Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/6b66b4-064c-42ee-a5ee-1a65b91bee58/1/TDxmXlHMTLXK8FuClIQ-JzOhPe4.mft
File: TDxmXlHMTLXK8FuClIQ-JzOhPe4.mft (raw, json)
Hash identifier: Cu/eWZAmFGBj9hyPQ3zm/7LgYy7QvxSTDYCpDuTdp1A=
Subject key identifier: 94:03:33:1F:C8:DF:41:28:8D:1E:F3:00:BA:BF:23:EC:26:FF:3A:CA
Authority key identifier: 4C:3C:66:5E:51:CC:4C:B5:CA:F0:5B:82:94:84:3E:27:33:A1:3D:EE
Certificate issuer: /CN=4c3c665e51cc4cb5caf05b8294843e2733a13dee
Certificate serial: 019E31BBB2494923C70B048844961396624B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TDxmXlHMTLXK8FuClIQ-JzOhPe4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/6b66b4-064c-42ee-a5ee-1a65b91bee58/1/TDxmXlHMTLXK8FuClIQ-JzOhPe4.mft
Manifest number: 035C
Signing time: Sat 16 May 2026 17:00:44 +0000
Manifest this update: Sat 16 May 2026 17:00:44 +0000
Manifest next update: Sun 17 May 2026 17:00:44 +0000
Files and hashes: 1: TDxmXlHMTLXK8FuClIQ-JzOhPe4.crl (hash: jSo9bejaerfsz75/oO+dv0ZhImbmdM4sx/lPngVHWIg=)
2: frya0jA5P_fi8uygo2aIO2RW1ZQ.roa (hash: V1yhc9udgYV2uaOOmzTxwzsxFa2raTN+Q6jBXM4XvRY=)
3: mRzvmC1aHGh_d8mo-JwJurED3EM.roa (hash: aWOSV+LdM92bHZ1nT4erzPsOFlC7zRAjulRxerR5wEc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/6b66b4-064c-42ee-a5ee-1a65b91bee58/1/TDxmXlHMTLXK8FuClIQ-JzOhPe4.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/6b66b4-064c-42ee-a5ee-1a65b91bee58/1/TDxmXlHMTLXK8FuClIQ-JzOhPe4.mft
rsync://rpki.ripe.net/repository/DEFAULT/TDxmXlHMTLXK8FuClIQ-JzOhPe4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 14:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:31:bb:b2:49:49:23:c7:0b:04:88:44:96:13:96:62:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c3c665e51cc4cb5caf05b8294843e2733a13dee
Validity
Not Before: May 16 17:00:44 2026 GMT
Not After : May 17 17:00:44 2026 GMT
Subject: CN=9403331fc8df41288d1ef300babf23ec26ff3aca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:c8:34:ce:35:e2:fe:e5:ab:f3:3d:d6:a4:e2:
85:05:7a:35:b3:c9:7f:3a:1f:3c:91:a2:fb:44:c3:
38:92:70:f9:c3:bc:b8:21:3f:29:b9:a2:5f:dc:93:
5a:96:95:1b:7b:a1:cc:be:e2:d7:df:c7:ab:ea:ef:
0a:4c:12:80:dc:90:38:1e:89:96:a5:4a:a9:87:34:
7a:06:86:4f:c5:2d:44:e6:69:1b:fa:ce:fc:bc:29:
3f:a5:7a:da:52:b3:2c:08:4c:1f:73:fd:b9:e4:f1:
6c:bf:08:db:04:31:55:4d:2c:9e:1e:57:25:ec:24:
07:06:be:e0:a0:a3:fa:30:46:3b:70:8d:7b:4c:86:
aa:56:a0:19:a3:24:5f:02:65:e4:e1:0a:b4:e2:06:
bf:e3:a5:1a:96:04:72:d4:58:28:46:e6:41:17:f2:
67:18:3b:11:7c:c1:63:9c:1b:79:8f:0d:71:de:25:
94:b9:e8:f2:00:d0:26:01:63:6f:e8:ae:26:da:f8:
88:72:db:9a:72:87:a8:d5:68:29:b4:aa:22:df:59:
95:21:0f:93:b1:ff:4f:55:d5:b1:78:ca:26:9d:e3:
2e:50:fa:0b:40:82:a7:5e:d0:96:a6:8a:b7:56:0b:
29:5a:8a:19:51:de:a2:2f:c0:5a:7e:91:fb:55:95:
e6:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:03:33:1F:C8:DF:41:28:8D:1E:F3:00:BA:BF:23:EC:26:FF:3A:CA
X509v3 Authority Key Identifier:
keyid:4C:3C:66:5E:51:CC:4C:B5:CA:F0:5B:82:94:84:3E:27:33:A1:3D:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TDxmXlHMTLXK8FuClIQ-JzOhPe4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/6b66b4-064c-42ee-a5ee-1a65b91bee58/1/TDxmXlHMTLXK8FuClIQ-JzOhPe4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/6b66b4-064c-42ee-a5ee-1a65b91bee58/1/TDxmXlHMTLXK8FuClIQ-JzOhPe4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:27:2e:dd:27:5a:6f:54:ce:95:d5:9b:81:f9:a4:c6:e5:ff:
59:69:27:c8:ba:f3:77:67:54:b4:7f:39:6a:0b:7e:00:b8:4c:
f5:4e:d0:24:17:25:2e:56:c0:ff:ae:1d:0f:8a:ad:1f:a6:23:
cc:37:d7:4c:d6:d3:5f:54:80:07:06:38:82:5b:74:ef:f4:6b:
1e:70:71:c7:a4:73:22:4d:75:49:36:cf:b7:a2:a1:0c:d9:8a:
8b:5e:71:5a:0b:04:f4:64:6c:84:42:95:5e:72:25:8c:12:b7:
8d:9c:39:dc:7d:ac:3d:0f:56:6b:22:45:30:47:b6:eb:6a:17:
ab:9d:c0:02:4a:51:44:8e:2a:81:cf:24:e0:9f:2e:a8:35:ac:
5e:36:ee:00:94:bf:e0:5a:a2:ea:46:34:25:c1:b1:5d:c8:55:
80:9f:f2:fc:dc:12:fc:60:25:88:63:65:41:d5:2f:54:65:fc:
3c:7a:d1:8c:fa:e4:52:9d:13:21:44:88:70:3a:b9:43:d8:d6:
81:34:b2:7e:fc:2b:d1:bd:2e:9c:b4:42:2c:c0:94:8b:a8:9d:
15:6e:ba:f0:29:b4:99:e6:aa:5a:58:38:e7:46:0f:72:42:91:
87:17:c2:51:0e:3b:3b:b7:1f:6d:4a:5a:f3:ca:40:69:55:7b:
90:fc:0d:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 17 00:29:43 2026 by rpki-client