Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/6b66b4-064c-42ee-a5ee-1a65b91bee58/1/TDxmXlHMTLXK8FuClIQ-JzOhPe4.mft
File: TDxmXlHMTLXK8FuClIQ-JzOhPe4.mft (raw, json)
Hash identifier: aO87+IKchX1SgkPIOqJHDZhLqt2TdQaHPedUAKBjhDI=
Subject key identifier: BD:2E:8F:88:4E:AE:A9:2C:4D:85:07:1F:77:86:8F:B5:EE:6F:F7:D8
Authority key identifier: 4C:3C:66:5E:51:CC:4C:B5:CA:F0:5B:82:94:84:3E:27:33:A1:3D:EE
Certificate issuer: /CN=4c3c665e51cc4cb5caf05b8294843e2733a13dee
Certificate serial: 01A00213E64DD2104AF40554799ED5001B92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TDxmXlHMTLXK8FuClIQ-JzOhPe4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/6b66b4-064c-42ee-a5ee-1a65b91bee58/1/TDxmXlHMTLXK8FuClIQ-JzOhPe4.mft
Manifest number: 0451
Signing time: Fri 14 Aug 2026 21:00:53 +0000
Manifest this update: Fri 14 Aug 2026 21:00:53 +0000
Manifest next update: Sat 15 Aug 2026 21:00:53 +0000
Files and hashes: 1: Hp24GG6uSG8sQb8jkFqa197vWxk.roa (hash: dVGmnh+jbiESkwvHH2VOIhilfiq/4OOnJSaQFQ2DP7Y=)
2: TDxmXlHMTLXK8FuClIQ-JzOhPe4.crl (hash: QuNb1RQHZzqQX2gIyqb0w+ZRKYTsHK1C/Q6F6Bhaqs8=)
3: lRU8wDW4-0iVJJtLo44chFkRx8E.roa (hash: 0Pbc57UJG9ycSR4zmKHD340x0t+fwY5oZ1MAnj7Pi4k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/6b66b4-064c-42ee-a5ee-1a65b91bee58/1/TDxmXlHMTLXK8FuClIQ-JzOhPe4.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/6b66b4-064c-42ee-a5ee-1a65b91bee58/1/TDxmXlHMTLXK8FuClIQ-JzOhPe4.mft
rsync://rpki.ripe.net/repository/DEFAULT/TDxmXlHMTLXK8FuClIQ-JzOhPe4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 21:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:02:13:e6:4d:d2:10:4a:f4:05:54:79:9e:d5:00:1b:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c3c665e51cc4cb5caf05b8294843e2733a13dee
Validity
Not Before: Aug 14 21:00:53 2026 GMT
Not After : Aug 15 21:00:53 2026 GMT
Subject: CN=bd2e8f884eaea92c4d85071f77868fb5ee6ff7d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:2d:72:98:76:f6:0d:f3:74:81:a9:ca:41:a2:
96:c5:6c:be:30:bf:70:f6:da:31:0b:0c:fe:a1:97:
8c:d8:bc:01:68:17:7e:79:14:8b:40:a7:26:0d:08:
c2:cb:83:22:cd:1b:04:15:a9:2d:44:bd:20:2d:39:
2f:b8:28:71:92:c5:d5:2b:de:0e:35:23:24:22:c8:
2a:5e:18:11:36:49:14:4c:b0:78:38:f4:87:9f:3d:
8d:de:0e:7b:8a:34:bc:a8:ce:46:94:13:c6:92:4a:
3c:cd:4a:c4:df:e3:7e:cc:8f:14:8a:09:c3:de:00:
2e:63:3a:ca:27:29:c3:78:9c:7e:07:68:15:62:77:
d3:d4:96:6a:7a:f1:e9:44:ce:58:a4:b8:45:98:2a:
3b:98:80:41:fb:08:8a:ef:39:8c:7e:bd:5c:c7:21:
b7:5e:d3:a8:e3:0e:b7:99:00:b4:c2:4e:7c:82:50:
d6:9d:d3:a7:37:9f:fd:1d:10:b3:bf:23:c0:00:f7:
03:3a:18:2d:71:74:1d:4e:ff:bf:05:9a:1e:b4:51:
44:bd:ad:b0:ea:70:3b:e5:2d:f9:4c:ad:9d:27:ad:
15:bc:bc:07:dc:38:a4:a6:47:b7:17:bf:c0:44:15:
95:cc:4a:be:cc:9b:34:0c:5e:a9:e9:ce:53:a8:b6:
ff:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:2E:8F:88:4E:AE:A9:2C:4D:85:07:1F:77:86:8F:B5:EE:6F:F7:D8
X509v3 Authority Key Identifier:
keyid:4C:3C:66:5E:51:CC:4C:B5:CA:F0:5B:82:94:84:3E:27:33:A1:3D:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TDxmXlHMTLXK8FuClIQ-JzOhPe4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/6b66b4-064c-42ee-a5ee-1a65b91bee58/1/TDxmXlHMTLXK8FuClIQ-JzOhPe4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/6b66b4-064c-42ee-a5ee-1a65b91bee58/1/TDxmXlHMTLXK8FuClIQ-JzOhPe4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:e9:84:d9:19:1f:fe:25:1e:2b:1b:2e:49:18:7c:ea:27:6b:
3c:53:1c:79:21:7b:8d:c6:30:66:ba:4f:9c:55:93:f2:12:17:
7b:39:02:9a:b1:60:26:02:97:a7:60:d6:6a:c8:b3:ba:40:84:
dc:21:6c:99:60:6b:dd:4a:fb:2f:1d:1d:5c:48:1b:08:ef:7d:
66:f0:42:3c:84:e7:9e:f6:ac:c3:b2:be:eb:6f:82:6d:a8:08:
e2:e0:d2:d9:5c:12:c9:d1:60:3a:e5:77:e7:ca:4f:2c:4a:8f:
1a:89:6f:dd:c5:34:2c:fa:d1:5d:19:c8:fd:7a:9c:76:72:0e:
24:d9:d6:be:42:fb:3a:f2:84:e0:57:90:7c:03:46:02:98:8a:
64:bc:39:ba:42:6a:96:90:bd:1d:ff:39:a2:a7:0d:21:e1:6f:
bd:bb:2d:b1:ed:1f:56:ef:d0:43:88:32:3a:ba:1d:02:a7:55:
a1:3e:c0:fa:e5:40:46:e1:2c:a3:7d:c8:2d:96:69:73:ab:a7:
59:8d:94:ac:94:45:c3:e3:99:74:51:79:af:c2:fa:42:77:fe:
ae:02:47:e9:bf:f3:7e:70:97:15:8a:d0:79:aa:c2:6f:02:b9:
46:80:da:fc:b0:1f:e6:f3:04:58:2f:c2:c1:9e:41:40:79:d2:
61:b4:2f:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 05:07:11 2026 by rpki-client