Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/516d35-5711-49a6-8ca0-55ff65f6bc12/1/aTddinP2XuMh63wI24OAslhkuRI.mft
File: aTddinP2XuMh63wI24OAslhkuRI.mft (raw, json)
Hash identifier: 4R7v1ObvfE4ChTRbveyv0jQ+bJTXgfB+LrUh3flpXUg=
Subject key identifier: CF:F8:F5:E4:98:43:64:B5:EE:8E:D5:A7:9C:74:A8:F9:37:EF:0B:2F
Authority key identifier: 69:37:5D:8A:73:F6:5E:E3:21:EB:7C:08:DB:83:80:B2:58:64:B9:12
Certificate issuer: /CN=69375d8a73f65ee321eb7c08db8380b25864b912
Certificate serial: 019E1F47A9323F1502031E4146CA0E0610EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aTddinP2XuMh63wI24OAslhkuRI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/516d35-5711-49a6-8ca0-55ff65f6bc12/1/aTddinP2XuMh63wI24OAslhkuRI.mft
Manifest number: DD
Signing time: Wed 13 May 2026 03:00:50 +0000
Manifest this update: Wed 13 May 2026 03:00:50 +0000
Manifest next update: Thu 14 May 2026 03:00:50 +0000
Files and hashes: 1: KAS5oJnMRBLN3CMFfME2h-Rh7mU.roa (hash: LS/iW/nevmUgfZkUxmuVR5hiIsYE32zEMVLICjYAf/4=)
2: aTddinP2XuMh63wI24OAslhkuRI.crl (hash: aXE6miBridsxANZ1daQ9i3iI3DkT4cf1+AbfQufsuvk=)
3: rQM6hcyKgdO32uWWqq-FwzbquX0.asa (hash: zP7bH4dme0HxeY/+twvXjeQeEdIkjoodZuLEIhQlKzM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/516d35-5711-49a6-8ca0-55ff65f6bc12/1/aTddinP2XuMh63wI24OAslhkuRI.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/516d35-5711-49a6-8ca0-55ff65f6bc12/1/aTddinP2XuMh63wI24OAslhkuRI.mft
rsync://rpki.ripe.net/repository/DEFAULT/aTddinP2XuMh63wI24OAslhkuRI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:47:a9:32:3f:15:02:03:1e:41:46:ca:0e:06:10:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69375d8a73f65ee321eb7c08db8380b25864b912
Validity
Not Before: May 13 03:00:50 2026 GMT
Not After : May 14 03:00:50 2026 GMT
Subject: CN=cff8f5e4984364b5ee8ed5a79c74a8f937ef0b2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:e0:2d:db:af:22:38:eb:e2:ae:5c:59:ae:0a:
0c:8e:1d:34:2a:8d:28:6c:f7:0b:2c:fd:c3:f2:ef:
a3:e1:78:36:f7:1f:9b:8f:f9:c8:e3:1e:2e:9a:99:
c4:73:9e:aa:4d:5d:53:b0:86:dd:4d:80:96:42:66:
92:67:3b:b3:00:31:61:d4:a9:62:90:3a:91:27:bc:
b2:36:dd:e6:04:02:14:43:ee:b6:21:09:52:89:d5:
bc:78:9c:a4:cb:27:8c:68:18:15:3e:b4:df:b1:fb:
d7:ce:6b:56:88:1d:95:0e:94:14:26:6e:57:83:13:
68:30:80:d3:47:9c:b5:01:98:b6:12:71:d7:51:dd:
0a:1e:2b:87:1c:2f:c7:69:35:4f:1f:d3:58:72:80:
b6:5b:45:28:f0:4f:0c:eb:38:4f:38:65:d4:60:50:
eb:f9:53:3e:85:37:28:ff:08:6f:6d:e1:d8:42:a7:
59:2f:d7:1a:18:2c:58:51:7d:5a:68:db:00:6c:6f:
ed:33:5f:59:e1:c7:95:fc:ff:1d:85:78:88:30:e4:
18:fc:5c:26:b5:e3:1b:cd:35:74:a0:86:59:87:af:
2e:38:7b:28:cd:bf:0f:0b:91:32:05:f2:e8:8b:8a:
6a:54:14:6f:ca:b6:39:65:a1:71:f2:34:a3:ca:8d:
44:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:F8:F5:E4:98:43:64:B5:EE:8E:D5:A7:9C:74:A8:F9:37:EF:0B:2F
X509v3 Authority Key Identifier:
keyid:69:37:5D:8A:73:F6:5E:E3:21:EB:7C:08:DB:83:80:B2:58:64:B9:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aTddinP2XuMh63wI24OAslhkuRI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/516d35-5711-49a6-8ca0-55ff65f6bc12/1/aTddinP2XuMh63wI24OAslhkuRI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/516d35-5711-49a6-8ca0-55ff65f6bc12/1/aTddinP2XuMh63wI24OAslhkuRI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cc:dc:fc:d6:ef:8c:54:45:f7:f1:cf:6f:f1:1b:9f:13:e2:69:
77:39:00:4b:10:d9:56:81:9b:79:34:cc:16:5b:eb:b0:15:36:
1b:bc:5c:74:be:61:dd:57:3f:95:de:11:ed:36:b8:ea:e2:b4:
e9:3f:9d:a0:c9:86:a7:08:48:75:89:4f:d5:3c:e0:a1:9f:2f:
88:f1:a0:45:fc:15:a7:e9:83:fa:8d:fd:08:a1:fd:cf:90:7a:
3f:68:1d:48:32:c6:d4:22:6a:bc:0f:da:88:74:1e:15:4f:b1:
e3:47:3b:a2:d9:58:1e:71:bb:9a:be:08:63:81:92:a5:a6:1a:
6b:96:dd:f5:c8:86:e4:84:ba:35:9a:b7:39:86:f8:b4:c7:35:
27:41:7d:ab:f2:b1:b0:af:8c:3c:48:5f:9c:6a:64:12:5e:55:
fa:c7:26:da:c2:d4:74:cd:16:45:54:af:b5:8b:62:bb:15:9c:
66:73:c3:a7:89:b1:f5:ce:01:84:33:b8:8d:41:a4:76:6f:22:
ff:6c:86:26:06:bc:fe:54:a1:2b:28:0a:d8:8c:f9:f3:8c:e1:
25:6c:d0:d0:a5:21:93:aa:58:a6:82:c3:b7:66:47:4c:7b:cd:
b5:18:16:52:4b:de:8b:98:64:13:c4:f5:0b:87:89:ca:2d:1a:
07:4c:e4:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:02:32 2026 by rpki-client