Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/TddPu7rljdCHbZnoDsgqEaRHf34.mft
File: TddPu7rljdCHbZnoDsgqEaRHf34.mft (raw, json)
Hash identifier: J0o1pMu4ush6qKZFcNXcx6FB0YHm3zYPak0b2BOlj8o=
Subject key identifier: 60:8D:17:BE:FB:14:58:9F:A1:54:69:8F:D3:2D:EA:B4:A9:EF:99:AE
Authority key identifier: 4D:D7:4F:BB:BA:E5:8D:D0:87:6D:99:E8:0E:C8:2A:11:A4:47:7F:7E
Certificate issuer: /CN=4dd74fbbbae58dd0876d99e80ec82a11a4477f7e
Certificate serial: 01A1788348CBE019EED80C5651C18679B724
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TddPu7rljdCHbZnoDsgqEaRHf34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/TddPu7rljdCHbZnoDsgqEaRHf34.mft
Manifest number: 12C7
Signing time: Mon 26 Oct 2026 14:00:32 +0000
Manifest this update: Mon 26 Oct 2026 14:00:32 +0000
Manifest next update: Tue 27 Oct 2026 14:00:32 +0000
Files and hashes: 1: 78eqcaMcvTPsNu7guK_5i9wvMew.roa (hash: faBt9IMwah328Jgf+zWMXABylJqIbTadVclew2vDQZI=)
2: F-WF_eIpHYReBOMhX06jjFj1FS0.roa (hash: BAvVbr1wXgd6696wbRb9gM+rxSNYTDOpWUN3Pk36+Js=)
3: HR52VHb2xwQIwQ8nYo_MUxwRCms.roa (hash: TbFaT/PpzXVRAiKnbKd45KfqI8+dX+V6Uzbwpos22ak=)
4: TddPu7rljdCHbZnoDsgqEaRHf34.crl (hash: YweGdVTi+MG9NEc0IPbdgrLxVwgbSQcYWoFzD4xuT0M=)
5: aOtkixPHmh2enUl6k6sKDrNg_wU.roa (hash: DP493uqQSZ8xRKm9VuJgcghqEcMtl7DiKLDMdLGXe08=)
6: lavK-Em3JP8sORSDHjcXhhiEiDw.roa (hash: aNel9RXJpvuQchalk7ZBqX+TTYTUwLAtRlQmAShJL9c=)
7: pSr1Ypx-2NhHUN2EUMY--Rosrnw.roa (hash: D/Y20asoDdfvVkjnqNGrkzhvFsfQ4TTpIhrzqfdNsXw=)
8: ttShEhSFippZW2mlI_cMFuA1CNg.roa (hash: bXpk4WtzIL7RNvoOYrs7EBMG1GjbpYOMFtRXm7SQom8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/TddPu7rljdCHbZnoDsgqEaRHf34.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/TddPu7rljdCHbZnoDsgqEaRHf34.mft
rsync://rpki.ripe.net/repository/DEFAULT/TddPu7rljdCHbZnoDsgqEaRHf34.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 14:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:78:83:48:cb:e0:19:ee:d8:0c:56:51:c1:86:79:b7:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4dd74fbbbae58dd0876d99e80ec82a11a4477f7e
Validity
Not Before: Oct 26 14:00:32 2026 GMT
Not After : Oct 27 14:00:32 2026 GMT
Subject: CN=608d17befb14589fa154698fd32deab4a9ef99ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f2:30:16:9e:9e:1b:0e:42:77:f1:06:a6:25:
70:01:74:8f:95:7a:f7:bf:f3:10:90:b9:4f:cd:6f:
c8:6f:ea:6e:dc:9c:6d:d0:6c:de:34:2a:f5:16:b6:
ed:89:17:21:94:a8:53:4e:03:09:07:83:54:b0:88:
e3:fe:aa:ff:78:dd:d6:1f:6f:2a:ec:5a:98:b3:c3:
4e:37:81:30:22:f3:1c:30:98:e2:a5:2e:a6:b7:e0:
57:f4:2c:94:d6:d1:02:e9:01:0f:2b:80:f4:ca:fa:
40:0a:71:66:6b:ea:a1:2e:86:cb:6c:c3:c5:53:c5:
ca:1c:e4:2b:3b:5f:ae:ea:2c:11:53:b6:82:df:13:
1c:c0:da:96:9b:db:db:87:92:f0:f8:8a:21:b9:92:
8b:f7:ad:c3:1c:27:1a:2a:fc:f9:be:cb:58:8b:cf:
f1:6f:03:b0:20:60:6d:52:bd:05:46:2b:8c:ca:1a:
3f:ad:15:d7:fb:dc:26:ae:97:e8:26:ca:a1:6c:30:
c0:8f:60:c8:c6:61:75:c3:c4:e8:13:e2:66:5c:2a:
c2:e9:8b:19:aa:d6:87:26:da:f8:c7:e9:19:89:6c:
31:6b:d7:16:f1:67:88:47:99:38:15:61:4b:b7:46:
77:03:e5:88:7b:2f:cb:d0:4d:2d:41:93:df:ec:5e:
bc:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:8D:17:BE:FB:14:58:9F:A1:54:69:8F:D3:2D:EA:B4:A9:EF:99:AE
X509v3 Authority Key Identifier:
keyid:4D:D7:4F:BB:BA:E5:8D:D0:87:6D:99:E8:0E:C8:2A:11:A4:47:7F:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TddPu7rljdCHbZnoDsgqEaRHf34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/TddPu7rljdCHbZnoDsgqEaRHf34.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/TddPu7rljdCHbZnoDsgqEaRHf34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:98:2d:c1:ac:63:72:4d:c3:6a:aa:b4:03:d6:56:26:d8:2d:
0c:fb:5e:09:44:f4:0f:19:7f:ff:94:ce:bc:05:31:a0:14:03:
d2:0f:65:17:b1:58:d3:e0:92:a5:42:87:70:f6:88:89:ba:ed:
94:66:07:5a:ee:99:16:c4:b9:3c:17:00:ca:f9:4a:ea:fc:82:
5d:c3:b5:71:4b:21:4b:a2:e3:68:e9:c8:b6:37:7f:99:59:1f:
48:80:43:23:4c:ba:e5:63:cd:72:e9:c0:92:91:b7:58:0b:fa:
16:10:69:a0:0c:b6:23:dc:00:b3:0a:72:90:3d:f2:7f:58:82:
4a:82:d1:5f:12:3c:01:f1:7c:c1:6c:3e:62:82:fc:2e:a3:e6:
a7:70:6e:07:ae:b7:c0:95:4c:78:c6:55:81:c1:98:1a:83:34:
06:a7:2c:d0:54:75:50:3f:af:a2:15:a6:a0:8e:c2:69:cb:f4:
38:73:c4:40:1c:14:61:20:5e:ab:ba:3e:18:10:5b:08:d1:51:
fd:d0:d8:21:9a:62:6e:e5:78:1f:d5:53:70:44:a8:1a:e6:75:
93:d3:81:77:49:65:4d:aa:4d:4b:99:af:60:ec:d7:26:5f:c8:
d8:9c:da:cc:bf:bb:3e:7b:f7:1b:73:6e:b4:0c:fd:ab:4a:de:
26:d5:9b:12
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF4g0jL4Bnu2AxWUcGGebckMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRkZDc0ZmJiYmFlNThkZDA4NzZkOTllODBlYzgyYTExYTQ0
NzdmN2UwHhcNMjYxMDI2MTQwMDMyWhcNMjYxMDI3MTQwMDMyWjAzMTEwLwYDVQQD
Eyg2MDhkMTdiZWZiMTQ1ODlmYTE1NDY5OGZkMzJkZWFiNGE5ZWY5OWFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAufIwFp6eGw5Cd/EGpiVwAXSPlXr3
v/MQkLlPzW/Ib+pu3Jxt0GzeNCr1FrbtiRchlKhTTgMJB4NUsIjj/qr/eN3WH28q
7FqYs8NON4EwIvMcMJjipS6mt+BX9CyU1tEC6QEPK4D0yvpACnFma+qhLobLbMPF
U8XKHOQrO1+u6iwRU7aC3xMcwNqWm9vbh5Lw+IohuZKL963DHCcaKvz5vstYi8/x
bwOwIGBtUr0FRiuMyho/rRXX+9wmrpfoJsqhbDDAj2DIxmF1w8ToE+JmXCrC6YsZ
qtaHJtr4x+kZiWwxa9cW8WeIR5k4FWFLt0Z3A+WIey/L0E0tQZPf7F68QwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGCNF777FFifoVRpj9Mt6rSp75muMB8GA1UdIwQY
MBaAFE3XT7u65Y3Qh22Z6A7IKhGkR39+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVGRkUHU3cmxqZENIYlpub0RzZ3FFYVJIZjM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi85ZjVmNTctZTgyOC00YmNmLThkMmIt
OGVhYjdmNGZlNzdlLzEvVGRkUHU3cmxqZENIYlpub0RzZ3FFYVJIZjM0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi85ZjVmNTctZTgyOC00YmNmLThkMmItOGVhYjdmNGZlNzdl
LzEvVGRkUHU3cmxqZENIYlpub0RzZ3FFYVJIZjM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbpgtwaxj
ck3Daqq0A9ZWJtgtDPteCUT0Dxl//5TOvAUxoBQD0g9lF7FY0+CSpUKHcPaIibrt
lGYHWu6ZFsS5PBcAyvlK6vyCXcO1cUshS6LjaOnItjd/mVkfSIBDI0y65WPNcunA
kpG3WAv6FhBpoAy2I9wAswpykD3yf1iCSoLRXxI8AfF8wWw+YoL8LqPmp3BuB663
wJVMeMZVgcGYGoM0Bqcs0FR1UD+vohWmoI7Cacv0OHPEQBwUYSBeq7o+GBBbCNFR
/dDYIZpibuV4H9VTcESoGuZ1k9OBd0llTapNS5mvYOzXJl/I2JzazL+7Pnv3G3Nu
tAz9q0reJtWbEg==
-----END CERTIFICATE-----
Generated at Mon Oct 26 23:50:06 2026 by rpki-client