Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/f0b285-d038-4de6-9374-c472e62ebea8/1/TdbneabA8LCSFmIjgEZ9zi0Roxg.mft
File: TdbneabA8LCSFmIjgEZ9zi0Roxg.mft (raw, json)
Hash identifier: tJswkKKjMc0OeK2g/l5LhxOPyFw9iRTThhZW0eyWfxA=
Subject key identifier: D8:89:3A:D7:AC:9F:E9:ED:2D:3D:91:33:6A:CB:C5:D8:EA:E6:5B:99
Authority key identifier: 4D:D6:E7:79:A6:C0:F0:B0:92:16:62:23:80:46:7D:CE:2D:11:A3:18
Certificate issuer: /CN=4dd6e779a6c0f0b09216622380467dce2d11a318
Certificate serial: 019D992B0179776D757DF3F63AFBB61634D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TdbneabA8LCSFmIjgEZ9zi0Roxg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/f0b285-d038-4de6-9374-c472e62ebea8/1/TdbneabA8LCSFmIjgEZ9zi0Roxg.mft
Manifest number: 1855
Signing time: Fri 17 Apr 2026 02:00:25 +0000
Manifest this update: Fri 17 Apr 2026 02:00:25 +0000
Manifest next update: Sat 18 Apr 2026 02:00:25 +0000
Files and hashes: 1: 7X15JsRrJkgKCJLXjiSs1bdhruU.roa (hash: sAi/yGgK+33Ivc6uDbrNPu1QsJF/QnGJyKyHF3jLCvU=)
2: TdbneabA8LCSFmIjgEZ9zi0Roxg.crl (hash: ojws06eYW13n9k1P8UeUPsrLEsgMiwZu9XI311yUgFQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/f0b285-d038-4de6-9374-c472e62ebea8/1/TdbneabA8LCSFmIjgEZ9zi0Roxg.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/f0b285-d038-4de6-9374-c472e62ebea8/1/TdbneabA8LCSFmIjgEZ9zi0Roxg.mft
rsync://rpki.ripe.net/repository/DEFAULT/TdbneabA8LCSFmIjgEZ9zi0Roxg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2b:01:79:77:6d:75:7d:f3:f6:3a:fb:b6:16:34:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4dd6e779a6c0f0b09216622380467dce2d11a318
Validity
Not Before: Apr 17 02:00:25 2026 GMT
Not After : Apr 18 02:00:25 2026 GMT
Subject: CN=d8893ad7ac9fe9ed2d3d91336acbc5d8eae65b99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:7c:cd:22:9f:6d:21:aa:61:64:57:9e:85:25:
11:c6:9f:1e:7d:05:93:4d:8d:47:9b:04:8b:25:24:
62:df:4f:18:00:15:36:e4:93:b1:61:f2:44:19:ee:
5d:93:ec:69:4e:b1:0f:40:1a:89:31:5b:b0:94:c5:
2a:d3:a6:95:28:8f:8a:89:d6:af:70:c2:f8:00:cd:
f2:2d:7d:32:59:57:cf:a7:f2:69:09:a3:80:02:4e:
06:46:c0:6a:7e:d1:51:28:7a:eb:aa:62:23:e9:e6:
ea:90:d1:c9:c9:5b:57:66:cd:d4:d3:68:cc:4a:6d:
31:2e:f4:13:0a:89:c5:0b:c1:ae:84:5c:43:4f:d2:
91:f6:ca:e3:52:a1:8c:a7:4d:28:1e:ff:f3:7e:47:
c3:2c:1b:e1:73:b6:0c:cd:b6:72:08:4d:86:d1:c4:
c7:ed:73:e7:8a:2c:a8:d5:e7:88:69:60:cd:4d:6e:
88:0f:69:91:47:42:b8:a4:0a:f4:d8:14:d2:97:8c:
53:89:56:3d:a2:3a:21:09:c3:45:87:dc:83:dc:7d:
4a:03:d7:33:e2:e9:c1:6c:ff:2e:ed:4d:66:4d:2b:
7c:ad:06:d1:9b:43:46:8b:1f:86:2e:0e:0a:c4:6f:
5e:9b:fd:15:19:cf:8e:09:57:8f:d2:5c:c7:50:d3:
41:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:89:3A:D7:AC:9F:E9:ED:2D:3D:91:33:6A:CB:C5:D8:EA:E6:5B:99
X509v3 Authority Key Identifier:
keyid:4D:D6:E7:79:A6:C0:F0:B0:92:16:62:23:80:46:7D:CE:2D:11:A3:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TdbneabA8LCSFmIjgEZ9zi0Roxg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/f0b285-d038-4de6-9374-c472e62ebea8/1/TdbneabA8LCSFmIjgEZ9zi0Roxg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/f0b285-d038-4de6-9374-c472e62ebea8/1/TdbneabA8LCSFmIjgEZ9zi0Roxg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:ab:af:49:85:8e:fa:4a:32:b4:6d:b6:1c:24:b4:f9:1c:1a:
83:76:69:21:09:c4:55:df:a7:c8:19:72:04:62:2a:42:a0:21:
a6:71:a1:88:a9:ac:d4:8c:56:81:1a:0a:c5:1e:75:6f:a9:09:
1f:c2:01:98:13:c7:34:ed:10:8a:65:12:1d:2a:fb:b1:53:9f:
9c:47:43:4a:f8:19:23:16:9f:6e:fa:86:51:bf:dc:c1:f1:a2:
10:6d:08:b6:79:37:bb:d2:2b:24:9b:69:0b:45:96:d9:84:eb:
f9:44:5a:1b:d4:8e:7c:6d:b4:4c:c2:7e:af:3f:df:c3:45:26:
22:ea:6e:b9:90:f7:de:f8:90:20:8c:d2:c5:af:20:d3:98:da:
54:c0:44:d5:dc:33:45:b6:c2:5f:f4:4c:f2:bf:42:88:d4:74:
b0:aa:4c:b2:d9:d2:87:cb:4f:da:5b:6e:94:1e:e1:8c:aa:7e:
52:fc:27:dd:af:70:e8:92:14:fc:03:88:dd:2b:75:c1:6c:16:
aa:a3:38:f6:48:db:18:66:c4:de:ec:99:dd:f9:5c:0a:a9:65:
c4:d5:16:0f:f4:fb:c9:70:ca:91:da:e3:45:dc:a4:33:a1:4e:
7b:89:4e:d1:e9:34:43:67:4a:14:52:db:4c:ad:14:b2:94:2b:
ce:ac:bc:5f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2ZKwF5d211ffP2Ovu2FjTWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRkZDZlNzc5YTZjMGYwYjA5MjE2NjIyMzgwNDY3ZGNlMmQx
MWEzMTgwHhcNMjYwNDE3MDIwMDI1WhcNMjYwNDE4MDIwMDI1WjAzMTEwLwYDVQQD
EyhkODg5M2FkN2FjOWZlOWVkMmQzZDkxMzM2YWNiYzVkOGVhZTY1Yjk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyXzNIp9tIaphZFeehSURxp8efQWT
TY1HmwSLJSRi308YABU25JOxYfJEGe5dk+xpTrEPQBqJMVuwlMUq06aVKI+Kidav
cML4AM3yLX0yWVfPp/JpCaOAAk4GRsBqftFRKHrrqmIj6ebqkNHJyVtXZs3U02jM
Sm0xLvQTConFC8GuhFxDT9KR9srjUqGMp00oHv/zfkfDLBvhc7YMzbZyCE2G0cTH
7XPniiyo1eeIaWDNTW6ID2mRR0K4pAr02BTSl4xTiVY9ojohCcNFh9yD3H1KA9cz
4unBbP8u7U1mTSt8rQbRm0NGix+GLg4KxG9em/0VGc+OCVeP0lzHUNNBDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNiJOtesn+ntLT2RM2rLxdjq5luZMB8GA1UdIwQY
MBaAFE3W53mmwPCwkhZiI4BGfc4tEaMYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVGRibmVhYkE4TENTRm1JamdFWjl6aTBSb3hnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy9mMGIyODUtZDAzOC00ZGU2LTkzNzQt
YzQ3MmU2MmViZWE4LzEvVGRibmVhYkE4TENTRm1JamdFWjl6aTBSb3hnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy9mMGIyODUtZDAzOC00ZGU2LTkzNzQtYzQ3MmU2MmViZWE4
LzEvVGRibmVhYkE4TENTRm1JamdFWjl6aTBSb3hnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjquvSYWO
+koytG22HCS0+Rwag3ZpIQnEVd+nyBlyBGIqQqAhpnGhiKms1IxWgRoKxR51b6kJ
H8IBmBPHNO0QimUSHSr7sVOfnEdDSvgZIxafbvqGUb/cwfGiEG0Itnk3u9IrJJtp
C0WW2YTr+URaG9SOfG20TMJ+rz/fw0UmIupuuZD33viQIIzSxa8g05jaVMBE1dwz
RbbCX/RM8r9CiNR0sKpMstnSh8tP2ltulB7hjKp+Uvwn3a9w6JIU/AOI3St1wWwW
qqM49kjbGGbE3uyZ3flcCqllxNUWD/T7yXDKkdrjRdykM6FOe4lO0ek0Q2dKFFLb
TK0UspQrzqy8Xw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 07:07:41 2026 by rpki-client