Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/6b66b4-064c-42ee-a5ee-1a65b91bee58/1/TDxmXlHMTLXK8FuClIQ-JzOhPe4.mft
File: TDxmXlHMTLXK8FuClIQ-JzOhPe4.mft (raw, json)
Hash identifier: eAxh9LOCrbm94JWqDKDq2pX6tAtFe0Bl6xk0/5oxvgQ=
Subject key identifier: AB:E7:AF:FF:5A:7F:4F:BC:52:3E:CC:8C:F6:87:92:BF:7D:1C:00:8D
Authority key identifier: 4C:3C:66:5E:51:CC:4C:B5:CA:F0:5B:82:94:84:3E:27:33:A1:3D:EE
Certificate issuer: /CN=4c3c665e51cc4cb5caf05b8294843e2733a13dee
Certificate serial: 019D371B79263627E0284FD280566AFCDEDC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TDxmXlHMTLXK8FuClIQ-JzOhPe4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/6b66b4-064c-42ee-a5ee-1a65b91bee58/1/TDxmXlHMTLXK8FuClIQ-JzOhPe4.mft
Manifest number: 02D7
Signing time: Sun 29 Mar 2026 01:00:40 +0000
Manifest this update: Sun 29 Mar 2026 01:00:40 +0000
Manifest next update: Mon 30 Mar 2026 01:00:40 +0000
Files and hashes: 1: TDxmXlHMTLXK8FuClIQ-JzOhPe4.crl (hash: JXDLguy2q+3y3tVdDJQInbVLz19dhj5+XxJiEYWyEms=)
2: an0UggxMVOLMbfkQRZg-oFGpksM.roa (hash: RrOytt0pmrmZwpnV5VgzGRGQLeTwpMRDbcMRpSijJI4=)
3: frya0jA5P_fi8uygo2aIO2RW1ZQ.roa (hash: V1yhc9udgYV2uaOOmzTxwzsxFa2raTN+Q6jBXM4XvRY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/6b66b4-064c-42ee-a5ee-1a65b91bee58/1/TDxmXlHMTLXK8FuClIQ-JzOhPe4.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/6b66b4-064c-42ee-a5ee-1a65b91bee58/1/TDxmXlHMTLXK8FuClIQ-JzOhPe4.mft
rsync://rpki.ripe.net/repository/DEFAULT/TDxmXlHMTLXK8FuClIQ-JzOhPe4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 01:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:1b:79:26:36:27:e0:28:4f:d2:80:56:6a:fc:de:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c3c665e51cc4cb5caf05b8294843e2733a13dee
Validity
Not Before: Mar 29 01:00:40 2026 GMT
Not After : Mar 30 01:00:40 2026 GMT
Subject: CN=abe7afff5a7f4fbc523ecc8cf68792bf7d1c008d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:0a:d0:e4:44:93:2e:b4:1e:0e:00:29:06:90:
ee:15:13:b5:1a:e1:43:2d:3d:9c:bf:5f:37:cd:f0:
a3:98:6a:36:92:e1:a8:56:ec:30:32:4b:a0:da:b4:
d4:bf:30:50:be:96:a0:1d:8c:37:a4:5d:33:a5:c3:
c5:e6:b1:9e:ec:d1:c5:1c:05:32:f9:b7:1e:47:08:
07:6f:d9:26:cc:b9:0f:03:78:b6:9a:46:c2:b8:b3:
52:ca:82:34:dd:ea:28:b6:b0:56:4e:0e:b2:cd:12:
fe:33:a4:22:2a:d1:25:ed:77:c8:44:a4:b4:17:f4:
2d:c9:6b:2c:43:92:25:28:e6:11:98:50:36:36:2f:
37:91:2b:1f:37:37:3d:c7:a8:46:02:7f:17:45:8d:
86:a5:36:f8:2d:27:21:6b:bb:ac:ce:74:c1:83:8b:
4f:67:53:69:92:32:5b:54:e4:e9:d1:3c:d1:51:01:
0b:84:6e:e5:f9:02:03:fe:bd:dc:e8:73:c3:fe:bb:
72:e3:49:a9:cb:8d:eb:5f:0c:41:97:ad:a2:ab:26:
f4:d0:d4:8d:78:dc:70:cf:e2:0d:98:64:fd:73:ca:
40:5f:3f:1f:7c:be:61:74:41:e6:33:39:14:9d:09:
af:a0:ec:a0:fc:24:35:d4:7c:6f:7e:a5:34:5e:33:
96:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:E7:AF:FF:5A:7F:4F:BC:52:3E:CC:8C:F6:87:92:BF:7D:1C:00:8D
X509v3 Authority Key Identifier:
keyid:4C:3C:66:5E:51:CC:4C:B5:CA:F0:5B:82:94:84:3E:27:33:A1:3D:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TDxmXlHMTLXK8FuClIQ-JzOhPe4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/6b66b4-064c-42ee-a5ee-1a65b91bee58/1/TDxmXlHMTLXK8FuClIQ-JzOhPe4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/6b66b4-064c-42ee-a5ee-1a65b91bee58/1/TDxmXlHMTLXK8FuClIQ-JzOhPe4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:23:49:17:29:cf:af:3d:56:6d:eb:d4:b1:fb:36:73:de:f6:
4a:c6:e4:3f:3e:84:a3:33:31:7a:88:be:2f:f4:f2:8b:ed:7e:
2f:3b:1c:5f:e6:c3:e8:ab:e5:54:d5:63:8c:29:fd:9c:49:a5:
6f:23:38:bb:a9:9e:0b:cc:32:7c:75:66:bc:09:3e:57:f7:eb:
95:b2:23:91:3f:6f:79:bc:7a:9f:bc:be:61:19:af:56:d2:ec:
95:10:c1:ed:f6:76:c3:f9:bf:b8:cd:98:9a:ef:39:87:61:81:
7a:42:a0:ea:77:35:4b:98:d4:02:70:f2:b5:fd:06:cc:35:04:
b1:07:68:ed:28:d8:5b:6e:f1:68:47:94:65:7c:89:d2:eb:da:
c2:71:71:44:e1:c0:8b:fb:68:9d:28:bc:1d:89:34:2b:14:2f:
4f:af:1a:77:42:be:7e:f0:27:04:72:ed:4f:71:9b:54:71:4e:
12:5d:6c:d8:57:d1:df:fd:30:fb:5b:b4:f8:46:ac:01:a0:8d:
0e:55:4d:91:02:61:9e:5e:d7:c9:dc:24:13:87:98:d2:33:a0:
38:ce:10:05:1e:c1:cf:42:34:84:d6:03:ac:0d:31:dd:5d:f4:
31:c2:d8:d3:3c:9c:56:f0:5f:35:5c:3d:7f:49:e8:73:a6:e9:
75:19:72:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:29:58 2026 by rpki-client