Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/da/bfb817-7e2d-4458-bab1-d1750020caf5/1/_tdzOdk4vvCHWZKTwgGzufgiNiM.mft
File: _tdzOdk4vvCHWZKTwgGzufgiNiM.mft (raw, json)
Hash identifier: mxg3LCWwnDNNf1jZgR5m3ifoPMrTpWfBBg0HQbbDUwk=
Subject key identifier: 13:33:8A:BF:92:B0:CE:6B:2C:2F:0C:A4:C8:06:F0:8B:D6:36:9A:11
Authority key identifier: FE:D7:73:39:D9:38:BE:F0:87:59:92:93:C2:01:B3:B9:F8:22:36:23
Certificate issuer: /CN=fed77339d938bef087599293c201b3b9f8223623
Certificate serial: 01A0C067E8DF03562D68C88866B0FF2AB428
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_tdzOdk4vvCHWZKTwgGzufgiNiM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/bfb817-7e2d-4458-bab1-d1750020caf5/1/_tdzOdk4vvCHWZKTwgGzufgiNiM.mft
Manifest number: 19F5
Signing time: Sun 20 Sep 2026 20:00:30 +0000
Manifest this update: Sun 20 Sep 2026 20:00:30 +0000
Manifest next update: Mon 21 Sep 2026 20:00:30 +0000
Files and hashes: 1: _tdzOdk4vvCHWZKTwgGzufgiNiM.crl (hash: sgYHKes4MjGTT3Pc1tU6r7RRX8yyVviFZXVwMH0ItC4=)
2: dVMqcvXursPYfDYSCDAE4DhRFlc.roa (hash: Yq3X9779TMJZn56pp7FdF+bqg71vRgvQymxrtb6IBFY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/bfb817-7e2d-4458-bab1-d1750020caf5/1/_tdzOdk4vvCHWZKTwgGzufgiNiM.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/bfb817-7e2d-4458-bab1-d1750020caf5/1/_tdzOdk4vvCHWZKTwgGzufgiNiM.mft
rsync://rpki.ripe.net/repository/DEFAULT/_tdzOdk4vvCHWZKTwgGzufgiNiM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 20:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c0:67:e8:df:03:56:2d:68:c8:88:66:b0:ff:2a:b4:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fed77339d938bef087599293c201b3b9f8223623
Validity
Not Before: Sep 20 20:00:30 2026 GMT
Not After : Sep 21 20:00:30 2026 GMT
Subject: CN=13338abf92b0ce6b2c2f0ca4c806f08bd6369a11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:7d:57:e7:c6:8a:bf:4c:ad:38:5f:5e:6c:d8:
63:31:77:fe:85:02:55:cc:7d:97:71:a0:9d:cb:80:
27:67:6b:d8:5e:30:83:df:16:73:ce:80:85:4c:70:
c9:72:38:1f:07:c1:79:1a:0e:82:2c:7a:10:20:9a:
ed:c0:87:bd:c5:ac:78:1f:99:66:a4:35:e7:0e:14:
49:ef:bc:f3:10:ec:d6:5b:08:fc:c8:d2:4a:4f:77:
ef:4c:3f:03:0f:f0:68:90:bb:43:60:57:d9:6e:49:
cf:3e:22:13:24:aa:59:ac:73:0b:cb:05:dd:b8:cc:
cf:6e:bc:70:1c:ff:1d:b7:9f:97:25:d1:4d:61:f2:
ba:ba:3d:4b:6e:3f:36:f2:62:d9:52:3d:cf:ad:07:
5c:2b:b5:be:0f:18:d5:24:76:33:37:8c:a1:89:1e:
d6:0c:b9:c8:09:2d:e1:45:de:ca:16:f0:a5:a3:53:
85:b8:7d:9b:75:25:84:37:a8:6d:19:2a:9c:b3:09:
4d:bc:ab:4c:31:bf:0f:80:e7:c0:78:5a:b8:2b:82:
cb:6e:c3:8a:9f:56:60:73:bf:87:64:97:1e:0a:a3:
a4:6e:46:85:2a:82:87:a2:32:8b:2d:96:56:3f:c0:
ed:5a:a6:ec:44:56:52:41:85:df:9e:d5:2e:84:38:
90:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:33:8A:BF:92:B0:CE:6B:2C:2F:0C:A4:C8:06:F0:8B:D6:36:9A:11
X509v3 Authority Key Identifier:
keyid:FE:D7:73:39:D9:38:BE:F0:87:59:92:93:C2:01:B3:B9:F8:22:36:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_tdzOdk4vvCHWZKTwgGzufgiNiM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/bfb817-7e2d-4458-bab1-d1750020caf5/1/_tdzOdk4vvCHWZKTwgGzufgiNiM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/bfb817-7e2d-4458-bab1-d1750020caf5/1/_tdzOdk4vvCHWZKTwgGzufgiNiM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:2d:cc:c3:cc:6a:57:01:20:9c:9d:09:6b:8a:21:5d:51:1b:
08:0e:8f:46:8c:ba:f5:4e:29:77:0c:28:4c:af:88:f5:e1:cf:
7a:7e:af:22:2d:5a:b5:41:9e:b4:5b:22:7f:16:31:d2:7b:a3:
83:fc:12:4e:69:b6:3c:69:aa:ae:47:34:07:a3:eb:82:0c:33:
91:23:05:b2:67:87:9f:6d:e8:21:34:b4:ec:96:a4:5a:bc:ce:
29:db:41:29:1d:a0:cd:67:15:30:ad:43:53:ad:1a:3d:cd:63:
28:2a:b0:a2:f0:ed:46:fd:ae:9a:d5:bc:90:2d:b5:0c:8f:d8:
1c:9e:cb:04:83:03:03:6f:6b:2d:e8:6f:0c:50:58:7c:bd:97:
7b:e8:94:01:f1:11:d2:47:e7:fe:b2:f2:fb:6b:a9:05:b5:83:
2e:d8:d8:9f:30:c3:fa:8f:ff:d6:56:05:4d:1f:0f:c6:0b:15:
da:d1:67:66:74:47:62:92:87:b1:96:aa:40:cc:8a:57:9c:ca:
26:05:e9:d8:8d:f5:ab:63:fe:6c:bf:69:52:b5:82:03:c4:67:
c9:11:70:a5:2e:92:78:9a:35:2d:c6:5e:63:e2:8d:5d:67:25:
26:10:29:30:fe:e6:19:fc:f6:f5:4d:32:ba:e6:d0:ca:64:41:
d8:e7:fe:2c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDAZ+jfA1YtaMiIZrD/KrQoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlZDc3MzM5ZDkzOGJlZjA4NzU5OTI5M2MyMDFiM2I5Zjgy
MjM2MjMwHhcNMjYwOTIwMjAwMDMwWhcNMjYwOTIxMjAwMDMwWjAzMTEwLwYDVQQD
EygxMzMzOGFiZjkyYjBjZTZiMmMyZjBjYTRjODA2ZjA4YmQ2MzY5YTExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtX1X58aKv0ytOF9ebNhjMXf+hQJV
zH2XcaCdy4AnZ2vYXjCD3xZzzoCFTHDJcjgfB8F5Gg6CLHoQIJrtwIe9xax4H5lm
pDXnDhRJ77zzEOzWWwj8yNJKT3fvTD8DD/BokLtDYFfZbknPPiITJKpZrHMLywXd
uMzPbrxwHP8dt5+XJdFNYfK6uj1Lbj828mLZUj3PrQdcK7W+DxjVJHYzN4yhiR7W
DLnICS3hRd7KFvClo1OFuH2bdSWEN6htGSqcswlNvKtMMb8PgOfAeFq4K4LLbsOK
n1Zgc7+HZJceCqOkbkaFKoKHojKLLZZWP8DtWqbsRFZSQYXfntUuhDiQswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBMzir+SsM5rLC8MpMgG8IvWNpoRMB8GA1UdIwQY
MBaAFP7XcznZOL7wh1mSk8IBs7n4IjYjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX3Rkek9kazR2dkNIV1pLVHdnR3p1ZmdpTmlNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS9iZmI4MTctN2UyZC00NDU4LWJhYjEt
ZDE3NTAwMjBjYWY1LzEvX3Rkek9kazR2dkNIV1pLVHdnR3p1ZmdpTmlNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYS9iZmI4MTctN2UyZC00NDU4LWJhYjEtZDE3NTAwMjBjYWY1
LzEvX3Rkek9kazR2dkNIV1pLVHdnR3p1ZmdpTmlNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApC3Mw8xq
VwEgnJ0Ja4ohXVEbCA6PRoy69U4pdwwoTK+I9eHPen6vIi1atUGetFsifxYx0nuj
g/wSTmm2PGmqrkc0B6PrggwzkSMFsmeHn23oITS07JakWrzOKdtBKR2gzWcVMK1D
U60aPc1jKCqwovDtRv2umtW8kC21DI/YHJ7LBIMDA29rLehvDFBYfL2Xe+iUAfER
0kfn/rLy+2upBbWDLtjYnzDD+o//1lYFTR8PxgsV2tFnZnRHYpKHsZaqQMyKV5zK
JgXp2I31q2P+bL9pUrWCA8RnyRFwpS6SeJo1LcZeY+KNXWclJhApMP7mGfz29U0y
uubQymRB2Of+LA==
-----END CERTIFICATE-----
Generated at Mon Sep 21 03:33:04 2026 by rpki-client