Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e6a3c7-38d5-4540-b925-92bad5641598/1/Tdgz3893GGXftIVZ4fHG-TWOXrs.mft
File: Tdgz3893GGXftIVZ4fHG-TWOXrs.mft (raw, json)
Hash identifier: BLCtknQBJKAfHilZp+qFVbNE2C/TxbnONndM/UUpJI4=
Subject key identifier: BA:17:76:09:8E:68:53:CF:AC:1C:40:A9:F8:5C:51:0C:3B:DE:88:48
Authority key identifier: 4D:D8:33:DF:CF:77:18:65:DF:B4:85:59:E1:F1:C6:F9:35:8E:5E:BB
Certificate issuer: /CN=4dd833dfcf771865dfb48559e1f1c6f9358e5ebb
Certificate serial: 019FF8DA3306FF0422A8F0186AB2AF0A35AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tdgz3893GGXftIVZ4fHG-TWOXrs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e6a3c7-38d5-4540-b925-92bad5641598/1/Tdgz3893GGXftIVZ4fHG-TWOXrs.mft
Manifest number: 0128
Signing time: Thu 13 Aug 2026 02:01:17 +0000
Manifest this update: Thu 13 Aug 2026 02:01:17 +0000
Manifest next update: Fri 14 Aug 2026 02:01:17 +0000
Files and hashes: 1: Tdgz3893GGXftIVZ4fHG-TWOXrs.crl (hash: nHeEgjHHMqQRUSL+FDJM4LjVUgfi/03q6pnxlwi0bdI=)
2: vY2tTuvU2bXmD8ZEra6Cc_X15hw.asa (hash: fzDYYNkCwUZhlvkjfrFr/hgbEcIoXdhFh+55Z0wgexM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/e6a3c7-38d5-4540-b925-92bad5641598/1/Tdgz3893GGXftIVZ4fHG-TWOXrs.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/e6a3c7-38d5-4540-b925-92bad5641598/1/Tdgz3893GGXftIVZ4fHG-TWOXrs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tdgz3893GGXftIVZ4fHG-TWOXrs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 01:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f8:da:33:06:ff:04:22:a8:f0:18:6a:b2:af:0a:35:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4dd833dfcf771865dfb48559e1f1c6f9358e5ebb
Validity
Not Before: Aug 13 02:01:17 2026 GMT
Not After : Aug 14 02:01:17 2026 GMT
Subject: CN=ba1776098e6853cfac1c40a9f85c510c3bde8848
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:cb:32:e6:d6:2f:2a:35:c4:4d:c6:25:c3:2f:
75:32:21:92:22:59:99:1a:b6:61:ce:ff:75:84:c0:
e7:31:ab:2d:21:42:59:76:0d:f9:b0:72:fa:22:89:
77:98:3f:b6:35:82:ea:74:6b:93:ab:fb:08:7b:2b:
85:23:f3:21:53:3e:25:32:fa:82:96:ef:ab:93:0f:
91:89:0c:c1:c5:00:a2:55:cd:8d:09:e5:51:a5:e8:
42:c7:d0:eb:91:16:df:da:8f:bf:ee:9e:bf:63:5c:
05:aa:24:50:4a:70:c3:4d:ed:ad:42:3d:aa:9a:c2:
bb:d4:ca:65:f4:10:17:10:aa:7c:99:0e:ab:9f:0e:
73:d9:00:5c:19:a5:7f:36:2d:ca:c7:b7:20:ec:e7:
c8:e3:52:46:99:e3:c6:8f:95:7b:00:c5:10:7e:1e:
23:e9:4b:26:3f:7f:ed:5b:40:29:fc:a0:d9:19:90:
f9:5a:4c:c5:2b:81:25:65:e6:3c:cb:5b:fa:34:14:
12:a9:5a:54:c2:4f:ec:c4:b3:a1:5b:e3:7d:ae:d2:
6a:51:33:1d:76:b8:71:3e:71:f7:5b:05:9d:12:c8:
cd:e8:bc:f9:52:58:de:ef:bf:9c:83:41:d8:14:e2:
80:23:a2:9f:4c:ce:b4:af:e4:40:62:7f:a9:76:39:
93:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:17:76:09:8E:68:53:CF:AC:1C:40:A9:F8:5C:51:0C:3B:DE:88:48
X509v3 Authority Key Identifier:
keyid:4D:D8:33:DF:CF:77:18:65:DF:B4:85:59:E1:F1:C6:F9:35:8E:5E:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tdgz3893GGXftIVZ4fHG-TWOXrs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e6a3c7-38d5-4540-b925-92bad5641598/1/Tdgz3893GGXftIVZ4fHG-TWOXrs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e6a3c7-38d5-4540-b925-92bad5641598/1/Tdgz3893GGXftIVZ4fHG-TWOXrs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:ba:ed:68:58:8f:11:04:58:38:3e:de:94:fb:f8:3e:e0:88:
e4:36:c3:91:af:a9:9c:cc:b9:f9:38:f5:dd:d2:a7:a6:04:af:
bd:68:02:81:8f:06:1c:75:2d:a5:fb:63:29:71:96:7a:c6:8d:
9d:7c:96:d7:b3:bf:59:13:04:a9:80:ee:63:f6:65:4e:23:e6:
f9:77:17:0e:80:24:0f:46:66:57:49:ac:f2:1b:5b:19:1a:1a:
8f:28:cd:a0:21:75:ee:b3:8f:e4:3d:e2:46:fb:cb:aa:40:d3:
fa:d5:e4:c3:ab:f6:91:8c:30:3e:32:04:ea:d0:4e:6f:98:c8:
8c:93:86:82:ae:86:2b:89:99:82:eb:1d:a4:52:6d:ff:59:e0:
97:c8:bd:0a:7b:06:7a:0c:9b:5a:03:da:44:4c:73:78:ec:de:
98:ca:c5:9f:60:3a:79:7c:96:6e:32:a4:05:b8:c0:79:47:09:
11:c4:f3:41:3a:83:43:45:70:19:b8:b3:c6:10:2d:cd:37:77:
94:17:01:72:71:c8:70:c6:f9:f4:81:44:f2:29:40:99:63:db:
46:44:df:46:cd:88:d7:f7:98:6f:14:d7:d3:77:87:c1:49:56:
4a:3f:45:c4:cb:69:b2:95:12:5f:cc:12:b1:bc:b1:57:26:a3:
8a:ef:31:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 08:02:42 2026 by rpki-client