd:6d:93:29:32:f9:4b:d0:30:af:c2:8d:be:0f:af:
ad:ae:db:2f:5e:41:9c:1c:70:03:4c:ac:80:14:40:
32:b9:92:61:9e:bc:f6:53:80:ec:d5:01:e3:4b:2e:
06:5d:ed:c0:d5:fa:c1:f9:93:8e:0b:25:40:7f:e2:
34:d4:87:b0:13:3f:9d:d3:a7:1b:81:49:f2:40:6c:
06:5d:c6:cd:95:01:d8:09:60:6e:db:09:85:ea:c4:
1d:9a:7d:5c:90:2c:57:84:f4:cc:12:f9:4b:39:f2:
8d:cf:db:ef:4f:da:ef:5b:42:f2:22:05:d7:52:d0:
f4:9a:3e:36:cb:94:85:28:21:4a:2b:0f:8f:df:1f:
9c:d3:b0:bf:18:e5:f6:77:3b:29:72:4f:86:3c:0c:
93:74:9f:d8:5a:f0:2b:e7:83:16:ff:8c:6b:f0:36:
58:0c:04:67:17:47:46:22:a9:f4:71:ab:6f:6c:05:
4f:d1:81:c7:e9:fd:c9:7c:f1:e9:d0:c1:10:d0:fc:
77:eb:24:92:31:e5:ce:b6:93:f1:9c:4f:b6:4d:36:
4a:8f:08:42:2c:8b:c2:b4:41:b4:3d:6a:3e:c9:06:
fd:b7:8b:15:3a:52:52:27:9d:f6:ad:f3:e5:2a:00:
e8:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:21:22:FB:F0:D8:5C:70:F5:FD:7F:C0:31:74:60:B1:9E:FE:0B:28
X509v3 Authority Key Identifier:
keyid:69:37:5D:8A:73:F6:5E:E3:21:EB:7C:08:DB:83:80:B2:58:64:B9:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aTddinP2XuMh63wI24OAslhkuRI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/516d35-5711-49a6-8ca0-55ff65f6bc12/1/aTddinP2XuMh63wI24OAslhkuRI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/516d35-5711-49a6-8ca0-55ff65f6bc12/1/aTddinP2XuMh63wI24OAslhkuRI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:ec:d9:f9:3d:6f:df:c4:e3:e7:4e:0f:75:f6:d8:bc:77:31:
2a:9f:fc:75:b0:4b:83:37:dc:82:45:e5:b0:80:fd:e7:e4:63:
da:2f:1e:6f:33:ad:f5:40:83:e8:bf:77:d9:7f:fd:f1:cf:8d:
98:99:d7:85:2b:06:e6:b8:7b:07:a6:01:84:25:12:65:bb:17:
c3:de:d1:37:c1:17:20:0a:12:fa:85:45:00:81:fc:3d:ac:80:
af:b7:13:48:55:9d:dc:c7:7e:d9:9a:12:b4:99:b1:05:6c:87:
7e:ef:16:c1:5d:3c:27:fe:20:83:40:bb:eb:e6:15:7d:41:69:
1f:25:0e:f4:6b:26:18:c9:c7:3b:5b:12:d5:8c:c9:84:09:8a:
bf:cb:6e:f1:40:39:1f:df:5d:41:e1:40:f1:44:e8:69:25:38:
69:9f:62:51:6a:9b:1a:ca:94:e4:cf:5c:74:1b:fe:a6:db:de:
69:53:0f:c4:51:63:72:ae:a9:97:29:a0:72:5a:34:cd:ec:84:
79:b3:2a:f9:fd:4d:cc:58:73:f7:1d:5e:71:da:ed:c9:e2:55:
42:5e:8c:12:53:0d:1d:e5:f7:09:67:ec:dc:80:2a:09:8b:ce:
86:83:fd:91:c3:69:0e:a7:62:56:c3:89:d9:83:81:de:da:14:
0c:a6:9b:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 30 13:06:02 2026 by rpki-client