Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/97/08cd93-0876-43fd-92c0-b863c0a98b2d/1/TDijBqN-6Hvr_3I2VT4NPLZyzRc.mft
File: TDijBqN-6Hvr_3I2VT4NPLZyzRc.mft (raw, json)
Hash identifier: xEQtoYXWif6u+DNAJxoWJfXXpqwWus5gEOrI/3f7zFA=
Subject key identifier: B4:30:9A:BA:E1:2F:BB:E4:79:27:C3:D3:B7:16:2D:47:86:93:8D:5A
Authority key identifier: 4C:38:A3:06:A3:7E:E8:7B:EB:FF:72:36:55:3E:0D:3C:B6:72:CD:17
Certificate issuer: /CN=4c38a306a37ee87bebff7236553e0d3cb672cd17
Certificate serial: 01A08D1FD06DF318FE0A27E54182583BD83B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TDijBqN-6Hvr_3I2VT4NPLZyzRc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/08cd93-0876-43fd-92c0-b863c0a98b2d/1/TDijBqN-6Hvr_3I2VT4NPLZyzRc.mft
Manifest number: 051F
Signing time: Thu 10 Sep 2026 21:01:07 +0000
Manifest this update: Thu 10 Sep 2026 21:01:07 +0000
Manifest next update: Fri 11 Sep 2026 21:01:07 +0000
Files and hashes: 1: TDijBqN-6Hvr_3I2VT4NPLZyzRc.crl (hash: Y5VCxH8vP1NvmMXiiFrrlzHvxAB0DuTJkVGwhZR/xZ0=)
2: bJu0scpN1gj7kvsBcbxVtC9ztlc.roa (hash: ZoOwH22u+aOphRV9ROY0fMKWfnDnA+VojJ7jB+e5a1E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/08cd93-0876-43fd-92c0-b863c0a98b2d/1/TDijBqN-6Hvr_3I2VT4NPLZyzRc.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/08cd93-0876-43fd-92c0-b863c0a98b2d/1/TDijBqN-6Hvr_3I2VT4NPLZyzRc.mft
rsync://rpki.ripe.net/repository/DEFAULT/TDijBqN-6Hvr_3I2VT4NPLZyzRc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8d:1f:d0:6d:f3:18:fe:0a:27:e5:41:82:58:3b:d8:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c38a306a37ee87bebff7236553e0d3cb672cd17
Validity
Not Before: Sep 10 21:01:07 2026 GMT
Not After : Sep 11 21:01:07 2026 GMT
Subject: CN=b4309abae12fbbe47927c3d3b7162d4786938d5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:8f:b0:9b:74:a4:e9:46:02:44:bb:b3:0c:39:
04:fe:5b:b7:6c:7d:e1:04:11:5e:dc:d9:94:c6:b4:
88:a2:9c:5a:d1:fa:31:37:48:28:bd:59:75:ce:a8:
34:cf:ee:9f:c2:cf:6b:04:1c:e9:ef:f8:db:4f:2e:
f1:4d:d3:bc:3e:34:1d:12:d6:77:86:2e:40:17:fa:
b7:db:b0:0e:1b:46:b8:f5:f8:39:39:2a:2a:71:bb:
7b:70:25:78:9f:57:e1:df:74:84:31:1e:68:73:22:
19:e0:ee:f1:38:0b:78:14:0f:f3:77:e6:9c:de:3d:
f8:ad:e7:6e:b9:33:9c:c3:88:af:27:f3:fd:ea:87:
cc:9e:0d:1a:3e:ee:45:f2:6a:fc:2c:88:5d:75:a9:
96:46:1a:dc:8d:c1:99:30:19:56:d8:af:81:aa:f7:
ac:b4:d4:c4:bd:6a:c3:50:de:87:c8:ad:aa:e6:fb:
b0:06:28:fa:ef:0f:8e:e3:db:1f:37:39:0c:a8:21:
ae:f2:55:94:0a:8f:a6:33:f3:ce:c0:60:2e:07:1a:
03:a0:b8:0a:84:f2:6f:f7:84:fd:3c:35:67:9f:ca:
78:29:63:1d:13:15:26:1a:40:5c:92:bc:56:52:34:
21:ad:36:a8:b4:e3:20:30:b2:d8:06:14:89:7a:70:
23:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:30:9A:BA:E1:2F:BB:E4:79:27:C3:D3:B7:16:2D:47:86:93:8D:5A
X509v3 Authority Key Identifier:
keyid:4C:38:A3:06:A3:7E:E8:7B:EB:FF:72:36:55:3E:0D:3C:B6:72:CD:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TDijBqN-6Hvr_3I2VT4NPLZyzRc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/08cd93-0876-43fd-92c0-b863c0a98b2d/1/TDijBqN-6Hvr_3I2VT4NPLZyzRc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/08cd93-0876-43fd-92c0-b863c0a98b2d/1/TDijBqN-6Hvr_3I2VT4NPLZyzRc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:6c:4b:cb:7e:ef:ff:a9:65:2b:bc:e7:b0:30:08:b7:6f:c8:
d6:49:bb:41:36:1f:17:66:9f:10:f7:6f:a7:cf:1b:39:9a:8d:
ee:65:8c:47:86:a6:8f:2f:fd:b1:39:14:2e:b9:5c:87:0a:89:
d8:91:46:6b:1e:22:59:7c:69:03:93:e1:62:f6:28:e2:04:86:
97:b2:f0:d1:27:9b:65:01:54:2c:51:02:4b:8e:85:f2:82:09:
4d:99:f0:31:e6:89:f4:d4:7a:7e:ad:7d:a4:6d:2e:7c:77:8b:
35:ff:f1:e3:9a:e0:01:5d:de:c2:fe:74:6d:6c:85:26:3a:7b:
23:6f:cb:94:49:2f:2a:70:75:34:87:b7:98:d1:b6:75:40:00:
97:22:c3:41:6f:76:d3:36:48:3e:dc:3a:b3:e2:ff:b4:8a:8a:
7c:ad:71:ad:a5:19:f9:59:4e:fc:e0:d1:38:36:96:07:ff:9e:
b2:de:24:04:d2:0a:73:af:2a:db:b6:16:79:68:9b:ab:1c:ee:
e1:1e:4f:b4:74:4b:f8:55:c0:b7:e9:d7:7e:66:dc:5f:82:41:
9c:ba:d8:b4:51:50:b3:03:1a:02:aa:60:f5:1c:6d:61:01:cf:
3b:09:c2:4c:4b:a8:04:50:92:d4:4a:06:33:db:d4:ef:e4:15:
a2:df:46:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 23:36:52 2026 by rpki-client