Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/f0b285-d038-4de6-9374-c472e62ebea8/1/TdbneabA8LCSFmIjgEZ9zi0Roxg.mft
File: TdbneabA8LCSFmIjgEZ9zi0Roxg.mft (raw, json)
Hash identifier: ki0wsC1rQzp9FijR8Xz5HUT6ETfrwkeT2t8cpH6QJdY=
Subject key identifier: 96:D4:15:43:FD:7A:9A:FB:C4:F2:BB:26:1C:5B:B0:40:7E:80:01:3F
Authority key identifier: 4D:D6:E7:79:A6:C0:F0:B0:92:16:62:23:80:46:7D:CE:2D:11:A3:18
Certificate issuer: /CN=4dd6e779a6c0f0b09216622380467dce2d11a318
Certificate serial: 019FA297255C3DF42EF23A93827CD5343F57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TdbneabA8LCSFmIjgEZ9zi0Roxg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/f0b285-d038-4de6-9374-c472e62ebea8/1/TdbneabA8LCSFmIjgEZ9zi0Roxg.mft
Manifest number: 1963
Signing time: Mon 27 Jul 2026 08:00:42 +0000
Manifest this update: Mon 27 Jul 2026 08:00:42 +0000
Manifest next update: Tue 28 Jul 2026 08:00:42 +0000
Files and hashes: 1: 7X15JsRrJkgKCJLXjiSs1bdhruU.roa (hash: sAi/yGgK+33Ivc6uDbrNPu1QsJF/QnGJyKyHF3jLCvU=)
2: TdbneabA8LCSFmIjgEZ9zi0Roxg.crl (hash: KyiqFjKiwlzM5aPO1RWn0M5hg5k7SgGIhO6NCw8fRKA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/f0b285-d038-4de6-9374-c472e62ebea8/1/TdbneabA8LCSFmIjgEZ9zi0Roxg.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/f0b285-d038-4de6-9374-c472e62ebea8/1/TdbneabA8LCSFmIjgEZ9zi0Roxg.mft
rsync://rpki.ripe.net/repository/DEFAULT/TdbneabA8LCSFmIjgEZ9zi0Roxg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a2:97:25:5c:3d:f4:2e:f2:3a:93:82:7c:d5:34:3f:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4dd6e779a6c0f0b09216622380467dce2d11a318
Validity
Not Before: Jul 27 08:00:42 2026 GMT
Not After : Jul 28 08:00:42 2026 GMT
Subject: CN=96d41543fd7a9afbc4f2bb261c5bb0407e80013f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:6b:52:22:ff:13:24:33:34:29:d9:9c:cf:df:
49:f1:d4:49:f7:c2:53:5c:4a:aa:3a:2e:6a:44:f2:
7b:5c:69:45:5d:c2:0c:b2:3e:08:83:d1:39:9c:88:
e3:0d:cf:38:9d:50:64:cd:80:2f:fc:c6:73:1e:6b:
2b:c5:9c:93:54:79:2e:b1:f5:35:4e:ea:91:99:23:
7c:23:81:69:90:2d:b2:ad:93:e5:26:47:50:5b:72:
a0:4d:58:89:19:69:93:99:b7:37:3d:21:7f:6b:b1:
0a:3a:5e:38:c4:9d:96:e7:77:1e:3a:5a:d1:04:cb:
e1:7a:89:06:e2:8b:4d:3a:d0:77:58:54:db:41:af:
51:ba:b5:a3:3e:d3:b0:e4:8c:95:73:e3:8f:1c:84:
2d:9d:3a:5d:cd:a1:bf:e4:1a:d1:25:fb:3a:3d:4c:
29:16:af:03:22:38:05:2d:78:f8:cd:9b:1e:bd:0c:
99:b6:e7:49:cf:55:9b:95:a1:4d:8e:48:f1:8c:b0:
67:25:d5:f2:f2:d1:3f:8c:02:3c:89:da:62:27:14:
9e:e8:58:d8:03:75:a8:c5:b8:f4:a2:11:f5:0b:83:
d6:60:f0:e3:f4:4b:e8:d5:4b:96:c4:9d:98:94:7f:
c4:32:3d:5c:c2:e1:c5:ef:bb:ad:bb:6b:31:13:4b:
7c:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:D4:15:43:FD:7A:9A:FB:C4:F2:BB:26:1C:5B:B0:40:7E:80:01:3F
X509v3 Authority Key Identifier:
keyid:4D:D6:E7:79:A6:C0:F0:B0:92:16:62:23:80:46:7D:CE:2D:11:A3:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TdbneabA8LCSFmIjgEZ9zi0Roxg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/f0b285-d038-4de6-9374-c472e62ebea8/1/TdbneabA8LCSFmIjgEZ9zi0Roxg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/f0b285-d038-4de6-9374-c472e62ebea8/1/TdbneabA8LCSFmIjgEZ9zi0Roxg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:61:fc:3a:28:f3:de:85:66:57:6f:55:c7:f3:e4:ac:8c:f8:
bc:ab:3d:b1:9b:95:15:a1:70:68:88:78:ab:15:10:7c:7f:5d:
80:7e:73:27:a1:94:53:ca:7a:2c:78:82:78:a1:fe:d6:ab:ef:
d3:32:17:2e:53:2a:cf:0d:5c:ae:d6:7d:62:51:b3:ff:60:81:
9b:13:fa:98:5c:5c:0e:f9:63:8d:d5:0e:ae:6c:5c:86:5e:30:
82:85:f8:f8:a2:23:68:8f:4f:11:a4:ab:f9:4e:2d:f7:c6:10:
6e:fa:88:b7:54:7a:cc:58:67:88:75:04:b8:d5:2f:a4:a2:d6:
0e:6b:e2:69:15:df:1e:9e:07:51:89:8c:52:f5:45:6e:d1:f7:
91:e4:8b:d8:a4:f3:f5:df:76:b8:38:01:39:8e:e3:74:9a:06:
17:74:4b:72:2c:46:ac:7f:0a:6c:68:cd:0c:e7:1f:54:f5:68:
db:c5:66:d9:1d:dc:ac:54:b3:06:06:87:bc:8d:24:26:4a:68:
46:41:2c:24:c5:ec:b9:5c:68:8e:69:07:50:cd:a1:f3:bf:98:
7e:f9:6b:4a:85:05:57:26:3b:6b:86:88:92:e0:56:89:a0:5f:
97:8c:cc:7e:aa:0d:c2:f1:2b:ef:43:70:6c:b6:26:00:65:25:
a4:f1:b3:35
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+ilyVcPfQu8jqTgnzVND9XMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRkZDZlNzc5YTZjMGYwYjA5MjE2NjIyMzgwNDY3ZGNlMmQx
MWEzMTgwHhcNMjYwNzI3MDgwMDQyWhcNMjYwNzI4MDgwMDQyWjAzMTEwLwYDVQQD
Eyg5NmQ0MTU0M2ZkN2E5YWZiYzRmMmJiMjYxYzViYjA0MDdlODAwMTNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmWtSIv8TJDM0Kdmcz99J8dRJ98JT
XEqqOi5qRPJ7XGlFXcIMsj4Ig9E5nIjjDc84nVBkzYAv/MZzHmsrxZyTVHkusfU1
TuqRmSN8I4FpkC2yrZPlJkdQW3KgTViJGWmTmbc3PSF/a7EKOl44xJ2W53ceOlrR
BMvheokG4otNOtB3WFTbQa9RurWjPtOw5IyVc+OPHIQtnTpdzaG/5BrRJfs6PUwp
Fq8DIjgFLXj4zZsevQyZtudJz1WblaFNjkjxjLBnJdXy8tE/jAI8idpiJxSe6FjY
A3Woxbj0ohH1C4PWYPDj9Evo1UuWxJ2YlH/EMj1cwuHF77utu2sxE0t8jwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJbUFUP9epr7xPK7JhxbsEB+gAE/MB8GA1UdIwQY
MBaAFE3W53mmwPCwkhZiI4BGfc4tEaMYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVGRibmVhYkE4TENTRm1JamdFWjl6aTBSb3hnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy9mMGIyODUtZDAzOC00ZGU2LTkzNzQt
YzQ3MmU2MmViZWE4LzEvVGRibmVhYkE4TENTRm1JamdFWjl6aTBSb3hnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy9mMGIyODUtZDAzOC00ZGU2LTkzNzQtYzQ3MmU2MmViZWE4
LzEvVGRibmVhYkE4TENTRm1JamdFWjl6aTBSb3hnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABmH8Oijz
3oVmV29Vx/PkrIz4vKs9sZuVFaFwaIh4qxUQfH9dgH5zJ6GUU8p6LHiCeKH+1qvv
0zIXLlMqzw1crtZ9YlGz/2CBmxP6mFxcDvljjdUOrmxchl4wgoX4+KIjaI9PEaSr
+U4t98YQbvqIt1R6zFhniHUEuNUvpKLWDmviaRXfHp4HUYmMUvVFbtH3keSL2KTz
9d92uDgBOY7jdJoGF3RLcixGrH8KbGjNDOcfVPVo28Vm2R3crFSzBgaHvI0kJkpo
RkEsJMXsuVxojmkHUM2h87+YfvlrSoUFVyY7a4aIkuBWiaBfl4zMfqoNwvEr70Nw
bLYmAGUlpPGzNQ==
-----END CERTIFICATE-----
Generated at Mon Jul 27 12:45:16 2026 by rpki-client