Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/6094af-72c5-4eb5-98ea-0e2ea6a02182/1/TDOTsqG9eRmFmAeDirHjsAN7i08.mft
File: TDOTsqG9eRmFmAeDirHjsAN7i08.mft (raw, json)
Hash identifier: y012P/Cng1ZER58iCDFBebMZFY6KyDU4Ipj/6vGv/OQ=
Subject key identifier: 33:DE:89:8A:5B:0F:9D:FC:93:93:32:EC:98:DF:2D:7C:01:2C:EA:BF
Authority key identifier: 4C:33:93:B2:A1:BD:79:19:85:98:07:83:8A:B1:E3:B0:03:7B:8B:4F
Certificate issuer: /CN=4c3393b2a1bd7919859807838ab1e3b0037b8b4f
Certificate serial: 019D292919DDFFB379F3BD6B55DB8707A85D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TDOTsqG9eRmFmAeDirHjsAN7i08.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/6094af-72c5-4eb5-98ea-0e2ea6a02182/1/TDOTsqG9eRmFmAeDirHjsAN7i08.mft
Manifest number: 0F83
Signing time: Thu 26 Mar 2026 08:00:52 +0000
Manifest this update: Thu 26 Mar 2026 08:00:52 +0000
Manifest next update: Fri 27 Mar 2026 08:00:52 +0000
Files and hashes: 1: MZGCF8jJAiyoJpfcfKYeIqU-Sm0.roa (hash: skXEJp7MsTuCw1bxF6Ss3mHgzce5kN4hSKRqdlY6UhE=)
2: TDOTsqG9eRmFmAeDirHjsAN7i08.crl (hash: Xd91pUOAE7IiRXV1niD3jpkD2/2ifF0vnbaPuwXz7Ls=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/6094af-72c5-4eb5-98ea-0e2ea6a02182/1/TDOTsqG9eRmFmAeDirHjsAN7i08.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/6094af-72c5-4eb5-98ea-0e2ea6a02182/1/TDOTsqG9eRmFmAeDirHjsAN7i08.mft
rsync://rpki.ripe.net/repository/DEFAULT/TDOTsqG9eRmFmAeDirHjsAN7i08.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 08:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:29:19:dd:ff:b3:79:f3:bd:6b:55:db:87:07:a8:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c3393b2a1bd7919859807838ab1e3b0037b8b4f
Validity
Not Before: Mar 26 08:00:52 2026 GMT
Not After : Mar 27 08:00:52 2026 GMT
Subject: CN=33de898a5b0f9dfc939332ec98df2d7c012ceabf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:7c:41:d3:9c:51:22:f3:6b:7f:95:52:90:c4:
0b:fd:e3:96:f6:96:3b:99:20:9a:42:2e:2b:5f:70:
18:b8:a6:bb:5b:09:1c:68:e4:12:69:ed:61:c4:ad:
72:ba:b7:36:87:2b:5c:68:15:e7:e8:34:36:08:c3:
a8:18:8a:9c:f9:34:67:40:8b:39:d6:9e:04:70:a7:
27:dc:27:e9:4a:3b:bb:a9:58:b2:f5:70:6b:5b:1d:
f3:cf:e3:71:e0:3d:af:b7:25:a4:7f:1a:34:7c:af:
e5:37:15:0d:94:13:b8:41:39:30:f0:e6:89:6e:a1:
a4:2e:77:a5:1f:69:00:8f:75:81:94:62:05:04:88:
39:b2:90:52:a0:0d:bb:40:b8:86:8e:40:2c:18:8e:
16:f6:d0:38:b0:1c:6e:62:3a:ad:77:d3:5e:3d:75:
84:df:e6:ad:1e:20:3c:84:f8:8a:e3:8b:4d:41:b5:
ae:0e:cd:05:11:37:67:df:00:dc:44:cb:62:87:32:
ba:23:a2:9b:6e:26:f0:88:e9:45:ec:ee:b2:7a:d3:
42:cb:5c:2b:c8:90:1e:f4:58:3c:83:06:3a:65:ec:
fd:9b:49:5d:09:bc:88:23:03:07:09:cb:9a:13:c1:
16:5f:8a:7d:3c:94:17:63:8d:64:8b:c2:5a:95:64:
7b:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:DE:89:8A:5B:0F:9D:FC:93:93:32:EC:98:DF:2D:7C:01:2C:EA:BF
X509v3 Authority Key Identifier:
keyid:4C:33:93:B2:A1:BD:79:19:85:98:07:83:8A:B1:E3:B0:03:7B:8B:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TDOTsqG9eRmFmAeDirHjsAN7i08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/6094af-72c5-4eb5-98ea-0e2ea6a02182/1/TDOTsqG9eRmFmAeDirHjsAN7i08.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/6094af-72c5-4eb5-98ea-0e2ea6a02182/1/TDOTsqG9eRmFmAeDirHjsAN7i08.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:96:05:5d:2f:1a:74:47:72:60:6f:ec:38:22:43:c3:35:3a:
77:c8:60:37:7f:be:fd:00:e9:ed:e8:28:54:e7:f5:2f:66:f5:
cb:d7:10:20:22:9d:42:80:36:32:fc:f3:0c:51:a3:11:b5:1d:
98:3c:75:0b:40:c6:3e:eb:37:e8:12:c2:3f:71:91:2d:12:d9:
d1:2b:89:f3:62:2e:aa:ec:21:6e:4d:19:95:24:6c:77:9e:83:
f6:2c:0e:8d:05:44:a9:4f:42:d4:b7:6a:b3:6d:aa:c6:fe:55:
a8:bc:16:5a:1e:d6:d3:f3:49:0f:cd:27:30:16:a7:f8:0f:aa:
54:67:14:6d:4e:16:14:62:d5:18:af:41:dd:96:75:da:1f:7b:
0f:1b:cc:48:5e:bb:18:35:9e:01:5b:b1:4d:47:95:2a:ee:b2:
41:7c:6f:ee:d5:38:7e:69:6e:39:1d:89:f6:28:df:ea:8d:1b:
6e:3e:70:a5:95:62:55:73:57:72:d9:ba:52:c5:c4:ad:7d:c2:
0e:6a:eb:b0:d2:8b:fe:5a:f9:03:49:e8:a2:e2:2b:7b:b9:36:
29:49:bd:98:7c:3d:58:0b:25:a3:fa:60:30:2a:7f:48:d7:8b:
3c:3f:b1:cf:32:fc:4e:15:52:8f:0f:58:55:6f:2f:76:43:55:
22:e5:52:c3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0pKRnd/7N5871rVduHB6hdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjMzM5M2IyYTFiZDc5MTk4NTk4MDc4MzhhYjFlM2IwMDM3
YjhiNGYwHhcNMjYwMzI2MDgwMDUyWhcNMjYwMzI3MDgwMDUyWjAzMTEwLwYDVQQD
EygzM2RlODk4YTViMGY5ZGZjOTM5MzMyZWM5OGRmMmQ3YzAxMmNlYWJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtXxB05xRIvNrf5VSkMQL/eOW9pY7
mSCaQi4rX3AYuKa7WwkcaOQSae1hxK1yurc2hytcaBXn6DQ2CMOoGIqc+TRnQIs5
1p4EcKcn3CfpSju7qViy9XBrWx3zz+Nx4D2vtyWkfxo0fK/lNxUNlBO4QTkw8OaJ
bqGkLnelH2kAj3WBlGIFBIg5spBSoA27QLiGjkAsGI4W9tA4sBxuYjqtd9NePXWE
3+atHiA8hPiK44tNQbWuDs0FETdn3wDcRMtihzK6I6KbbibwiOlF7O6yetNCy1wr
yJAe9Fg8gwY6Zez9m0ldCbyIIwMHCcuaE8EWX4p9PJQXY41ki8JalWR74QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDPeiYpbD538k5My7JjfLXwBLOq/MB8GA1UdIwQY
MBaAFEwzk7KhvXkZhZgHg4qx47ADe4tPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVERPVHNxRzllUm1GbUFlRGlySGpzQU43aTA4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi82MDk0YWYtNzJjNS00ZWI1LTk4ZWEt
MGUyZWE2YTAyMTgyLzEvVERPVHNxRzllUm1GbUFlRGlySGpzQU43aTA4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi82MDk0YWYtNzJjNS00ZWI1LTk4ZWEtMGUyZWE2YTAyMTgy
LzEvVERPVHNxRzllUm1GbUFlRGlySGpzQU43aTA4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFZYFXS8a
dEdyYG/sOCJDwzU6d8hgN3++/QDp7egoVOf1L2b1y9cQICKdQoA2MvzzDFGjEbUd
mDx1C0DGPus36BLCP3GRLRLZ0SuJ82Iuquwhbk0ZlSRsd56D9iwOjQVEqU9C1Ldq
s22qxv5VqLwWWh7W0/NJD80nMBan+A+qVGcUbU4WFGLVGK9B3ZZ12h97DxvMSF67
GDWeAVuxTUeVKu6yQXxv7tU4fmluOR2J9ijf6o0bbj5wpZViVXNXctm6UsXErX3C
DmrrsNKL/lr5A0noouIre7k2KUm9mHw9WAslo/pgMCp/SNeLPD+xzzL8ThVSjw9Y
VW8vdkNVIuVSww==
-----END CERTIFICATE-----
Generated at Thu Mar 26 16:52:48 2026 by rpki-client