Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/TddPu7rljdCHbZnoDsgqEaRHf34.mft
File: TddPu7rljdCHbZnoDsgqEaRHf34.mft (raw, json)
Hash identifier: Qx1HFXUD1/Dox3pnrVs2CB9+nBUYCCKqWeImoW2fiTI=
Subject key identifier: 64:F1:AF:6C:50:49:D8:67:AF:E4:F7:AB:19:EB:32:35:36:33:3B:40
Authority key identifier: 4D:D7:4F:BB:BA:E5:8D:D0:87:6D:99:E8:0E:C8:2A:11:A4:47:7F:7E
Certificate issuer: /CN=4dd74fbbbae58dd0876d99e80ec82a11a4477f7e
Certificate serial: 019E1D907CA2AF4BFA1C39C031B456E2B4FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TddPu7rljdCHbZnoDsgqEaRHf34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/TddPu7rljdCHbZnoDsgqEaRHf34.mft
Manifest number: 1106
Signing time: Tue 12 May 2026 19:01:08 +0000
Manifest this update: Tue 12 May 2026 19:01:08 +0000
Manifest next update: Wed 13 May 2026 19:01:08 +0000
Files and hashes: 1: 3yZGQ9sVYnt3QvH4c2styLzLRvg.roa (hash: hVBmJZwcWxMro3AxbGdMWv1UTRuzR2YMZqUh1ugo44A=)
2: HR52VHb2xwQIwQ8nYo_MUxwRCms.roa (hash: TbFaT/PpzXVRAiKnbKd45KfqI8+dX+V6Uzbwpos22ak=)
3: J-e2S3Co34V6GqxBwpLas1KlzPc.roa (hash: bHmgsb6+ck75z0l3IkcQpbr1i2Fj+RaHGqcd5esVIMY=)
4: TddPu7rljdCHbZnoDsgqEaRHf34.crl (hash: OB3rR0QSojqFnJl4oEGME77Z/2pQdyVunKur6EE4hrI=)
5: Zt0W_ABdMo3EotkTq9s4b1C7324.roa (hash: S159y02y02b8yf62OVx4JhM0oWbYWFSiWsof3ORZ+Q0=)
6: aOtkixPHmh2enUl6k6sKDrNg_wU.roa (hash: DP493uqQSZ8xRKm9VuJgcghqEcMtl7DiKLDMdLGXe08=)
7: pSr1Ypx-2NhHUN2EUMY--Rosrnw.roa (hash: D/Y20asoDdfvVkjnqNGrkzhvFsfQ4TTpIhrzqfdNsXw=)
8: ttShEhSFippZW2mlI_cMFuA1CNg.roa (hash: bXpk4WtzIL7RNvoOYrs7EBMG1GjbpYOMFtRXm7SQom8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/TddPu7rljdCHbZnoDsgqEaRHf34.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/TddPu7rljdCHbZnoDsgqEaRHf34.mft
rsync://rpki.ripe.net/repository/DEFAULT/TddPu7rljdCHbZnoDsgqEaRHf34.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 19:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:90:7c:a2:af:4b:fa:1c:39:c0:31:b4:56:e2:b4:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4dd74fbbbae58dd0876d99e80ec82a11a4477f7e
Validity
Not Before: May 12 19:01:08 2026 GMT
Not After : May 13 19:01:08 2026 GMT
Subject: CN=64f1af6c5049d867afe4f7ab19eb323536333b40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:56:29:98:73:ea:48:32:c2:b4:44:ad:14:c3:
c8:72:15:dc:1c:2a:62:2e:38:31:6f:62:12:00:6d:
ae:d7:c2:3e:02:6c:76:90:2b:85:0a:f2:e9:3e:4f:
95:4d:66:bf:70:68:84:2a:db:96:40:3a:4b:a2:49:
1b:ae:3f:7a:a6:ac:5c:03:f3:d8:2e:06:ee:29:b5:
f1:25:4d:18:1c:8b:84:e6:d2:d2:c8:f7:4c:51:76:
be:2c:1e:c1:79:0b:ec:e0:b2:de:ad:f4:84:5a:25:
7a:8b:6d:b5:5f:44:2f:a9:66:78:94:79:86:14:69:
b9:fb:59:29:59:c5:cd:6f:b1:1e:a4:29:6b:fd:cf:
56:e5:f0:cf:96:8f:69:1c:65:8b:74:9e:2d:5e:77:
6b:77:e1:22:57:56:04:69:39:01:c3:9e:f1:5f:4a:
ef:0a:f8:1b:1f:9e:21:14:46:84:f9:26:85:1c:06:
36:ac:05:d6:a5:98:00:cf:57:5d:a7:ed:60:47:36:
a5:45:92:8e:b4:91:73:81:2e:b4:1a:1b:0c:30:51:
06:c6:83:3a:39:2e:ca:14:fa:eb:a4:e8:a8:01:21:
d3:44:e6:e5:83:f4:7e:ef:e0:79:44:6e:23:4e:60:
f6:6c:fe:cb:22:7d:33:96:0c:22:c5:d4:bd:b9:69:
3f:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:F1:AF:6C:50:49:D8:67:AF:E4:F7:AB:19:EB:32:35:36:33:3B:40
X509v3 Authority Key Identifier:
keyid:4D:D7:4F:BB:BA:E5:8D:D0:87:6D:99:E8:0E:C8:2A:11:A4:47:7F:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TddPu7rljdCHbZnoDsgqEaRHf34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/TddPu7rljdCHbZnoDsgqEaRHf34.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/TddPu7rljdCHbZnoDsgqEaRHf34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:6a:e2:ca:e5:76:b9:e5:d5:b0:5b:8d:4f:24:2e:7b:de:ae:
30:14:83:de:7f:01:d7:8f:c4:cf:9e:a7:2a:3d:29:95:a2:16:
3d:1b:a6:38:1a:a3:8c:a4:19:8d:ff:99:bd:c6:dc:fd:91:73:
b4:4f:c5:fa:f1:f6:f9:c1:9c:98:d4:7e:d5:eb:eb:24:eb:c5:
c9:da:6e:5c:fa:75:eb:21:38:6f:ed:a9:ba:40:6a:97:98:98:
09:7f:fc:73:53:2b:b6:98:15:8d:fb:0d:9e:ea:83:a0:1f:5b:
79:4a:5d:f0:65:2f:c8:cb:86:5f:3a:8b:c8:fb:14:2e:34:ed:
b9:85:0c:94:b2:17:17:2e:2d:32:0d:13:1b:b3:1a:97:35:27:
e4:b1:92:39:b2:e2:21:5b:f2:37:e6:06:e0:7b:76:9b:5a:f7:
1e:a7:3c:1e:66:f1:19:69:25:34:39:ec:21:8f:15:51:dc:ea:
c7:24:8f:5c:b9:f3:66:cb:e5:84:e5:20:7a:7e:52:8a:d0:e6:
86:20:4e:38:67:3c:36:9c:80:8e:a5:4e:95:4d:85:a4:b6:28:
91:3a:5a:f3:69:45:2a:3d:e6:77:2d:08:c1:63:f5:d4:c1:66:
66:ab:44:7c:47:be:7a:30:93:11:72:3a:d7:f7:75:e2:31:af:
d5:fd:70:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:41:35 2026 by rpki-client