Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/55/6b66b4-064c-42ee-a5ee-1a65b91bee58/1/TDxmXlHMTLXK8FuClIQ-JzOhPe4.mft
File: TDxmXlHMTLXK8FuClIQ-JzOhPe4.mft (raw, json)
Hash identifier: CdkjElAjhNCUkj6n6OdDUf+SqSedJK2amV3R2nKtgac=
Subject key identifier: FC:AC:75:AA:28:40:39:B4:D0:65:9C:F8:B3:96:51:9D:CC:C2:6C:29
Authority key identifier: 4C:3C:66:5E:51:CC:4C:B5:CA:F0:5B:82:94:84:3E:27:33:A1:3D:EE
Certificate issuer: /CN=4c3c665e51cc4cb5caf05b8294843e2733a13dee
Certificate serial: 01A1509A3920C7B4E144734D2A158E8008E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TDxmXlHMTLXK8FuClIQ-JzOhPe4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/6b66b4-064c-42ee-a5ee-1a65b91bee58/1/TDxmXlHMTLXK8FuClIQ-JzOhPe4.mft
Manifest number: 04FF
Signing time: Sun 18 Oct 2026 20:00:46 +0000
Manifest this update: Sun 18 Oct 2026 20:00:46 +0000
Manifest next update: Mon 19 Oct 2026 20:00:46 +0000
Files and hashes: 1: Hp24GG6uSG8sQb8jkFqa197vWxk.roa (hash: dVGmnh+jbiESkwvHH2VOIhilfiq/4OOnJSaQFQ2DP7Y=)
2: TDxmXlHMTLXK8FuClIQ-JzOhPe4.crl (hash: YsU1Y1nbLsPQykHzyztEtJ1x3jpxvBe6YrkVpW0zEc4=)
3: cjwbOJtXa2kt3CFJB7UkbYV9oq8.roa (hash: OqZn/Ns7ibJgbGiTjuz4lHbfFzpm2v7TCBQjtoWY4Bw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/6b66b4-064c-42ee-a5ee-1a65b91bee58/1/TDxmXlHMTLXK8FuClIQ-JzOhPe4.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/6b66b4-064c-42ee-a5ee-1a65b91bee58/1/TDxmXlHMTLXK8FuClIQ-JzOhPe4.mft
rsync://rpki.ripe.net/repository/DEFAULT/TDxmXlHMTLXK8FuClIQ-JzOhPe4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 19 Oct 2026 17:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:50:9a:39:20:c7:b4:e1:44:73:4d:2a:15:8e:80:08:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c3c665e51cc4cb5caf05b8294843e2733a13dee
Validity
Not Before: Oct 18 20:00:46 2026 GMT
Not After : Oct 19 20:00:46 2026 GMT
Subject: CN=fcac75aa284039b4d0659cf8b396519dccc26c29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:81:12:e5:cc:6b:ba:e9:46:5e:d6:04:df:f3:
67:9d:df:ee:67:fb:79:4f:f6:53:15:46:6e:f7:ab:
32:6a:ce:84:5d:26:23:e4:09:9c:19:c8:38:16:b2:
04:fa:e2:cc:4b:98:d6:6d:b0:d1:01:68:f7:6a:de:
81:9d:aa:32:44:c9:ad:57:31:b0:46:5b:66:e9:fb:
df:a9:1d:65:c7:dd:70:89:46:22:cb:dc:8d:3f:2c:
fd:e6:e4:a5:d7:a3:c8:bf:ed:2c:ea:56:d6:8d:4b:
13:b3:d6:f1:4e:08:6c:42:80:57:e6:96:ba:55:35:
0f:17:df:49:14:64:22:8b:5b:bc:dd:ac:5a:01:03:
f6:55:6f:57:4e:a1:f3:79:ac:59:29:7f:89:f2:81:
1a:b7:f3:fd:b6:4a:d1:0d:d8:21:2e:86:95:fe:30:
dc:b9:4b:dc:f3:3c:d3:e3:9b:c8:43:ab:f4:46:cd:
5b:3f:f2:28:b6:b2:94:cb:78:33:f4:3b:d7:60:53:
e6:19:e3:ed:42:e5:53:2a:a0:c4:53:e3:2f:24:7f:
46:09:36:5b:58:7a:eb:c3:16:5d:06:95:a4:7b:59:
16:71:aa:2d:4c:d0:bf:14:58:29:e8:6b:51:c3:fd:
57:ea:60:b8:34:20:3d:52:b5:dc:14:86:62:66:35:
09:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:AC:75:AA:28:40:39:B4:D0:65:9C:F8:B3:96:51:9D:CC:C2:6C:29
X509v3 Authority Key Identifier:
keyid:4C:3C:66:5E:51:CC:4C:B5:CA:F0:5B:82:94:84:3E:27:33:A1:3D:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TDxmXlHMTLXK8FuClIQ-JzOhPe4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/6b66b4-064c-42ee-a5ee-1a65b91bee58/1/TDxmXlHMTLXK8FuClIQ-JzOhPe4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/6b66b4-064c-42ee-a5ee-1a65b91bee58/1/TDxmXlHMTLXK8FuClIQ-JzOhPe4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:c4:16:9b:28:29:3c:c1:d6:eb:af:f6:41:12:f5:92:d1:68:
01:60:d2:4f:6e:65:14:19:a4:83:da:fb:ce:e2:99:42:11:ed:
4d:e0:63:d6:e3:6f:1c:db:68:c3:48:b9:3c:54:89:d1:60:96:
38:93:bb:c3:ec:0e:1c:7c:88:1a:b1:02:75:6d:fd:f5:dc:d9:
35:3e:8b:f2:f5:3f:9a:4f:54:a9:d1:80:96:44:89:82:df:67:
9f:5d:58:d6:e5:93:80:ff:8a:35:0a:e6:84:00:94:08:aa:4f:
19:fc:fa:15:bf:32:6c:83:f6:50:3b:8f:e2:e1:ba:9c:22:06:
a0:b1:d8:b5:32:f7:62:09:e4:1f:bf:84:b7:7d:e0:16:1f:8c:
a8:b4:17:f8:90:fa:70:07:c2:18:49:e4:98:40:73:cc:ee:f4:
3a:82:11:d6:95:97:c9:fc:36:5c:47:00:ac:d5:42:eb:61:62:
15:91:3c:ab:8a:d4:5b:9d:c9:21:64:37:ad:6a:06:61:61:6c:
79:df:5f:de:5d:6d:b7:2b:73:f7:b6:01:70:75:e3:c2:87:7c:
fd:d9:f6:6e:5e:7c:a1:1f:52:4c:b6:c1:06:2f:a5:e9:55:e3:
63:f4:d0:2d:8e:9a:3a:ef:c7:b9:1b:1a:89:b1:d8:e5:c7:44:
c6:ed:4f:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 01:42:27 2026 by rpki-client