Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/TddPu7rljdCHbZnoDsgqEaRHf34.mft
File: TddPu7rljdCHbZnoDsgqEaRHf34.mft (raw, json)
Hash identifier: +Ei/SRRcM1I5jUEkD2DxbsaXCFfbVW0Ka3Pl8os4krA=
Subject key identifier: AB:5D:A9:B2:3E:F5:21:26:64:E0:98:DD:2E:DB:63:D7:CD:66:9D:CF
Authority key identifier: 4D:D7:4F:BB:BA:E5:8D:D0:87:6D:99:E8:0E:C8:2A:11:A4:47:7F:7E
Certificate issuer: /CN=4dd74fbbbae58dd0876d99e80ec82a11a4477f7e
Certificate serial: 01A17E4F106373D067C3FE2D32EB1C9537F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TddPu7rljdCHbZnoDsgqEaRHf34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/TddPu7rljdCHbZnoDsgqEaRHf34.mft
Manifest number: 12CA
Signing time: Tue 27 Oct 2026 17:01:13 +0000
Manifest this update: Tue 27 Oct 2026 17:01:13 +0000
Manifest next update: Wed 28 Oct 2026 17:01:13 +0000
Files and hashes: 1: 78eqcaMcvTPsNu7guK_5i9wvMew.roa (hash: faBt9IMwah328Jgf+zWMXABylJqIbTadVclew2vDQZI=)
2: F-WF_eIpHYReBOMhX06jjFj1FS0.roa (hash: BAvVbr1wXgd6696wbRb9gM+rxSNYTDOpWUN3Pk36+Js=)
3: HR52VHb2xwQIwQ8nYo_MUxwRCms.roa (hash: TbFaT/PpzXVRAiKnbKd45KfqI8+dX+V6Uzbwpos22ak=)
4: TddPu7rljdCHbZnoDsgqEaRHf34.crl (hash: S3MY5KXbSEAx5aX2bLHAIu4n6oXMGFpM4feFrzQCqKQ=)
5: aOtkixPHmh2enUl6k6sKDrNg_wU.roa (hash: DP493uqQSZ8xRKm9VuJgcghqEcMtl7DiKLDMdLGXe08=)
6: lavK-Em3JP8sORSDHjcXhhiEiDw.roa (hash: aNel9RXJpvuQchalk7ZBqX+TTYTUwLAtRlQmAShJL9c=)
7: pSr1Ypx-2NhHUN2EUMY--Rosrnw.roa (hash: D/Y20asoDdfvVkjnqNGrkzhvFsfQ4TTpIhrzqfdNsXw=)
8: ttShEhSFippZW2mlI_cMFuA1CNg.roa (hash: bXpk4WtzIL7RNvoOYrs7EBMG1GjbpYOMFtRXm7SQom8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/TddPu7rljdCHbZnoDsgqEaRHf34.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/TddPu7rljdCHbZnoDsgqEaRHf34.mft
rsync://rpki.ripe.net/repository/DEFAULT/TddPu7rljdCHbZnoDsgqEaRHf34.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 13:57:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7e:4f:10:63:73:d0:67:c3:fe:2d:32:eb:1c:95:37:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4dd74fbbbae58dd0876d99e80ec82a11a4477f7e
Validity
Not Before: Oct 27 17:01:13 2026 GMT
Not After : Oct 28 17:01:13 2026 GMT
Subject: CN=ab5da9b23ef5212664e098dd2edb63d7cd669dcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:dc:e1:42:f9:a1:1d:d7:2e:a3:23:fe:6c:6c:
ae:34:af:96:d7:5e:27:07:57:fd:7a:ed:7c:ac:b2:
dd:71:85:bc:d5:4e:db:8f:a1:c8:ca:1f:3c:21:01:
2c:0f:21:ee:70:73:21:81:47:9f:6f:11:71:07:07:
fd:61:86:0f:c5:a3:5e:c7:ce:a6:06:4a:34:80:fe:
3e:9e:f3:ea:63:9f:89:50:1c:76:8e:a0:f9:68:44:
cb:de:88:96:ae:64:7a:e3:76:48:fb:67:2f:b6:03:
ed:b0:4a:e8:c7:ab:85:b0:b0:74:d5:a1:e4:ef:61:
56:a9:de:3e:21:ed:b2:fd:be:00:4a:32:61:c8:8b:
7d:aa:d3:04:0a:5f:64:57:be:43:23:3e:55:44:1d:
31:03:7b:77:77:76:f7:de:cb:e6:95:f0:22:26:5b:
f4:bf:dd:82:84:fd:c8:92:78:c7:57:f2:6e:c6:f7:
1b:a0:fb:7f:3f:25:b0:03:f9:46:9a:33:fa:94:bd:
3f:e9:ad:82:ce:a7:d2:4e:04:0b:72:60:66:d3:a0:
87:05:19:d7:07:9a:dd:34:cb:40:f9:d9:f0:04:6f:
c0:14:3c:39:f7:7b:78:f0:ed:63:19:44:72:4a:3e:
ac:b4:4d:b2:ab:f7:b8:9c:d2:57:0e:88:93:50:81:
8e:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:5D:A9:B2:3E:F5:21:26:64:E0:98:DD:2E:DB:63:D7:CD:66:9D:CF
X509v3 Authority Key Identifier:
keyid:4D:D7:4F:BB:BA:E5:8D:D0:87:6D:99:E8:0E:C8:2A:11:A4:47:7F:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TddPu7rljdCHbZnoDsgqEaRHf34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/TddPu7rljdCHbZnoDsgqEaRHf34.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/TddPu7rljdCHbZnoDsgqEaRHf34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:43:14:f0:2b:66:95:65:39:d6:c1:06:19:01:1b:14:d7:2a:
85:7e:fe:ce:e7:b0:ed:97:df:5e:5f:c0:aa:cf:ed:48:94:4c:
82:21:7e:65:e8:74:9c:d2:47:6d:0d:8b:e0:1e:66:46:e5:21:
18:56:40:02:a8:d1:31:a9:1c:39:5a:6d:f8:9d:51:99:4f:c1:
65:56:2b:37:6e:5d:54:12:e0:d3:a2:41:bc:35:8b:b6:59:23:
90:5f:61:a1:ef:62:75:d3:2d:e5:fd:81:7d:12:4b:ff:b1:fb:
eb:21:b2:49:0f:90:f3:57:3a:60:8f:b4:8a:d6:84:b5:97:38:
a1:9d:e1:b6:7c:de:c6:76:d6:c1:f2:92:b1:4c:50:6b:8a:41:
79:f2:88:f3:a7:ba:5d:f0:51:a6:69:92:e0:1f:6e:d7:cd:30:
4b:61:dc:15:1c:d3:30:41:0b:3d:4a:31:68:ad:d2:ab:4b:cf:
47:07:c9:f9:74:a1:3e:92:d6:40:3d:8c:7e:3b:a7:dc:9b:a6:
92:15:1c:40:5f:a4:a5:92:74:4d:70:26:96:c3:a4:33:e9:4b:
09:ce:9b:cd:63:76:a8:24:4a:e9:51:0e:e8:9a:f6:72:d1:24:
59:9b:a6:8e:88:de:43:b1:73:43:9e:1b:df:44:cd:b7:ce:e4:
aa:fc:93:a1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF+TxBjc9Bnw/4tMusclTf3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRkZDc0ZmJiYmFlNThkZDA4NzZkOTllODBlYzgyYTExYTQ0
NzdmN2UwHhcNMjYxMDI3MTcwMTEzWhcNMjYxMDI4MTcwMTEzWjAzMTEwLwYDVQQD
EyhhYjVkYTliMjNlZjUyMTI2NjRlMDk4ZGQyZWRiNjNkN2NkNjY5ZGNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7dzhQvmhHdcuoyP+bGyuNK+W114n
B1f9eu18rLLdcYW81U7bj6HIyh88IQEsDyHucHMhgUefbxFxBwf9YYYPxaNex86m
Bko0gP4+nvPqY5+JUBx2jqD5aETL3oiWrmR643ZI+2cvtgPtsErox6uFsLB01aHk
72FWqd4+Ie2y/b4ASjJhyIt9qtMECl9kV75DIz5VRB0xA3t3d3b33svmlfAiJlv0
v92ChP3IknjHV/JuxvcboPt/PyWwA/lGmjP6lL0/6a2CzqfSTgQLcmBm06CHBRnX
B5rdNMtA+dnwBG/AFDw593t48O1jGURySj6stE2yq/e4nNJXDoiTUIGO5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKtdqbI+9SEmZOCY3S7bY9fNZp3PMB8GA1UdIwQY
MBaAFE3XT7u65Y3Qh22Z6A7IKhGkR39+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVGRkUHU3cmxqZENIYlpub0RzZ3FFYVJIZjM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi85ZjVmNTctZTgyOC00YmNmLThkMmIt
OGVhYjdmNGZlNzdlLzEvVGRkUHU3cmxqZENIYlpub0RzZ3FFYVJIZjM0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi85ZjVmNTctZTgyOC00YmNmLThkMmItOGVhYjdmNGZlNzdl
LzEvVGRkUHU3cmxqZENIYlpub0RzZ3FFYVJIZjM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHUMU8Ctm
lWU51sEGGQEbFNcqhX7+zuew7ZffXl/Aqs/tSJRMgiF+Zeh0nNJHbQ2L4B5mRuUh
GFZAAqjRMakcOVpt+J1RmU/BZVYrN25dVBLg06JBvDWLtlkjkF9hoe9iddMt5f2B
fRJL/7H76yGySQ+Q81c6YI+0itaEtZc4oZ3htnzexnbWwfKSsUxQa4pBefKI86e6
XfBRpmmS4B9u180wS2HcFRzTMEELPUoxaK3Sq0vPRwfJ+XShPpLWQD2Mfjun3Jum
khUcQF+kpZJ0TXAmlsOkM+lLCc6bzWN2qCRK6VEO6Jr2ctEkWZumjojeQ7FzQ54b
30TNt87kqvyToQ==
-----END CERTIFICATE-----
Generated at Tue Oct 27 22:25:32 2026 by rpki-client