Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/f0b285-d038-4de6-9374-c472e62ebea8/1/TdbneabA8LCSFmIjgEZ9zi0Roxg.mft
File: TdbneabA8LCSFmIjgEZ9zi0Roxg.mft (raw, json)
Hash identifier: 5yIcNW/x+ZF4x3ofqysGeGHfGTAGXBPGX62sxrV/wJ8=
Subject key identifier: 89:1C:D1:0E:47:61:20:0C:FD:65:81:CF:90:6D:8A:5D:0B:2D:23:72
Authority key identifier: 4D:D6:E7:79:A6:C0:F0:B0:92:16:62:23:80:46:7D:CE:2D:11:A3:18
Certificate issuer: /CN=4dd6e779a6c0f0b09216622380467dce2d11a318
Certificate serial: 019F93241C7FD1245D9F51EC1554C7087B2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TdbneabA8LCSFmIjgEZ9zi0Roxg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/f0b285-d038-4de6-9374-c472e62ebea8/1/TdbneabA8LCSFmIjgEZ9zi0Roxg.mft
Manifest number: 195B
Signing time: Fri 24 Jul 2026 08:00:45 +0000
Manifest this update: Fri 24 Jul 2026 08:00:45 +0000
Manifest next update: Sat 25 Jul 2026 08:00:45 +0000
Files and hashes: 1: 7X15JsRrJkgKCJLXjiSs1bdhruU.roa (hash: sAi/yGgK+33Ivc6uDbrNPu1QsJF/QnGJyKyHF3jLCvU=)
2: TdbneabA8LCSFmIjgEZ9zi0Roxg.crl (hash: V5gPFr60KjCuyZsJhAV/pN6/cS5AoJts1nkVQc7ENiE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/f0b285-d038-4de6-9374-c472e62ebea8/1/TdbneabA8LCSFmIjgEZ9zi0Roxg.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/f0b285-d038-4de6-9374-c472e62ebea8/1/TdbneabA8LCSFmIjgEZ9zi0Roxg.mft
rsync://rpki.ripe.net/repository/DEFAULT/TdbneabA8LCSFmIjgEZ9zi0Roxg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:24:1c:7f:d1:24:5d:9f:51:ec:15:54:c7:08:7b:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4dd6e779a6c0f0b09216622380467dce2d11a318
Validity
Not Before: Jul 24 08:00:45 2026 GMT
Not After : Jul 25 08:00:45 2026 GMT
Subject: CN=891cd10e4761200cfd6581cf906d8a5d0b2d2372
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:4e:87:53:a7:2b:b9:40:8a:a6:b4:4b:07:48:
b2:ce:3b:0a:08:af:a3:06:a2:26:dd:ce:dc:37:3b:
c0:6f:40:00:e0:f7:84:28:6d:4b:90:c6:d1:8f:dd:
bf:08:db:fe:fc:86:63:51:d1:54:36:ab:31:5a:60:
40:fc:31:8e:0e:41:59:59:7c:f0:92:46:2a:01:51:
41:e4:47:1c:66:71:5f:de:7f:0d:e9:6a:2c:ee:1b:
42:18:38:a3:f0:f3:b5:3d:07:91:9e:b0:75:d4:db:
41:52:c6:1f:c3:5a:f9:03:1f:04:c5:d6:4a:46:4f:
f0:2f:69:47:0f:df:7a:1c:ea:eb:52:0a:4a:8f:f3:
c1:8b:2d:ee:93:e4:ac:3a:fd:70:b3:47:60:96:29:
44:9c:50:2c:9f:e0:59:0f:dc:5f:37:85:ab:07:b9:
80:ec:e6:60:5c:a9:35:3c:c0:ba:95:8c:70:b8:05:
db:4f:09:0d:e8:a9:b6:23:45:f9:9f:36:c5:79:06:
68:3b:e8:1d:a5:6a:25:bc:9e:a0:19:09:1b:2a:8f:
e7:a3:f8:82:d1:4c:84:d2:c9:61:73:bd:fb:9a:d0:
06:bf:97:e6:d6:e6:e6:22:0c:cc:2e:ae:15:a3:76:
5c:7d:a5:ee:50:bb:7c:1d:d2:54:79:04:c3:ec:0e:
68:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:1C:D1:0E:47:61:20:0C:FD:65:81:CF:90:6D:8A:5D:0B:2D:23:72
X509v3 Authority Key Identifier:
keyid:4D:D6:E7:79:A6:C0:F0:B0:92:16:62:23:80:46:7D:CE:2D:11:A3:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TdbneabA8LCSFmIjgEZ9zi0Roxg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/f0b285-d038-4de6-9374-c472e62ebea8/1/TdbneabA8LCSFmIjgEZ9zi0Roxg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/f0b285-d038-4de6-9374-c472e62ebea8/1/TdbneabA8LCSFmIjgEZ9zi0Roxg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:ba:ae:d4:cb:f5:e3:1b:78:0d:0f:12:5e:50:26:28:41:ec:
a8:01:59:67:b2:64:89:92:a6:05:e8:00:09:f6:fc:6f:70:1c:
b1:b1:65:fc:42:af:d8:2c:51:4f:7e:0a:5c:93:14:f5:77:30:
da:6e:f0:72:8a:63:79:b0:d7:7d:04:20:aa:3e:62:97:25:ae:
f3:96:20:76:7d:55:ab:5b:0b:a5:b7:fb:19:e1:28:a2:0a:ad:
5d:e8:96:dc:55:a9:51:5f:ba:2c:ad:96:51:66:0e:76:73:7c:
cf:d9:ff:1d:09:85:bf:3d:6c:fe:c6:a7:1e:6f:68:88:48:66:
18:4c:76:b3:48:36:8e:d2:0c:3e:8c:5e:67:c4:4b:2d:0a:4b:
9b:51:9e:81:89:7e:e6:5e:c5:df:c4:e7:02:a2:ea:df:3a:42:
1e:20:29:6c:99:e3:24:94:13:48:3f:c6:c1:6d:66:39:13:f7:
16:01:73:b2:6f:13:9e:5f:e0:08:23:61:59:fa:48:d8:5e:5d:
6e:6d:f1:2d:ff:bb:1f:0d:7c:a2:3f:d5:c7:ca:c6:ef:69:9f:
5b:c6:32:94:96:a1:d5:cc:5e:77:c5:1e:87:9b:2e:73:e7:6a:
38:68:d6:3a:e3:91:f2:dd:3b:84:3e:85:62:11:d0:e2:54:c0:
f3:01:69:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:08:13 2026 by rpki-client