Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/670b10-10eb-476f-84ef-156eda2b55b6/1/tdh_3Ccq4Fhhh4bnQXB1V79OGjM.mft
File: tdh_3Ccq4Fhhh4bnQXB1V79OGjM.mft (raw, json)
Hash identifier: DUOOPqNM7pFrj3qRoYJvTnlwdwpqXv55KgN+UPtcB6E=
Subject key identifier: BC:28:3F:81:F2:29:5C:77:19:4B:47:E7:0A:54:5C:E0:E6:CE:6C:5A
Authority key identifier: B5:D8:7F:DC:27:2A:E0:58:61:87:86:E7:41:70:75:57:BF:4E:1A:33
Certificate issuer: /CN=b5d87fdc272ae058618786e741707557bf4e1a33
Certificate serial: 019D27DF72F73FC3839F1F62D2BBB435CC45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tdh_3Ccq4Fhhh4bnQXB1V79OGjM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/670b10-10eb-476f-84ef-156eda2b55b6/1/tdh_3Ccq4Fhhh4bnQXB1V79OGjM.mft
Manifest number: 0622
Signing time: Thu 26 Mar 2026 02:00:48 +0000
Manifest this update: Thu 26 Mar 2026 02:00:48 +0000
Manifest next update: Fri 27 Mar 2026 02:00:48 +0000
Files and hashes: 1: 6QKPReqPPvM-G5eDtotQxkQu3rg.roa (hash: +zfD9kQLYj/Bi7oedLx+ydKYavDQjQhsfviUHiEJA58=)
2: tdh_3Ccq4Fhhh4bnQXB1V79OGjM.crl (hash: dvjjr1U0NHYkGKufEqzShurDVP43EIGRcHniHJ7CX/g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/670b10-10eb-476f-84ef-156eda2b55b6/1/tdh_3Ccq4Fhhh4bnQXB1V79OGjM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/670b10-10eb-476f-84ef-156eda2b55b6/1/tdh_3Ccq4Fhhh4bnQXB1V79OGjM.mft
rsync://rpki.ripe.net/repository/DEFAULT/tdh_3Ccq4Fhhh4bnQXB1V79OGjM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:72:f7:3f:c3:83:9f:1f:62:d2:bb:b4:35:cc:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5d87fdc272ae058618786e741707557bf4e1a33
Validity
Not Before: Mar 26 02:00:48 2026 GMT
Not After : Mar 27 02:00:48 2026 GMT
Subject: CN=bc283f81f2295c77194b47e70a545ce0e6ce6c5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:51:c6:01:bc:32:8c:89:1a:cf:81:ac:d8:cc:
da:f4:27:87:b3:09:32:50:82:53:ce:8f:b8:73:c2:
5f:58:c5:14:2c:2e:d2:1e:02:98:23:31:61:75:f6:
60:49:96:ae:5d:09:a1:95:d5:b4:03:74:ee:e6:f4:
62:a1:b1:2a:ec:04:8c:ed:c1:b0:0f:8e:0c:ff:bf:
1e:47:e3:00:29:1a:d9:2c:af:9b:42:29:ac:67:b7:
75:d6:9d:77:b4:de:f9:2b:ba:76:82:24:21:b7:a6:
f7:28:4e:ee:66:91:16:c7:0c:09:5e:49:dc:46:79:
8c:4d:72:f9:b2:66:64:2a:97:a0:fc:06:1f:2f:7f:
19:46:28:44:f0:8c:f3:f9:dc:a7:2d:f4:b6:9b:2e:
86:81:dd:8b:c1:63:d6:0d:b9:e8:93:a4:fc:c9:56:
88:66:ae:3e:8a:39:c4:67:0e:40:9a:c7:4b:09:88:
c7:28:11:db:22:90:28:9c:30:2e:aa:b5:e5:f6:09:
5e:dd:2b:10:11:97:88:96:3b:41:23:e4:d2:bb:a8:
32:d4:31:eb:5f:c9:7e:04:c7:72:51:f1:67:79:75:
2d:39:8d:60:6d:08:29:37:49:d2:df:b9:6a:7f:2a:
25:8a:5e:68:8a:a2:91:03:45:a0:26:9a:49:1a:f2:
c4:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:28:3F:81:F2:29:5C:77:19:4B:47:E7:0A:54:5C:E0:E6:CE:6C:5A
X509v3 Authority Key Identifier:
keyid:B5:D8:7F:DC:27:2A:E0:58:61:87:86:E7:41:70:75:57:BF:4E:1A:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tdh_3Ccq4Fhhh4bnQXB1V79OGjM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/670b10-10eb-476f-84ef-156eda2b55b6/1/tdh_3Ccq4Fhhh4bnQXB1V79OGjM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/670b10-10eb-476f-84ef-156eda2b55b6/1/tdh_3Ccq4Fhhh4bnQXB1V79OGjM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:fa:d1:c4:6b:8d:da:38:0e:e3:91:9f:46:55:3b:8d:14:86:
28:7e:6a:9c:c3:ab:d9:2b:f4:47:58:93:d0:8b:68:6b:b9:de:
03:2d:bb:21:ad:21:cc:53:ed:4d:f7:cc:e5:b8:1a:55:f9:ee:
17:41:2d:f3:33:ea:ec:5b:97:12:51:84:33:c3:99:fd:4a:20:
83:ad:1c:5d:93:4b:82:f8:9b:00:04:3f:cb:bd:f2:14:c2:32:
f1:e2:c5:c8:58:91:d5:d7:30:d7:ec:a4:46:31:95:12:f0:21:
e4:b3:15:10:39:83:23:c2:64:3d:30:79:b8:c3:25:68:1a:6f:
7c:1f:4a:75:0e:b9:14:c8:5b:f1:59:99:03:ca:6a:58:8a:49:
e4:86:63:cb:09:4d:d3:0e:76:13:5e:fe:e5:46:40:9e:5e:eb:
ba:2c:0c:0f:7a:e4:42:21:57:a3:8f:2f:46:e8:96:a2:3c:f1:
15:eb:0c:e7:8c:98:56:d8:b0:96:8d:0e:5e:df:19:5f:9e:bc:
bf:d2:04:27:ad:7b:8e:b8:69:83:8b:16:bd:3e:70:b7:64:8e:
ea:1c:9e:ae:fe:2f:54:a1:85:01:d3:5a:d3:c4:28:7a:ef:42:
87:8e:17:e1:f6:82:e4:0c:9d:5b:29:5f:df:9f:fa:0c:c9:93:
2b:e7:27:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:01:32 2026 by rpki-client