Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/bfb817-7e2d-4458-bab1-d1750020caf5/1/_tdzOdk4vvCHWZKTwgGzufgiNiM.mft
File: _tdzOdk4vvCHWZKTwgGzufgiNiM.mft (raw, json)
Hash identifier: xxT1T3vuagQ9bi8y3alPQywINXMQ0UgTxBvOdncyooo=
Subject key identifier: BE:2E:ED:B3:EF:7D:78:39:C6:22:23:1F:82:61:84:D4:27:F9:F0:75
Authority key identifier: FE:D7:73:39:D9:38:BE:F0:87:59:92:93:C2:01:B3:B9:F8:22:36:23
Certificate issuer: /CN=fed77339d938bef087599293c201b3b9f8223623
Certificate serial: 019E1E6C4ED826AC471C4FDDA28F569E072A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_tdzOdk4vvCHWZKTwgGzufgiNiM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/bfb817-7e2d-4458-bab1-d1750020caf5/1/_tdzOdk4vvCHWZKTwgGzufgiNiM.mft
Manifest number: 1898
Signing time: Tue 12 May 2026 23:01:14 +0000
Manifest this update: Tue 12 May 2026 23:01:14 +0000
Manifest next update: Wed 13 May 2026 23:01:14 +0000
Files and hashes: 1: _tdzOdk4vvCHWZKTwgGzufgiNiM.crl (hash: egEKi8wLod4bU+1sJFC9p654bAji0jNCwP4vpzlmd1I=)
2: dVMqcvXursPYfDYSCDAE4DhRFlc.roa (hash: Yq3X9779TMJZn56pp7FdF+bqg71vRgvQymxrtb6IBFY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/bfb817-7e2d-4458-bab1-d1750020caf5/1/_tdzOdk4vvCHWZKTwgGzufgiNiM.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/bfb817-7e2d-4458-bab1-d1750020caf5/1/_tdzOdk4vvCHWZKTwgGzufgiNiM.mft
rsync://rpki.ripe.net/repository/DEFAULT/_tdzOdk4vvCHWZKTwgGzufgiNiM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:10:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:6c:4e:d8:26:ac:47:1c:4f:dd:a2:8f:56:9e:07:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fed77339d938bef087599293c201b3b9f8223623
Validity
Not Before: May 12 23:01:14 2026 GMT
Not After : May 13 23:01:14 2026 GMT
Subject: CN=be2eedb3ef7d7839c622231f826184d427f9f075
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:56:3c:d2:02:c5:50:e1:07:8c:ac:ea:d6:3f:
79:10:71:a5:99:2d:f9:f4:1f:71:85:f2:b4:a2:d4:
cd:d6:26:8e:fb:fc:e7:cf:f4:d4:e2:5c:d1:23:66:
66:46:e5:ae:21:d7:d2:5e:c4:ef:71:7d:12:12:22:
6f:c8:8f:34:63:fe:83:b6:35:e9:e4:c0:3d:eb:0d:
93:50:60:b8:71:c4:df:a7:63:66:47:26:56:5b:d5:
a9:24:71:6e:7c:d4:61:c7:ff:fc:1d:ea:02:dd:f1:
ca:5f:c0:8b:63:fe:11:0b:d6:8e:c8:fc:03:2c:68:
25:b0:cf:4a:d2:12:77:96:d2:f8:32:0e:15:61:9c:
41:55:62:0e:aa:24:01:df:f6:a6:ff:a1:bc:33:8c:
35:d2:f5:df:bd:e1:53:65:a3:70:82:da:a8:02:69:
34:92:95:9c:db:d9:f8:42:5d:00:a7:20:d4:11:38:
48:48:79:bd:3b:51:6a:01:8e:9d:7d:9d:fe:3d:22:
fe:49:42:81:85:2d:d1:07:7e:f3:75:25:7b:e1:1b:
2b:15:10:4f:b5:17:86:d7:cb:33:a4:b9:13:1a:6c:
15:3e:90:8e:b7:38:77:f3:b2:3a:ff:38:2e:4e:b6:
dd:7e:be:1b:51:22:7c:84:c3:35:c1:08:90:06:10:
92:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:2E:ED:B3:EF:7D:78:39:C6:22:23:1F:82:61:84:D4:27:F9:F0:75
X509v3 Authority Key Identifier:
keyid:FE:D7:73:39:D9:38:BE:F0:87:59:92:93:C2:01:B3:B9:F8:22:36:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_tdzOdk4vvCHWZKTwgGzufgiNiM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/bfb817-7e2d-4458-bab1-d1750020caf5/1/_tdzOdk4vvCHWZKTwgGzufgiNiM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/bfb817-7e2d-4458-bab1-d1750020caf5/1/_tdzOdk4vvCHWZKTwgGzufgiNiM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:02:02:de:ab:c7:e0:2e:c9:c4:61:97:a2:8b:94:90:45:1c:
0b:c5:97:61:8b:17:2f:64:8a:11:3e:49:70:4f:d1:b0:fc:d0:
c7:f0:67:20:2d:d3:0b:07:8d:f0:24:e1:df:88:2c:83:cd:3f:
9c:83:49:eb:f8:4c:ac:cb:7f:83:8c:f1:d2:14:87:9f:3b:7c:
be:9f:13:b2:f2:04:fa:1d:8c:a2:53:d2:2a:66:e9:52:d0:93:
5d:9f:2c:6e:7b:de:87:c4:0a:af:b6:a8:3a:21:af:9b:14:c7:
4e:90:37:cb:c5:cf:40:d4:d9:07:16:c6:8d:29:1c:75:e2:4d:
c2:da:db:4a:49:ae:8e:d0:e1:36:76:f0:27:e5:5c:5e:77:57:
de:bc:2f:68:ad:2a:e5:fd:bf:20:1e:88:88:a7:6f:fb:1a:22:
90:0f:69:b6:a2:21:fa:12:9e:33:02:2c:9f:ad:e3:42:b5:12:
96:af:3e:e3:a2:34:c4:0a:14:5a:9a:6e:18:d0:b7:df:8c:62:
f4:0a:72:5c:eb:4c:bd:14:dd:0c:a5:ba:8a:30:96:cb:8d:a9:
6e:2c:f5:45:40:b6:61:10:67:44:47:89:41:1a:67:24:9b:27:
4e:b7:ae:e0:72:6f:50:62:08:7f:17:fb:8f:5f:90:17:4e:2f:
bf:01:56:ee
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4ebE7YJqxHHE/doo9WngcqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlZDc3MzM5ZDkzOGJlZjA4NzU5OTI5M2MyMDFiM2I5Zjgy
MjM2MjMwHhcNMjYwNTEyMjMwMTE0WhcNMjYwNTEzMjMwMTE0WjAzMTEwLwYDVQQD
EyhiZTJlZWRiM2VmN2Q3ODM5YzYyMjIzMWY4MjYxODRkNDI3ZjlmMDc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtFY80gLFUOEHjKzq1j95EHGlmS35
9B9xhfK0otTN1iaO+/znz/TU4lzRI2ZmRuWuIdfSXsTvcX0SEiJvyI80Y/6DtjXp
5MA96w2TUGC4ccTfp2NmRyZWW9WpJHFufNRhx//8HeoC3fHKX8CLY/4RC9aOyPwD
LGglsM9K0hJ3ltL4Mg4VYZxBVWIOqiQB3/am/6G8M4w10vXfveFTZaNwgtqoAmk0
kpWc29n4Ql0ApyDUEThISHm9O1FqAY6dfZ3+PSL+SUKBhS3RB37zdSV74RsrFRBP
tReG18szpLkTGmwVPpCOtzh387I6/zguTrbdfr4bUSJ8hMM1wQiQBhCShQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL4u7bPvfXg5xiIjH4JhhNQn+fB1MB8GA1UdIwQY
MBaAFP7XcznZOL7wh1mSk8IBs7n4IjYjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX3Rkek9kazR2dkNIV1pLVHdnR3p1ZmdpTmlNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS9iZmI4MTctN2UyZC00NDU4LWJhYjEt
ZDE3NTAwMjBjYWY1LzEvX3Rkek9kazR2dkNIV1pLVHdnR3p1ZmdpTmlNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYS9iZmI4MTctN2UyZC00NDU4LWJhYjEtZDE3NTAwMjBjYWY1
LzEvX3Rkek9kazR2dkNIV1pLVHdnR3p1ZmdpTmlNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbgIC3qvH
4C7JxGGXoouUkEUcC8WXYYsXL2SKET5JcE/RsPzQx/BnIC3TCweN8CTh34gsg80/
nINJ6/hMrMt/g4zx0hSHnzt8vp8TsvIE+h2MolPSKmbpUtCTXZ8sbnveh8QKr7ao
OiGvmxTHTpA3y8XPQNTZBxbGjSkcdeJNwtrbSkmujtDhNnbwJ+VcXndX3rwvaK0q
5f2/IB6IiKdv+xoikA9ptqIh+hKeMwIsn63jQrUSlq8+46I0xAoUWppuGNC334xi
9ApyXOtMvRTdDKW6ijCWy42pbiz1RUC2YRBnREeJQRpnJJsnTreu4HJvUGIIfxf7
j1+QF04vvwFW7g==
-----END CERTIFICATE-----
Generated at Wed May 13 03:20:22 2026 by rpki-client