Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2e/5454ad-6cf3-4ee5-a4b9-0464e945f1cc/1/tDuXodIfY3tUkTDwhXpoHMf2iEw.mft
File: tDuXodIfY3tUkTDwhXpoHMf2iEw.mft (raw, json)
Hash identifier: YZqo1zoDJIm6e8tdGPJVTM2kGm68G3OGTnKaOEHATDw=
Subject key identifier: 43:40:B4:4B:27:0B:D9:47:53:FC:FE:E0:86:D7:F8:DD:80:36:3B:FB
Authority key identifier: B4:3B:97:A1:D2:1F:63:7B:54:91:30:F0:85:7A:68:1C:C7:F6:88:4C
Certificate issuer: /CN=b43b97a1d21f637b549130f0857a681cc7f6884c
Certificate serial: 01A0F64502926DD7B6BC997AFD8634806671
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDuXodIfY3tUkTDwhXpoHMf2iEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/5454ad-6cf3-4ee5-a4b9-0464e945f1cc/1/tDuXodIfY3tUkTDwhXpoHMf2iEw.mft
Manifest number: 1A82
Signing time: Thu 01 Oct 2026 07:01:52 +0000
Manifest this update: Thu 01 Oct 2026 07:01:52 +0000
Manifest next update: Fri 02 Oct 2026 07:01:52 +0000
Files and hashes: 1: N79dGcqXOAWTraGm-dUGr_n7g5o.roa (hash: izRmr4QFMP3HYYiVhDYKTcRuMtp1aQuZsgseKcKqny4=)
2: tDuXodIfY3tUkTDwhXpoHMf2iEw.crl (hash: utxciHiyYEkusUIoLbnaexE+v7F1qaqAF8JTFYnPR20=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/5454ad-6cf3-4ee5-a4b9-0464e945f1cc/1/tDuXodIfY3tUkTDwhXpoHMf2iEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/5454ad-6cf3-4ee5-a4b9-0464e945f1cc/1/tDuXodIfY3tUkTDwhXpoHMf2iEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/tDuXodIfY3tUkTDwhXpoHMf2iEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 Oct 2026 05:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f6:45:02:92:6d:d7:b6:bc:99:7a:fd:86:34:80:66:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b43b97a1d21f637b549130f0857a681cc7f6884c
Validity
Not Before: Oct 1 07:01:52 2026 GMT
Not After : Oct 2 07:01:52 2026 GMT
Subject: CN=4340b44b270bd94753fcfee086d7f8dd80363bfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:34:21:8c:87:68:22:ea:93:7a:74:79:c1:08:
d5:94:23:b7:51:e9:89:4b:13:4e:1f:c9:83:4e:b4:
07:54:83:57:90:c9:0d:7d:6f:8c:a0:60:59:2d:5c:
46:66:16:e6:f8:11:e3:64:fe:6b:52:24:aa:78:8d:
96:78:c0:17:b5:af:49:54:ea:09:52:a1:93:e8:07:
20:62:52:f5:66:30:1d:3b:0d:6d:7b:5d:ab:94:44:
81:88:80:6a:6f:d9:51:5c:e6:98:ee:15:a6:73:3d:
f4:61:27:41:02:f3:42:e5:5e:2a:a0:05:bf:c1:bb:
a7:f0:0d:5c:a3:ba:c4:fd:e9:a0:b5:00:81:f4:1b:
76:76:64:e2:cf:5c:65:15:fd:2a:6f:1b:1d:d0:f1:
5f:30:43:20:bc:b8:18:9d:42:ae:2f:73:ae:7a:d1:
50:42:d1:b7:13:31:eb:20:e6:0a:89:b2:cd:b5:72:
c1:39:db:2a:36:84:0d:3b:bc:69:41:3d:a9:e5:ec:
39:a4:4e:b5:bb:89:5f:0f:36:d4:2e:5e:eb:62:37:
11:51:f9:a0:ba:c5:6f:0f:d5:11:3f:a6:12:20:44:
ff:47:6e:42:0e:76:08:0a:e9:6f:c5:49:7c:5e:28:
66:5e:5a:8d:3f:cb:17:c4:08:64:90:c7:c4:a0:5e:
0a:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:40:B4:4B:27:0B:D9:47:53:FC:FE:E0:86:D7:F8:DD:80:36:3B:FB
X509v3 Authority Key Identifier:
keyid:B4:3B:97:A1:D2:1F:63:7B:54:91:30:F0:85:7A:68:1C:C7:F6:88:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDuXodIfY3tUkTDwhXpoHMf2iEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/5454ad-6cf3-4ee5-a4b9-0464e945f1cc/1/tDuXodIfY3tUkTDwhXpoHMf2iEw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/5454ad-6cf3-4ee5-a4b9-0464e945f1cc/1/tDuXodIfY3tUkTDwhXpoHMf2iEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:8d:f9:6a:12:36:2d:e4:45:6f:ea:e0:87:91:6b:4d:3f:71:
be:25:94:61:cc:11:bf:ab:13:4f:69:52:6b:9e:10:b6:e5:7c:
b9:a1:4e:3e:ad:dd:2b:56:8b:61:d1:2d:06:7a:10:3a:c3:69:
c4:46:90:67:c5:86:c7:70:09:27:53:25:f0:1d:da:77:94:b9:
23:4a:9b:e8:22:6b:66:bb:4b:a8:9d:d2:8a:b2:b9:2d:f2:56:
17:5b:13:d8:61:29:dc:e0:81:5f:9f:e0:e9:52:db:68:99:38:
01:37:83:a7:af:72:13:64:f0:51:dd:08:e3:a8:6c:20:55:bc:
b1:22:c9:76:fd:12:c9:1d:71:28:a5:8c:a5:56:46:47:eb:75:
15:68:9b:b8:42:f9:21:9d:e4:a9:85:c7:4a:5e:31:68:cb:93:
9a:a6:c2:00:29:87:54:9e:91:e1:ed:e1:98:5b:3d:27:b5:e5:
5c:8c:b5:34:a6:b5:80:6a:df:d6:21:71:d1:f7:39:a7:5f:dd:
1a:1c:a8:62:43:8a:fd:b5:b8:76:49:c1:23:8a:d5:2a:7d:3e:
fe:a0:4c:89:81:95:db:33:6a:10:0e:f6:f7:bf:5b:fe:9d:a3:
59:6d:58:3e:f7:e4:a5:b3:ac:a2:f4:5d:a1:1a:77:1c:c5:aa:
c4:56:b7:dd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaD2RQKSbde2vJl6/YY0gGZxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0M2I5N2ExZDIxZjYzN2I1NDkxMzBmMDg1N2E2ODFjYzdm
Njg4NGMwHhcNMjYxMDAxMDcwMTUyWhcNMjYxMDAyMDcwMTUyWjAzMTEwLwYDVQQD
Eyg0MzQwYjQ0YjI3MGJkOTQ3NTNmY2ZlZTA4NmQ3ZjhkZDgwMzYzYmZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1jQhjIdoIuqTenR5wQjVlCO3UemJ
SxNOH8mDTrQHVINXkMkNfW+MoGBZLVxGZhbm+BHjZP5rUiSqeI2WeMAXta9JVOoJ
UqGT6AcgYlL1ZjAdOw1te12rlESBiIBqb9lRXOaY7hWmcz30YSdBAvNC5V4qoAW/
wbun8A1co7rE/emgtQCB9Bt2dmTiz1xlFf0qbxsd0PFfMEMgvLgYnUKuL3OuetFQ
QtG3EzHrIOYKibLNtXLBOdsqNoQNO7xpQT2p5ew5pE61u4lfDzbULl7rYjcRUfmg
usVvD9URP6YSIET/R25CDnYICulvxUl8XihmXlqNP8sXxAhkkMfEoF4KUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFENAtEsnC9lHU/z+4IbX+N2ANjv7MB8GA1UdIwQY
MBaAFLQ7l6HSH2N7VJEw8IV6aBzH9ohMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdER1WG9kSWZZM3RVa1REd2hYcG9ITWYyaUV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS81NDU0YWQtNmNmMy00ZWU1LWE0Yjkt
MDQ2NGU5NDVmMWNjLzEvdER1WG9kSWZZM3RVa1REd2hYcG9ITWYyaUV3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZS81NDU0YWQtNmNmMy00ZWU1LWE0YjktMDQ2NGU5NDVmMWNj
LzEvdER1WG9kSWZZM3RVa1REd2hYcG9ITWYyaUV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWo35ahI2
LeRFb+rgh5FrTT9xviWUYcwRv6sTT2lSa54QtuV8uaFOPq3dK1aLYdEtBnoQOsNp
xEaQZ8WGx3AJJ1Ml8B3ad5S5I0qb6CJrZrtLqJ3SirK5LfJWF1sT2GEp3OCBX5/g
6VLbaJk4ATeDp69yE2TwUd0I46hsIFW8sSLJdv0SyR1xKKWMpVZGR+t1FWibuEL5
IZ3kqYXHSl4xaMuTmqbCACmHVJ6R4e3hmFs9J7XlXIy1NKa1gGrf1iFx0fc5p1/d
GhyoYkOK/bW4dknBI4rVKn0+/qBMiYGV2zNqEA72979b/p2jWW1YPvfkpbOsovRd
oRp3HMWqxFa33Q==
-----END CERTIFICATE-----
Generated at Thu Oct 1 14:02:24 2026 by rpki-client