Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/19/c9d523-0bb9-4573-9595-76a3a10a26f2/1/TdA6WGuXinCqqC4JWKkBUucmedk.mft
File: TdA6WGuXinCqqC4JWKkBUucmedk.mft (raw, json)
Hash identifier: UpgDlVn65j5I6WnKKULveydiIiAx7uArXZUjjBgqQ80=
Subject key identifier: 97:04:CF:9B:AD:5E:1A:80:69:07:DB:38:C5:2C:F6:66:17:B7:E6:AB
Authority key identifier: 4D:D0:3A:58:6B:97:8A:70:AA:A8:2E:09:58:A9:01:52:E7:26:79:D9
Certificate issuer: /CN=4dd03a586b978a70aaa82e0958a90152e72679d9
Certificate serial: 01A18F423416B119536DEE7339F0AABCF350
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TdA6WGuXinCqqC4JWKkBUucmedk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/c9d523-0bb9-4573-9595-76a3a10a26f2/1/TdA6WGuXinCqqC4JWKkBUucmedk.mft
Manifest number: 0D2F
Signing time: Sat 31 Oct 2026 00:00:42 +0000
Manifest this update: Sat 31 Oct 2026 00:00:42 +0000
Manifest next update: Sun 01 Nov 2026 00:00:42 +0000
Files and hashes: 1: FKpOhOuuXOF2CQyUBzWT1pdpVqc.roa (hash: ysT9E+YNysEYFfe5RzvJVpbtqR6v2fUqt40v4tEcOBQ=)
2: TdA6WGuXinCqqC4JWKkBUucmedk.crl (hash: m6ozrjWEgLuRxCrXvGQt72zrM0Svzd9Bbb/cKa12Cns=)
3: ttNXspnBYOBylc9inYKHFOll37k.roa (hash: RLGAiX60Eg9+/H6cmMZLT7RRPoDY5hArHpeHbk6ZQf8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/c9d523-0bb9-4573-9595-76a3a10a26f2/1/TdA6WGuXinCqqC4JWKkBUucmedk.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/c9d523-0bb9-4573-9595-76a3a10a26f2/1/TdA6WGuXinCqqC4JWKkBUucmedk.mft
rsync://rpki.ripe.net/repository/DEFAULT/TdA6WGuXinCqqC4JWKkBUucmedk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 31 Oct 2026 17:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:8f:42:34:16:b1:19:53:6d:ee:73:39:f0:aa:bc:f3:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4dd03a586b978a70aaa82e0958a90152e72679d9
Validity
Not Before: Oct 31 00:00:42 2026 GMT
Not After : Nov 1 00:00:42 2026 GMT
Subject: CN=9704cf9bad5e1a806907db38c52cf66617b7e6ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:18:00:97:c5:ce:b3:aa:b7:71:80:e7:7e:a5:
3f:b5:e2:46:13:88:3a:60:92:ad:64:4f:80:c7:b2:
e3:4e:3b:2b:29:e5:59:a8:05:ab:69:a8:10:dd:91:
5b:42:69:75:aa:50:0a:7a:71:8b:44:55:0e:9b:59:
24:3c:91:dd:9b:e2:56:2e:46:42:2a:74:b9:0f:5f:
73:73:95:a9:e2:73:ed:72:fc:12:69:e2:3c:0e:4b:
1f:43:7e:be:75:e9:e2:d5:9d:95:f3:1e:cc:4b:10:
fd:7b:26:b3:b9:37:3f:5f:bd:83:52:b8:08:1b:5f:
80:5c:14:a7:d2:c8:d4:7e:21:30:46:95:0c:10:c3:
26:2e:30:70:5a:56:fb:25:7a:40:c3:a9:01:26:91:
61:c3:8e:7b:aa:20:af:ea:02:b0:44:d5:5f:32:05:
22:67:af:5e:e3:f6:49:e3:50:9f:1d:14:af:01:53:
b4:0e:b9:9a:98:a2:17:fb:ca:2c:03:ff:9c:ef:1a:
13:db:19:57:eb:c4:ad:d7:c9:b2:4a:7e:c0:85:ba:
6d:0e:4d:7c:0c:a6:8e:64:da:2b:a4:40:ef:0a:7c:
ce:57:6b:2c:80:cb:a6:50:fd:2c:74:94:60:ee:32:
e9:3e:eb:d6:25:f8:9d:97:06:8b:2f:31:d9:9b:6d:
6b:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:04:CF:9B:AD:5E:1A:80:69:07:DB:38:C5:2C:F6:66:17:B7:E6:AB
X509v3 Authority Key Identifier:
keyid:4D:D0:3A:58:6B:97:8A:70:AA:A8:2E:09:58:A9:01:52:E7:26:79:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TdA6WGuXinCqqC4JWKkBUucmedk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/c9d523-0bb9-4573-9595-76a3a10a26f2/1/TdA6WGuXinCqqC4JWKkBUucmedk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/c9d523-0bb9-4573-9595-76a3a10a26f2/1/TdA6WGuXinCqqC4JWKkBUucmedk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:38:09:bd:09:bf:e0:61:9b:41:28:a8:64:f6:e3:6f:38:a6:
1f:69:f3:a5:a3:44:80:50:59:a8:41:88:77:e8:0a:dd:33:3d:
63:f5:d6:dd:a7:71:77:00:f4:f9:7f:d2:28:9b:d2:9d:58:2e:
1d:76:71:5a:e1:b4:e0:96:9f:61:83:60:45:71:35:56:38:b1:
3d:26:95:f5:0f:39:06:d2:4b:a2:1e:5f:86:f5:4f:56:ac:bc:
3c:b8:ba:41:b6:b6:49:d7:cc:46:49:c2:a2:39:f2:29:2c:8b:
fe:7a:43:6b:ac:36:d9:0b:a2:0e:3f:7a:b4:6d:71:ef:d7:b9:
2c:d6:18:41:ba:fc:7b:63:c7:31:3a:33:b9:1a:ac:aa:d0:83:
7d:52:23:87:a9:79:e7:53:5f:19:42:24:2b:32:4e:aa:b9:df:
40:58:43:29:6b:43:7b:46:ca:4e:e5:d9:b6:19:fc:58:12:7e:
8b:54:a6:78:07:7b:48:fe:d7:61:b6:80:73:1a:bf:91:24:a0:
49:7a:2e:b6:86:d7:6f:a7:97:59:9a:66:43:2f:16:54:9b:b1:
ce:69:c8:cf:99:ef:23:6f:68:55:15:a3:75:81:44:4d:c2:19:
8e:b6:7c:de:76:92:a1:12:d6:65:2e:d7:49:ab:c6:26:98:a0:
31:a9:a0:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 03:12:06 2026 by rpki-client