Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/da/bfb817-7e2d-4458-bab1-d1750020caf5/1/_tdzOdk4vvCHWZKTwgGzufgiNiM.mft
File: _tdzOdk4vvCHWZKTwgGzufgiNiM.mft (raw, json)
Hash identifier: /eMSfUpuIevXkcj7iwT85Vk+kB5jua0iSLmFK0IorTM=
Subject key identifier: E5:7B:E7:DB:DA:4A:3A:70:8C:30:AB:43:46:77:9B:1D:D7:E0:6D:B8
Authority key identifier: FE:D7:73:39:D9:38:BE:F0:87:59:92:93:C2:01:B3:B9:F8:22:36:23
Certificate issuer: /CN=fed77339d938bef087599293c201b3b9f8223623
Certificate serial: 01A0D796FD1B759908FA48B90876673D24E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_tdzOdk4vvCHWZKTwgGzufgiNiM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/bfb817-7e2d-4458-bab1-d1750020caf5/1/_tdzOdk4vvCHWZKTwgGzufgiNiM.mft
Manifest number: 1A01
Signing time: Fri 25 Sep 2026 08:03:11 +0000
Manifest this update: Fri 25 Sep 2026 08:03:11 +0000
Manifest next update: Sat 26 Sep 2026 08:03:11 +0000
Files and hashes: 1: _tdzOdk4vvCHWZKTwgGzufgiNiM.crl (hash: lSDOUt76c/xvI0GNxhcMiK3nfkrBjUbcPMfKnNdPcSI=)
2: dVMqcvXursPYfDYSCDAE4DhRFlc.roa (hash: Yq3X9779TMJZn56pp7FdF+bqg71vRgvQymxrtb6IBFY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/bfb817-7e2d-4458-bab1-d1750020caf5/1/_tdzOdk4vvCHWZKTwgGzufgiNiM.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/bfb817-7e2d-4458-bab1-d1750020caf5/1/_tdzOdk4vvCHWZKTwgGzufgiNiM.mft
rsync://rpki.ripe.net/repository/DEFAULT/_tdzOdk4vvCHWZKTwgGzufgiNiM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d7:96:fd:1b:75:99:08:fa:48:b9:08:76:67:3d:24:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fed77339d938bef087599293c201b3b9f8223623
Validity
Not Before: Sep 25 08:03:11 2026 GMT
Not After : Sep 26 08:03:11 2026 GMT
Subject: CN=e57be7dbda4a3a708c30ab4346779b1dd7e06db8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:69:35:7a:26:cc:3e:a2:97:4c:ab:97:7d:96:
35:a5:1e:d4:6b:60:c4:ed:fa:55:11:c5:02:92:9b:
b3:c6:a1:f8:5a:c5:78:79:f0:1a:6c:89:58:7f:1f:
89:8d:8d:3d:82:21:2b:57:31:14:69:4f:58:4b:9b:
b0:ca:31:07:ad:bd:f6:2b:3e:09:4d:4b:5f:20:d6:
68:19:7f:2e:5f:7b:d5:ce:cc:c1:62:9e:a7:ed:58:
39:c7:f6:fd:f7:80:58:eb:15:03:14:21:98:f1:5f:
b8:f5:c5:fe:1b:79:0e:40:f9:52:65:de:36:07:68:
76:9c:1c:cb:e5:b3:b5:c5:c5:2c:97:90:45:b1:5d:
69:09:4c:46:2f:9d:a0:ad:7b:c9:c4:ff:ce:d4:8f:
b5:cd:24:45:34:a5:2c:cf:50:ff:23:a8:b0:b3:e6:
70:16:42:0d:62:69:2c:ba:87:ca:33:60:e5:f5:a6:
86:25:bf:56:f6:d8:ff:36:6e:1c:73:3c:04:fb:9c:
e4:32:2b:20:8d:73:6f:ef:2c:14:f8:d5:2d:ce:b9:
85:7c:a0:01:86:4c:c4:1f:ce:73:e7:8c:41:78:97:
96:40:53:39:49:2e:83:ad:c4:96:2b:03:a3:2a:e1:
a8:45:ae:3f:58:db:e2:ab:16:68:08:67:2d:ea:92:
48:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:7B:E7:DB:DA:4A:3A:70:8C:30:AB:43:46:77:9B:1D:D7:E0:6D:B8
X509v3 Authority Key Identifier:
keyid:FE:D7:73:39:D9:38:BE:F0:87:59:92:93:C2:01:B3:B9:F8:22:36:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_tdzOdk4vvCHWZKTwgGzufgiNiM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/bfb817-7e2d-4458-bab1-d1750020caf5/1/_tdzOdk4vvCHWZKTwgGzufgiNiM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/bfb817-7e2d-4458-bab1-d1750020caf5/1/_tdzOdk4vvCHWZKTwgGzufgiNiM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:cb:a1:10:8d:d3:13:e7:5f:7f:05:16:32:b9:3a:4a:17:63:
44:a1:a5:e5:a7:12:21:ac:e8:1c:f6:5e:52:4a:03:2c:42:78:
3d:17:e2:e6:85:a3:79:36:c4:e8:b5:34:43:cc:4b:21:8f:86:
7e:7d:e6:fe:2d:ba:44:1e:2b:ad:d2:b3:2b:53:fc:93:95:4d:
f2:b6:0b:60:db:da:66:fc:46:de:4a:6b:a0:c0:d3:4c:b1:e0:
47:38:66:08:76:0f:f3:12:6a:47:c3:36:f6:17:7b:c7:43:7f:
fa:7c:3f:a4:3a:51:57:95:25:f1:a7:c8:c7:11:f3:e2:a4:52:
e3:ab:25:2b:47:ba:95:f4:eb:cb:cb:e7:b4:4e:e5:8e:05:38:
81:a3:58:bd:f2:69:1c:b1:91:db:e1:ea:91:9e:ad:9b:e2:40:
0a:77:b8:dd:b9:08:41:5b:07:b8:ce:2f:ca:bf:ce:b5:8d:ea:
8f:c2:2b:3b:a4:4d:c2:d7:1e:ed:a3:dc:74:68:68:4b:6a:63:
40:3d:f8:06:d0:a4:f0:91:3e:5a:17:df:3e:ed:b4:3e:27:61:
33:06:c2:8b:a0:36:8d:2a:97:bc:a8:36:ef:ad:f5:89:2f:12:
90:3d:29:d3:0b:f9:29:dc:a5:9a:e7:f3:1d:5f:e4:3b:c9:1a:
3e:7c:c8:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 19:54:13 2026 by rpki-client