Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e6a3c7-38d5-4540-b925-92bad5641598/1/Tdgz3893GGXftIVZ4fHG-TWOXrs.mft
File: Tdgz3893GGXftIVZ4fHG-TWOXrs.mft (raw, json)
Hash identifier: +qs8Jh72iCfV36JB6L6oHqBkd1GZ0sdR7egnCUz/nCo=
Subject key identifier: 12:56:E0:3E:07:0F:CA:59:02:DB:BA:4D:7C:FF:04:CB:6D:C0:8E:F9
Authority key identifier: 4D:D8:33:DF:CF:77:18:65:DF:B4:85:59:E1:F1:C6:F9:35:8E:5E:BB
Certificate issuer: /CN=4dd833dfcf771865dfb48559e1f1c6f9358e5ebb
Certificate serial: 019DDE0D1D100C4FCAFBB900B9943BB0DCAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tdgz3893GGXftIVZ4fHG-TWOXrs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e6a3c7-38d5-4540-b925-92bad5641598/1/Tdgz3893GGXftIVZ4fHG-TWOXrs.mft
Manifest number: 11
Signing time: Thu 30 Apr 2026 11:01:34 +0000
Manifest this update: Thu 30 Apr 2026 11:01:34 +0000
Manifest next update: Fri 01 May 2026 11:01:34 +0000
Files and hashes: 1: Tdgz3893GGXftIVZ4fHG-TWOXrs.crl (hash: yuxn0/Xw4NDMbQBGeVA8y2ozpFjm96LprHeg/ZGelTc=)
2: vY2tTuvU2bXmD8ZEra6Cc_X15hw.asa (hash: fzDYYNkCwUZhlvkjfrFr/hgbEcIoXdhFh+55Z0wgexM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/e6a3c7-38d5-4540-b925-92bad5641598/1/Tdgz3893GGXftIVZ4fHG-TWOXrs.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/e6a3c7-38d5-4540-b925-92bad5641598/1/Tdgz3893GGXftIVZ4fHG-TWOXrs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tdgz3893GGXftIVZ4fHG-TWOXrs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 01 May 2026 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:de:0d:1d:10:0c:4f:ca:fb:b9:00:b9:94:3b:b0:dc:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4dd833dfcf771865dfb48559e1f1c6f9358e5ebb
Validity
Not Before: Apr 30 11:01:34 2026 GMT
Not After : May 1 11:01:34 2026 GMT
Subject: CN=1256e03e070fca5902dbba4d7cff04cb6dc08ef9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:24:6b:f7:b9:f3:06:d0:31:f2:9c:3d:a0:6e:
cf:5a:66:c8:29:5a:31:59:16:8e:bb:65:4a:1c:2b:
66:15:79:35:08:fd:91:a2:e2:e2:87:64:92:24:33:
9a:0d:a3:f4:4d:eb:d1:7c:8c:ca:2f:a1:8b:13:ad:
2c:5f:09:8c:d7:2b:3e:35:21:da:0a:0a:76:82:08:
2b:04:46:7b:46:f0:60:62:e6:d4:f2:0e:3e:90:3d:
53:43:4b:70:20:e6:3b:ce:38:2f:e1:f4:d1:f7:ec:
57:5c:96:73:06:89:a6:50:f6:c4:cf:3c:05:c7:ab:
c8:de:79:d2:cd:f2:0f:ea:09:a3:95:69:f6:44:94:
4f:f3:87:6d:6b:3b:ce:58:26:43:7d:37:3e:52:58:
6f:be:0f:b3:a1:02:e0:61:49:c2:f2:07:85:a5:14:
30:31:9d:8f:1e:bd:e7:fb:28:6d:30:34:58:44:69:
e9:60:56:e4:06:42:16:1d:4f:ed:ae:ff:1f:cc:c7:
30:38:6e:1f:f1:d7:28:ba:be:63:00:f8:41:6d:fd:
cb:cd:e6:c6:34:e4:5c:1d:4a:f9:34:40:3e:c4:69:
38:3f:b3:1f:ef:d2:7d:a9:7d:ef:fc:d6:ec:5d:00:
d7:a6:3e:10:b9:b2:93:de:5f:f4:f0:43:a0:95:76:
36:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:56:E0:3E:07:0F:CA:59:02:DB:BA:4D:7C:FF:04:CB:6D:C0:8E:F9
X509v3 Authority Key Identifier:
keyid:4D:D8:33:DF:CF:77:18:65:DF:B4:85:59:E1:F1:C6:F9:35:8E:5E:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tdgz3893GGXftIVZ4fHG-TWOXrs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e6a3c7-38d5-4540-b925-92bad5641598/1/Tdgz3893GGXftIVZ4fHG-TWOXrs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e6a3c7-38d5-4540-b925-92bad5641598/1/Tdgz3893GGXftIVZ4fHG-TWOXrs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:04:f8:ed:d1:0e:03:2c:be:d7:11:07:2d:3a:98:b7:7d:92:
9f:ef:0d:ef:a7:e6:92:e5:51:1c:dd:70:cf:44:c0:76:87:f9:
af:fe:b8:95:20:cb:01:7d:14:09:07:e6:6f:75:a3:b3:fd:5d:
54:ce:5d:60:91:8e:ac:d8:27:00:bb:d6:c2:2d:05:fd:f1:b1:
08:ad:66:98:9c:d6:c5:78:81:a0:6f:92:8b:8a:e9:09:e4:24:
81:4c:f4:d5:5c:d8:53:8e:30:ec:30:cb:50:77:16:c7:e3:a1:
3d:76:91:0a:db:3b:cb:19:34:d3:80:f3:61:02:d2:22:d6:dd:
ce:44:56:2f:68:f7:0b:24:8e:7f:1f:0d:5d:38:77:2b:b4:49:
b3:fe:7a:e3:ce:16:ea:94:26:cc:88:68:41:cd:03:c9:d9:80:
df:c3:bf:68:be:7e:0a:23:91:a9:00:e3:c9:db:e2:55:1c:44:
ff:90:75:72:52:a7:fa:90:a5:b5:94:87:64:cb:6c:03:ed:f9:
03:2c:32:ce:66:03:c7:d3:04:90:a2:15:15:ea:90:ed:38:5e:
3f:7e:b2:e6:a5:f5:05:37:bc:70:12:de:00:1b:ce:c7:40:c3:
43:d2:07:1a:01:5f:d1:98:fd:13:86:43:11:d4:3e:e5:3b:99:
f2:d9:4d:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 30 12:41:19 2026 by rpki-client