Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/TddPu7rljdCHbZnoDsgqEaRHf34.mft
File: TddPu7rljdCHbZnoDsgqEaRHf34.mft (raw, json)
Hash identifier: zz2iMwDOpOdk9Sdrm0r+T97Pwp9tYjthDkR0945oUt0=
Subject key identifier: CA:C1:60:C8:0F:9B:56:9A:0F:15:7B:6F:7D:07:30:4A:18:0E:94:9D
Authority key identifier: 4D:D7:4F:BB:BA:E5:8D:D0:87:6D:99:E8:0E:C8:2A:11:A4:47:7F:7E
Certificate issuer: /CN=4dd74fbbbae58dd0876d99e80ec82a11a4477f7e
Certificate serial: 019F9211CAD1F0ABEB8EAD53B37C0762DA15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TddPu7rljdCHbZnoDsgqEaRHf34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/TddPu7rljdCHbZnoDsgqEaRHf34.mft
Manifest number: 11C8
Signing time: Fri 24 Jul 2026 03:01:07 +0000
Manifest this update: Fri 24 Jul 2026 03:01:07 +0000
Manifest next update: Sat 25 Jul 2026 03:01:07 +0000
Files and hashes: 1: F-WF_eIpHYReBOMhX06jjFj1FS0.roa (hash: BAvVbr1wXgd6696wbRb9gM+rxSNYTDOpWUN3Pk36+Js=)
2: HR52VHb2xwQIwQ8nYo_MUxwRCms.roa (hash: TbFaT/PpzXVRAiKnbKd45KfqI8+dX+V6Uzbwpos22ak=)
3: J-e2S3Co34V6GqxBwpLas1KlzPc.roa (hash: bHmgsb6+ck75z0l3IkcQpbr1i2Fj+RaHGqcd5esVIMY=)
4: TddPu7rljdCHbZnoDsgqEaRHf34.crl (hash: KC8CZQDBlOTi7H6bsc21R3wcimGtBly7K2lLkw3gV38=)
5: Zk7BXDAD8swCfcay_TQTTci5MyA.roa (hash: xOlyKCm8k9FJT9r5Z+4lM4Mbi5EsqpMp+TAFHGSnfzU=)
6: Zt0W_ABdMo3EotkTq9s4b1C7324.roa (hash: S159y02y02b8yf62OVx4JhM0oWbYWFSiWsof3ORZ+Q0=)
7: aOtkixPHmh2enUl6k6sKDrNg_wU.roa (hash: DP493uqQSZ8xRKm9VuJgcghqEcMtl7DiKLDMdLGXe08=)
8: pSr1Ypx-2NhHUN2EUMY--Rosrnw.roa (hash: D/Y20asoDdfvVkjnqNGrkzhvFsfQ4TTpIhrzqfdNsXw=)
9: ttShEhSFippZW2mlI_cMFuA1CNg.roa (hash: bXpk4WtzIL7RNvoOYrs7EBMG1GjbpYOMFtRXm7SQom8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/TddPu7rljdCHbZnoDsgqEaRHf34.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/TddPu7rljdCHbZnoDsgqEaRHf34.mft
rsync://rpki.ripe.net/repository/DEFAULT/TddPu7rljdCHbZnoDsgqEaRHf34.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:11:ca:d1:f0:ab:eb:8e:ad:53:b3:7c:07:62:da:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4dd74fbbbae58dd0876d99e80ec82a11a4477f7e
Validity
Not Before: Jul 24 03:01:07 2026 GMT
Not After : Jul 25 03:01:07 2026 GMT
Subject: CN=cac160c80f9b569a0f157b6f7d07304a180e949d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:2a:91:cd:76:f5:3e:44:c9:97:90:3b:0b:94:
e4:1e:f1:4b:ee:6f:f6:39:ee:a5:1d:01:2e:89:a3:
fd:53:9c:ee:ec:61:59:3e:ca:77:f2:0c:c4:7e:cd:
ed:b7:c1:ef:79:18:0b:23:03:e4:fa:bc:31:0c:f8:
58:42:48:90:02:26:5a:e4:95:85:3f:7d:31:b6:52:
f0:0f:8c:b0:0b:2f:74:3d:56:90:64:c8:dd:24:92:
3f:0f:9b:f5:7f:53:9a:78:61:20:81:37:2d:c5:7a:
1e:e5:2b:89:32:d0:d4:04:af:7c:62:c3:1d:c6:c4:
cb:9f:d7:18:b5:f6:09:31:a7:9c:9f:9c:d1:4f:ba:
56:c8:4b:1e:0b:32:c3:0f:18:4d:c0:b4:85:c5:f9:
34:fb:81:c4:5b:e1:01:93:fc:e0:93:12:96:37:86:
d3:33:ac:96:67:57:06:a9:b4:15:32:a3:c8:da:6e:
19:1d:ce:37:b9:73:a9:45:58:87:37:cf:c9:6d:98:
6b:3f:ed:46:13:5e:20:16:e1:b2:72:12:60:4f:f9:
01:7e:db:49:c8:58:1c:42:f5:61:8f:7a:c8:9b:bd:
0c:18:46:86:73:2b:a0:86:39:20:c3:bf:c1:46:9d:
77:89:51:9a:6a:ad:40:f7:4d:e5:10:9f:57:c1:a5:
2f:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:C1:60:C8:0F:9B:56:9A:0F:15:7B:6F:7D:07:30:4A:18:0E:94:9D
X509v3 Authority Key Identifier:
keyid:4D:D7:4F:BB:BA:E5:8D:D0:87:6D:99:E8:0E:C8:2A:11:A4:47:7F:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TddPu7rljdCHbZnoDsgqEaRHf34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/TddPu7rljdCHbZnoDsgqEaRHf34.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/TddPu7rljdCHbZnoDsgqEaRHf34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:3b:06:00:fc:c8:fb:cd:83:7c:31:f4:35:37:43:a9:53:2e:
f1:36:1a:6e:29:e7:b9:7a:00:53:2c:75:16:be:81:cc:23:38:
71:2d:e4:ff:98:48:24:5a:33:58:89:be:3d:2d:81:33:d9:ae:
30:88:4e:5a:89:7e:8c:af:bf:ff:a5:3c:cc:78:31:79:2d:6f:
79:54:40:37:ca:bd:40:86:9b:62:ab:50:a1:63:69:8a:e5:86:
53:66:64:e1:e8:72:a7:0e:65:af:de:a2:82:1c:d3:b5:92:2d:
3f:d1:6d:89:4c:06:cd:8e:89:5e:78:ca:52:e9:df:24:4a:10:
b4:fc:b8:e0:93:58:57:b6:7c:f5:94:63:f1:21:72:63:c8:4e:
90:68:75:1e:fd:ec:a2:ee:0a:38:2a:8a:15:98:2e:03:92:da:
38:26:93:67:6b:9a:6a:c7:b5:77:25:28:5f:b4:4e:9b:81:e6:
56:ec:3f:0e:27:58:a8:93:81:bc:81:4a:ee:36:b0:61:11:15:
db:dc:df:b6:c7:76:5f:c0:99:fe:fb:63:1a:fb:a3:e3:c7:e8:
84:e8:03:2a:36:5b:9e:2d:eb:08:86:81:ac:2d:f1:83:58:32:
d9:a2:22:33:59:ab:33:ac:73:59:ea:5a:b3:02:b1:68:51:50:
40:9c:cb:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:38:08 2026 by rpki-client