Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/08cd93-0876-43fd-92c0-b863c0a98b2d/1/TDijBqN-6Hvr_3I2VT4NPLZyzRc.mft
File: TDijBqN-6Hvr_3I2VT4NPLZyzRc.mft (raw, json)
Hash identifier: 2rjnhQ8g3DpkjVMCVzqtk9chMJ8xaRNccl4W1U7EBDs=
Subject key identifier: C5:17:B7:9D:8B:0B:00:F4:27:F0:C9:02:F6:54:C8:9C:F4:C8:91:72
Authority key identifier: 4C:38:A3:06:A3:7E:E8:7B:EB:FF:72:36:55:3E:0D:3C:B6:72:CD:17
Certificate issuer: /CN=4c38a306a37ee87bebff7236553e0d3cb672cd17
Certificate serial: 019FA372D27E954E34608D2C19D8239571A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TDijBqN-6Hvr_3I2VT4NPLZyzRc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/08cd93-0876-43fd-92c0-b863c0a98b2d/1/TDijBqN-6Hvr_3I2VT4NPLZyzRc.mft
Manifest number: 04A6
Signing time: Mon 27 Jul 2026 12:00:38 +0000
Manifest this update: Mon 27 Jul 2026 12:00:38 +0000
Manifest next update: Tue 28 Jul 2026 12:00:38 +0000
Files and hashes: 1: TDijBqN-6Hvr_3I2VT4NPLZyzRc.crl (hash: 0nGHCmJ3dbkNRAvU+569xGwUDwv6tp6eNz2eyC1da70=)
2: bJu0scpN1gj7kvsBcbxVtC9ztlc.roa (hash: ZoOwH22u+aOphRV9ROY0fMKWfnDnA+VojJ7jB+e5a1E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/08cd93-0876-43fd-92c0-b863c0a98b2d/1/TDijBqN-6Hvr_3I2VT4NPLZyzRc.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/08cd93-0876-43fd-92c0-b863c0a98b2d/1/TDijBqN-6Hvr_3I2VT4NPLZyzRc.mft
rsync://rpki.ripe.net/repository/DEFAULT/TDijBqN-6Hvr_3I2VT4NPLZyzRc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 12:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a3:72:d2:7e:95:4e:34:60:8d:2c:19:d8:23:95:71:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c38a306a37ee87bebff7236553e0d3cb672cd17
Validity
Not Before: Jul 27 12:00:38 2026 GMT
Not After : Jul 28 12:00:38 2026 GMT
Subject: CN=c517b79d8b0b00f427f0c902f654c89cf4c89172
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:98:bb:4b:b5:41:82:d3:f9:0b:dd:29:78:9d:
5b:56:b4:36:c1:89:6a:b4:7a:89:a0:63:fe:de:21:
c7:c8:09:3a:1c:b2:bd:9c:5c:e2:0a:68:33:bd:9c:
66:62:75:e5:18:a1:7a:c6:1f:5e:72:98:c8:24:13:
9a:01:50:10:33:25:96:86:db:94:06:99:68:69:74:
e4:13:b9:5c:bb:bd:b5:f4:e2:4a:50:ba:34:87:e8:
29:97:ad:6c:79:01:df:cb:8b:11:8f:40:4c:04:14:
b5:74:50:39:51:86:5b:26:74:c9:ff:46:0f:9c:c2:
8b:28:64:14:b5:f6:5f:5c:05:ef:b9:00:10:f2:45:
c3:70:f0:72:8b:aa:f4:20:45:a9:d3:55:1b:2e:5e:
1a:f2:46:fb:e3:02:7b:ea:a5:a5:9f:7c:35:2a:07:
1d:27:73:b4:84:cc:84:af:20:56:f9:2d:46:99:53:
c5:ee:9e:2f:5c:d3:bb:78:48:1e:9a:85:a8:98:cf:
c4:fe:a6:59:4a:68:84:78:d6:93:25:cc:71:ea:2e:
a5:63:26:5b:f2:42:29:f6:c1:0e:ef:9e:16:06:db:
ba:40:f7:56:99:c1:a6:af:17:46:c0:4d:f8:59:04:
fb:65:79:87:45:b1:a2:5d:0d:21:a8:6f:88:ca:70:
0d:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:17:B7:9D:8B:0B:00:F4:27:F0:C9:02:F6:54:C8:9C:F4:C8:91:72
X509v3 Authority Key Identifier:
keyid:4C:38:A3:06:A3:7E:E8:7B:EB:FF:72:36:55:3E:0D:3C:B6:72:CD:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TDijBqN-6Hvr_3I2VT4NPLZyzRc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/08cd93-0876-43fd-92c0-b863c0a98b2d/1/TDijBqN-6Hvr_3I2VT4NPLZyzRc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/08cd93-0876-43fd-92c0-b863c0a98b2d/1/TDijBqN-6Hvr_3I2VT4NPLZyzRc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:c0:aa:e3:f6:1b:52:e8:67:79:f7:f7:88:e2:06:9c:12:80:
a6:fc:d8:bb:a6:19:b9:8c:56:fb:11:25:fc:85:3a:84:e7:d3:
d9:40:6c:b6:56:79:06:e9:86:a0:66:91:e0:38:b5:b2:62:6a:
65:23:c0:e9:b0:d5:a9:9a:73:f5:13:f8:7d:88:27:e1:46:c9:
bc:ac:3e:a7:fa:1d:da:60:43:2b:af:8a:9a:17:23:6b:36:3d:
c0:f8:b1:6d:5c:9c:1e:05:4e:55:74:b8:a3:47:6c:ff:71:90:
c1:4f:66:65:f7:e7:23:6f:e0:83:5a:c6:ae:70:80:25:02:fe:
f7:2c:6b:b7:b8:72:b6:95:60:c3:f8:f2:ac:b6:cc:79:2a:a0:
20:3a:e4:80:57:46:b7:2e:f7:03:16:c2:76:41:f0:e1:94:57:
63:cb:83:13:4a:1e:a0:e8:7b:55:77:d5:8f:35:2f:6d:5f:59:
f4:ba:9f:35:1a:a9:71:7c:17:13:48:fa:cb:1f:0b:7d:d3:90:
12:dd:b3:e5:12:f4:5f:82:d7:a2:3c:b6:29:8d:35:0a:7c:de:
9a:97:25:63:6d:1d:83:b1:37:8d:8b:f2:bf:49:88:47:a0:a2:
48:73:0f:52:cb:7a:4d:a3:f5:d1:80:3d:01:e4:b7:9f:7a:16:
5c:f1:2b:d8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+jctJ+lU40YI0sGdgjlXGoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjMzhhMzA2YTM3ZWU4N2JlYmZmNzIzNjU1M2UwZDNjYjY3
MmNkMTcwHhcNMjYwNzI3MTIwMDM4WhcNMjYwNzI4MTIwMDM4WjAzMTEwLwYDVQQD
EyhjNTE3Yjc5ZDhiMGIwMGY0MjdmMGM5MDJmNjU0Yzg5Y2Y0Yzg5MTcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvZi7S7VBgtP5C90peJ1bVrQ2wYlq
tHqJoGP+3iHHyAk6HLK9nFziCmgzvZxmYnXlGKF6xh9ecpjIJBOaAVAQMyWWhtuU
BploaXTkE7lcu7219OJKULo0h+gpl61seQHfy4sRj0BMBBS1dFA5UYZbJnTJ/0YP
nMKLKGQUtfZfXAXvuQAQ8kXDcPByi6r0IEWp01UbLl4a8kb74wJ76qWln3w1Kgcd
J3O0hMyEryBW+S1GmVPF7p4vXNO7eEgemoWomM/E/qZZSmiEeNaTJcxx6i6lYyZb
8kIp9sEO754WBtu6QPdWmcGmrxdGwE34WQT7ZXmHRbGiXQ0hqG+IynANAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMUXt52LCwD0J/DJAvZUyJz0yJFyMB8GA1UdIwQY
MBaAFEw4owajfuh76/9yNlU+DTy2cs0XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVERpakJxTi02SHZyXzNJMlZUNE5QTFp5elJjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny8wOGNkOTMtMDg3Ni00M2ZkLTkyYzAt
Yjg2M2MwYTk4YjJkLzEvVERpakJxTi02SHZyXzNJMlZUNE5QTFp5elJjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ny8wOGNkOTMtMDg3Ni00M2ZkLTkyYzAtYjg2M2MwYTk4YjJk
LzEvVERpakJxTi02SHZyXzNJMlZUNE5QTFp5elJjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZcCq4/Yb
Uuhneff3iOIGnBKApvzYu6YZuYxW+xEl/IU6hOfT2UBstlZ5BumGoGaR4Di1smJq
ZSPA6bDVqZpz9RP4fYgn4UbJvKw+p/od2mBDK6+KmhcjazY9wPixbVycHgVOVXS4
o0ds/3GQwU9mZffnI2/gg1rGrnCAJQL+9yxrt7hytpVgw/jyrLbMeSqgIDrkgFdG
ty73AxbCdkHw4ZRXY8uDE0oeoOh7VXfVjzUvbV9Z9LqfNRqpcXwXE0j6yx8LfdOQ
Et2z5RL0X4LXojy2KY01CnzempclY20dg7E3jYvyv0mIR6CiSHMPUst6TaP10YA9
AeS3n3oWXPEr2A==
-----END CERTIFICATE-----
Generated at Mon Jul 27 18:23:29 2026 by rpki-client