Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/670b10-10eb-476f-84ef-156eda2b55b6/1/tdh_3Ccq4Fhhh4bnQXB1V79OGjM.mft
File: tdh_3Ccq4Fhhh4bnQXB1V79OGjM.mft (raw, json)
Hash identifier: ygXs289kbydSCdQ5reHvECWtwswN9MN0u66d0kZWDeM=
Subject key identifier: F4:1D:D7:59:FD:C1:B0:03:D5:6D:61:A7:F4:56:EF:11:62:60:3A:76
Authority key identifier: B5:D8:7F:DC:27:2A:E0:58:61:87:86:E7:41:70:75:57:BF:4E:1A:33
Certificate issuer: /CN=b5d87fdc272ae058618786e741707557bf4e1a33
Certificate serial: 019D3752424DCEFEE9257C640F12779E59D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tdh_3Ccq4Fhhh4bnQXB1V79OGjM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/670b10-10eb-476f-84ef-156eda2b55b6/1/tdh_3Ccq4Fhhh4bnQXB1V79OGjM.mft
Manifest number: 062A
Signing time: Sun 29 Mar 2026 02:00:30 +0000
Manifest this update: Sun 29 Mar 2026 02:00:30 +0000
Manifest next update: Mon 30 Mar 2026 02:00:30 +0000
Files and hashes: 1: 6QKPReqPPvM-G5eDtotQxkQu3rg.roa (hash: +zfD9kQLYj/Bi7oedLx+ydKYavDQjQhsfviUHiEJA58=)
2: tdh_3Ccq4Fhhh4bnQXB1V79OGjM.crl (hash: zYkwlm0Oe5kYsPdO49x47UahoTBa+IIYCCbezdX1/Vo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/670b10-10eb-476f-84ef-156eda2b55b6/1/tdh_3Ccq4Fhhh4bnQXB1V79OGjM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/670b10-10eb-476f-84ef-156eda2b55b6/1/tdh_3Ccq4Fhhh4bnQXB1V79OGjM.mft
rsync://rpki.ripe.net/repository/DEFAULT/tdh_3Ccq4Fhhh4bnQXB1V79OGjM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:42:4d:ce:fe:e9:25:7c:64:0f:12:77:9e:59:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5d87fdc272ae058618786e741707557bf4e1a33
Validity
Not Before: Mar 29 02:00:30 2026 GMT
Not After : Mar 30 02:00:30 2026 GMT
Subject: CN=f41dd759fdc1b003d56d61a7f456ef1162603a76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:21:06:aa:21:ac:9e:e8:1e:3d:30:ba:2b:17:
fe:8d:4c:8e:1a:64:a7:27:4a:48:b6:69:09:73:40:
0f:b4:13:85:57:5b:e2:9e:7d:de:ec:78:d7:43:6d:
71:22:43:b8:b6:18:59:df:76:59:2d:3b:a6:fe:c7:
7c:bc:6b:4b:63:00:67:71:e8:25:04:6c:13:9f:36:
9b:6c:42:2f:28:42:b6:ea:91:53:fa:64:18:3a:79:
5c:97:00:90:07:23:10:e6:82:e2:fe:d1:34:1b:d8:
d1:7a:a6:d3:2c:cf:37:81:80:42:16:a8:91:b3:c6:
ec:3a:98:9a:36:48:cd:3b:79:1c:cc:25:14:b3:90:
2a:7f:38:49:94:62:64:e1:44:cb:d4:ca:63:dc:f0:
ff:81:90:dd:68:b1:1b:b4:97:4e:8c:e9:0c:45:5b:
4b:1f:bb:8e:a7:8c:d5:5b:c2:5f:8b:a6:e6:bd:d2:
c6:5b:84:81:a0:1c:18:39:f7:03:0b:1a:f2:d0:9a:
16:5c:db:2f:a8:ab:78:69:40:49:39:37:70:5b:81:
eb:61:b0:fa:82:3d:45:44:00:ab:3c:0b:96:2e:73:
20:d7:54:ec:ce:d4:b3:72:0f:5f:96:18:e1:3e:03:
44:39:e5:75:e3:ce:7e:72:08:c0:6c:2d:f2:f9:95:
fe:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:1D:D7:59:FD:C1:B0:03:D5:6D:61:A7:F4:56:EF:11:62:60:3A:76
X509v3 Authority Key Identifier:
keyid:B5:D8:7F:DC:27:2A:E0:58:61:87:86:E7:41:70:75:57:BF:4E:1A:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tdh_3Ccq4Fhhh4bnQXB1V79OGjM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/670b10-10eb-476f-84ef-156eda2b55b6/1/tdh_3Ccq4Fhhh4bnQXB1V79OGjM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/670b10-10eb-476f-84ef-156eda2b55b6/1/tdh_3Ccq4Fhhh4bnQXB1V79OGjM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:37:09:f7:40:1a:03:8c:b3:15:91:51:ff:ea:48:c6:06:03:
b0:28:dd:bb:3d:d3:d6:05:8c:aa:f7:37:f9:c1:8e:5d:35:23:
e3:3c:f5:d8:a3:34:44:64:9a:d6:60:51:c1:5c:27:e7:99:be:
d1:c5:aa:a0:c9:9c:5d:38:bd:8f:4a:c3:0e:7c:01:0a:8d:60:
af:e6:4a:8b:8e:e6:8e:3c:e1:06:ba:fd:4f:e8:5f:c6:91:65:
50:73:10:42:ef:35:52:07:8a:6b:59:fa:8f:5d:f2:38:90:97:
6a:1e:74:5f:6f:fc:95:04:a9:e2:41:44:a8:06:a1:d8:f4:b7:
8c:56:ae:e2:9b:06:9b:53:a1:57:24:31:93:09:ae:ae:0b:2b:
99:0a:65:da:22:b6:43:eb:c7:41:d1:27:2c:3e:64:7f:57:c4:
ba:ec:3d:4e:04:d2:6c:a7:2e:3b:d5:ac:dd:49:62:c1:00:a7:
b9:48:5b:ac:d4:d7:c2:dc:9c:35:7e:0d:d4:0d:04:82:94:99:
78:24:95:74:7e:fa:49:26:34:35:7a:c1:5b:d5:64:5e:bc:c7:
d5:86:61:67:3a:5c:0b:24:97:53:94:f5:27:74:63:ce:a5:d3:
38:10:38:16:66:80:f9:5e:f9:51:b4:38:33:1f:61:c9:4c:34:
58:ef:b4:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:33:47 2026 by rpki-client