Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/TddPu7rljdCHbZnoDsgqEaRHf34.mft
File: TddPu7rljdCHbZnoDsgqEaRHf34.mft (raw, json)
Hash identifier: nEttN2exMvvsQFjc94mnBQpLM4NieSstPKEb9QBpMjg=
Subject key identifier: D1:73:1C:96:8B:CF:8A:91:0C:AB:7D:6C:0A:0A:60:D7:FC:18:0B:9A
Authority key identifier: 4D:D7:4F:BB:BA:E5:8D:D0:87:6D:99:E8:0E:C8:2A:11:A4:47:7F:7E
Certificate issuer: /CN=4dd74fbbbae58dd0876d99e80ec82a11a4477f7e
Certificate serial: 01A1C5C3306FCC1F5FB231D5388CC4418751
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TddPu7rljdCHbZnoDsgqEaRHf34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/TddPu7rljdCHbZnoDsgqEaRHf34.mft
Manifest number: 12EF
Signing time: Tue 10 Nov 2026 14:01:05 +0000
Manifest this update: Tue 10 Nov 2026 14:01:05 +0000
Manifest next update: Wed 11 Nov 2026 14:01:05 +0000
Files and hashes: 1: 78eqcaMcvTPsNu7guK_5i9wvMew.roa (hash: faBt9IMwah328Jgf+zWMXABylJqIbTadVclew2vDQZI=)
2: F-WF_eIpHYReBOMhX06jjFj1FS0.roa (hash: BAvVbr1wXgd6696wbRb9gM+rxSNYTDOpWUN3Pk36+Js=)
3: HR52VHb2xwQIwQ8nYo_MUxwRCms.roa (hash: TbFaT/PpzXVRAiKnbKd45KfqI8+dX+V6Uzbwpos22ak=)
4: TddPu7rljdCHbZnoDsgqEaRHf34.crl (hash: MdlCl8FiX4hgXtzOjnCOAA5snCheFOlsx9UR/9LQh5I=)
5: aOtkixPHmh2enUl6k6sKDrNg_wU.roa (hash: DP493uqQSZ8xRKm9VuJgcghqEcMtl7DiKLDMdLGXe08=)
6: lavK-Em3JP8sORSDHjcXhhiEiDw.roa (hash: aNel9RXJpvuQchalk7ZBqX+TTYTUwLAtRlQmAShJL9c=)
7: pSr1Ypx-2NhHUN2EUMY--Rosrnw.roa (hash: D/Y20asoDdfvVkjnqNGrkzhvFsfQ4TTpIhrzqfdNsXw=)
8: ttShEhSFippZW2mlI_cMFuA1CNg.roa (hash: bXpk4WtzIL7RNvoOYrs7EBMG1GjbpYOMFtRXm7SQom8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/TddPu7rljdCHbZnoDsgqEaRHf34.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/TddPu7rljdCHbZnoDsgqEaRHf34.mft
rsync://rpki.ripe.net/repository/DEFAULT/TddPu7rljdCHbZnoDsgqEaRHf34.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Nov 2026 09:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:c5:c3:30:6f:cc:1f:5f:b2:31:d5:38:8c:c4:41:87:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4dd74fbbbae58dd0876d99e80ec82a11a4477f7e
Validity
Not Before: Nov 10 14:01:05 2026 GMT
Not After : Nov 11 14:01:05 2026 GMT
Subject: CN=d1731c968bcf8a910cab7d6c0a0a60d7fc180b9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ea:cf:84:92:13:a5:93:83:31:54:6f:47:0d:
8e:b9:e4:34:5a:e2:2d:02:f9:2f:ef:4a:92:97:0c:
f3:2b:e9:5d:26:99:69:ac:a7:12:70:94:71:5c:e6:
14:7d:2b:9e:ab:8c:ab:aa:f8:93:c4:af:e9:3c:9e:
cb:7f:f0:dd:35:87:d9:5f:4d:8d:e3:ce:3c:3c:8f:
c4:53:cb:ae:b3:b3:cc:ae:0b:6c:c0:8c:32:1c:85:
e8:70:f4:4d:5c:5d:5b:f7:ed:78:34:dc:da:d4:b6:
b3:44:ed:8d:32:ac:1e:a0:ef:72:5a:99:90:31:96:
59:bb:aa:48:c6:84:fd:84:7b:f0:ef:08:f5:41:1d:
7e:1b:45:d3:69:50:93:b3:71:73:c6:fd:0d:47:66:
c6:11:b4:3c:0c:9e:15:33:18:ab:ba:62:68:90:b0:
3f:53:0e:9a:90:fc:38:6b:79:f0:1a:5a:ff:2e:3a:
3b:47:dc:fd:5b:8d:3e:b9:0c:95:d5:80:ff:96:53:
6f:c0:54:b6:bd:0a:74:09:45:bd:c3:6d:3e:19:84:
ed:f9:96:2a:15:3b:39:b2:69:93:20:e8:d9:38:2d:
4f:bd:51:bd:ea:12:84:d0:2f:fa:86:59:5a:32:e2:
12:20:b7:78:a3:74:40:e9:fa:85:42:1a:e3:db:b6:
77:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:73:1C:96:8B:CF:8A:91:0C:AB:7D:6C:0A:0A:60:D7:FC:18:0B:9A
X509v3 Authority Key Identifier:
keyid:4D:D7:4F:BB:BA:E5:8D:D0:87:6D:99:E8:0E:C8:2A:11:A4:47:7F:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TddPu7rljdCHbZnoDsgqEaRHf34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/TddPu7rljdCHbZnoDsgqEaRHf34.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/TddPu7rljdCHbZnoDsgqEaRHf34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:ba:fb:d4:7a:0b:93:97:e7:db:d9:3f:0f:98:af:29:8a:fb:
e3:0c:4b:08:c5:e7:48:76:39:f3:c2:8b:7c:62:d3:32:55:48:
c7:fd:34:fa:e0:fb:8c:1f:36:bc:5b:ee:4e:71:6a:f1:30:08:
86:fb:a1:b5:f3:eb:d2:45:65:ab:6d:21:32:6f:e4:53:d0:ac:
c8:85:e9:55:61:42:d1:c1:2c:32:45:b7:ff:61:54:b1:54:67:
36:b4:aa:d7:e4:b9:35:8e:eb:d6:ff:e5:55:4e:dd:51:e6:60:
2a:94:e8:cf:66:19:ee:23:b9:a7:5c:0f:cd:b3:bc:d0:fa:61:
cd:73:1d:a6:02:4f:45:04:bb:7c:89:1d:d2:75:f5:f5:42:cb:
5d:16:65:28:03:ee:df:a6:29:36:b0:71:77:eb:ea:5e:2d:ac:
f4:6e:3b:c8:c5:de:a1:85:be:ad:82:d2:ef:78:d1:74:0c:ea:
a6:22:0c:80:b1:0a:a0:3f:d7:33:5b:54:db:92:2f:a7:6b:73:
8e:f8:f2:49:4c:7d:6b:af:a7:4f:6a:a9:b7:7a:76:9d:be:34:
59:5b:5e:57:52:7e:8c:ff:9c:0e:69:35:91:6a:f1:0e:6e:c0:
c5:e5:5c:12:f1:f4:ed:0f:4f:78:84:d5:ec:75:fd:19:d1:89:
ad:67:e3:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 10 17:46:12 2026 by rpki-client