Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/f0b285-d038-4de6-9374-c472e62ebea8/1/TdbneabA8LCSFmIjgEZ9zi0Roxg.mft
File: TdbneabA8LCSFmIjgEZ9zi0Roxg.mft (raw, json)
Hash identifier: yRGR83Pap4Q+o9+KfMH1OL/uto+AUEFQqnxBEA/RgSo=
Subject key identifier: B6:89:64:A9:7A:6D:7D:50:4D:6F:F6:44:1F:22:2E:5B:C5:06:A1:48
Authority key identifier: 4D:D6:E7:79:A6:C0:F0:B0:92:16:62:23:80:46:7D:CE:2D:11:A3:18
Certificate issuer: /CN=4dd6e779a6c0f0b09216622380467dce2d11a318
Certificate serial: 019DD12CDD148AADACDD6A6F56A597563B96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TdbneabA8LCSFmIjgEZ9zi0Roxg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/f0b285-d038-4de6-9374-c472e62ebea8/1/TdbneabA8LCSFmIjgEZ9zi0Roxg.mft
Manifest number: 1872
Signing time: Mon 27 Apr 2026 23:01:11 +0000
Manifest this update: Mon 27 Apr 2026 23:01:11 +0000
Manifest next update: Tue 28 Apr 2026 23:01:11 +0000
Files and hashes: 1: 7X15JsRrJkgKCJLXjiSs1bdhruU.roa (hash: sAi/yGgK+33Ivc6uDbrNPu1QsJF/QnGJyKyHF3jLCvU=)
2: TdbneabA8LCSFmIjgEZ9zi0Roxg.crl (hash: baDdNOzaDtJ0i6SnM0zrYI4R/nr0Zi4m5IeENeelcZs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/f0b285-d038-4de6-9374-c472e62ebea8/1/TdbneabA8LCSFmIjgEZ9zi0Roxg.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/f0b285-d038-4de6-9374-c472e62ebea8/1/TdbneabA8LCSFmIjgEZ9zi0Roxg.mft
rsync://rpki.ripe.net/repository/DEFAULT/TdbneabA8LCSFmIjgEZ9zi0Roxg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 23:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d1:2c:dd:14:8a:ad:ac:dd:6a:6f:56:a5:97:56:3b:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4dd6e779a6c0f0b09216622380467dce2d11a318
Validity
Not Before: Apr 27 23:01:11 2026 GMT
Not After : Apr 28 23:01:11 2026 GMT
Subject: CN=b68964a97a6d7d504d6ff6441f222e5bc506a148
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:b0:5f:e8:ed:8d:51:76:c4:c2:1d:c9:e7:b6:
b6:77:42:af:1c:87:ad:1f:7c:f0:e3:83:9b:07:33:
22:50:03:4a:82:6e:09:d7:01:ed:27:a1:07:1e:f5:
34:6a:23:28:bc:e8:6f:9a:2e:cd:f1:d3:5e:3e:af:
a0:cd:dd:bc:84:4a:21:22:81:d6:33:9f:6d:65:14:
69:8e:ab:eb:2f:99:22:d9:19:53:67:f8:d9:83:d1:
be:5b:ab:23:98:92:94:dc:03:55:ad:5d:64:69:0d:
41:c3:96:c6:47:23:52:c7:bf:5d:53:4c:07:af:85:
a1:9b:ef:7b:76:64:51:e8:96:5a:b3:c6:81:a8:15:
e2:72:f1:9e:42:a5:4f:94:42:09:81:68:09:9a:bf:
26:0a:70:c4:e9:30:47:c8:23:2c:a1:5b:a6:f2:c4:
d8:30:23:16:85:d4:60:16:8c:5d:5e:85:0d:ed:94:
af:6c:74:07:b7:71:d0:96:98:a6:e0:fc:7f:48:93:
9f:5a:8b:3e:ec:a1:75:14:c9:07:f0:24:50:92:97:
a3:7e:3b:ac:17:69:3a:21:77:88:5f:1c:2a:04:34:
ba:56:af:57:15:1e:83:76:7c:1f:57:0e:da:24:36:
d0:b0:ba:4c:16:ad:2b:32:59:5f:ad:b1:69:69:ab:
67:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:89:64:A9:7A:6D:7D:50:4D:6F:F6:44:1F:22:2E:5B:C5:06:A1:48
X509v3 Authority Key Identifier:
keyid:4D:D6:E7:79:A6:C0:F0:B0:92:16:62:23:80:46:7D:CE:2D:11:A3:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TdbneabA8LCSFmIjgEZ9zi0Roxg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/f0b285-d038-4de6-9374-c472e62ebea8/1/TdbneabA8LCSFmIjgEZ9zi0Roxg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/f0b285-d038-4de6-9374-c472e62ebea8/1/TdbneabA8LCSFmIjgEZ9zi0Roxg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:f0:6c:a7:2d:43:07:5b:80:da:ad:0e:6f:14:38:5a:48:c6:
aa:12:68:8f:8a:3f:e1:74:80:b9:b4:f4:9e:f8:3c:b4:c3:4f:
b4:77:a4:ce:28:0d:42:29:50:58:17:b2:7f:04:a3:4f:d4:99:
f0:48:98:35:6e:5a:0f:e2:ba:10:35:2b:71:0f:0f:19:3a:1c:
24:53:e5:cf:6c:ac:cb:3f:e3:d5:a4:4f:92:4d:56:0e:14:8f:
4b:38:43:61:5b:41:53:35:82:bf:20:a9:ac:09:4d:2e:16:ad:
a3:44:4c:18:29:23:21:7c:8f:ab:61:1d:23:71:b9:15:cf:a0:
e4:3f:cb:f5:2f:ff:2f:1a:cc:d3:40:4b:91:0d:46:81:21:ae:
aa:2d:95:25:c1:67:72:68:2a:3a:69:1e:fa:eb:fb:5d:75:51:
39:a0:47:b3:80:47:f8:1f:fe:1b:d1:ba:ed:c0:29:e2:81:16:
b9:19:c4:e9:66:4b:ca:02:79:05:41:0d:cf:2b:62:a5:5d:bc:
fb:53:a2:aa:0f:31:36:e0:da:1e:a9:66:8e:c1:77:96:47:fe:
37:c3:b1:1c:55:96:09:3a:b0:8c:7b:a2:18:5a:d1:be:64:2c:
2b:1e:1f:45:b5:d9:7f:8b:62:ca:fd:e4:e2:0a:21:f9:67:c7:
7a:a0:90:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 28 04:26:18 2026 by rpki-client