Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3c/f0b285-d038-4de6-9374-c472e62ebea8/1/TdbneabA8LCSFmIjgEZ9zi0Roxg.mft
File: TdbneabA8LCSFmIjgEZ9zi0Roxg.mft (raw, json)
Hash identifier: 3maFgZ+8d1I43rLufiMWBOIgpSa/5ygey5Yl/eTv+Y8=
Subject key identifier: 35:89:B1:86:83:E5:A5:82:6D:84:7B:4A:13:9C:7B:C4:02:02:49:99
Authority key identifier: 4D:D6:E7:79:A6:C0:F0:B0:92:16:62:23:80:46:7D:CE:2D:11:A3:18
Certificate issuer: /CN=4dd6e779a6c0f0b09216622380467dce2d11a318
Certificate serial: 01A0DD60A7E170ECA1A85764CE1AE5A9CCBB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TdbneabA8LCSFmIjgEZ9zi0Roxg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/f0b285-d038-4de6-9374-c472e62ebea8/1/TdbneabA8LCSFmIjgEZ9zi0Roxg.mft
Manifest number: 1A06
Signing time: Sat 26 Sep 2026 11:01:34 +0000
Manifest this update: Sat 26 Sep 2026 11:01:34 +0000
Manifest next update: Sun 27 Sep 2026 11:01:34 +0000
Files and hashes: 1: 7X15JsRrJkgKCJLXjiSs1bdhruU.roa (hash: sAi/yGgK+33Ivc6uDbrNPu1QsJF/QnGJyKyHF3jLCvU=)
2: TdbneabA8LCSFmIjgEZ9zi0Roxg.crl (hash: bdShO6lYG6i6PKckS94uAfbK6NR+INuaUefhS+zJOXI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/f0b285-d038-4de6-9374-c472e62ebea8/1/TdbneabA8LCSFmIjgEZ9zi0Roxg.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/f0b285-d038-4de6-9374-c472e62ebea8/1/TdbneabA8LCSFmIjgEZ9zi0Roxg.mft
rsync://rpki.ripe.net/repository/DEFAULT/TdbneabA8LCSFmIjgEZ9zi0Roxg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 09:18:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dd:60:a7:e1:70:ec:a1:a8:57:64:ce:1a:e5:a9:cc:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4dd6e779a6c0f0b09216622380467dce2d11a318
Validity
Not Before: Sep 26 11:01:34 2026 GMT
Not After : Sep 27 11:01:34 2026 GMT
Subject: CN=3589b18683e5a5826d847b4a139c7bc402024999
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:cc:d8:40:fe:cc:e2:65:32:24:55:09:76:27:
64:f9:ea:11:f9:1c:51:d4:61:93:95:aa:13:34:ce:
f6:65:ee:92:2b:89:dd:81:83:b7:12:8c:06:42:49:
23:6e:39:72:8e:81:da:88:87:4e:83:5e:1c:54:65:
f9:c0:23:51:ee:78:f4:8b:6a:51:c4:d4:b1:c1:2a:
4a:b2:ac:37:16:ba:65:0e:f8:97:7e:a0:47:1e:b7:
06:45:4a:44:2c:91:97:c6:e6:75:71:19:37:e2:49:
f1:16:f7:aa:18:91:f9:41:c2:2f:80:cf:f6:10:90:
89:e7:3a:d2:7c:c0:fb:7a:23:9e:e5:03:bd:a2:0f:
02:bf:70:74:55:c5:11:03:dc:a4:48:3f:bd:69:5b:
69:1e:71:68:6a:bf:a8:77:20:c2:12:c8:80:f4:80:
78:da:05:e7:de:c3:ca:b5:0f:1d:45:4e:92:b7:bc:
dd:51:0d:96:6d:5c:26:93:e1:0f:cb:e7:cf:c3:78:
19:60:98:72:f5:7f:3f:cf:d3:6c:58:bf:3b:b7:0e:
6c:4f:45:a4:46:45:0f:fb:06:a7:56:fa:79:c7:22:
d1:eb:4b:6d:ff:bd:ed:1e:c7:99:04:62:29:dc:57:
d9:30:43:5b:42:1d:30:d1:ab:5a:6f:d1:b2:c6:eb:
a7:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:89:B1:86:83:E5:A5:82:6D:84:7B:4A:13:9C:7B:C4:02:02:49:99
X509v3 Authority Key Identifier:
keyid:4D:D6:E7:79:A6:C0:F0:B0:92:16:62:23:80:46:7D:CE:2D:11:A3:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TdbneabA8LCSFmIjgEZ9zi0Roxg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/f0b285-d038-4de6-9374-c472e62ebea8/1/TdbneabA8LCSFmIjgEZ9zi0Roxg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/f0b285-d038-4de6-9374-c472e62ebea8/1/TdbneabA8LCSFmIjgEZ9zi0Roxg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:d3:bb:0f:48:31:62:ad:fb:00:b1:d9:4c:46:8b:40:dd:65:
92:e4:7a:15:7a:e0:ee:0b:4d:3b:08:5a:26:fb:ef:a6:57:f6:
88:78:d1:a3:b0:cd:36:ab:71:72:d0:71:cf:45:c5:d9:de:f8:
0d:82:56:01:3f:d5:24:e7:4c:4d:45:08:98:43:31:13:94:f8:
b1:cc:a2:2d:a7:e2:18:b4:21:12:86:d4:e8:25:95:6a:45:6b:
ea:3b:16:37:a2:0f:37:8f:72:7b:62:05:c5:11:47:a6:1f:eb:
b9:a6:4a:cf:14:4b:67:40:59:a3:26:3b:8e:64:cc:2f:1e:1b:
d4:ed:57:34:49:8c:d4:05:ef:2b:2c:82:8f:89:51:e4:91:34:
4b:49:6c:e2:e0:21:8e:cb:73:ec:af:9a:df:78:0a:b1:16:9f:
08:95:f8:65:8e:9a:eb:e3:27:af:30:ee:ab:8b:56:05:12:c1:
63:45:4d:c6:aa:7c:1a:53:b3:dd:f1:f9:57:63:df:d1:2e:9f:
11:4d:41:c5:d8:cb:3a:e4:b9:9b:b2:90:54:7d:b5:f4:35:0a:
df:28:04:b7:05:1f:77:6d:a5:9d:f5:ab:d1:4e:a4:1a:12:11:
78:a3:01:f4:ac:3f:d2:ce:2f:4b:ea:e0:02:fc:b3:7e:7e:47:
06:94:b2:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 13:52:17 2026 by rpki-client