Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/19/c9d523-0bb9-4573-9595-76a3a10a26f2/1/TdA6WGuXinCqqC4JWKkBUucmedk.mft
File: TdA6WGuXinCqqC4JWKkBUucmedk.mft (raw, json)
Hash identifier: gTFL84eAigKHyLT7jZ/2ATsfsspkEI+Qp/kIl6oomoU=
Subject key identifier: 71:E2:CF:7A:B2:C4:1B:E7:83:0D:0A:CB:48:1F:AE:3D:3C:C2:00:AB
Authority key identifier: 4D:D0:3A:58:6B:97:8A:70:AA:A8:2E:09:58:A9:01:52:E7:26:79:D9
Certificate issuer: /CN=4dd03a586b978a70aaa82e0958a90152e72679d9
Certificate serial: 01A166B4B1B8C5DCB271EC5A4ACA8BC66DED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TdA6WGuXinCqqC4JWKkBUucmedk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/c9d523-0bb9-4573-9595-76a3a10a26f2/1/TdA6WGuXinCqqC4JWKkBUucmedk.mft
Manifest number: 0D1A
Signing time: Fri 23 Oct 2026 03:01:20 +0000
Manifest this update: Fri 23 Oct 2026 03:01:20 +0000
Manifest next update: Sat 24 Oct 2026 03:01:20 +0000
Files and hashes: 1: FKpOhOuuXOF2CQyUBzWT1pdpVqc.roa (hash: ysT9E+YNysEYFfe5RzvJVpbtqR6v2fUqt40v4tEcOBQ=)
2: TdA6WGuXinCqqC4JWKkBUucmedk.crl (hash: DYjbDO6KU470egAXFD9Ug/HHgeM25BZVLn2YKwPS6Bk=)
3: ttNXspnBYOBylc9inYKHFOll37k.roa (hash: RLGAiX60Eg9+/H6cmMZLT7RRPoDY5hArHpeHbk6ZQf8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/c9d523-0bb9-4573-9595-76a3a10a26f2/1/TdA6WGuXinCqqC4JWKkBUucmedk.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/c9d523-0bb9-4573-9595-76a3a10a26f2/1/TdA6WGuXinCqqC4JWKkBUucmedk.mft
rsync://rpki.ripe.net/repository/DEFAULT/TdA6WGuXinCqqC4JWKkBUucmedk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Oct 2026 19:43:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:66:b4:b1:b8:c5:dc:b2:71:ec:5a:4a:ca:8b:c6:6d:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4dd03a586b978a70aaa82e0958a90152e72679d9
Validity
Not Before: Oct 23 03:01:20 2026 GMT
Not After : Oct 24 03:01:20 2026 GMT
Subject: CN=71e2cf7ab2c41be7830d0acb481fae3d3cc200ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:8d:e4:22:5a:95:0e:9a:30:25:eb:2f:42:ba:
8e:82:c4:20:43:e1:d4:93:59:62:99:23:fe:16:dc:
b1:f3:7e:d6:b2:8f:38:fc:d3:11:f7:1b:d6:e4:4b:
4e:a3:b4:88:76:36:33:8e:a5:f2:e9:c4:fc:98:1d:
06:95:92:90:bf:60:b3:b6:fb:42:0b:8a:a9:b6:39:
61:a8:31:2a:e9:48:4e:10:59:09:69:24:52:1b:89:
4b:c4:78:8d:6c:78:10:15:94:e8:1f:46:4a:05:cd:
1d:8c:18:ad:c8:80:1a:1f:44:a0:08:21:0a:12:90:
b0:4d:88:80:05:b4:64:ae:ee:3c:aa:37:d2:e5:41:
64:22:19:c8:1a:4f:71:92:b2:f4:71:f4:8e:8c:a3:
79:0e:c7:f4:b8:19:55:6e:cb:99:d8:d9:0c:18:54:
5a:bb:66:6d:ab:86:b9:51:9d:ce:f6:6b:2d:e3:d5:
68:aa:3c:f8:92:f0:f2:e5:82:ac:34:e4:b2:6e:60:
0c:18:d0:39:dd:f5:14:e1:da:3e:a3:c7:4c:0c:2b:
2b:89:86:d5:f0:7a:c0:28:b9:c5:cc:79:31:80:3f:
47:f7:19:c4:de:f7:f3:e0:37:3d:9e:9d:bf:e4:fe:
a0:b8:86:0d:b3:c2:12:60:f2:52:8f:03:be:ca:9f:
14:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:E2:CF:7A:B2:C4:1B:E7:83:0D:0A:CB:48:1F:AE:3D:3C:C2:00:AB
X509v3 Authority Key Identifier:
keyid:4D:D0:3A:58:6B:97:8A:70:AA:A8:2E:09:58:A9:01:52:E7:26:79:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TdA6WGuXinCqqC4JWKkBUucmedk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/c9d523-0bb9-4573-9595-76a3a10a26f2/1/TdA6WGuXinCqqC4JWKkBUucmedk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/c9d523-0bb9-4573-9595-76a3a10a26f2/1/TdA6WGuXinCqqC4JWKkBUucmedk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:c8:de:dd:3b:2a:7a:ba:df:fd:20:c9:51:e9:d4:e0:6b:3f:
a2:46:33:2d:c4:df:92:3d:54:36:c3:23:43:f7:bc:2e:f6:e8:
a5:ba:bd:35:65:83:a4:98:81:25:3e:fd:13:c2:5b:7e:46:27:
6f:c7:93:14:c3:aa:e1:2b:3c:19:11:94:ef:f1:e2:44:b0:0c:
b4:e1:75:8d:48:97:97:aa:ad:d6:8e:e5:87:04:5c:8f:17:92:
35:20:14:f5:02:3e:3e:ca:91:96:cb:6d:cc:53:09:25:88:59:
f9:dd:e7:e8:a9:8d:5f:9a:1c:dd:5e:ac:4d:a4:6f:d7:5f:e5:
71:8a:ce:94:7f:6c:e3:17:2e:3b:b6:d8:a9:93:98:f8:b0:df:
db:80:f1:d3:d9:0c:67:19:4b:fa:e8:a0:8c:16:55:fb:e1:65:
88:c8:c3:18:95:3c:61:ac:ff:3b:93:f4:d6:c5:f7:b9:ff:8c:
67:4f:c6:68:5e:51:9f:89:bb:ff:c3:9b:59:33:4e:d3:90:07:
7f:0c:a2:92:9b:90:44:03:5e:47:d2:4d:79:00:56:2e:21:40:
39:29:8d:d0:02:f5:80:bf:70:f2:69:17:29:bc:3f:88:e1:49:
a4:6e:0f:df:2e:e1:17:a4:e0:d0:0c:07:c8:d9:bd:10:c8:2e:
74:2b:52:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 23 06:29:07 2026 by rpki-client