Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3c/f0b285-d038-4de6-9374-c472e62ebea8/1/TdbneabA8LCSFmIjgEZ9zi0Roxg.mft
File: TdbneabA8LCSFmIjgEZ9zi0Roxg.mft (raw, json)
Hash identifier: A1fTVe6QeItf2owfdv2tBt6E0IOGZj/llXHYjtGlmVw=
Subject key identifier: 20:7F:44:78:20:CB:E7:0D:83:AA:2F:29:74:2C:1A:FE:E0:5D:D7:BD
Authority key identifier: 4D:D6:E7:79:A6:C0:F0:B0:92:16:62:23:80:46:7D:CE:2D:11:A3:18
Certificate issuer: /CN=4dd6e779a6c0f0b09216622380467dce2d11a318
Certificate serial: 01A0EAE55EE63D29659CCEE7C49D48928198
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TdbneabA8LCSFmIjgEZ9zi0Roxg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/f0b285-d038-4de6-9374-c472e62ebea8/1/TdbneabA8LCSFmIjgEZ9zi0Roxg.mft
Manifest number: 1A0D
Signing time: Tue 29 Sep 2026 02:01:35 +0000
Manifest this update: Tue 29 Sep 2026 02:01:35 +0000
Manifest next update: Wed 30 Sep 2026 02:01:35 +0000
Files and hashes: 1: 7X15JsRrJkgKCJLXjiSs1bdhruU.roa (hash: sAi/yGgK+33Ivc6uDbrNPu1QsJF/QnGJyKyHF3jLCvU=)
2: TdbneabA8LCSFmIjgEZ9zi0Roxg.crl (hash: nx2PwODXhbLI+YUTigUr/+2LWqE2CfIIQTKjdOPRZbE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/f0b285-d038-4de6-9374-c472e62ebea8/1/TdbneabA8LCSFmIjgEZ9zi0Roxg.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/f0b285-d038-4de6-9374-c472e62ebea8/1/TdbneabA8LCSFmIjgEZ9zi0Roxg.mft
rsync://rpki.ripe.net/repository/DEFAULT/TdbneabA8LCSFmIjgEZ9zi0Roxg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 23:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ea:e5:5e:e6:3d:29:65:9c:ce:e7:c4:9d:48:92:81:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4dd6e779a6c0f0b09216622380467dce2d11a318
Validity
Not Before: Sep 29 02:01:35 2026 GMT
Not After : Sep 30 02:01:35 2026 GMT
Subject: CN=207f447820cbe70d83aa2f29742c1afee05dd7bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:a4:52:cf:09:ec:be:c0:b7:04:22:9d:7f:c8:
5b:87:6b:78:d2:74:6f:c7:28:73:99:9e:01:1a:89:
4b:ff:e9:21:36:06:19:60:22:1e:dc:38:eb:33:05:
80:8b:85:38:0d:57:24:70:c4:20:ff:b2:b3:a6:6b:
23:a6:91:e5:26:7d:94:a9:bb:13:af:c4:b0:e2:90:
95:d7:94:fc:3e:0f:b2:af:7b:25:31:7d:b0:fa:7d:
59:7e:c0:45:7c:15:ff:b6:43:27:d5:83:4c:b6:7d:
a4:dc:54:79:85:25:e3:29:c6:93:1e:92:45:ff:f1:
b0:37:fe:ab:03:f8:dc:7e:ba:d8:69:06:fd:d3:5a:
dd:ce:f4:9b:9f:d1:1b:80:fa:35:90:17:e4:0c:09:
0c:8b:61:3e:13:b8:06:9a:f9:f0:3a:b7:73:74:09:
54:bf:9b:30:d7:5e:54:c5:c1:73:14:0a:98:b1:07:
b6:18:be:41:71:28:4f:ed:1a:37:1e:97:b1:55:72:
85:ad:ec:a3:ce:63:90:7d:a4:e2:51:1e:a5:57:1a:
29:02:d5:e5:1f:d7:ed:58:23:85:17:05:81:bf:7e:
4e:29:30:76:b9:f1:9e:95:9d:8a:88:e4:3e:ad:23:
47:3b:ca:cc:b9:0e:b5:d1:82:d0:cc:68:7d:70:e8:
3a:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:7F:44:78:20:CB:E7:0D:83:AA:2F:29:74:2C:1A:FE:E0:5D:D7:BD
X509v3 Authority Key Identifier:
keyid:4D:D6:E7:79:A6:C0:F0:B0:92:16:62:23:80:46:7D:CE:2D:11:A3:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TdbneabA8LCSFmIjgEZ9zi0Roxg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/f0b285-d038-4de6-9374-c472e62ebea8/1/TdbneabA8LCSFmIjgEZ9zi0Roxg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/f0b285-d038-4de6-9374-c472e62ebea8/1/TdbneabA8LCSFmIjgEZ9zi0Roxg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:d6:10:0f:bb:53:58:47:d0:5b:bf:5c:82:b3:7e:85:d8:04:
b6:7c:3d:06:84:8c:f9:e2:ae:77:07:34:7a:25:01:1f:bf:12:
3f:1f:65:d9:6b:10:76:bc:36:66:52:c1:ac:59:fa:d1:f3:2f:
55:9f:5f:ff:c5:87:5e:3f:82:84:aa:f7:59:76:5c:38:2b:a3:
ea:00:83:b4:5f:f1:7a:f6:f6:24:67:2f:79:ae:e8:af:b8:5e:
07:af:52:7b:26:53:ca:5e:83:21:5a:3b:a6:d0:e2:58:b9:52:
41:da:53:a6:de:9f:68:7a:33:48:84:cf:ab:ae:7f:86:d7:c7:
58:49:42:c3:8e:a0:e8:96:21:ec:72:6a:27:59:d1:65:af:75:
f1:54:2f:5d:5c:9b:d3:0d:87:75:c0:01:16:1c:23:f5:cb:2b:
5a:78:18:63:9d:d1:5f:63:23:06:09:5b:96:c3:60:8c:07:7f:
d1:57:b7:83:8a:e8:63:38:7b:3a:f3:04:56:86:e8:00:5b:b7:
a2:d3:f9:1c:77:55:f8:de:4f:ce:68:98:54:f3:06:82:a5:3b:
a2:11:28:79:6c:f1:3a:e4:28:ca:a7:5b:a1:13:1b:48:52:20:
b5:7a:74:71:64:63:8f:cf:65:65:c3:78:23:98:2d:b3:c3:db:
ef:b0:4a:80
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDq5V7mPSllnM7nxJ1IkoGYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRkZDZlNzc5YTZjMGYwYjA5MjE2NjIyMzgwNDY3ZGNlMmQx
MWEzMTgwHhcNMjYwOTI5MDIwMTM1WhcNMjYwOTMwMDIwMTM1WjAzMTEwLwYDVQQD
EygyMDdmNDQ3ODIwY2JlNzBkODNhYTJmMjk3NDJjMWFmZWUwNWRkN2JkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuKRSzwnsvsC3BCKdf8hbh2t40nRv
xyhzmZ4BGolL/+khNgYZYCIe3DjrMwWAi4U4DVckcMQg/7KzpmsjppHlJn2UqbsT
r8Sw4pCV15T8Pg+yr3slMX2w+n1ZfsBFfBX/tkMn1YNMtn2k3FR5hSXjKcaTHpJF
//GwN/6rA/jcfrrYaQb901rdzvSbn9EbgPo1kBfkDAkMi2E+E7gGmvnwOrdzdAlU
v5sw115UxcFzFAqYsQe2GL5BcShP7Ro3HpexVXKFreyjzmOQfaTiUR6lVxopAtXl
H9ftWCOFFwWBv35OKTB2ufGelZ2KiOQ+rSNHO8rMuQ610YLQzGh9cOg6zwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCB/RHggy+cNg6ovKXQsGv7gXde9MB8GA1UdIwQY
MBaAFE3W53mmwPCwkhZiI4BGfc4tEaMYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVGRibmVhYkE4TENTRm1JamdFWjl6aTBSb3hnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy9mMGIyODUtZDAzOC00ZGU2LTkzNzQt
YzQ3MmU2MmViZWE4LzEvVGRibmVhYkE4TENTRm1JamdFWjl6aTBSb3hnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy9mMGIyODUtZDAzOC00ZGU2LTkzNzQtYzQ3MmU2MmViZWE4
LzEvVGRibmVhYkE4TENTRm1JamdFWjl6aTBSb3hnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqtYQD7tT
WEfQW79cgrN+hdgEtnw9BoSM+eKudwc0eiUBH78SPx9l2WsQdrw2ZlLBrFn60fMv
VZ9f/8WHXj+ChKr3WXZcOCuj6gCDtF/xevb2JGcvea7or7heB69SeyZTyl6DIVo7
ptDiWLlSQdpTpt6faHozSITPq65/htfHWElCw46g6JYh7HJqJ1nRZa918VQvXVyb
0w2HdcABFhwj9csrWngYY53RX2MjBglblsNgjAd/0Ve3g4roYzh7OvMEVoboAFu3
otP5HHdV+N5PzmiYVPMGgqU7ohEoeWzxOuQoyqdboRMbSFIgtXp0cWRjj89lZcN4
I5gts8Pb77BKgA==
-----END CERTIFICATE-----
Generated at Tue Sep 29 08:13:22 2026 by rpki-client