Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/09cea0-ef2b-4f20-a19a-eb5a627e76a3/1/TDfyfrSZezvvnygmajlpQFD-dPk.mft
File: TDfyfrSZezvvnygmajlpQFD-dPk.mft (raw, json)
Hash identifier: eVoC+SC1vSEuwkFl5wvoHijV5b2rPXn/ZnzrFE/sbLs=
Subject key identifier: 36:C4:14:89:4B:D1:DA:41:91:3D:99:F3:A0:4E:7D:52:FE:9C:0C:02
Authority key identifier: 4C:37:F2:7E:B4:99:7B:3B:EF:9F:28:26:6A:39:69:40:50:FE:74:F9
Certificate issuer: /CN=4c37f27eb4997b3bef9f28266a39694050fe74f9
Certificate serial: 019D2695DE23810CFA8788B8BA8D10F0AB54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TDfyfrSZezvvnygmajlpQFD-dPk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/09cea0-ef2b-4f20-a19a-eb5a627e76a3/1/TDfyfrSZezvvnygmajlpQFD-dPk.mft
Manifest number: 18E6
Signing time: Wed 25 Mar 2026 20:00:48 +0000
Manifest this update: Wed 25 Mar 2026 20:00:48 +0000
Manifest next update: Thu 26 Mar 2026 20:00:48 +0000
Files and hashes: 1: 3mj4BF15-QsrQeXNqlhp9O0RF8Q.roa (hash: vXL9dy1/SgEnnpISMc/F/t6U8c7+bWH7fiwFFAUniPU=)
2: TDfyfrSZezvvnygmajlpQFD-dPk.crl (hash: 79TxUUla2U7omfY6MdQ+CiVudgOQF5KjMszaaM8lPfg=)
3: dDIM-ljTCDKhWIxv1515WUGeQvk.roa (hash: /ksxNXhqwhx98qeq21Eca7WB/KLYXy3qx2dkD35mKTc=)
4: i6gAOaaWdEjygKv3yzfVHTmBR5s.roa (hash: jK1Yhe3ibqhPTKxiBNM7KW7h9KKeRctQT02L1qcBze8=)
5: kFLjuN4_tRjI-IILkJq8lcLpDdc.roa (hash: lQTRIEBvMUBY3vX80dFs9U0bSNDBYvB6Uew+srrzZ9A=)
6: qrG9XLPl84E40eGjaluMQlHH30g.roa (hash: JZCVwj3aTdfzcFTKEfr0xBq4Umu2aHhpSpk1hh5GgSQ=)
7: sNbxwr_VlMceIOoORfjNh48fthg.roa (hash: og1IfOlO+B5tux3x/JdwIjbchpmcSQUOsvTa4SrXgws=)
8: sPyU_Xm3Mi4DrCYd-xCPHCu7Yj8.roa (hash: R+jYi2MX3/3kpxkJYiEg+3YO+SpdTf42NvPMvZti0mw=)
9: yjcAiOmQGkj7hTD0MZWHr2J1Je4.roa (hash: S7VwEQTFRcxL/FXQlqzu5pVh1KvvK3fwPwSXMI469EY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/09cea0-ef2b-4f20-a19a-eb5a627e76a3/1/TDfyfrSZezvvnygmajlpQFD-dPk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/09cea0-ef2b-4f20-a19a-eb5a627e76a3/1/TDfyfrSZezvvnygmajlpQFD-dPk.mft
rsync://rpki.ripe.net/repository/DEFAULT/TDfyfrSZezvvnygmajlpQFD-dPk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 20:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:95:de:23:81:0c:fa:87:88:b8:ba:8d:10:f0:ab:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c37f27eb4997b3bef9f28266a39694050fe74f9
Validity
Not Before: Mar 25 20:00:48 2026 GMT
Not After : Mar 26 20:00:48 2026 GMT
Subject: CN=36c414894bd1da41913d99f3a04e7d52fe9c0c02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:70:f1:9d:99:92:e4:8a:53:f0:e7:7e:14:8c:
ed:f7:95:a8:8f:a4:7f:30:23:e9:27:d7:ca:11:28:
07:65:28:1b:02:8e:77:fe:1e:33:32:e6:e2:c1:99:
02:9c:63:c3:0e:55:6f:70:66:29:29:ef:0a:fb:f2:
b2:db:2d:6b:8a:a7:47:eb:b0:d2:58:90:1e:91:48:
8d:8c:88:ae:2f:65:94:24:39:a3:00:36:a5:c6:dc:
6b:e8:25:c5:6e:47:cd:14:dc:2d:ec:3a:e2:1f:e9:
8d:14:50:ed:7d:88:ce:31:93:8e:d2:fb:a8:12:85:
49:23:9a:1d:8a:06:3f:f2:b0:56:d3:81:9e:66:d7:
9c:4b:81:37:44:af:e4:d2:f3:e5:49:f4:fb:f6:3f:
da:34:69:6a:14:69:06:da:f6:16:b7:97:54:d2:92:
70:0f:2a:2f:b0:6f:5d:4f:b2:24:3a:7a:57:92:26:
46:bf:ac:5e:33:a5:33:d7:00:d2:93:6c:5f:4a:95:
c6:a8:bf:98:c8:ac:48:a5:94:19:96:87:0b:ed:06:
5b:5f:d4:35:4f:96:ea:b5:69:a8:51:bc:7b:33:41:
ed:ae:8f:13:33:28:50:6f:09:88:bd:12:78:ba:66:
f6:26:69:7d:98:6a:e4:10:d8:0f:7a:a4:98:f8:51:
93:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:C4:14:89:4B:D1:DA:41:91:3D:99:F3:A0:4E:7D:52:FE:9C:0C:02
X509v3 Authority Key Identifier:
keyid:4C:37:F2:7E:B4:99:7B:3B:EF:9F:28:26:6A:39:69:40:50:FE:74:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TDfyfrSZezvvnygmajlpQFD-dPk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/09cea0-ef2b-4f20-a19a-eb5a627e76a3/1/TDfyfrSZezvvnygmajlpQFD-dPk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/09cea0-ef2b-4f20-a19a-eb5a627e76a3/1/TDfyfrSZezvvnygmajlpQFD-dPk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:64:39:a3:05:29:8e:6e:b4:93:76:8b:31:05:09:fc:5f:fe:
0c:1a:c6:12:b2:86:79:43:c7:4a:28:78:ed:e0:11:66:57:71:
74:ed:f7:6b:40:3d:61:07:ea:e5:54:6f:be:77:53:46:6b:f2:
45:f9:a0:a3:77:a6:f5:a0:59:bf:62:42:c3:e5:cf:7c:04:35:
78:2e:25:c5:d4:b0:6c:10:1c:14:94:0a:4b:80:92:5e:10:ad:
42:ad:c6:dc:61:e9:10:c0:4e:1f:7f:1a:97:7d:55:28:c3:58:
31:64:3e:f1:3b:86:9e:46:a5:8f:3f:95:1d:6a:ab:ea:bb:e6:
07:1c:8f:49:4f:f4:04:62:93:89:27:22:26:52:5c:b9:48:f7:
ab:e1:84:06:ba:fb:9a:f4:ea:2f:6c:f4:10:74:59:31:4e:7d:
98:ef:bb:12:07:ea:16:74:d6:3f:37:a9:84:93:c4:77:62:2a:
c3:fc:7b:ee:45:b8:cf:8d:db:99:4f:6b:6f:49:0d:57:f5:b1:
1a:41:06:d5:ec:a0:df:37:b6:74:fe:50:d7:d3:88:9c:c8:f9:
4a:ff:79:1e:31:23:d8:b9:25:f0:0a:7b:11:5f:1c:8e:a3:21:
ef:47:d7:ef:5c:16:fc:83:14:b5:cc:d1:c4:6a:50:95:16:d1:
76:71:5d:e4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mld4jgQz6h4i4uo0Q8KtUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjMzdmMjdlYjQ5OTdiM2JlZjlmMjgyNjZhMzk2OTQwNTBm
ZTc0ZjkwHhcNMjYwMzI1MjAwMDQ4WhcNMjYwMzI2MjAwMDQ4WjAzMTEwLwYDVQQD
EygzNmM0MTQ4OTRiZDFkYTQxOTEzZDk5ZjNhMDRlN2Q1MmZlOWMwYzAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxXDxnZmS5IpT8Od+FIzt95Woj6R/
MCPpJ9fKESgHZSgbAo53/h4zMubiwZkCnGPDDlVvcGYpKe8K+/Ky2y1riqdH67DS
WJAekUiNjIiuL2WUJDmjADalxtxr6CXFbkfNFNwt7DriH+mNFFDtfYjOMZOO0vuo
EoVJI5odigY/8rBW04GeZtecS4E3RK/k0vPlSfT79j/aNGlqFGkG2vYWt5dU0pJw
DyovsG9dT7IkOnpXkiZGv6xeM6Uz1wDSk2xfSpXGqL+YyKxIpZQZlocL7QZbX9Q1
T5bqtWmoUbx7M0Htro8TMyhQbwmIvRJ4umb2Jml9mGrkENgPeqSY+FGTswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDbEFIlL0dpBkT2Z86BOfVL+nAwCMB8GA1UdIwQY
MBaAFEw38n60mXs7758oJmo5aUBQ/nT5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVERmeWZyU1plenZ2bnlnbWFqbHBRRkQtZFBrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC8wOWNlYTAtZWYyYi00ZjIwLWExOWEt
ZWI1YTYyN2U3NmEzLzEvVERmeWZyU1plenZ2bnlnbWFqbHBRRkQtZFBrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZC8wOWNlYTAtZWYyYi00ZjIwLWExOWEtZWI1YTYyN2U3NmEz
LzEvVERmeWZyU1plenZ2bnlnbWFqbHBRRkQtZFBrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcGQ5owUp
jm60k3aLMQUJ/F/+DBrGErKGeUPHSih47eARZldxdO33a0A9YQfq5VRvvndTRmvy
Rfmgo3em9aBZv2JCw+XPfAQ1eC4lxdSwbBAcFJQKS4CSXhCtQq3G3GHpEMBOH38a
l31VKMNYMWQ+8TuGnkaljz+VHWqr6rvmBxyPSU/0BGKTiSciJlJcuUj3q+GEBrr7
mvTqL2z0EHRZMU59mO+7EgfqFnTWPzephJPEd2Iqw/x77kW4z43bmU9rb0kNV/Wx
GkEG1eyg3ze2dP5Q19OInMj5Sv95HjEj2Lkl8Ap7EV8cjqMh70fX71wW/IMUtczR
xGpQlRbRdnFd5A==
-----END CERTIFICATE-----
Generated at Thu Mar 26 04:59:14 2026 by rpki-client