Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/TddPu7rljdCHbZnoDsgqEaRHf34.mft
File: TddPu7rljdCHbZnoDsgqEaRHf34.mft (raw, json)
Hash identifier: 7fIvDdIkipD5IO3gbVJW5ATcvFywy2acTWyAPXy1Ryk=
Subject key identifier: 76:39:D5:3A:C0:43:84:3A:29:29:C2:2E:7C:87:E3:BF:35:2D:AE:2F
Authority key identifier: 4D:D7:4F:BB:BA:E5:8D:D0:87:6D:99:E8:0E:C8:2A:11:A4:47:7F:7E
Certificate issuer: /CN=4dd74fbbbae58dd0876d99e80ec82a11a4477f7e
Certificate serial: 019D9850A84018F366CFDD167D939B004BE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TddPu7rljdCHbZnoDsgqEaRHf34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/TddPu7rljdCHbZnoDsgqEaRHf34.mft
Manifest number: 10C1
Signing time: Thu 16 Apr 2026 22:01:55 +0000
Manifest this update: Thu 16 Apr 2026 22:01:55 +0000
Manifest next update: Fri 17 Apr 2026 22:01:55 +0000
Files and hashes: 1: 3yZGQ9sVYnt3QvH4c2styLzLRvg.roa (hash: hVBmJZwcWxMro3AxbGdMWv1UTRuzR2YMZqUh1ugo44A=)
2: HR52VHb2xwQIwQ8nYo_MUxwRCms.roa (hash: TbFaT/PpzXVRAiKnbKd45KfqI8+dX+V6Uzbwpos22ak=)
3: J-e2S3Co34V6GqxBwpLas1KlzPc.roa (hash: bHmgsb6+ck75z0l3IkcQpbr1i2Fj+RaHGqcd5esVIMY=)
4: TddPu7rljdCHbZnoDsgqEaRHf34.crl (hash: oFokjhhz2oQ2xN2L0LOXvOSaXGkgZLsxtD2NJQfk7Zg=)
5: Zt0W_ABdMo3EotkTq9s4b1C7324.roa (hash: S159y02y02b8yf62OVx4JhM0oWbYWFSiWsof3ORZ+Q0=)
6: aOtkixPHmh2enUl6k6sKDrNg_wU.roa (hash: DP493uqQSZ8xRKm9VuJgcghqEcMtl7DiKLDMdLGXe08=)
7: pSr1Ypx-2NhHUN2EUMY--Rosrnw.roa (hash: D/Y20asoDdfvVkjnqNGrkzhvFsfQ4TTpIhrzqfdNsXw=)
8: ttShEhSFippZW2mlI_cMFuA1CNg.roa (hash: bXpk4WtzIL7RNvoOYrs7EBMG1GjbpYOMFtRXm7SQom8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/TddPu7rljdCHbZnoDsgqEaRHf34.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/TddPu7rljdCHbZnoDsgqEaRHf34.mft
rsync://rpki.ripe.net/repository/DEFAULT/TddPu7rljdCHbZnoDsgqEaRHf34.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:50:a8:40:18:f3:66:cf:dd:16:7d:93:9b:00:4b:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4dd74fbbbae58dd0876d99e80ec82a11a4477f7e
Validity
Not Before: Apr 16 22:01:55 2026 GMT
Not After : Apr 17 22:01:55 2026 GMT
Subject: CN=7639d53ac043843a2929c22e7c87e3bf352dae2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:24:d3:4b:f7:f1:09:a3:e3:c1:ff:fb:75:c7:
ae:6b:ed:a5:33:15:74:0d:40:c7:93:16:ed:9e:dd:
86:e0:7b:ec:7b:ed:f2:67:41:72:a8:e8:3c:a6:83:
f6:83:c3:13:39:b5:a7:8a:4b:22:0e:d1:be:7e:c8:
10:88:f9:12:8e:62:5a:2c:bd:31:a8:98:b6:a6:6e:
46:0a:a1:6e:27:75:6f:7d:2e:92:c7:33:64:1a:d1:
99:7c:5b:24:bd:5b:be:58:f6:26:42:9b:43:06:58:
0a:b2:ad:36:4d:b7:67:b8:63:9a:2c:0d:40:81:37:
87:22:1e:f7:d5:86:31:b3:56:75:87:39:c5:39:c6:
f3:de:b6:75:2d:ae:a3:4d:b1:d5:b0:de:94:e2:38:
88:41:55:27:07:af:ff:75:1b:d4:9f:35:1b:88:72:
81:3b:65:eb:92:75:59:a9:1a:89:c3:39:f6:5f:01:
5b:56:e4:79:47:9b:53:a7:b0:a5:c7:78:f2:29:03:
0b:82:52:db:79:63:30:77:cb:c7:0c:8c:be:9c:6a:
32:40:94:4b:76:f2:42:93:13:b7:aa:1a:48:64:17:
68:d3:a3:13:56:0f:67:49:46:bc:ee:a3:00:1c:38:
2a:4d:c4:3b:ce:06:cb:f3:b8:33:e7:29:a8:dd:ef:
29:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:39:D5:3A:C0:43:84:3A:29:29:C2:2E:7C:87:E3:BF:35:2D:AE:2F
X509v3 Authority Key Identifier:
keyid:4D:D7:4F:BB:BA:E5:8D:D0:87:6D:99:E8:0E:C8:2A:11:A4:47:7F:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TddPu7rljdCHbZnoDsgqEaRHf34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/TddPu7rljdCHbZnoDsgqEaRHf34.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/TddPu7rljdCHbZnoDsgqEaRHf34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:18:b1:15:d6:bf:f4:21:36:81:96:33:6c:00:d4:53:c5:c1:
73:80:84:29:16:2e:c4:3d:e2:c9:41:3a:02:2a:7d:f6:83:a5:
3e:9b:d4:c0:3f:99:b8:ec:ed:fe:93:80:32:a3:ce:1b:c4:2c:
d4:f6:69:59:09:9d:5b:2b:0f:2c:eb:b8:1b:ed:e9:17:db:76:
bb:82:54:dc:68:31:62:85:04:1f:c9:96:97:2e:c9:ae:9f:2c:
52:c5:1e:a9:36:8e:a2:be:51:39:02:a7:c1:a1:4b:c1:cf:87:
65:29:87:ca:1e:c8:ab:92:9d:bf:ff:0f:c5:80:4b:b3:ba:5e:
f4:ca:46:86:88:44:2f:b2:75:59:47:8f:fd:13:e7:b8:95:a9:
a9:4d:20:d7:1c:61:cf:31:3f:c4:db:b4:e0:32:0f:6a:0a:86:
99:85:be:99:62:99:a0:15:57:88:37:a1:a4:01:d3:20:61:df:
89:d9:24:c8:97:75:cf:2d:13:cd:05:fb:b0:02:33:db:0a:06:
09:86:f3:68:c6:ae:02:c6:59:b1:b6:a7:1e:bc:73:be:b1:45:
0e:02:fc:c1:6d:66:5e:69:fd:48:56:f0:72:06:f0:84:fd:6a:
5d:bd:94:92:87:7a:9b:d3:9f:c3:53:7c:54:3f:b4:9b:aa:ad:
6d:20:bc:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:17:41 2026 by rpki-client