Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/da/bfb817-7e2d-4458-bab1-d1750020caf5/1/_tdzOdk4vvCHWZKTwgGzufgiNiM.mft
File: _tdzOdk4vvCHWZKTwgGzufgiNiM.mft (raw, json)
Hash identifier: 72pIcE61Covg4SRPdUg6TEvgDXs60qKKcf5eo6z78EU=
Subject key identifier: DB:42:74:BF:83:0F:07:72:67:66:24:24:7C:72:A6:FD:35:5D:2E:45
Authority key identifier: FE:D7:73:39:D9:38:BE:F0:87:59:92:93:C2:01:B3:B9:F8:22:36:23
Certificate issuer: /CN=fed77339d938bef087599293c201b3b9f8223623
Certificate serial: 01A08A55ADB0428E0799CDB232CF7F8CAE32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_tdzOdk4vvCHWZKTwgGzufgiNiM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/bfb817-7e2d-4458-bab1-d1750020caf5/1/_tdzOdk4vvCHWZKTwgGzufgiNiM.mft
Manifest number: 19D9
Signing time: Thu 10 Sep 2026 08:01:05 +0000
Manifest this update: Thu 10 Sep 2026 08:01:05 +0000
Manifest next update: Fri 11 Sep 2026 08:01:05 +0000
Files and hashes: 1: _tdzOdk4vvCHWZKTwgGzufgiNiM.crl (hash: Slsd+v0yI4PnDncq0j7VpqLUZL3YPcrOKF/rH9UDYAM=)
2: dVMqcvXursPYfDYSCDAE4DhRFlc.roa (hash: Yq3X9779TMJZn56pp7FdF+bqg71vRgvQymxrtb6IBFY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/bfb817-7e2d-4458-bab1-d1750020caf5/1/_tdzOdk4vvCHWZKTwgGzufgiNiM.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/bfb817-7e2d-4458-bab1-d1750020caf5/1/_tdzOdk4vvCHWZKTwgGzufgiNiM.mft
rsync://rpki.ripe.net/repository/DEFAULT/_tdzOdk4vvCHWZKTwgGzufgiNiM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:55:ad:b0:42:8e:07:99:cd:b2:32:cf:7f:8c:ae:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fed77339d938bef087599293c201b3b9f8223623
Validity
Not Before: Sep 10 08:01:05 2026 GMT
Not After : Sep 11 08:01:05 2026 GMT
Subject: CN=db4274bf830f0772676624247c72a6fd355d2e45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:71:8c:58:76:fc:24:31:8c:40:a0:b6:64:82:
2d:13:75:41:cd:a5:6c:35:d2:1a:f5:71:ea:96:53:
61:ca:71:82:45:8d:94:6e:26:e2:2b:a7:74:5c:f0:
0a:d9:21:3d:c0:61:04:b9:c1:91:13:23:a4:4c:78:
72:6b:de:ef:1f:c9:70:01:c1:d9:a6:f3:25:72:9a:
c0:48:9c:1a:34:7f:a2:08:c0:40:cb:9d:9c:86:dd:
78:3a:01:62:4e:b9:69:98:b2:fe:59:e7:b8:9c:81:
c4:37:8d:e4:ff:98:4a:fb:53:7d:88:c8:d5:17:d1:
f5:86:31:9f:a3:80:e5:90:a6:ec:7d:15:e8:5d:a4:
a1:29:64:f8:a3:89:59:47:bd:41:34:b3:5d:83:11:
4f:b4:03:c7:30:91:e1:45:d8:4d:cd:2a:e7:d5:8f:
05:d7:f5:7e:69:44:14:f3:27:b0:9c:d2:9c:7a:e9:
00:48:bf:e3:86:63:f3:85:c4:f7:01:e8:be:4c:8e:
ca:30:85:03:76:b7:74:f8:22:57:a6:a6:10:0a:66:
29:0e:6b:3c:2b:4b:2f:2b:0f:3b:0e:53:58:eb:bb:
57:c7:f8:31:22:90:08:43:ae:ff:29:dc:50:86:f3:
a6:36:46:0e:f7:aa:1e:00:b9:0b:26:85:5d:30:e4:
07:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:42:74:BF:83:0F:07:72:67:66:24:24:7C:72:A6:FD:35:5D:2E:45
X509v3 Authority Key Identifier:
keyid:FE:D7:73:39:D9:38:BE:F0:87:59:92:93:C2:01:B3:B9:F8:22:36:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_tdzOdk4vvCHWZKTwgGzufgiNiM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/bfb817-7e2d-4458-bab1-d1750020caf5/1/_tdzOdk4vvCHWZKTwgGzufgiNiM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/bfb817-7e2d-4458-bab1-d1750020caf5/1/_tdzOdk4vvCHWZKTwgGzufgiNiM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:68:f2:cd:d8:96:30:94:b8:70:33:14:2f:e6:5d:ba:93:79:
dc:c4:bf:19:db:21:15:e1:a6:b9:81:ee:ad:b3:18:07:41:ef:
6e:30:67:21:8b:a2:26:0a:81:35:a9:dd:96:b4:71:65:2d:11:
2b:28:da:49:54:59:35:e9:76:41:a6:67:b1:1d:3d:b6:c1:b0:
4f:b9:d7:ed:29:4c:0d:8b:96:43:ad:da:a7:27:b4:d2:fa:8d:
d1:27:8b:9b:11:6c:ce:76:41:42:a2:32:9a:45:7c:33:fe:71:
75:12:1a:10:06:53:7e:cf:78:67:de:12:17:47:be:87:b2:ef:
37:ff:88:73:1e:e7:d4:58:f9:f6:5a:6a:f7:3d:ff:e9:e9:d7:
33:10:5a:ed:4e:2b:64:d7:96:f9:92:ca:6e:d9:5b:25:b6:44:
d1:78:64:9b:83:f1:b0:7f:c6:68:f8:1d:27:39:79:9f:f8:08:
e4:5b:90:09:64:f9:27:b0:c4:b9:02:9d:ab:03:af:8b:7d:cd:
76:0a:99:13:67:58:41:41:1d:d7:09:4e:88:32:9c:bc:4a:e3:
b1:5a:d3:d8:aa:ca:6b:89:7b:93:60:5c:62:61:85:b5:14:82:
58:17:57:5a:ce:8c:01:cf:b0:48:78:7f:ee:0d:37:a5:a7:d3:
a4:43:28:0d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCKVa2wQo4Hmc2yMs9/jK4yMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlZDc3MzM5ZDkzOGJlZjA4NzU5OTI5M2MyMDFiM2I5Zjgy
MjM2MjMwHhcNMjYwOTEwMDgwMTA1WhcNMjYwOTExMDgwMTA1WjAzMTEwLwYDVQQD
EyhkYjQyNzRiZjgzMGYwNzcyNjc2NjI0MjQ3YzcyYTZmZDM1NWQyZTQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl3GMWHb8JDGMQKC2ZIItE3VBzaVs
NdIa9XHqllNhynGCRY2UbibiK6d0XPAK2SE9wGEEucGREyOkTHhya97vH8lwAcHZ
pvMlcprASJwaNH+iCMBAy52cht14OgFiTrlpmLL+Wee4nIHEN43k/5hK+1N9iMjV
F9H1hjGfo4DlkKbsfRXoXaShKWT4o4lZR71BNLNdgxFPtAPHMJHhRdhNzSrn1Y8F
1/V+aUQU8yewnNKceukASL/jhmPzhcT3Aei+TI7KMIUDdrd0+CJXpqYQCmYpDms8
K0svKw87DlNY67tXx/gxIpAIQ67/KdxQhvOmNkYO96oeALkLJoVdMOQH9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNtCdL+DDwdyZ2YkJHxypv01XS5FMB8GA1UdIwQY
MBaAFP7XcznZOL7wh1mSk8IBs7n4IjYjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX3Rkek9kazR2dkNIV1pLVHdnR3p1ZmdpTmlNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS9iZmI4MTctN2UyZC00NDU4LWJhYjEt
ZDE3NTAwMjBjYWY1LzEvX3Rkek9kazR2dkNIV1pLVHdnR3p1ZmdpTmlNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYS9iZmI4MTctN2UyZC00NDU4LWJhYjEtZDE3NTAwMjBjYWY1
LzEvX3Rkek9kazR2dkNIV1pLVHdnR3p1ZmdpTmlNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASmjyzdiW
MJS4cDMUL+ZdupN53MS/GdshFeGmuYHurbMYB0HvbjBnIYuiJgqBNandlrRxZS0R
KyjaSVRZNel2QaZnsR09tsGwT7nX7SlMDYuWQ63apye00vqN0SeLmxFsznZBQqIy
mkV8M/5xdRIaEAZTfs94Z94SF0e+h7LvN/+Icx7n1Fj59lpq9z3/6enXMxBa7U4r
ZNeW+ZLKbtlbJbZE0Xhkm4PxsH/GaPgdJzl5n/gI5FuQCWT5J7DEuQKdqwOvi33N
dgqZE2dYQUEd1wlOiDKcvErjsVrT2KrKa4l7k2BcYmGFtRSCWBdXWs6MAc+wSHh/
7g03pafTpEMoDQ==
-----END CERTIFICATE-----
Generated at Thu Sep 10 14:00:36 2026 by rpki-client