Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/f0b285-d038-4de6-9374-c472e62ebea8/1/TdbneabA8LCSFmIjgEZ9zi0Roxg.mft
File: TdbneabA8LCSFmIjgEZ9zi0Roxg.mft (raw, json)
Hash identifier: nMxLKbO3bulfwkbNlGu+jznGinLr3b2GxypjO279PnQ=
Subject key identifier: B1:82:CF:D6:E9:E8:D4:84:4F:9E:20:9A:86:8A:84:BE:1B:C4:C6:46
Authority key identifier: 4D:D6:E7:79:A6:C0:F0:B0:92:16:62:23:80:46:7D:CE:2D:11:A3:18
Certificate issuer: /CN=4dd6e779a6c0f0b09216622380467dce2d11a318
Certificate serial: 019FAA50C0F612407280F7B055904634DB52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TdbneabA8LCSFmIjgEZ9zi0Roxg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/f0b285-d038-4de6-9374-c472e62ebea8/1/TdbneabA8LCSFmIjgEZ9zi0Roxg.mft
Manifest number: 1967
Signing time: Tue 28 Jul 2026 20:00:46 +0000
Manifest this update: Tue 28 Jul 2026 20:00:46 +0000
Manifest next update: Wed 29 Jul 2026 20:00:46 +0000
Files and hashes: 1: 7X15JsRrJkgKCJLXjiSs1bdhruU.roa (hash: sAi/yGgK+33Ivc6uDbrNPu1QsJF/QnGJyKyHF3jLCvU=)
2: TdbneabA8LCSFmIjgEZ9zi0Roxg.crl (hash: OrjqqVa7Ea2obZ38ZKQAuBIcQoZPTyFSxLvL8XBnH2Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/f0b285-d038-4de6-9374-c472e62ebea8/1/TdbneabA8LCSFmIjgEZ9zi0Roxg.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/f0b285-d038-4de6-9374-c472e62ebea8/1/TdbneabA8LCSFmIjgEZ9zi0Roxg.mft
rsync://rpki.ripe.net/repository/DEFAULT/TdbneabA8LCSFmIjgEZ9zi0Roxg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 20:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:50:c0:f6:12:40:72:80:f7:b0:55:90:46:34:db:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4dd6e779a6c0f0b09216622380467dce2d11a318
Validity
Not Before: Jul 28 20:00:46 2026 GMT
Not After : Jul 29 20:00:46 2026 GMT
Subject: CN=b182cfd6e9e8d4844f9e209a868a84be1bc4c646
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:96:87:12:6a:7d:f2:bc:6f:56:d1:42:d5:84:
b8:99:89:61:ad:31:e7:e3:eb:22:a2:a6:53:65:3b:
85:e4:4a:9a:2a:9b:4f:de:2e:c0:83:27:13:4d:67:
e7:64:a4:87:61:06:46:3c:30:49:c6:c5:04:70:82:
56:82:31:2e:6e:be:bb:97:5b:5a:98:7a:81:db:6f:
c3:0a:12:88:11:21:3a:4b:43:56:0b:fa:5a:fa:44:
80:a5:be:92:06:67:77:bf:05:89:22:95:ba:77:04:
13:53:cb:ee:3d:06:d9:f1:a1:4c:f3:aa:50:f8:6d:
04:21:d7:57:9b:77:45:2d:8e:f8:35:b0:7e:f3:3e:
25:b4:c6:25:45:d9:34:f9:ed:02:7e:e5:51:95:58:
f5:6d:f6:7d:f8:db:f1:99:83:f0:d4:f8:73:3b:16:
6a:32:3e:65:0d:0e:3f:cf:aa:af:5e:48:2f:32:d0:
d8:3f:f6:ac:05:67:bf:8f:b5:96:01:98:d6:ed:71:
6c:7a:54:93:7d:6d:27:7a:f2:c8:4c:0d:40:bc:38:
ea:70:35:79:ac:c1:b9:8a:d5:e1:9c:08:6c:db:c8:
b4:40:9d:65:10:a0:c3:12:0e:fc:73:0a:fd:3f:b4:
7a:50:68:8d:37:e1:96:ed:e1:f3:bd:f9:cc:64:6d:
86:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:82:CF:D6:E9:E8:D4:84:4F:9E:20:9A:86:8A:84:BE:1B:C4:C6:46
X509v3 Authority Key Identifier:
keyid:4D:D6:E7:79:A6:C0:F0:B0:92:16:62:23:80:46:7D:CE:2D:11:A3:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TdbneabA8LCSFmIjgEZ9zi0Roxg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/f0b285-d038-4de6-9374-c472e62ebea8/1/TdbneabA8LCSFmIjgEZ9zi0Roxg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/f0b285-d038-4de6-9374-c472e62ebea8/1/TdbneabA8LCSFmIjgEZ9zi0Roxg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:a6:ad:5d:38:12:80:cc:7c:2b:f9:66:14:d8:ca:af:90:d4:
d5:a3:f8:d6:aa:34:55:ca:4e:79:5d:10:bb:7e:a3:37:0f:d0:
0e:c0:b3:c8:1a:00:84:b0:85:7a:c9:f1:7a:42:04:30:22:86:
da:dc:da:a9:26:43:89:d8:36:d9:72:b6:8c:b0:ef:bd:60:f9:
9d:e6:c5:34:b5:98:4e:df:50:1f:b9:41:76:58:5c:69:e7:6f:
58:a7:91:2a:be:41:cb:48:54:76:c0:08:24:64:e5:f2:b9:ba:
a4:fb:24:35:e1:59:31:6e:db:d2:cf:09:37:c0:c6:63:24:d7:
c4:10:87:6c:8e:bc:d7:1f:d5:da:83:04:56:25:8e:ce:87:40:
2f:e0:55:66:75:80:95:8d:4a:23:f2:3a:19:8e:60:0b:af:63:
44:a6:14:33:2a:34:f5:4b:97:90:0a:0d:03:51:79:e6:6a:2a:
9f:da:63:28:e0:75:91:41:2f:ff:4e:b9:64:01:cb:99:25:3c:
6f:c5:34:a2:65:8e:ff:07:92:7c:b6:1b:2b:64:82:a8:a5:7e:
b0:23:cb:e2:38:22:7c:9c:2c:a6:a6:a3:59:b3:1e:b7:50:a5:
ec:de:b3:0d:1f:1c:cf:3f:81:c0:ee:be:84:23:c7:87:03:2d:
4f:16:46:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:56:25 2026 by rpki-client