Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/516d35-5711-49a6-8ca0-55ff65f6bc12/1/aTddinP2XuMh63wI24OAslhkuRI.mft
File: aTddinP2XuMh63wI24OAslhkuRI.mft (raw, json)
Hash identifier: iSWhvI498yPvR1Hv6tPkeW5KkAYLyMopBW1/4rwdPLI=
Subject key identifier: B6:2D:E3:07:70:6C:13:30:B9:D5:84:56:B0:F9:46:28:FB:64:04:F5
Authority key identifier: 69:37:5D:8A:73:F6:5E:E3:21:EB:7C:08:DB:83:80:B2:58:64:B9:12
Certificate issuer: /CN=69375d8a73f65ee321eb7c08db8380b25864b912
Certificate serial: 019CA8A15352F3D2FF6A8FE8CB2B34A6F8D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aTddinP2XuMh63wI24OAslhkuRI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/516d35-5711-49a6-8ca0-55ff65f6bc12/1/aTddinP2XuMh63wI24OAslhkuRI.mft
Manifest number: 1B
Signing time: Sun 01 Mar 2026 09:01:10 +0000
Manifest this update: Sun 01 Mar 2026 09:01:10 +0000
Manifest next update: Mon 02 Mar 2026 09:01:10 +0000
Files and hashes: 1: KAS5oJnMRBLN3CMFfME2h-Rh7mU.roa (hash: LS/iW/nevmUgfZkUxmuVR5hiIsYE32zEMVLICjYAf/4=)
2: aTddinP2XuMh63wI24OAslhkuRI.crl (hash: v8jVTvl2pm0qkh5VB1M9MuCsGfj/vwJgXYkTwb5Mka0=)
3: rQM6hcyKgdO32uWWqq-FwzbquX0.asa (hash: zP7bH4dme0HxeY/+twvXjeQeEdIkjoodZuLEIhQlKzM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/516d35-5711-49a6-8ca0-55ff65f6bc12/1/aTddinP2XuMh63wI24OAslhkuRI.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/516d35-5711-49a6-8ca0-55ff65f6bc12/1/aTddinP2XuMh63wI24OAslhkuRI.mft
rsync://rpki.ripe.net/repository/DEFAULT/aTddinP2XuMh63wI24OAslhkuRI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 09:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a8:a1:53:52:f3:d2:ff:6a:8f:e8:cb:2b:34:a6:f8:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69375d8a73f65ee321eb7c08db8380b25864b912
Validity
Not Before: Mar 1 09:01:10 2026 GMT
Not After : Mar 2 09:01:10 2026 GMT
Subject: CN=b62de307706c1330b9d58456b0f94628fb6404f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:5f:71:30:f0:1d:98:c5:1f:67:3d:fa:69:85:
54:c5:d0:57:1b:b4:71:03:89:66:64:ae:f0:b7:d9:
94:e6:04:d6:94:4c:db:7a:1a:0a:07:60:3e:8d:43:
68:95:be:f0:05:7d:88:80:06:fb:61:05:da:64:0c:
d1:f4:ca:c4:40:e6:56:ca:de:60:58:b8:36:cd:9e:
fd:0d:99:f7:b7:21:41:10:b5:9d:25:cb:43:1c:df:
c5:dc:0f:a3:7e:bf:1e:64:1f:9f:52:d6:08:16:5d:
7e:af:45:05:f7:1d:d6:bf:87:ff:34:72:f8:55:1f:
4b:4f:57:99:6d:db:03:da:62:38:3c:3a:2f:90:d6:
e9:70:70:61:fb:3d:e9:a1:0f:60:0b:e7:79:df:dd:
90:1e:04:f9:fd:88:c2:56:a8:75:71:dd:a5:82:62:
2a:28:0a:70:f2:9e:2f:30:30:1e:5c:d5:38:c8:84:
7e:e5:3f:91:29:bc:6a:21:ad:2d:db:29:bf:11:e3:
ae:6f:55:1b:24:7d:92:4f:8b:5f:7e:a8:5d:26:32:
7f:af:cd:df:f4:e5:53:13:b4:d8:c5:b9:3e:93:c3:
6e:26:e0:7f:93:56:f8:6c:88:67:68:95:c6:00:d6:
b8:ad:99:aa:5c:1d:1d:d3:0f:94:56:c1:a8:73:6c:
9a:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:2D:E3:07:70:6C:13:30:B9:D5:84:56:B0:F9:46:28:FB:64:04:F5
X509v3 Authority Key Identifier:
keyid:69:37:5D:8A:73:F6:5E:E3:21:EB:7C:08:DB:83:80:B2:58:64:B9:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aTddinP2XuMh63wI24OAslhkuRI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/516d35-5711-49a6-8ca0-55ff65f6bc12/1/aTddinP2XuMh63wI24OAslhkuRI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/516d35-5711-49a6-8ca0-55ff65f6bc12/1/aTddinP2XuMh63wI24OAslhkuRI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d2:a9:bf:a2:dc:4f:04:15:44:07:be:9d:06:13:c6:8c:91:18:
c7:0a:d7:6b:c6:09:9b:9d:19:9f:c9:6d:01:4a:15:aa:2a:b7:
aa:ec:22:13:87:94:30:05:86:75:24:9f:d9:fb:39:79:9f:dc:
65:c7:b5:90:85:2f:b9:86:c0:26:12:45:3f:f4:b3:26:2f:6b:
22:0f:78:fa:a3:1f:c7:1e:0c:55:87:56:99:0e:17:29:87:d6:
e1:e8:ac:33:0a:02:d5:1f:e7:49:e7:f5:cb:c7:e9:85:1d:10:
54:6a:69:fd:57:4f:1b:ca:1f:0b:7f:50:2f:a8:47:cf:b7:5c:
3c:5c:77:4b:4f:5a:dd:4c:a4:02:d0:2c:3e:f6:73:56:c0:52:
96:d5:f1:a1:17:8b:18:a5:c6:d3:26:25:c6:d6:bf:9d:1e:37:
96:e7:e6:22:d0:9f:b0:fc:75:29:e8:22:44:74:d4:43:c4:cc:
20:b2:ad:41:24:d6:0b:0b:27:a0:29:31:c9:2f:11:8b:51:2a:
4a:24:25:42:58:b4:bd:0b:2b:a0:50:a7:28:48:41:a1:b5:d8:
60:56:55:99:13:e1:85:ab:9c:3a:de:c5:b1:cd:28:35:f3:a3:
e4:be:3f:3f:fd:fa:16:8e:a8:89:1e:32:f3:21:43:9b:b1:54:
ff:19:98:a9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyooVNS89L/ao/oyys0pvjWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5Mzc1ZDhhNzNmNjVlZTMyMWViN2MwOGRiODM4MGIyNTg2
NGI5MTIwHhcNMjYwMzAxMDkwMTEwWhcNMjYwMzAyMDkwMTEwWjAzMTEwLwYDVQQD
EyhiNjJkZTMwNzcwNmMxMzMwYjlkNTg0NTZiMGY5NDYyOGZiNjQwNGY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoF9xMPAdmMUfZz36aYVUxdBXG7Rx
A4lmZK7wt9mU5gTWlEzbehoKB2A+jUNolb7wBX2IgAb7YQXaZAzR9MrEQOZWyt5g
WLg2zZ79DZn3tyFBELWdJctDHN/F3A+jfr8eZB+fUtYIFl1+r0UF9x3Wv4f/NHL4
VR9LT1eZbdsD2mI4PDovkNbpcHBh+z3poQ9gC+d5392QHgT5/YjCVqh1cd2lgmIq
KApw8p4vMDAeXNU4yIR+5T+RKbxqIa0t2ym/EeOub1UbJH2ST4tffqhdJjJ/r83f
9OVTE7TYxbk+k8NuJuB/k1b4bIhnaJXGANa4rZmqXB0d0w+UVsGoc2yaAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLYt4wdwbBMwudWEVrD5Rij7ZAT1MB8GA1UdIwQY
MBaAFGk3XYpz9l7jIet8CNuDgLJYZLkSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYVRkZGluUDJYdU1oNjN3STI0T0FzbGhrdVJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi81MTZkMzUtNTcxMS00OWE2LThjYTAt
NTVmZjY1ZjZiYzEyLzEvYVRkZGluUDJYdU1oNjN3STI0T0FzbGhrdVJJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZi81MTZkMzUtNTcxMS00OWE2LThjYTAtNTVmZjY1ZjZiYzEy
LzEvYVRkZGluUDJYdU1oNjN3STI0T0FzbGhrdVJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0qm/otxP
BBVEB76dBhPGjJEYxwrXa8YJm50Zn8ltAUoVqiq3quwiE4eUMAWGdSSf2fs5eZ/c
Zce1kIUvuYbAJhJFP/SzJi9rIg94+qMfxx4MVYdWmQ4XKYfW4eisMwoC1R/nSef1
y8fphR0QVGpp/VdPG8ofC39QL6hHz7dcPFx3S09a3UykAtAsPvZzVsBSltXxoReL
GKXG0yYlxta/nR43lufmItCfsPx1KegiRHTUQ8TMILKtQSTWCwsnoCkxyS8Ri1Eq
SiQlQli0vQsroFCnKEhBobXYYFZVmRPhhaucOt7Fsc0oNfOj5L4/P/36Fo6oiR4y
8yFDm7FU/xmYqQ==
-----END CERTIFICATE-----
Generated at Sun Mar 1 18:19:06 2026 by rpki-client