Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/c9d523-0bb9-4573-9595-76a3a10a26f2/1/TdA6WGuXinCqqC4JWKkBUucmedk.mft
File: TdA6WGuXinCqqC4JWKkBUucmedk.mft (raw, json)
Hash identifier: JnllOy5QHFTY3R4owQy3L44mXCwEIkJHEjkL2BV2Lh8=
Subject key identifier: 7C:FE:D7:A5:CF:C6:A2:85:15:3A:46:7B:38:A5:93:57:F4:6D:FF:F9
Authority key identifier: 4D:D0:3A:58:6B:97:8A:70:AA:A8:2E:09:58:A9:01:52:E7:26:79:D9
Certificate issuer: /CN=4dd03a586b978a70aaa82e0958a90152e72679d9
Certificate serial: 019D38D3B28B30302F227AADFE0957D64CA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TdA6WGuXinCqqC4JWKkBUucmedk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/c9d523-0bb9-4573-9595-76a3a10a26f2/1/TdA6WGuXinCqqC4JWKkBUucmedk.mft
Manifest number: 0AF0
Signing time: Sun 29 Mar 2026 09:01:30 +0000
Manifest this update: Sun 29 Mar 2026 09:01:30 +0000
Manifest next update: Mon 30 Mar 2026 09:01:30 +0000
Files and hashes: 1: FKpOhOuuXOF2CQyUBzWT1pdpVqc.roa (hash: ysT9E+YNysEYFfe5RzvJVpbtqR6v2fUqt40v4tEcOBQ=)
2: TdA6WGuXinCqqC4JWKkBUucmedk.crl (hash: MrDnGOpmQaPOauw8MPZ24AAeDa7rmlSCOTsEMm5HeoM=)
3: ttNXspnBYOBylc9inYKHFOll37k.roa (hash: RLGAiX60Eg9+/H6cmMZLT7RRPoDY5hArHpeHbk6ZQf8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/c9d523-0bb9-4573-9595-76a3a10a26f2/1/TdA6WGuXinCqqC4JWKkBUucmedk.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/c9d523-0bb9-4573-9595-76a3a10a26f2/1/TdA6WGuXinCqqC4JWKkBUucmedk.mft
rsync://rpki.ripe.net/repository/DEFAULT/TdA6WGuXinCqqC4JWKkBUucmedk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:b2:8b:30:30:2f:22:7a:ad:fe:09:57:d6:4c:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4dd03a586b978a70aaa82e0958a90152e72679d9
Validity
Not Before: Mar 29 09:01:30 2026 GMT
Not After : Mar 30 09:01:30 2026 GMT
Subject: CN=7cfed7a5cfc6a285153a467b38a59357f46dfff9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:c0:f5:fa:e3:c4:70:6d:86:75:5a:62:48:dc:
86:54:50:8a:5e:61:68:74:fb:a4:31:bd:93:a8:c8:
86:fa:a6:0a:8e:29:ad:97:2b:b1:c1:10:eb:19:81:
b6:32:dd:15:56:36:f2:87:3b:cf:ed:40:43:b0:df:
1b:96:ab:ea:6a:a7:e6:79:7c:27:4e:77:2e:5c:19:
a8:6c:48:22:29:4b:ec:75:64:86:fe:f1:bb:80:fa:
5c:0e:b4:8d:79:cc:13:95:60:d5:e1:17:5f:1e:c7:
d3:27:74:fd:a6:95:50:35:b6:d4:ea:e4:1a:38:24:
ea:8d:55:e2:85:12:04:26:0a:a0:29:f2:33:90:c8:
d6:d8:11:a2:93:c6:c9:14:8a:8c:ab:cb:65:4d:86:
93:1f:fd:12:3c:42:5c:3f:ff:a6:ea:59:0b:ce:ce:
4c:93:7d:70:84:b7:57:1f:dd:8d:d7:f7:0b:ab:db:
ca:1d:ef:8c:c5:86:c2:a8:99:46:26:e6:0e:50:ef:
6e:ba:a0:1d:62:aa:ce:29:1f:dd:3e:3c:98:5a:6e:
34:20:95:fb:7c:7f:7e:d0:de:63:02:09:02:39:c2:
65:af:81:cc:12:87:7a:ee:4d:39:2f:04:52:b8:35:
44:a8:14:f8:44:ac:d6:34:7e:2b:76:89:84:13:95:
64:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:FE:D7:A5:CF:C6:A2:85:15:3A:46:7B:38:A5:93:57:F4:6D:FF:F9
X509v3 Authority Key Identifier:
keyid:4D:D0:3A:58:6B:97:8A:70:AA:A8:2E:09:58:A9:01:52:E7:26:79:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TdA6WGuXinCqqC4JWKkBUucmedk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/c9d523-0bb9-4573-9595-76a3a10a26f2/1/TdA6WGuXinCqqC4JWKkBUucmedk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/c9d523-0bb9-4573-9595-76a3a10a26f2/1/TdA6WGuXinCqqC4JWKkBUucmedk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:64:44:6f:1b:8c:bc:74:dd:21:15:e5:e6:85:1c:20:05:83:
1b:ac:91:7a:cd:34:af:df:96:8b:15:ae:9c:fd:e7:16:03:d4:
dc:00:f9:bf:ea:d4:f9:c5:7d:cf:21:af:60:a6:8a:b0:d3:2a:
3b:bb:1a:6c:64:6f:73:2d:b7:e5:a0:8d:09:32:a6:60:1c:17:
1d:cb:22:bc:ce:0a:16:02:b1:bd:56:1c:9b:aa:7e:1c:5c:fc:
32:e1:5e:85:58:fb:fb:48:5f:85:4c:f1:a4:21:bf:2d:3e:fa:
61:ae:06:37:30:92:ef:b1:21:90:58:ee:43:9e:7a:4f:9d:03:
67:cd:a6:41:7d:a2:db:d1:d1:32:e7:bc:28:ae:18:c0:c9:93:
c9:ce:15:83:86:a0:6d:46:f6:5b:c6:9e:f3:71:7c:99:75:68:
60:64:b6:27:bd:78:71:18:8c:cd:e1:ac:62:01:cf:66:8f:7f:
14:24:33:75:b7:0e:5c:84:db:ae:7d:f6:d1:81:8e:98:1a:6e:
62:cd:28:d1:7d:7f:d0:7b:4c:97:70:32:5c:3a:b0:7f:83:32:
4c:7b:eb:0d:f8:08:e6:7e:97:1e:8d:d8:bd:52:88:a6:c1:29:
07:0d:4b:fb:c8:a1:2e:b0:20:c0:89:b1:82:3b:4d:ec:2f:f6:
88:39:7f:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:05:00 2026 by rpki-client