Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3c/f0b285-d038-4de6-9374-c472e62ebea8/1/TdbneabA8LCSFmIjgEZ9zi0Roxg.mft
File: TdbneabA8LCSFmIjgEZ9zi0Roxg.mft (raw, json)
Hash identifier: /o66omAAlcSMbiJzmbAGJGwLeVCRFj1ygaWyuzVeK8U=
Subject key identifier: E4:D9:FA:A7:6F:74:54:17:93:99:1F:DF:71:38:CE:00:E8:2F:3E:E4
Authority key identifier: 4D:D6:E7:79:A6:C0:F0:B0:92:16:62:23:80:46:7D:CE:2D:11:A3:18
Certificate issuer: /CN=4dd6e779a6c0f0b09216622380467dce2d11a318
Certificate serial: 01A08C43CF874ABFF926756313CADACC2111
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TdbneabA8LCSFmIjgEZ9zi0Roxg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/f0b285-d038-4de6-9374-c472e62ebea8/1/TdbneabA8LCSFmIjgEZ9zi0Roxg.mft
Manifest number: 19DC
Signing time: Thu 10 Sep 2026 17:00:49 +0000
Manifest this update: Thu 10 Sep 2026 17:00:49 +0000
Manifest next update: Fri 11 Sep 2026 17:00:49 +0000
Files and hashes: 1: 7X15JsRrJkgKCJLXjiSs1bdhruU.roa (hash: sAi/yGgK+33Ivc6uDbrNPu1QsJF/QnGJyKyHF3jLCvU=)
2: TdbneabA8LCSFmIjgEZ9zi0Roxg.crl (hash: z12wH03p3l5lpERdgG9b0fC/4lB4ooW+gB1yVTaLF80=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/f0b285-d038-4de6-9374-c472e62ebea8/1/TdbneabA8LCSFmIjgEZ9zi0Roxg.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/f0b285-d038-4de6-9374-c472e62ebea8/1/TdbneabA8LCSFmIjgEZ9zi0Roxg.mft
rsync://rpki.ripe.net/repository/DEFAULT/TdbneabA8LCSFmIjgEZ9zi0Roxg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:43:cf:87:4a:bf:f9:26:75:63:13:ca:da:cc:21:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4dd6e779a6c0f0b09216622380467dce2d11a318
Validity
Not Before: Sep 10 17:00:49 2026 GMT
Not After : Sep 11 17:00:49 2026 GMT
Subject: CN=e4d9faa76f74541793991fdf7138ce00e82f3ee4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:10:26:75:1f:b2:57:ff:c3:6e:ea:2b:d9:29:
14:7d:6a:47:48:48:c6:ff:4a:ab:d8:5a:c8:32:fb:
ef:9c:59:bc:5e:70:6e:e3:f9:3a:13:01:a6:dc:0f:
37:e3:1b:d6:e5:b0:e5:21:dd:dd:62:96:3f:d5:3a:
ec:0a:cb:de:96:57:e1:c9:03:1a:b4:6a:e9:72:15:
85:39:bd:99:e5:2e:c2:a6:3a:12:ff:7c:ce:16:17:
08:05:24:56:fe:0c:e1:f1:11:db:78:2b:1e:c8:dc:
a9:1b:cf:73:65:a2:6e:1a:23:87:fd:13:ea:82:03:
81:fc:db:99:db:ef:1d:93:5b:64:4a:80:fe:2e:df:
46:51:6b:fb:9a:fc:75:fc:83:db:b8:bb:44:6d:e4:
d1:b9:76:a0:d2:04:40:43:94:59:f9:a6:df:7a:32:
f0:c8:7c:37:8b:f1:92:00:d8:f3:b7:99:f9:27:d7:
d1:98:f1:1c:d3:f9:f8:42:c9:d3:e8:48:e2:aa:43:
8b:c0:eb:4f:00:74:c9:67:4a:c9:81:6f:37:4a:89:
4b:69:93:1e:c2:13:3b:ae:e4:54:8e:2d:aa:1c:9e:
c0:e9:17:5f:8a:41:34:02:fa:9a:b4:17:77:34:ab:
05:d4:7f:d9:11:f6:11:90:3d:b1:46:cd:81:44:f7:
5c:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:D9:FA:A7:6F:74:54:17:93:99:1F:DF:71:38:CE:00:E8:2F:3E:E4
X509v3 Authority Key Identifier:
keyid:4D:D6:E7:79:A6:C0:F0:B0:92:16:62:23:80:46:7D:CE:2D:11:A3:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TdbneabA8LCSFmIjgEZ9zi0Roxg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/f0b285-d038-4de6-9374-c472e62ebea8/1/TdbneabA8LCSFmIjgEZ9zi0Roxg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/f0b285-d038-4de6-9374-c472e62ebea8/1/TdbneabA8LCSFmIjgEZ9zi0Roxg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:a1:b1:68:a2:2b:84:f6:d5:29:59:13:90:a0:c7:ac:1e:4d:
1d:00:d0:9d:e8:5d:14:d0:6c:65:52:c9:28:c9:de:fc:f2:6d:
34:5c:cd:bf:ba:8c:4f:11:43:fc:b3:50:52:dc:2f:16:15:e2:
ef:cf:38:03:53:73:b5:32:33:2a:92:e4:30:80:40:f6:28:f8:
96:a8:ac:04:6d:57:e4:1f:ee:2d:cc:54:4e:7d:b9:e5:c6:cc:
08:84:a8:a8:de:37:ec:ba:a6:e0:2b:3f:04:bf:c6:cf:50:14:
26:93:e8:32:bf:f4:43:fe:b0:ee:52:cb:da:c9:96:30:62:f5:
e6:c4:86:bd:52:45:6d:38:e0:7e:70:13:4c:19:44:67:eb:e2:
11:ca:c5:ef:33:a8:e4:85:72:15:ed:ab:fb:17:70:ae:f1:f0:
49:15:34:cb:e9:4a:24:15:03:f9:40:80:5f:73:4a:7c:3a:62:
32:62:0a:18:a3:8b:c2:86:b1:ce:f4:3f:a5:62:67:99:12:b3:
7c:cf:70:34:d4:49:0f:05:25:db:a5:fb:02:d3:f6:07:e6:09:
16:a8:48:7d:2a:a7:88:ad:12:12:f6:35:c0:50:72:2a:5f:23:
4c:ff:aa:6c:84:af:dd:70:24:34:49:14:a0:ec:c8:a2:7b:24:
54:5d:e0:05
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCMQ8+HSr/5JnVjE8razCERMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRkZDZlNzc5YTZjMGYwYjA5MjE2NjIyMzgwNDY3ZGNlMmQx
MWEzMTgwHhcNMjYwOTEwMTcwMDQ5WhcNMjYwOTExMTcwMDQ5WjAzMTEwLwYDVQQD
EyhlNGQ5ZmFhNzZmNzQ1NDE3OTM5OTFmZGY3MTM4Y2UwMGU4MmYzZWU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuxAmdR+yV//Dbuor2SkUfWpHSEjG
/0qr2FrIMvvvnFm8XnBu4/k6EwGm3A834xvW5bDlId3dYpY/1TrsCsvellfhyQMa
tGrpchWFOb2Z5S7CpjoS/3zOFhcIBSRW/gzh8RHbeCseyNypG89zZaJuGiOH/RPq
ggOB/NuZ2+8dk1tkSoD+Lt9GUWv7mvx1/IPbuLtEbeTRuXag0gRAQ5RZ+abfejLw
yHw3i/GSANjzt5n5J9fRmPEc0/n4QsnT6EjiqkOLwOtPAHTJZ0rJgW83SolLaZMe
whM7ruRUji2qHJ7A6RdfikE0AvqatBd3NKsF1H/ZEfYRkD2xRs2BRPdcuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOTZ+qdvdFQXk5kf33E4zgDoLz7kMB8GA1UdIwQY
MBaAFE3W53mmwPCwkhZiI4BGfc4tEaMYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVGRibmVhYkE4TENTRm1JamdFWjl6aTBSb3hnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy9mMGIyODUtZDAzOC00ZGU2LTkzNzQt
YzQ3MmU2MmViZWE4LzEvVGRibmVhYkE4TENTRm1JamdFWjl6aTBSb3hnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy9mMGIyODUtZDAzOC00ZGU2LTkzNzQtYzQ3MmU2MmViZWE4
LzEvVGRibmVhYkE4TENTRm1JamdFWjl6aTBSb3hnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASKGxaKIr
hPbVKVkTkKDHrB5NHQDQnehdFNBsZVLJKMne/PJtNFzNv7qMTxFD/LNQUtwvFhXi
7884A1NztTIzKpLkMIBA9ij4lqisBG1X5B/uLcxUTn255cbMCISoqN437Lqm4Cs/
BL/Gz1AUJpPoMr/0Q/6w7lLL2smWMGL15sSGvVJFbTjgfnATTBlEZ+viEcrF7zOo
5IVyFe2r+xdwrvHwSRU0y+lKJBUD+UCAX3NKfDpiMmIKGKOLwoaxzvQ/pWJnmRKz
fM9wNNRJDwUl26X7AtP2B+YJFqhIfSqniK0SEvY1wFByKl8jTP+qbISv3XAkNEkU
oOzIonskVF3gBQ==
-----END CERTIFICATE-----
Generated at Thu Sep 10 21:11:53 2026 by rpki-client