Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/bfb817-7e2d-4458-bab1-d1750020caf5/1/_tdzOdk4vvCHWZKTwgGzufgiNiM.mft
File: _tdzOdk4vvCHWZKTwgGzufgiNiM.mft (raw, json)
Hash identifier: ulgo9FONWzKoZ2aJ+KRQOau3EtHvCdEiDKQx5CPjnkM=
Subject key identifier: 65:6C:1B:4E:BF:29:96:DD:BF:F6:40:54:BA:B1:4B:8F:64:5B:B1:03
Authority key identifier: FE:D7:73:39:D9:38:BE:F0:87:59:92:93:C2:01:B3:B9:F8:22:36:23
Certificate issuer: /CN=fed77339d938bef087599293c201b3b9f8223623
Certificate serial: 019FA29731800F3F070EF05DFEDAC8054C3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_tdzOdk4vvCHWZKTwgGzufgiNiM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/bfb817-7e2d-4458-bab1-d1750020caf5/1/_tdzOdk4vvCHWZKTwgGzufgiNiM.mft
Manifest number: 1961
Signing time: Mon 27 Jul 2026 08:00:45 +0000
Manifest this update: Mon 27 Jul 2026 08:00:45 +0000
Manifest next update: Tue 28 Jul 2026 08:00:45 +0000
Files and hashes: 1: _tdzOdk4vvCHWZKTwgGzufgiNiM.crl (hash: 1mps4RmCpv8VgQ4h9xnuj1kgh5GKljAniOnxSAYfKsc=)
2: dVMqcvXursPYfDYSCDAE4DhRFlc.roa (hash: Yq3X9779TMJZn56pp7FdF+bqg71vRgvQymxrtb6IBFY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/bfb817-7e2d-4458-bab1-d1750020caf5/1/_tdzOdk4vvCHWZKTwgGzufgiNiM.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/bfb817-7e2d-4458-bab1-d1750020caf5/1/_tdzOdk4vvCHWZKTwgGzufgiNiM.mft
rsync://rpki.ripe.net/repository/DEFAULT/_tdzOdk4vvCHWZKTwgGzufgiNiM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a2:97:31:80:0f:3f:07:0e:f0:5d:fe:da:c8:05:4c:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fed77339d938bef087599293c201b3b9f8223623
Validity
Not Before: Jul 27 08:00:45 2026 GMT
Not After : Jul 28 08:00:45 2026 GMT
Subject: CN=656c1b4ebf2996ddbff64054bab14b8f645bb103
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:6b:e8:20:30:d8:d6:99:bf:07:ed:0e:b7:eb:
01:ab:69:95:c3:8c:95:26:d3:ca:42:b3:ec:76:ae:
c8:b6:87:c4:db:85:df:9b:17:8a:a3:c1:19:65:3d:
1c:14:64:e9:06:e8:6c:f0:d7:31:39:e0:6f:ed:bb:
c2:fe:d7:e4:df:63:e4:49:4f:c9:23:9d:a0:6e:e4:
f9:87:dc:cf:6c:cf:e1:fd:4a:b1:14:b2:7a:12:57:
7a:88:b8:b3:b7:cb:06:76:5b:14:02:fb:16:3c:88:
08:88:a1:1b:cb:b1:82:44:b1:df:e4:5f:f8:86:69:
c0:22:db:e2:73:d6:01:d4:2f:f8:53:b4:cb:3b:15:
55:15:6e:92:a3:e7:4c:d2:33:94:ac:89:18:c3:de:
3d:fa:47:8c:0d:f8:12:31:7a:a5:a1:23:7e:25:e1:
68:0e:41:cc:0c:fe:fa:96:64:cc:c6:32:02:14:06:
f5:aa:c0:53:9a:eb:8a:ca:f9:cd:6a:ab:37:39:06:
79:3a:2e:42:e6:f0:60:8a:78:db:47:a9:24:25:75:
56:b4:0f:9e:ab:fe:16:39:bf:4e:eb:b0:43:5d:1f:
62:4e:61:ee:43:c4:13:c5:c1:af:fa:62:ea:97:e0:
b0:d4:c8:28:a6:df:09:9a:e3:fe:9c:7d:a1:d6:df:
73:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:6C:1B:4E:BF:29:96:DD:BF:F6:40:54:BA:B1:4B:8F:64:5B:B1:03
X509v3 Authority Key Identifier:
keyid:FE:D7:73:39:D9:38:BE:F0:87:59:92:93:C2:01:B3:B9:F8:22:36:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_tdzOdk4vvCHWZKTwgGzufgiNiM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/bfb817-7e2d-4458-bab1-d1750020caf5/1/_tdzOdk4vvCHWZKTwgGzufgiNiM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/bfb817-7e2d-4458-bab1-d1750020caf5/1/_tdzOdk4vvCHWZKTwgGzufgiNiM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:04:f6:ca:44:c1:6d:64:d2:28:d9:b9:cf:0a:01:93:42:83:
b3:b1:21:55:56:36:e4:c9:d8:17:49:d1:0b:33:12:ca:c7:e8:
5a:97:78:e4:91:c8:d6:b4:a0:d9:3f:ad:1e:2d:91:f3:09:3b:
8e:77:7e:99:85:10:01:15:b7:ec:23:d1:b0:10:9f:7c:b8:4b:
af:b5:b3:89:6d:1e:7f:c4:9f:cc:7c:e9:77:c8:5c:25:8e:4e:
ca:29:c4:ed:d8:09:38:87:2c:12:08:f8:6d:84:16:0b:4c:fa:
f0:a0:de:3d:f7:0c:4a:c1:05:1a:c8:85:3c:38:6f:2c:c6:d6:
4b:80:ba:47:50:f6:80:67:54:6c:90:aa:ae:de:e7:a2:c6:45:
04:9c:cc:09:e0:9c:54:49:00:ac:c7:19:c6:0e:c8:61:e3:31:
6f:fe:a6:a0:bb:1a:2c:e4:be:60:fc:ba:71:df:68:5a:dc:71:
e4:d0:49:32:ba:da:4c:38:74:db:ae:98:f5:16:52:f6:74:ef:
c7:2d:52:03:cb:68:02:ac:16:37:2d:2b:75:93:cb:56:59:6d:
40:10:29:85:a0:6e:e5:ab:79:5e:c9:a0:46:29:41:1a:56:b1:
91:f8:b2:80:64:e4:aa:bb:32:ef:4d:bd:c9:e6:33:0d:3b:54:
05:49:20:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 09:37:37 2026 by rpki-client