Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/TddPu7rljdCHbZnoDsgqEaRHf34.mft
File: TddPu7rljdCHbZnoDsgqEaRHf34.mft (raw, json)
Hash identifier: OABqw+GlTBnPMQsTDDQRpIpzANBtkLTDLXvVk9fdH3s=
Subject key identifier: 10:F9:49:9E:C8:60:F0:8B:CF:B8:0C:2B:9A:00:8B:1F:0E:75:21:EF
Authority key identifier: 4D:D7:4F:BB:BA:E5:8D:D0:87:6D:99:E8:0E:C8:2A:11:A4:47:7F:7E
Certificate issuer: /CN=4dd74fbbbae58dd0876d99e80ec82a11a4477f7e
Certificate serial: 019CE4B5F949BEBF0525B87C00CB6E3B2377
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TddPu7rljdCHbZnoDsgqEaRHf34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/TddPu7rljdCHbZnoDsgqEaRHf34.mft
Manifest number: 1064
Signing time: Fri 13 Mar 2026 01:00:56 +0000
Manifest this update: Fri 13 Mar 2026 01:00:56 +0000
Manifest next update: Sat 14 Mar 2026 01:00:56 +0000
Files and hashes: 1: 3yZGQ9sVYnt3QvH4c2styLzLRvg.roa (hash: hVBmJZwcWxMro3AxbGdMWv1UTRuzR2YMZqUh1ugo44A=)
2: HR52VHb2xwQIwQ8nYo_MUxwRCms.roa (hash: TbFaT/PpzXVRAiKnbKd45KfqI8+dX+V6Uzbwpos22ak=)
3: J-e2S3Co34V6GqxBwpLas1KlzPc.roa (hash: bHmgsb6+ck75z0l3IkcQpbr1i2Fj+RaHGqcd5esVIMY=)
4: TddPu7rljdCHbZnoDsgqEaRHf34.crl (hash: fxuJzwtb1LdpKLlFWkhpYKdMz7BCzCgVgJy5lYHUVp8=)
5: Zt0W_ABdMo3EotkTq9s4b1C7324.roa (hash: S159y02y02b8yf62OVx4JhM0oWbYWFSiWsof3ORZ+Q0=)
6: aOtkixPHmh2enUl6k6sKDrNg_wU.roa (hash: DP493uqQSZ8xRKm9VuJgcghqEcMtl7DiKLDMdLGXe08=)
7: pSr1Ypx-2NhHUN2EUMY--Rosrnw.roa (hash: D/Y20asoDdfvVkjnqNGrkzhvFsfQ4TTpIhrzqfdNsXw=)
8: ttShEhSFippZW2mlI_cMFuA1CNg.roa (hash: bXpk4WtzIL7RNvoOYrs7EBMG1GjbpYOMFtRXm7SQom8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/TddPu7rljdCHbZnoDsgqEaRHf34.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/TddPu7rljdCHbZnoDsgqEaRHf34.mft
rsync://rpki.ripe.net/repository/DEFAULT/TddPu7rljdCHbZnoDsgqEaRHf34.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 21:05:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e4:b5:f9:49:be:bf:05:25:b8:7c:00:cb:6e:3b:23:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4dd74fbbbae58dd0876d99e80ec82a11a4477f7e
Validity
Not Before: Mar 13 01:00:56 2026 GMT
Not After : Mar 14 01:00:56 2026 GMT
Subject: CN=10f9499ec860f08bcfb80c2b9a008b1f0e7521ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:3a:3b:ed:22:d6:97:56:07:83:27:20:ed:a3:
31:f7:14:48:c8:6c:ea:dc:9d:33:5a:dd:77:a8:e1:
8b:4d:b2:d6:84:6d:e9:be:18:a0:ec:39:14:6e:b5:
8d:a7:0b:8b:c3:39:bb:ad:65:a8:72:d5:f0:5f:8c:
85:f8:a5:b4:e0:de:44:33:44:ea:1a:bf:c2:5f:e0:
13:1a:6e:c2:ac:7e:17:6d:10:ee:1f:f1:5a:05:5c:
1f:3e:18:c1:66:c9:8f:ce:dd:81:f1:ee:be:23:28:
da:00:9d:16:11:c4:40:fe:e6:67:47:07:8c:a9:f9:
cb:2c:a4:d0:31:d3:c1:6c:9f:1c:ea:66:92:14:06:
08:28:7e:16:9c:06:36:90:35:37:c3:0f:75:d2:25:
8b:e9:80:aa:7c:11:1c:5e:73:c2:89:bc:02:a9:d9:
40:ab:89:b4:4c:ae:cb:88:c3:d8:b1:1f:ae:b7:c7:
ba:2b:f8:d2:21:41:4c:52:9a:50:b3:e6:fd:b3:74:
bd:7d:1b:cf:97:c7:4c:86:e0:3a:a6:38:d3:6f:f4:
f5:98:cc:b7:3c:b0:88:c8:82:d6:c9:07:71:01:06:
25:36:36:c8:25:ef:3b:83:3f:34:25:54:43:d8:13:
b0:ed:58:22:0e:b4:f2:f0:9f:2e:d9:a9:eb:43:b5:
82:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:F9:49:9E:C8:60:F0:8B:CF:B8:0C:2B:9A:00:8B:1F:0E:75:21:EF
X509v3 Authority Key Identifier:
keyid:4D:D7:4F:BB:BA:E5:8D:D0:87:6D:99:E8:0E:C8:2A:11:A4:47:7F:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TddPu7rljdCHbZnoDsgqEaRHf34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/TddPu7rljdCHbZnoDsgqEaRHf34.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/TddPu7rljdCHbZnoDsgqEaRHf34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:b5:51:9b:dd:24:f4:97:4d:64:0d:5b:76:89:3f:bc:95:65:
9f:b8:db:54:8a:bd:bd:f3:e6:c6:fd:5d:17:91:ca:b9:a0:dc:
54:e5:f4:4c:d9:b4:45:07:2b:b2:5f:1a:85:18:d9:1f:b7:2c:
e4:e5:69:3a:3e:54:b1:2f:10:35:46:b4:15:0c:14:73:bc:43:
e4:94:48:b8:d7:00:5b:d8:b8:98:7b:75:83:4f:a2:81:fe:d3:
18:d2:d1:52:30:dd:e6:69:83:8d:36:40:ce:72:81:6b:30:a8:
5d:e4:2f:52:18:0b:ca:6d:1a:eb:8f:0f:f3:23:a6:6b:a2:52:
54:df:4d:b3:0e:de:df:4d:cb:16:16:03:d8:0f:64:61:17:60:
ee:44:1b:1f:35:1e:81:69:cf:b1:21:78:22:6b:d5:1c:fe:6e:
ba:9f:fc:f8:10:2a:f0:01:07:7c:ce:8a:dd:35:30:f6:5a:7c:
38:b8:35:4b:6f:8b:b8:b5:cf:44:93:7d:db:4e:fa:4a:02:81:
47:02:25:e8:17:55:d1:41:07:17:48:ba:ea:48:9c:bc:56:45:
a3:5e:cb:a8:09:87:59:dc:d6:16:c4:1b:ad:22:f9:7f:11:a4:
1b:6a:11:08:36:c7:19:c4:24:f4:5d:be:5c:3b:cf:db:1c:20:
a9:b3:c7:1a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZzktflJvr8FJbh8AMtuOyN3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRkZDc0ZmJiYmFlNThkZDA4NzZkOTllODBlYzgyYTExYTQ0
NzdmN2UwHhcNMjYwMzEzMDEwMDU2WhcNMjYwMzE0MDEwMDU2WjAzMTEwLwYDVQQD
EygxMGY5NDk5ZWM4NjBmMDhiY2ZiODBjMmI5YTAwOGIxZjBlNzUyMWVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApTo77SLWl1YHgycg7aMx9xRIyGzq
3J0zWt13qOGLTbLWhG3pvhig7DkUbrWNpwuLwzm7rWWoctXwX4yF+KW04N5EM0Tq
Gr/CX+ATGm7CrH4XbRDuH/FaBVwfPhjBZsmPzt2B8e6+IyjaAJ0WEcRA/uZnRweM
qfnLLKTQMdPBbJ8c6maSFAYIKH4WnAY2kDU3ww910iWL6YCqfBEcXnPCibwCqdlA
q4m0TK7LiMPYsR+ut8e6K/jSIUFMUppQs+b9s3S9fRvPl8dMhuA6pjjTb/T1mMy3
PLCIyILWyQdxAQYlNjbIJe87gz80JVRD2BOw7VgiDrTy8J8u2anrQ7WCOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBD5SZ7IYPCLz7gMK5oAix8OdSHvMB8GA1UdIwQY
MBaAFE3XT7u65Y3Qh22Z6A7IKhGkR39+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVGRkUHU3cmxqZENIYlpub0RzZ3FFYVJIZjM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi85ZjVmNTctZTgyOC00YmNmLThkMmIt
OGVhYjdmNGZlNzdlLzEvVGRkUHU3cmxqZENIYlpub0RzZ3FFYVJIZjM0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi85ZjVmNTctZTgyOC00YmNmLThkMmItOGVhYjdmNGZlNzdl
LzEvVGRkUHU3cmxqZENIYlpub0RzZ3FFYVJIZjM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR7VRm90k
9JdNZA1bdok/vJVln7jbVIq9vfPmxv1dF5HKuaDcVOX0TNm0RQcrsl8ahRjZH7cs
5OVpOj5UsS8QNUa0FQwUc7xD5JRIuNcAW9i4mHt1g0+igf7TGNLRUjDd5mmDjTZA
znKBazCoXeQvUhgLym0a648P8yOma6JSVN9Nsw7e303LFhYD2A9kYRdg7kQbHzUe
gWnPsSF4ImvVHP5uup/8+BAq8AEHfM6K3TUw9lp8OLg1S2+LuLXPRJN92076SgKB
RwIl6BdV0UEHF0i66kicvFZFo17LqAmHWdzWFsQbrSL5fxGkG2oRCDbHGcQk9F2+
XDvP2xwgqbPHGg==
-----END CERTIFICATE-----
Generated at Fri Mar 13 05:54:15 2026 by rpki-client