Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3c/f0b285-d038-4de6-9374-c472e62ebea8/1/TdbneabA8LCSFmIjgEZ9zi0Roxg.mft
File: TdbneabA8LCSFmIjgEZ9zi0Roxg.mft (raw, json)
Hash identifier: iMQ1FZqeSDxSuMK8nD75uOWCP81V3eVFIbWMSFfX7R0=
Subject key identifier: 6E:DA:EE:88:60:25:9B:D5:B1:20:E4:A7:78:20:C4:34:C8:7D:FC:FB
Authority key identifier: 4D:D6:E7:79:A6:C0:F0:B0:92:16:62:23:80:46:7D:CE:2D:11:A3:18
Certificate issuer: /CN=4dd6e779a6c0f0b09216622380467dce2d11a318
Certificate serial: 01A1818722FFB17B9413E579DDFF8AC86642
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TdbneabA8LCSFmIjgEZ9zi0Roxg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/f0b285-d038-4de6-9374-c472e62ebea8/1/TdbneabA8LCSFmIjgEZ9zi0Roxg.mft
Manifest number: 1A5B
Signing time: Wed 28 Oct 2026 08:01:19 +0000
Manifest this update: Wed 28 Oct 2026 08:01:19 +0000
Manifest next update: Thu 29 Oct 2026 08:01:19 +0000
Files and hashes: 1: 7X15JsRrJkgKCJLXjiSs1bdhruU.roa (hash: sAi/yGgK+33Ivc6uDbrNPu1QsJF/QnGJyKyHF3jLCvU=)
2: TdbneabA8LCSFmIjgEZ9zi0Roxg.crl (hash: uPMvN0L7lsURb6qEJgaT+rkVlFKVsfT3/FY2FfnitjM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/f0b285-d038-4de6-9374-c472e62ebea8/1/TdbneabA8LCSFmIjgEZ9zi0Roxg.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/f0b285-d038-4de6-9374-c472e62ebea8/1/TdbneabA8LCSFmIjgEZ9zi0Roxg.mft
rsync://rpki.ripe.net/repository/DEFAULT/TdbneabA8LCSFmIjgEZ9zi0Roxg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 07:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:81:87:22:ff:b1:7b:94:13:e5:79:dd:ff:8a:c8:66:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4dd6e779a6c0f0b09216622380467dce2d11a318
Validity
Not Before: Oct 28 08:01:19 2026 GMT
Not After : Oct 29 08:01:19 2026 GMT
Subject: CN=6edaee8860259bd5b120e4a77820c434c87dfcfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ff:40:6f:65:e9:4a:18:dd:15:90:a2:3d:a2:
32:32:bb:ea:8c:76:bf:75:09:7f:e4:2f:c0:13:94:
33:49:03:dc:63:ee:95:c5:d7:48:03:e3:fe:d7:e0:
d1:37:28:bc:62:ec:a3:31:0b:d8:48:57:1b:db:ef:
e1:ad:40:ed:be:c7:b5:39:b7:25:87:31:ab:43:d8:
6a:25:55:32:c6:52:ad:d7:c7:19:ec:8b:c2:d3:ff:
3b:d9:d2:c3:2b:61:0e:c5:62:86:c2:25:fa:89:71:
3b:8b:cc:79:81:c1:8a:2c:6d:c9:34:f6:25:bb:df:
b4:79:47:b5:f3:ab:ea:12:a5:e1:bb:1a:9d:d9:ae:
15:7f:de:bc:e7:04:d3:81:0d:37:3e:c9:33:23:f8:
cb:f4:b4:7a:69:91:44:f4:73:c2:e5:55:79:5a:74:
f4:dd:7d:47:b0:d4:66:f9:9d:de:47:ad:c0:0f:c2:
7a:76:29:e4:ee:a9:60:99:89:3b:f0:54:34:4c:ee:
ea:51:e3:a1:b5:43:83:a8:e2:eb:1f:3d:ce:a8:b6:
bb:ad:c1:ba:a6:47:fd:dd:6c:08:79:03:36:16:a1:
51:88:c5:85:4b:e2:27:ae:ff:69:65:b9:cf:06:aa:
aa:27:55:29:43:02:a5:6f:0a:bf:d1:85:61:b6:49:
28:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:DA:EE:88:60:25:9B:D5:B1:20:E4:A7:78:20:C4:34:C8:7D:FC:FB
X509v3 Authority Key Identifier:
keyid:4D:D6:E7:79:A6:C0:F0:B0:92:16:62:23:80:46:7D:CE:2D:11:A3:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TdbneabA8LCSFmIjgEZ9zi0Roxg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/f0b285-d038-4de6-9374-c472e62ebea8/1/TdbneabA8LCSFmIjgEZ9zi0Roxg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/f0b285-d038-4de6-9374-c472e62ebea8/1/TdbneabA8LCSFmIjgEZ9zi0Roxg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:5a:83:d1:9f:0a:df:ba:31:b7:7e:f4:62:15:b5:38:ff:76:
47:fe:4c:43:49:5f:c5:c0:44:a0:00:ff:b4:d2:81:0c:4c:c4:
aa:22:6c:b7:0d:a6:8e:95:cc:8a:1c:8d:63:11:4d:3a:d4:0c:
ad:33:53:29:06:54:cd:1c:b0:92:18:a0:4c:c9:d1:22:73:8d:
0d:96:db:27:36:cd:8e:04:f1:2e:9a:83:81:df:d9:b8:6f:72:
60:50:ee:fb:8f:57:7c:af:6d:a7:b3:a0:8b:f3:e3:c6:d7:40:
d3:93:17:43:22:73:5e:b1:7b:62:13:0f:70:67:f2:2d:68:be:
bb:78:cb:b1:7f:23:cc:67:6d:38:41:8f:68:3b:95:eb:bb:ab:
63:aa:33:aa:06:44:b4:51:70:6e:c3:da:e3:c0:a3:34:35:ce:
c7:c3:fa:f4:8d:6f:fa:a5:63:29:dc:0d:44:da:09:67:a8:6a:
23:ba:96:a2:bf:32:fe:64:5c:f1:97:6c:90:ae:28:03:a9:c3:
07:71:26:e1:74:ac:f1:6e:9b:8c:05:d7:7d:bc:ac:40:c3:bd:
17:ab:22:0a:cb:23:65:cd:45:05:27:5c:ef:b4:bc:90:bf:7b:
b4:68:3a:e1:f3:16:c1:4d:65:ed:12:11:b4:a6:89:1a:0d:ef:
33:3c:03:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 10:21:46 2026 by rpki-client