Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/f21bf0-ba49-43ba-898c-539f9cba00c5/1/Tddxzuh-yov3sS4KYwbxgdKlWm0.mft
File: Tddxzuh-yov3sS4KYwbxgdKlWm0.mft (raw, json)
Hash identifier: K/WCk9fWuPmOwtmCpeJ9A9wDAv6H7H8LcMMWHwh2OTg=
Subject key identifier: 3C:F3:79:C6:F1:A9:FD:11:D8:74:FD:B2:E3:A0:46:B3:EF:D0:1E:D0
Authority key identifier: 4D:D7:71:CE:E8:7E:CA:8B:F7:B1:2E:0A:63:06:F1:81:D2:A5:5A:6D
Certificate issuer: /CN=4dd771cee87eca8bf7b12e0a6306f181d2a55a6d
Certificate serial: 019D2A04813D7B80D9B92E32457900DEABEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tddxzuh-yov3sS4KYwbxgdKlWm0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/f21bf0-ba49-43ba-898c-539f9cba00c5/1/Tddxzuh-yov3sS4KYwbxgdKlWm0.mft
Manifest number: 044E
Signing time: Thu 26 Mar 2026 12:00:31 +0000
Manifest this update: Thu 26 Mar 2026 12:00:31 +0000
Manifest next update: Fri 27 Mar 2026 12:00:31 +0000
Files and hashes: 1: Tddxzuh-yov3sS4KYwbxgdKlWm0.crl (hash: cLrMoQQ52A8gM69ryoAwade/xAAJB0eZu3DGKWbqyz0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/f21bf0-ba49-43ba-898c-539f9cba00c5/1/Tddxzuh-yov3sS4KYwbxgdKlWm0.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/f21bf0-ba49-43ba-898c-539f9cba00c5/1/Tddxzuh-yov3sS4KYwbxgdKlWm0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tddxzuh-yov3sS4KYwbxgdKlWm0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 12:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:04:81:3d:7b:80:d9:b9:2e:32:45:79:00:de:ab:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4dd771cee87eca8bf7b12e0a6306f181d2a55a6d
Validity
Not Before: Mar 26 12:00:31 2026 GMT
Not After : Mar 27 12:00:31 2026 GMT
Subject: CN=3cf379c6f1a9fd11d874fdb2e3a046b3efd01ed0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:b9:18:d8:d5:04:53:8e:10:a3:42:e7:cf:0b:
21:69:4d:95:f4:05:95:d8:c5:fb:1f:1d:77:fe:83:
71:15:21:b3:08:2d:a0:1f:9c:68:30:68:e7:e7:f5:
0e:84:c0:32:e6:68:21:97:cb:9b:71:8e:28:a6:e4:
5f:74:1b:3e:3b:67:6b:69:d4:95:90:26:d8:a0:55:
e4:89:73:c9:67:ab:af:48:fe:76:4e:a0:fc:b2:d4:
35:a8:59:26:bb:c9:51:76:87:e2:cc:b6:7d:a4:d8:
45:c2:db:06:4a:15:d6:c9:6e:ee:2b:cd:ac:7e:28:
da:59:f7:9f:d0:bc:e3:74:6e:12:28:48:52:e3:13:
c3:d2:d1:7e:1e:20:19:0a:b8:d2:da:4f:8c:cd:b9:
c5:fe:d1:e5:0f:43:7c:94:02:15:04:c9:d4:86:37:
95:65:6b:97:fb:bf:af:39:67:75:55:53:fa:53:81:
1a:cc:9a:4d:3b:e2:6b:27:4c:f2:38:83:b9:c0:e5:
38:a0:2b:84:aa:cc:ea:a0:cc:55:2b:cb:07:0f:d8:
d8:c5:67:08:b5:ff:34:b0:c0:56:d7:3f:8e:53:95:
02:b0:ab:cd:30:07:6b:13:64:93:7f:f2:72:b3:f9:
be:b5:a3:63:c3:f9:fa:72:da:4a:13:53:df:40:ed:
99:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:F3:79:C6:F1:A9:FD:11:D8:74:FD:B2:E3:A0:46:B3:EF:D0:1E:D0
X509v3 Authority Key Identifier:
keyid:4D:D7:71:CE:E8:7E:CA:8B:F7:B1:2E:0A:63:06:F1:81:D2:A5:5A:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tddxzuh-yov3sS4KYwbxgdKlWm0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f21bf0-ba49-43ba-898c-539f9cba00c5/1/Tddxzuh-yov3sS4KYwbxgdKlWm0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f21bf0-ba49-43ba-898c-539f9cba00c5/1/Tddxzuh-yov3sS4KYwbxgdKlWm0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:8a:28:02:78:ae:18:45:19:bf:34:8e:db:53:1b:77:b5:93:
1d:fe:a2:cc:93:0c:e4:a6:35:c0:1b:1c:e1:40:3e:2d:f0:47:
aa:00:3c:09:7f:fa:df:d9:b6:da:38:fc:58:e6:f7:c6:8c:a1:
9c:4e:87:c1:c6:2f:5c:8f:15:d5:b0:c9:4b:fd:08:c9:db:28:
be:7e:ab:4e:f2:63:36:08:64:36:70:c5:b7:21:a4:39:5b:0e:
7b:56:d1:c8:9c:08:1e:ff:a6:47:a1:a8:db:b0:40:57:2b:b3:
06:dd:07:d2:f3:25:a8:2b:e6:2b:9c:9a:ee:da:eb:b5:48:f8:
bf:69:16:a5:51:f2:a0:f7:a1:21:4c:54:70:95:5e:94:90:b4:
8b:be:03:9b:c1:4f:b8:5c:7d:1f:b2:06:27:ac:f9:8c:c3:1e:
13:18:9b:01:9d:41:fa:47:c3:41:4d:5c:8a:07:f1:d2:55:be:
4a:d1:64:12:f6:fc:8a:2f:e0:b7:3b:84:d1:c5:44:e1:47:ef:
a6:0a:3b:43:57:48:be:e6:77:84:a4:dd:d6:c0:fb:3e:1c:39:
21:a9:d3:a8:60:5e:97:ae:19:24:10:b2:65:f9:b6:01:24:2f:
d5:50:dd:02:8a:2c:a7:91:2b:62:c8:30:6e:f6:53:db:52:81:
bc:89:1b:20
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0qBIE9e4DZuS4yRXkA3qvuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRkZDc3MWNlZTg3ZWNhOGJmN2IxMmUwYTYzMDZmMTgxZDJh
NTVhNmQwHhcNMjYwMzI2MTIwMDMxWhcNMjYwMzI3MTIwMDMxWjAzMTEwLwYDVQQD
EygzY2YzNzljNmYxYTlmZDExZDg3NGZkYjJlM2EwNDZiM2VmZDAxZWQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy7kY2NUEU44Qo0LnzwshaU2V9AWV
2MX7Hx13/oNxFSGzCC2gH5xoMGjn5/UOhMAy5mghl8ubcY4opuRfdBs+O2dradSV
kCbYoFXkiXPJZ6uvSP52TqD8stQ1qFkmu8lRdofizLZ9pNhFwtsGShXWyW7uK82s
fijaWfef0LzjdG4SKEhS4xPD0tF+HiAZCrjS2k+MzbnF/tHlD0N8lAIVBMnUhjeV
ZWuX+7+vOWd1VVP6U4EazJpNO+JrJ0zyOIO5wOU4oCuEqszqoMxVK8sHD9jYxWcI
tf80sMBW1z+OU5UCsKvNMAdrE2STf/Jys/m+taNjw/n6ctpKE1PfQO2ZPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDzzecbxqf0R2HT9suOgRrPv0B7QMB8GA1UdIwQY
MBaAFE3Xcc7ofsqL97EuCmMG8YHSpVptMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVGRkeHp1aC15b3Yzc1M0S1l3YnhnZEtsV20wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS9mMjFiZjAtYmE0OS00M2JhLTg5OGMt
NTM5ZjljYmEwMGM1LzEvVGRkeHp1aC15b3Yzc1M0S1l3YnhnZEtsV20wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS9mMjFiZjAtYmE0OS00M2JhLTg5OGMtNTM5ZjljYmEwMGM1
LzEvVGRkeHp1aC15b3Yzc1M0S1l3YnhnZEtsV20wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjoooAniu
GEUZvzSO21Mbd7WTHf6izJMM5KY1wBsc4UA+LfBHqgA8CX/639m22jj8WOb3xoyh
nE6HwcYvXI8V1bDJS/0Iydsovn6rTvJjNghkNnDFtyGkOVsOe1bRyJwIHv+mR6Go
27BAVyuzBt0H0vMlqCvmK5ya7trrtUj4v2kWpVHyoPehIUxUcJVelJC0i74Dm8FP
uFx9H7IGJ6z5jMMeExibAZ1B+kfDQU1cigfx0lW+StFkEvb8ii/gtzuE0cVE4Ufv
pgo7Q1dIvuZ3hKTd1sD7Phw5IanTqGBel64ZJBCyZfm2ASQv1VDdAoosp5ErYsgw
bvZT21KBvIkbIA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 20:43:36 2026 by rpki-client