Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/TddPu7rljdCHbZnoDsgqEaRHf34.mft
File: TddPu7rljdCHbZnoDsgqEaRHf34.mft (raw, json)
Hash identifier: b8mxSuXALoM30GDCmdUOmJOiaxGYdUFFyubSZXz3Nqs=
Subject key identifier: F4:4B:A7:D5:4B:EA:FE:AF:F0:1E:A7:24:10:BC:93:AF:69:7F:B5:72
Authority key identifier: 4D:D7:4F:BB:BA:E5:8D:D0:87:6D:99:E8:0E:C8:2A:11:A4:47:7F:7E
Certificate issuer: /CN=4dd74fbbbae58dd0876d99e80ec82a11a4477f7e
Certificate serial: 019CACB5003AC396D1E3D330D6114C0F378C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TddPu7rljdCHbZnoDsgqEaRHf34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/TddPu7rljdCHbZnoDsgqEaRHf34.mft
Manifest number: 1047
Signing time: Mon 02 Mar 2026 04:01:08 +0000
Manifest this update: Mon 02 Mar 2026 04:01:08 +0000
Manifest next update: Tue 03 Mar 2026 04:01:08 +0000
Files and hashes: 1: 3yZGQ9sVYnt3QvH4c2styLzLRvg.roa (hash: hVBmJZwcWxMro3AxbGdMWv1UTRuzR2YMZqUh1ugo44A=)
2: HR52VHb2xwQIwQ8nYo_MUxwRCms.roa (hash: TbFaT/PpzXVRAiKnbKd45KfqI8+dX+V6Uzbwpos22ak=)
3: J-e2S3Co34V6GqxBwpLas1KlzPc.roa (hash: bHmgsb6+ck75z0l3IkcQpbr1i2Fj+RaHGqcd5esVIMY=)
4: TddPu7rljdCHbZnoDsgqEaRHf34.crl (hash: XMIp5Sf/AO5XHdZiyQE5W1wFcoPLSPoqioZrJQMqibI=)
5: Zt0W_ABdMo3EotkTq9s4b1C7324.roa (hash: S159y02y02b8yf62OVx4JhM0oWbYWFSiWsof3ORZ+Q0=)
6: aOtkixPHmh2enUl6k6sKDrNg_wU.roa (hash: DP493uqQSZ8xRKm9VuJgcghqEcMtl7DiKLDMdLGXe08=)
7: pSr1Ypx-2NhHUN2EUMY--Rosrnw.roa (hash: D/Y20asoDdfvVkjnqNGrkzhvFsfQ4TTpIhrzqfdNsXw=)
8: ttShEhSFippZW2mlI_cMFuA1CNg.roa (hash: bXpk4WtzIL7RNvoOYrs7EBMG1GjbpYOMFtRXm7SQom8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/TddPu7rljdCHbZnoDsgqEaRHf34.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/TddPu7rljdCHbZnoDsgqEaRHf34.mft
rsync://rpki.ripe.net/repository/DEFAULT/TddPu7rljdCHbZnoDsgqEaRHf34.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b5:00:3a:c3:96:d1:e3:d3:30:d6:11:4c:0f:37:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4dd74fbbbae58dd0876d99e80ec82a11a4477f7e
Validity
Not Before: Mar 2 04:01:08 2026 GMT
Not After : Mar 3 04:01:08 2026 GMT
Subject: CN=f44ba7d54beafeaff01ea72410bc93af697fb572
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:76:9b:78:3f:14:be:69:21:71:5c:70:53:72:
98:12:b9:cb:72:98:92:31:7c:f4:98:87:eb:11:ad:
f0:b2:5c:31:0e:7e:7d:1d:79:9c:f2:7e:e6:e3:e9:
a0:8e:dc:78:f0:31:0a:9f:24:f9:29:18:4f:80:c4:
52:f2:90:96:22:69:97:f6:90:f0:13:a8:c3:8a:b0:
bd:87:73:c6:79:9a:17:c8:92:aa:fe:c3:75:d0:6d:
4f:56:71:e8:eb:57:60:d0:e3:1e:5f:e9:c4:86:fe:
09:d5:ac:20:56:c2:fd:a3:62:1a:eb:69:1b:f9:67:
46:b8:fd:00:1b:46:0c:da:16:02:32:5b:a9:bb:5f:
dc:d7:b4:9d:25:69:2e:b4:ab:c6:69:21:1c:f6:4a:
c2:47:3c:69:d2:31:93:ac:a9:fe:5e:4a:e9:7f:10:
d5:2e:94:d3:1e:51:c0:f0:a9:3f:80:d5:04:47:a2:
81:4a:69:e7:b2:f6:e7:47:de:f0:d3:15:3c:63:f4:
11:a5:e4:43:db:ad:75:be:11:42:a7:04:39:3b:68:
a7:03:22:7d:d3:4d:a7:f3:08:68:25:d8:91:22:c2:
32:ec:59:8d:24:21:b3:37:cd:f4:1e:c5:96:72:b6:
de:d6:cb:0e:74:29:b1:3f:f3:f4:7d:03:e9:62:49:
59:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:4B:A7:D5:4B:EA:FE:AF:F0:1E:A7:24:10:BC:93:AF:69:7F:B5:72
X509v3 Authority Key Identifier:
keyid:4D:D7:4F:BB:BA:E5:8D:D0:87:6D:99:E8:0E:C8:2A:11:A4:47:7F:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TddPu7rljdCHbZnoDsgqEaRHf34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/TddPu7rljdCHbZnoDsgqEaRHf34.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/TddPu7rljdCHbZnoDsgqEaRHf34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:76:08:48:da:92:1e:8a:5b:3c:82:83:ac:f1:93:3d:5c:bd:
3c:c3:d6:a3:68:cb:a8:e0:4d:f5:bd:54:8d:f3:c3:dc:66:4f:
7e:5c:55:83:03:05:17:66:ff:9c:34:c1:a5:2a:c8:e9:7c:47:
cf:23:c2:3a:5d:77:01:4a:ad:ce:df:a7:bb:36:e0:8a:49:9c:
82:36:94:f9:e8:0c:90:0e:93:30:87:ac:1e:c1:5a:71:8b:84:
e0:bd:bd:29:ea:9a:cb:ac:9c:40:d2:44:05:87:b0:f9:0f:d5:
78:a4:91:9d:75:1e:33:c5:59:1e:75:ad:52:16:f4:64:2f:6f:
6f:0d:f9:bf:a1:05:41:8d:93:69:79:bc:43:60:14:10:4e:c2:
c0:d2:b8:ec:d7:e4:ca:42:f8:c1:a0:4b:02:07:14:0c:b6:f6:
32:32:fd:b4:c8:bc:d7:13:8c:91:17:af:a6:3d:0c:cb:0c:68:
9d:3e:fd:ea:1e:50:6b:ca:9f:79:1d:83:91:3c:90:78:b1:8d:
1e:26:82:20:f9:c3:36:71:a3:3d:35:0b:3a:58:0d:96:37:84:
9c:d1:0b:2b:36:1f:87:4c:78:36:fe:55:fc:a4:4a:a6:2e:51:
35:58:09:88:15:4e:6c:e0:7f:06:9e:6c:60:30:95:0f:c9:ce:
78:49:64:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:48:18 2026 by rpki-client