Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/f0b285-d038-4de6-9374-c472e62ebea8/1/TdbneabA8LCSFmIjgEZ9zi0Roxg.mft
File: TdbneabA8LCSFmIjgEZ9zi0Roxg.mft (raw, json)
Hash identifier: Y/J+6ExSAgSBwDLrIE5RwJbuZ3JLww177pQsSyJQ06w=
Subject key identifier: 8C:9E:51:C9:0F:38:8D:33:C5:01:49:C2:15:5F:0B:B7:60:E7:7B:CB
Authority key identifier: 4D:D6:E7:79:A6:C0:F0:B0:92:16:62:23:80:46:7D:CE:2D:11:A3:18
Certificate issuer: /CN=4dd6e779a6c0f0b09216622380467dce2d11a318
Certificate serial: 019CE636C45441801AB5CDA8DE589120D750
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TdbneabA8LCSFmIjgEZ9zi0Roxg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/f0b285-d038-4de6-9374-c472e62ebea8/1/TdbneabA8LCSFmIjgEZ9zi0Roxg.mft
Manifest number: 17F7
Signing time: Fri 13 Mar 2026 08:01:14 +0000
Manifest this update: Fri 13 Mar 2026 08:01:14 +0000
Manifest next update: Sat 14 Mar 2026 08:01:14 +0000
Files and hashes: 1: TdbneabA8LCSFmIjgEZ9zi0Roxg.crl (hash: 7VzYdHJOav29f+7dTPdNvlhSEROuHizmFtRXNO7mk4A=)
2: ZyTWugoefki0oz6k0H0j3uSA6D0.roa (hash: 8RbuK4aoWVsFj9ZjDN4iwth9lW8pdbJFx/Taog1hSJk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/f0b285-d038-4de6-9374-c472e62ebea8/1/TdbneabA8LCSFmIjgEZ9zi0Roxg.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/f0b285-d038-4de6-9374-c472e62ebea8/1/TdbneabA8LCSFmIjgEZ9zi0Roxg.mft
rsync://rpki.ripe.net/repository/DEFAULT/TdbneabA8LCSFmIjgEZ9zi0Roxg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 08:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e6:36:c4:54:41:80:1a:b5:cd:a8:de:58:91:20:d7:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4dd6e779a6c0f0b09216622380467dce2d11a318
Validity
Not Before: Mar 13 08:01:14 2026 GMT
Not After : Mar 14 08:01:14 2026 GMT
Subject: CN=8c9e51c90f388d33c50149c2155f0bb760e77bcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:e9:4c:e0:1d:b1:3f:8b:bc:cf:46:99:60:c4:
b7:95:06:7d:17:9f:49:31:67:f1:eb:40:e0:e1:b5:
72:db:79:11:9c:cd:9d:89:23:92:35:71:05:66:ec:
c3:63:8e:e4:34:bf:80:6c:27:19:cd:59:81:d5:e8:
c8:94:66:f7:d7:21:e7:b9:0b:f6:f2:0a:1a:d1:43:
f9:a6:a2:44:36:57:18:25:f6:2e:de:5d:6c:bd:eb:
0e:62:f0:91:71:5c:aa:7b:c3:87:ab:8a:19:87:ab:
ac:5d:41:a4:ed:8b:0e:f1:48:db:c2:9a:f0:58:62:
22:e7:59:14:b0:3e:36:b6:ce:85:e2:5c:d7:53:20:
3a:56:59:d9:00:02:a5:ba:14:d5:44:2d:2d:9c:97:
d5:ff:83:a7:e5:24:81:fa:3b:d6:99:dc:56:87:0d:
c7:29:76:35:11:5f:78:35:b3:bc:09:c0:af:85:86:
71:06:7a:66:73:76:e3:85:9f:26:0d:6b:6e:54:1c:
c1:3e:c9:57:a7:6e:b2:ca:b2:cf:84:69:0e:16:11:
9d:e5:f1:7f:c7:8c:a9:33:35:01:7e:2b:39:bd:c5:
38:df:44:58:fe:a1:a2:14:49:01:72:08:40:cd:e2:
28:53:45:b1:97:9f:40:db:d1:3a:4a:a9:26:42:28:
32:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:9E:51:C9:0F:38:8D:33:C5:01:49:C2:15:5F:0B:B7:60:E7:7B:CB
X509v3 Authority Key Identifier:
keyid:4D:D6:E7:79:A6:C0:F0:B0:92:16:62:23:80:46:7D:CE:2D:11:A3:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TdbneabA8LCSFmIjgEZ9zi0Roxg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/f0b285-d038-4de6-9374-c472e62ebea8/1/TdbneabA8LCSFmIjgEZ9zi0Roxg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/f0b285-d038-4de6-9374-c472e62ebea8/1/TdbneabA8LCSFmIjgEZ9zi0Roxg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:e4:a8:e8:7c:38:fe:c0:70:01:c7:59:6f:cb:c7:af:c6:08:
4d:8c:75:08:23:fc:be:fa:7d:a6:32:5d:23:fc:ad:b7:a1:32:
d1:b9:00:23:53:c7:c4:2d:c3:5b:00:43:36:1d:15:61:e4:f6:
98:7e:c6:5d:a2:8e:6b:b6:22:de:e5:07:6c:be:11:3e:53:45:
2f:29:b2:f8:21:f5:5e:92:ce:44:03:12:d3:4f:e8:50:b8:bf:
8f:71:9d:76:20:a6:35:20:6b:e9:7e:8e:20:1a:f7:98:75:00:
6b:1c:32:d9:a5:c6:cf:af:bb:53:c3:4a:fe:e6:29:09:2d:fd:
d4:8b:b8:68:83:bc:34:bd:2a:2d:17:a8:ae:ea:f0:2f:98:74:
c8:c4:a7:93:9e:f5:e5:77:ed:9c:b4:b3:6e:5d:35:63:e0:1a:
6c:cb:69:55:53:66:97:5f:e5:33:d1:f6:b6:ab:ac:7d:e9:cb:
2e:75:b2:00:ae:b3:75:45:92:fc:c2:55:f0:c2:7a:a2:a5:e6:
d4:07:f2:e8:87:3b:75:37:ee:65:ff:17:ef:4d:34:d4:ae:48:
7d:ba:4a:81:bb:c5:0b:dc:ab:3e:f2:ef:5f:68:38:ba:c8:18:
6e:65:ee:9e:76:2e:f8:5b:6a:d5:7f:ed:d3:df:6e:01:2c:67:
63:51:a9:f4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZzmNsRUQYAatc2o3liRINdQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRkZDZlNzc5YTZjMGYwYjA5MjE2NjIyMzgwNDY3ZGNlMmQx
MWEzMTgwHhcNMjYwMzEzMDgwMTE0WhcNMjYwMzE0MDgwMTE0WjAzMTEwLwYDVQQD
Eyg4YzllNTFjOTBmMzg4ZDMzYzUwMTQ5YzIxNTVmMGJiNzYwZTc3YmNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvulM4B2xP4u8z0aZYMS3lQZ9F59J
MWfx60Dg4bVy23kRnM2diSOSNXEFZuzDY47kNL+AbCcZzVmB1ejIlGb31yHnuQv2
8goa0UP5pqJENlcYJfYu3l1svesOYvCRcVyqe8OHq4oZh6usXUGk7YsO8Ujbwprw
WGIi51kUsD42ts6F4lzXUyA6VlnZAAKluhTVRC0tnJfV/4On5SSB+jvWmdxWhw3H
KXY1EV94NbO8CcCvhYZxBnpmc3bjhZ8mDWtuVBzBPslXp26yyrLPhGkOFhGd5fF/
x4ypMzUBfis5vcU430RY/qGiFEkBcghAzeIoU0Wxl59A29E6SqkmQigyCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIyeUckPOI0zxQFJwhVfC7dg53vLMB8GA1UdIwQY
MBaAFE3W53mmwPCwkhZiI4BGfc4tEaMYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVGRibmVhYkE4TENTRm1JamdFWjl6aTBSb3hnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy9mMGIyODUtZDAzOC00ZGU2LTkzNzQt
YzQ3MmU2MmViZWE4LzEvVGRibmVhYkE4TENTRm1JamdFWjl6aTBSb3hnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy9mMGIyODUtZDAzOC00ZGU2LTkzNzQtYzQ3MmU2MmViZWE4
LzEvVGRibmVhYkE4TENTRm1JamdFWjl6aTBSb3hnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkuSo6Hw4
/sBwAcdZb8vHr8YITYx1CCP8vvp9pjJdI/ytt6Ey0bkAI1PHxC3DWwBDNh0VYeT2
mH7GXaKOa7Yi3uUHbL4RPlNFLymy+CH1XpLORAMS00/oULi/j3GddiCmNSBr6X6O
IBr3mHUAaxwy2aXGz6+7U8NK/uYpCS391Iu4aIO8NL0qLReorurwL5h0yMSnk571
5XftnLSzbl01Y+AabMtpVVNml1/lM9H2tqusfenLLnWyAK6zdUWS/MJV8MJ6oqXm
1Afy6Ic7dTfuZf8X70001K5IfbpKgbvFC9yrPvLvX2g4usgYbmXunnYu+Ftq1X/t
099uASxnY1Gp9A==
-----END CERTIFICATE-----
Generated at Fri Mar 13 16:48:01 2026 by rpki-client