Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/bfb817-7e2d-4458-bab1-d1750020caf5/1/_tdzOdk4vvCHWZKTwgGzufgiNiM.mft
File: _tdzOdk4vvCHWZKTwgGzufgiNiM.mft (raw, json)
Hash identifier: z3b0eVeCld3dOZvszuc1ApWReIZSWk3jVaKRJ9F7mJE=
Subject key identifier: 10:5C:7A:F5:6E:4E:AE:D0:3A:A3:8F:32:52:E2:10:98:63:AA:80:B8
Authority key identifier: FE:D7:73:39:D9:38:BE:F0:87:59:92:93:C2:01:B3:B9:F8:22:36:23
Certificate issuer: /CN=fed77339d938bef087599293c201b3b9f8223623
Certificate serial: 019D292931EFF3A34B0DC27EB48E1C80676E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_tdzOdk4vvCHWZKTwgGzufgiNiM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/bfb817-7e2d-4458-bab1-d1750020caf5/1/_tdzOdk4vvCHWZKTwgGzufgiNiM.mft
Manifest number: 1819
Signing time: Thu 26 Mar 2026 08:00:58 +0000
Manifest this update: Thu 26 Mar 2026 08:00:58 +0000
Manifest next update: Fri 27 Mar 2026 08:00:58 +0000
Files and hashes: 1: _tdzOdk4vvCHWZKTwgGzufgiNiM.crl (hash: dTzHbycPS9ybYZF5n+U3+eBpgvs8SjNUeWjl4XPj7kM=)
2: dVMqcvXursPYfDYSCDAE4DhRFlc.roa (hash: Yq3X9779TMJZn56pp7FdF+bqg71vRgvQymxrtb6IBFY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/bfb817-7e2d-4458-bab1-d1750020caf5/1/_tdzOdk4vvCHWZKTwgGzufgiNiM.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/bfb817-7e2d-4458-bab1-d1750020caf5/1/_tdzOdk4vvCHWZKTwgGzufgiNiM.mft
rsync://rpki.ripe.net/repository/DEFAULT/_tdzOdk4vvCHWZKTwgGzufgiNiM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 08:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:29:31:ef:f3:a3:4b:0d:c2:7e:b4:8e:1c:80:67:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fed77339d938bef087599293c201b3b9f8223623
Validity
Not Before: Mar 26 08:00:58 2026 GMT
Not After : Mar 27 08:00:58 2026 GMT
Subject: CN=105c7af56e4eaed03aa38f3252e2109863aa80b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:f1:97:70:a8:e9:db:c8:05:23:b7:aa:de:4b:
57:67:b0:07:cb:07:69:42:79:68:0e:ca:27:8a:e0:
d4:53:35:f1:4a:60:9d:b0:1e:77:e2:55:98:86:ea:
e8:a5:7b:94:0f:75:ca:27:05:d2:8c:16:0f:7d:24:
df:ee:e2:51:88:71:10:a9:58:99:50:94:98:90:fc:
94:56:6b:a9:2c:4a:58:e6:2a:5e:13:ac:80:eb:41:
dc:89:95:0a:ae:7d:1f:f2:01:10:a7:04:2a:90:5a:
fd:12:8b:87:5e:d0:c3:a7:a5:2e:4d:83:a2:ad:75:
26:36:98:9d:25:87:14:00:3d:17:ec:01:4d:ec:2c:
17:de:bd:92:71:d9:8a:ac:05:e6:88:b4:97:6c:9b:
31:2e:40:45:f2:5a:d2:ba:61:c5:bd:e7:54:18:02:
e6:96:8b:92:59:53:ed:9a:09:9a:1f:50:4d:5f:3c:
4a:6d:09:16:2c:55:84:a8:c4:46:cc:e0:28:21:a1:
c0:0a:63:28:f3:74:6d:ec:cf:4e:fc:36:be:e0:a9:
4c:6e:79:b3:0f:d3:73:59:ac:d7:fc:cb:8c:6c:f3:
de:bd:5c:d7:dd:9e:1d:16:1f:06:ca:c5:41:a4:ef:
fb:78:10:bc:b8:5c:dd:cb:e7:4b:e7:be:a8:8d:37:
ad:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:5C:7A:F5:6E:4E:AE:D0:3A:A3:8F:32:52:E2:10:98:63:AA:80:B8
X509v3 Authority Key Identifier:
keyid:FE:D7:73:39:D9:38:BE:F0:87:59:92:93:C2:01:B3:B9:F8:22:36:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_tdzOdk4vvCHWZKTwgGzufgiNiM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/bfb817-7e2d-4458-bab1-d1750020caf5/1/_tdzOdk4vvCHWZKTwgGzufgiNiM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/bfb817-7e2d-4458-bab1-d1750020caf5/1/_tdzOdk4vvCHWZKTwgGzufgiNiM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:39:a6:46:0c:90:c5:72:c2:41:7d:3d:ae:af:75:57:ce:2a:
c6:f2:90:fc:96:1c:d1:ea:5e:3a:91:70:a7:23:83:d1:36:85:
85:46:ff:81:de:ca:a6:2f:c9:44:cb:a9:ab:70:69:4c:1e:8c:
46:6d:b3:3f:c4:c9:e4:4b:f3:7c:cb:f0:a2:d9:28:97:b0:82:
e1:be:70:ef:8a:f6:97:67:49:79:e6:e7:51:62:c3:f3:6a:40:
24:0e:c5:0d:2b:60:e6:4a:40:bd:a9:7e:c3:1b:43:e8:94:88:
70:ef:74:e9:91:c5:7e:44:f2:4f:fb:bf:c8:9b:75:a9:a0:96:
7b:fc:03:94:59:24:41:a4:1a:e4:36:7d:43:b4:86:dd:1a:1c:
62:b1:78:92:fd:26:8b:ba:74:3c:b1:c1:b1:4c:5c:af:34:10:
ce:7b:68:e0:63:2f:5c:91:42:2b:c4:ee:bb:21:b6:5c:75:da:
0e:4b:b4:f1:c4:8c:b6:4c:e9:01:42:be:a5:d4:80:34:c8:44:
5b:10:3b:6f:68:d1:34:64:c5:03:57:b8:db:c2:aa:d1:d4:10:
98:84:d7:be:9c:5c:a4:b7:28:a4:90:72:c2:88:cc:9c:dc:ea:
4a:01:45:82:8a:65:62:cd:94:7c:b4:82:bd:9f:dc:71:00:97:
99:8d:43:6f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0pKTHv86NLDcJ+tI4cgGduMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlZDc3MzM5ZDkzOGJlZjA4NzU5OTI5M2MyMDFiM2I5Zjgy
MjM2MjMwHhcNMjYwMzI2MDgwMDU4WhcNMjYwMzI3MDgwMDU4WjAzMTEwLwYDVQQD
EygxMDVjN2FmNTZlNGVhZWQwM2FhMzhmMzI1MmUyMTA5ODYzYWE4MGI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlPGXcKjp28gFI7eq3ktXZ7AHywdp
QnloDsoniuDUUzXxSmCdsB534lWYhuropXuUD3XKJwXSjBYPfSTf7uJRiHEQqViZ
UJSYkPyUVmupLEpY5ipeE6yA60HciZUKrn0f8gEQpwQqkFr9EouHXtDDp6UuTYOi
rXUmNpidJYcUAD0X7AFN7CwX3r2ScdmKrAXmiLSXbJsxLkBF8lrSumHFvedUGALm
louSWVPtmgmaH1BNXzxKbQkWLFWEqMRGzOAoIaHACmMo83Rt7M9O/Da+4KlMbnmz
D9NzWazX/MuMbPPevVzX3Z4dFh8GysVBpO/7eBC8uFzdy+dL576ojTetAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBBcevVuTq7QOqOPMlLiEJhjqoC4MB8GA1UdIwQY
MBaAFP7XcznZOL7wh1mSk8IBs7n4IjYjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX3Rkek9kazR2dkNIV1pLVHdnR3p1ZmdpTmlNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS9iZmI4MTctN2UyZC00NDU4LWJhYjEt
ZDE3NTAwMjBjYWY1LzEvX3Rkek9kazR2dkNIV1pLVHdnR3p1ZmdpTmlNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYS9iZmI4MTctN2UyZC00NDU4LWJhYjEtZDE3NTAwMjBjYWY1
LzEvX3Rkek9kazR2dkNIV1pLVHdnR3p1ZmdpTmlNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgzmmRgyQ
xXLCQX09rq91V84qxvKQ/JYc0epeOpFwpyOD0TaFhUb/gd7Kpi/JRMupq3BpTB6M
Rm2zP8TJ5EvzfMvwotkol7CC4b5w74r2l2dJeebnUWLD82pAJA7FDStg5kpAval+
wxtD6JSIcO906ZHFfkTyT/u/yJt1qaCWe/wDlFkkQaQa5DZ9Q7SG3RocYrF4kv0m
i7p0PLHBsUxcrzQQznto4GMvXJFCK8TuuyG2XHXaDku08cSMtkzpAUK+pdSANMhE
WxA7b2jRNGTFA1e428Kq0dQQmITXvpxcpLcopJBywojMnNzqSgFFgoplYs2UfLSC
vZ/ccQCXmY1Dbw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 14:10:09 2026 by rpki-client