Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/f0b285-d038-4de6-9374-c472e62ebea8/1/TdbneabA8LCSFmIjgEZ9zi0Roxg.mft
File: TdbneabA8LCSFmIjgEZ9zi0Roxg.mft (raw, json)
Hash identifier: JhPgTIRUzoGENzfVyJZRoi3n/p8zXz5VTmrNzmUsDIY=
Subject key identifier: 0D:07:25:6A:B4:16:DE:1F:CE:32:C5:CA:9F:D9:09:5E:8F:99:A3:4F
Authority key identifier: 4D:D6:E7:79:A6:C0:F0:B0:92:16:62:23:80:46:7D:CE:2D:11:A3:18
Certificate issuer: /CN=4dd6e779a6c0f0b09216622380467dce2d11a318
Certificate serial: 019CAC47939369E683870DF4F95B2CC5B737
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TdbneabA8LCSFmIjgEZ9zi0Roxg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/f0b285-d038-4de6-9374-c472e62ebea8/1/TdbneabA8LCSFmIjgEZ9zi0Roxg.mft
Manifest number: 17D9
Signing time: Mon 02 Mar 2026 02:01:37 +0000
Manifest this update: Mon 02 Mar 2026 02:01:37 +0000
Manifest next update: Tue 03 Mar 2026 02:01:37 +0000
Files and hashes: 1: TdbneabA8LCSFmIjgEZ9zi0Roxg.crl (hash: jlEeNH99QC7iw+m+emJYkxjGErCgyLzKnjoN3vMsCCQ=)
2: ZyTWugoefki0oz6k0H0j3uSA6D0.roa (hash: 8RbuK4aoWVsFj9ZjDN4iwth9lW8pdbJFx/Taog1hSJk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/f0b285-d038-4de6-9374-c472e62ebea8/1/TdbneabA8LCSFmIjgEZ9zi0Roxg.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/f0b285-d038-4de6-9374-c472e62ebea8/1/TdbneabA8LCSFmIjgEZ9zi0Roxg.mft
rsync://rpki.ripe.net/repository/DEFAULT/TdbneabA8LCSFmIjgEZ9zi0Roxg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 02:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:47:93:93:69:e6:83:87:0d:f4:f9:5b:2c:c5:b7:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4dd6e779a6c0f0b09216622380467dce2d11a318
Validity
Not Before: Mar 2 02:01:37 2026 GMT
Not After : Mar 3 02:01:37 2026 GMT
Subject: CN=0d07256ab416de1fce32c5ca9fd9095e8f99a34f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:51:8a:7f:95:b1:91:41:4a:8e:9f:07:e1:48:
63:ac:10:34:33:1d:c5:7e:01:37:10:d2:46:26:d7:
3f:19:b7:ed:91:2d:02:d0:99:92:1d:84:da:3c:46:
eb:e6:5c:59:98:1a:69:de:16:ee:d5:a9:bb:88:3a:
9b:c3:27:bd:56:96:49:2d:f5:a2:2d:7a:56:59:a3:
5a:d4:d2:01:f7:81:e6:b1:8d:97:57:9d:07:72:04:
a6:52:4c:25:de:75:71:3e:eb:67:08:a8:bf:87:23:
d7:13:c2:78:28:d3:9c:6b:4f:93:05:33:04:36:b6:
c8:11:da:e5:2b:7b:e3:e9:62:ff:94:f9:eb:5e:45:
85:bd:aa:5a:18:e6:c3:57:9c:a8:8f:31:0b:55:28:
b4:5e:dd:75:dd:f9:88:44:e2:b2:1e:9e:ab:40:6b:
73:a6:11:b5:f0:db:02:9c:21:7c:a9:0c:64:12:31:
c7:f6:10:9a:d4:ab:41:70:09:e5:f9:24:9f:01:5a:
e8:0a:5d:dc:12:d4:7d:83:4d:3e:3b:b0:32:13:50:
c6:6e:e2:e9:99:10:de:0c:7a:bf:a1:cb:e7:8f:b6:
49:a8:c7:73:67:84:f3:c0:fa:aa:5b:a6:03:43:18:
75:32:c0:17:b8:05:df:22:ec:9b:a7:1d:1a:9f:dd:
c3:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:07:25:6A:B4:16:DE:1F:CE:32:C5:CA:9F:D9:09:5E:8F:99:A3:4F
X509v3 Authority Key Identifier:
keyid:4D:D6:E7:79:A6:C0:F0:B0:92:16:62:23:80:46:7D:CE:2D:11:A3:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TdbneabA8LCSFmIjgEZ9zi0Roxg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/f0b285-d038-4de6-9374-c472e62ebea8/1/TdbneabA8LCSFmIjgEZ9zi0Roxg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/f0b285-d038-4de6-9374-c472e62ebea8/1/TdbneabA8LCSFmIjgEZ9zi0Roxg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:42:ef:48:26:1f:80:24:03:6f:5d:11:80:54:f8:ca:e2:cd:
b6:98:af:60:17:94:18:93:9f:cc:50:af:f7:1a:34:88:39:d4:
af:df:32:33:e0:d8:46:b2:a9:07:58:69:4d:6e:9a:12:1e:06:
89:a0:61:8d:fe:8c:91:6b:c8:04:da:60:8e:3d:4d:7c:f7:64:
b0:f4:b4:54:59:af:17:73:de:74:1e:85:9d:f1:ea:3e:9c:61:
7a:c5:94:82:48:45:8f:b2:68:38:2f:d4:49:a2:ff:c9:a2:a1:
8e:20:d8:d0:aa:ff:96:38:fc:5a:d1:1b:38:54:bd:4c:39:bb:
cb:bc:69:0d:a9:f8:ec:2e:a0:bf:f9:3b:53:ad:a7:d8:37:07:
c7:9e:8a:11:bf:b7:91:8e:2b:f8:43:33:9f:c1:73:90:18:56:
6c:45:83:92:e6:11:82:17:97:0b:6a:db:bf:de:94:45:b8:e6:
87:aa:b7:1b:f6:50:c2:70:d5:38:26:ae:fa:cf:96:d3:b6:1a:
aa:81:63:5d:5a:eb:eb:44:b0:87:38:3d:0b:cb:c8:5c:1c:10:
38:e4:47:9b:38:9e:f1:05:e7:39:11:4b:55:dd:3c:82:9b:48:
e9:06:56:9f:37:0d:36:53:45:00:1d:6a:b0:ae:32:51:1d:eb:
6a:9f:3a:ff
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZysR5OTaeaDhw30+Vssxbc3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRkZDZlNzc5YTZjMGYwYjA5MjE2NjIyMzgwNDY3ZGNlMmQx
MWEzMTgwHhcNMjYwMzAyMDIwMTM3WhcNMjYwMzAzMDIwMTM3WjAzMTEwLwYDVQQD
EygwZDA3MjU2YWI0MTZkZTFmY2UzMmM1Y2E5ZmQ5MDk1ZThmOTlhMzRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq1GKf5WxkUFKjp8H4UhjrBA0Mx3F
fgE3ENJGJtc/GbftkS0C0JmSHYTaPEbr5lxZmBpp3hbu1am7iDqbwye9VpZJLfWi
LXpWWaNa1NIB94HmsY2XV50HcgSmUkwl3nVxPutnCKi/hyPXE8J4KNOca0+TBTME
NrbIEdrlK3vj6WL/lPnrXkWFvapaGObDV5yojzELVSi0Xt113fmIROKyHp6rQGtz
phG18NsCnCF8qQxkEjHH9hCa1KtBcAnl+SSfAVroCl3cEtR9g00+O7AyE1DGbuLp
mRDeDHq/ocvnj7ZJqMdzZ4TzwPqqW6YDQxh1MsAXuAXfIuybpx0an93D+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA0HJWq0Ft4fzjLFyp/ZCV6PmaNPMB8GA1UdIwQY
MBaAFE3W53mmwPCwkhZiI4BGfc4tEaMYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVGRibmVhYkE4TENTRm1JamdFWjl6aTBSb3hnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy9mMGIyODUtZDAzOC00ZGU2LTkzNzQt
YzQ3MmU2MmViZWE4LzEvVGRibmVhYkE4TENTRm1JamdFWjl6aTBSb3hnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy9mMGIyODUtZDAzOC00ZGU2LTkzNzQtYzQ3MmU2MmViZWE4
LzEvVGRibmVhYkE4TENTRm1JamdFWjl6aTBSb3hnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFkLvSCYf
gCQDb10RgFT4yuLNtpivYBeUGJOfzFCv9xo0iDnUr98yM+DYRrKpB1hpTW6aEh4G
iaBhjf6MkWvIBNpgjj1NfPdksPS0VFmvF3PedB6FnfHqPpxhesWUgkhFj7JoOC/U
SaL/yaKhjiDY0Kr/ljj8WtEbOFS9TDm7y7xpDan47C6gv/k7U62n2DcHx56KEb+3
kY4r+EMzn8FzkBhWbEWDkuYRgheXC2rbv96URbjmh6q3G/ZQwnDVOCau+s+W07Ya
qoFjXVrr60Swhzg9C8vIXBwQOORHmzie8QXnORFLVd08gptI6QZWnzcNNlNFAB1q
sK4yUR3rap86/w==
-----END CERTIFICATE-----
Generated at Mon Mar 2 12:40:08 2026 by rpki-client