Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/TddPu7rljdCHbZnoDsgqEaRHf34.mft
File: TddPu7rljdCHbZnoDsgqEaRHf34.mft (raw, json)
Hash identifier: Ubux5e2HCWhIluKfO8cbefDPNRw/T8NIgJq7UpEvnLI=
Subject key identifier: A4:B9:6A:C6:B0:44:21:D7:28:01:45:F9:5D:94:B0:2D:FA:CE:E1:1F
Authority key identifier: 4D:D7:4F:BB:BA:E5:8D:D0:87:6D:99:E8:0E:C8:2A:11:A4:47:7F:7E
Certificate issuer: /CN=4dd74fbbbae58dd0876d99e80ec82a11a4477f7e
Certificate serial: 019D2A3B4AE8FA36413D5040D9CC6B8BDA77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TddPu7rljdCHbZnoDsgqEaRHf34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/TddPu7rljdCHbZnoDsgqEaRHf34.mft
Manifest number: 1088
Signing time: Thu 26 Mar 2026 13:00:21 +0000
Manifest this update: Thu 26 Mar 2026 13:00:21 +0000
Manifest next update: Fri 27 Mar 2026 13:00:21 +0000
Files and hashes: 1: 3yZGQ9sVYnt3QvH4c2styLzLRvg.roa (hash: hVBmJZwcWxMro3AxbGdMWv1UTRuzR2YMZqUh1ugo44A=)
2: HR52VHb2xwQIwQ8nYo_MUxwRCms.roa (hash: TbFaT/PpzXVRAiKnbKd45KfqI8+dX+V6Uzbwpos22ak=)
3: J-e2S3Co34V6GqxBwpLas1KlzPc.roa (hash: bHmgsb6+ck75z0l3IkcQpbr1i2Fj+RaHGqcd5esVIMY=)
4: TddPu7rljdCHbZnoDsgqEaRHf34.crl (hash: vig9G8H+EzHZSMzOBbYKNfkmF/IXSyJX+oC8wBhK9rA=)
5: Zt0W_ABdMo3EotkTq9s4b1C7324.roa (hash: S159y02y02b8yf62OVx4JhM0oWbYWFSiWsof3ORZ+Q0=)
6: aOtkixPHmh2enUl6k6sKDrNg_wU.roa (hash: DP493uqQSZ8xRKm9VuJgcghqEcMtl7DiKLDMdLGXe08=)
7: pSr1Ypx-2NhHUN2EUMY--Rosrnw.roa (hash: D/Y20asoDdfvVkjnqNGrkzhvFsfQ4TTpIhrzqfdNsXw=)
8: ttShEhSFippZW2mlI_cMFuA1CNg.roa (hash: bXpk4WtzIL7RNvoOYrs7EBMG1GjbpYOMFtRXm7SQom8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/TddPu7rljdCHbZnoDsgqEaRHf34.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/TddPu7rljdCHbZnoDsgqEaRHf34.mft
rsync://rpki.ripe.net/repository/DEFAULT/TddPu7rljdCHbZnoDsgqEaRHf34.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:3b:4a:e8:fa:36:41:3d:50:40:d9:cc:6b:8b:da:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4dd74fbbbae58dd0876d99e80ec82a11a4477f7e
Validity
Not Before: Mar 26 13:00:21 2026 GMT
Not After : Mar 27 13:00:21 2026 GMT
Subject: CN=a4b96ac6b04421d7280145f95d94b02dfacee11f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:a6:40:c1:bd:25:c5:aa:99:37:81:89:28:dc:
fd:cc:99:4e:90:ae:90:61:7a:fe:17:0e:61:dc:39:
8f:c4:23:a1:dc:9a:3b:d8:5c:5b:c4:93:b8:94:4d:
5b:13:2d:6f:82:4a:e5:aa:93:b2:ba:70:c1:3f:06:
26:89:d0:32:71:d6:1a:a0:e1:df:cc:8b:ff:1d:69:
89:cf:ba:ac:4a:61:4b:45:d3:68:ca:97:ec:ce:f3:
13:b9:ef:b4:ba:42:1a:2a:b9:5b:57:9c:2f:73:3d:
bc:49:8f:16:e5:aa:94:60:9a:51:7a:ec:f1:9c:02:
00:8e:73:e7:e3:12:18:55:c0:4a:52:4d:b9:d4:fa:
72:be:a2:5d:99:57:73:d5:d1:5d:06:14:4c:3b:1e:
3b:7e:12:d9:22:53:d1:c5:3a:cb:88:40:5d:cf:e5:
fd:d6:67:c5:c3:50:0a:06:e8:42:94:12:10:c3:3a:
6d:7a:d2:80:29:8e:de:d5:bb:1a:67:5e:ae:d7:c1:
c0:b2:75:aa:7d:46:8c:23:2d:07:2c:67:d6:32:cf:
11:35:e1:88:25:6d:47:15:a3:4b:55:33:8c:dd:ef:
de:0d:b3:6f:0d:89:cc:89:8f:b1:1f:e3:82:ff:96:
72:11:d0:f0:d0:ef:da:33:f3:ae:ae:1c:58:55:5e:
e9:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:B9:6A:C6:B0:44:21:D7:28:01:45:F9:5D:94:B0:2D:FA:CE:E1:1F
X509v3 Authority Key Identifier:
keyid:4D:D7:4F:BB:BA:E5:8D:D0:87:6D:99:E8:0E:C8:2A:11:A4:47:7F:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TddPu7rljdCHbZnoDsgqEaRHf34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/TddPu7rljdCHbZnoDsgqEaRHf34.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/TddPu7rljdCHbZnoDsgqEaRHf34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:36:7c:a9:d6:0d:a0:f7:63:d1:bf:79:9a:32:d2:73:e3:fc:
02:e6:a1:8b:a2:d7:a2:be:61:3c:02:a4:1f:0d:85:13:e1:2c:
7e:63:a5:52:e0:c6:36:da:42:86:75:78:37:09:26:7f:b0:05:
10:21:77:ea:e2:37:f8:2e:4b:0a:98:20:d1:db:ba:e2:51:29:
ea:27:b6:9b:c1:66:ff:a0:83:ea:8d:96:76:74:d4:84:5f:03:
5f:bd:b6:ec:a9:30:65:54:db:a4:8c:b2:54:b5:e1:aa:5f:09:
1d:f4:1e:28:4a:ed:a4:bb:28:ac:f7:d9:0f:5d:59:4f:67:d9:
fc:d0:af:c4:6f:4c:f1:dc:a3:db:8f:2d:39:12:36:10:9f:45:
19:d5:65:7d:87:94:2f:5b:2f:52:32:d3:05:66:9b:8c:f8:2d:
0f:89:37:87:58:08:d9:f7:98:e2:55:5a:1c:0d:60:13:01:5d:
80:b2:fb:34:c7:eb:14:4a:b9:50:d6:54:d5:87:e4:a3:ae:92:
5d:bc:91:ab:15:03:65:47:a8:c4:2c:2e:41:f0:86:5c:46:41:
8d:26:0d:15:14:1a:b2:c3:b2:f3:79:1a:80:99:62:ae:b1:09:
c2:bf:d6:22:ca:62:74:12:d0:60:8e:52:5f:7c:2c:22:c7:0b:
17:89:d0:35
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0qO0ro+jZBPVBA2cxri9p3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRkZDc0ZmJiYmFlNThkZDA4NzZkOTllODBlYzgyYTExYTQ0
NzdmN2UwHhcNMjYwMzI2MTMwMDIxWhcNMjYwMzI3MTMwMDIxWjAzMTEwLwYDVQQD
EyhhNGI5NmFjNmIwNDQyMWQ3MjgwMTQ1Zjk1ZDk0YjAyZGZhY2VlMTFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy6ZAwb0lxaqZN4GJKNz9zJlOkK6Q
YXr+Fw5h3DmPxCOh3Jo72FxbxJO4lE1bEy1vgkrlqpOyunDBPwYmidAycdYaoOHf
zIv/HWmJz7qsSmFLRdNoypfszvMTue+0ukIaKrlbV5wvcz28SY8W5aqUYJpReuzx
nAIAjnPn4xIYVcBKUk251PpyvqJdmVdz1dFdBhRMOx47fhLZIlPRxTrLiEBdz+X9
1mfFw1AKBuhClBIQwzptetKAKY7e1bsaZ16u18HAsnWqfUaMIy0HLGfWMs8RNeGI
JW1HFaNLVTOM3e/eDbNvDYnMiY+xH+OC/5ZyEdDw0O/aM/OurhxYVV7pRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKS5asawRCHXKAFF+V2UsC36zuEfMB8GA1UdIwQY
MBaAFE3XT7u65Y3Qh22Z6A7IKhGkR39+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVGRkUHU3cmxqZENIYlpub0RzZ3FFYVJIZjM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi85ZjVmNTctZTgyOC00YmNmLThkMmIt
OGVhYjdmNGZlNzdlLzEvVGRkUHU3cmxqZENIYlpub0RzZ3FFYVJIZjM0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi85ZjVmNTctZTgyOC00YmNmLThkMmItOGVhYjdmNGZlNzdl
LzEvVGRkUHU3cmxqZENIYlpub0RzZ3FFYVJIZjM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAizZ8qdYN
oPdj0b95mjLSc+P8Auahi6LXor5hPAKkHw2FE+EsfmOlUuDGNtpChnV4Nwkmf7AF
ECF36uI3+C5LCpgg0du64lEp6ie2m8Fm/6CD6o2WdnTUhF8DX7227KkwZVTbpIyy
VLXhql8JHfQeKErtpLsorPfZD11ZT2fZ/NCvxG9M8dyj248tORI2EJ9FGdVlfYeU
L1svUjLTBWabjPgtD4k3h1gI2feY4lVaHA1gEwFdgLL7NMfrFEq5UNZU1Yfko66S
XbyRqxUDZUeoxCwuQfCGXEZBjSYNFRQassOy83kagJlirrEJwr/WIspidBLQYI5S
X3wsIscLF4nQNQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 18:16:11 2026 by rpki-client