Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/598415-445e-468d-9f8e-d19839206ce6/1/TDJWN81N6a_lO9TxIav2IkX2cU8.mft
File: TDJWN81N6a_lO9TxIav2IkX2cU8.mft (raw, json)
Hash identifier: XyI9iJvGz7dBjA+R1jHDYPRUKeCp6BhJaV+XYp1c+CE=
Subject key identifier: EB:7B:65:0E:C6:62:E1:52:E7:26:93:FA:79:EF:4B:83:9A:8C:EF:97
Authority key identifier: 4C:32:56:37:CD:4D:E9:AF:E5:3B:D4:F1:21:AB:F6:22:45:F6:71:4F
Certificate issuer: /CN=4c325637cd4de9afe53bd4f121abf62245f6714f
Certificate serial: 019D11581D78547B95AAC82EE43C6DBE5A1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TDJWN81N6a_lO9TxIav2IkX2cU8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/598415-445e-468d-9f8e-d19839206ce6/1/TDJWN81N6a_lO9TxIav2IkX2cU8.mft
Manifest number: 0970
Signing time: Sat 21 Mar 2026 17:01:20 +0000
Manifest this update: Sat 21 Mar 2026 17:01:20 +0000
Manifest next update: Sun 22 Mar 2026 17:01:20 +0000
Files and hashes: 1: TDJWN81N6a_lO9TxIav2IkX2cU8.crl (hash: zPQuG6YUXOeISfC1+YGJAqiwWlY6AdfxPK/kONi9yyA=)
2: oPCuq54P2bsSATikpn82yn6-AEM.roa (hash: lHLmqu6Ruee6ZqCasWZKuPLRXPXPUX8ZgrdyBMM4hU8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/598415-445e-468d-9f8e-d19839206ce6/1/TDJWN81N6a_lO9TxIav2IkX2cU8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/598415-445e-468d-9f8e-d19839206ce6/1/TDJWN81N6a_lO9TxIav2IkX2cU8.mft
rsync://rpki.ripe.net/repository/DEFAULT/TDJWN81N6a_lO9TxIav2IkX2cU8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 22 Mar 2026 14:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:11:58:1d:78:54:7b:95:aa:c8:2e:e4:3c:6d:be:5a:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c325637cd4de9afe53bd4f121abf62245f6714f
Validity
Not Before: Mar 21 17:01:20 2026 GMT
Not After : Mar 22 17:01:20 2026 GMT
Subject: CN=eb7b650ec662e152e72693fa79ef4b839a8cef97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:3a:69:a2:c8:f9:28:06:77:d8:8a:b3:82:b3:
82:c6:98:8a:82:87:5c:54:58:82:29:3c:86:98:4e:
97:f5:d3:97:75:d9:12:f1:40:bb:c7:18:3f:a8:48:
a1:b1:a0:82:ca:b8:89:1f:f9:a9:10:48:9c:ff:ca:
a7:f7:3d:36:13:df:cf:03:fc:41:40:7a:c6:7e:0d:
cb:1c:0b:dd:38:57:c3:c1:fb:04:5a:d5:8c:56:aa:
88:18:ea:29:ae:56:35:73:b4:7f:36:68:c8:fe:4f:
ac:e0:27:5d:ed:4c:4c:9c:8f:86:7d:f0:96:1d:d8:
42:6d:ae:c0:56:48:69:cf:3b:3c:5f:3d:a6:c1:49:
39:0d:e3:96:6e:b3:f6:5d:7d:75:93:20:bc:d2:28:
6c:80:9c:1a:4b:62:2b:c1:05:0d:a7:54:c4:bf:df:
d4:fa:44:ef:76:a3:7c:8d:14:0d:32:72:a9:5a:76:
49:0b:e1:b8:2c:d3:65:bb:9a:df:27:82:c7:e8:2f:
3f:89:a6:64:a8:9f:17:02:0c:a7:59:82:77:9c:1f:
5f:30:07:be:9f:39:d8:a9:bb:4e:81:d3:ff:4e:5d:
eb:4d:50:2e:d6:c5:6a:a4:dd:42:cb:5e:76:5d:19:
98:21:25:95:ae:62:15:af:a3:35:88:04:69:66:9c:
d8:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:7B:65:0E:C6:62:E1:52:E7:26:93:FA:79:EF:4B:83:9A:8C:EF:97
X509v3 Authority Key Identifier:
keyid:4C:32:56:37:CD:4D:E9:AF:E5:3B:D4:F1:21:AB:F6:22:45:F6:71:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TDJWN81N6a_lO9TxIav2IkX2cU8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/598415-445e-468d-9f8e-d19839206ce6/1/TDJWN81N6a_lO9TxIav2IkX2cU8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/598415-445e-468d-9f8e-d19839206ce6/1/TDJWN81N6a_lO9TxIav2IkX2cU8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:7b:2e:4e:01:14:aa:cc:1c:a4:03:03:6e:5e:0a:49:e4:94:
da:3d:05:b7:d8:53:b4:9f:27:1c:a2:66:19:63:a9:98:64:f5:
d9:43:ee:14:fe:37:1c:3b:0b:dc:33:9d:dd:4b:95:f4:02:e3:
f7:d0:a4:e2:0a:2e:ab:f8:a5:d1:e4:36:7d:ee:cc:87:74:b0:
79:de:e7:a8:01:94:a5:1d:3d:21:34:ae:62:12:0f:26:7f:f7:
26:06:48:bf:7f:a4:4c:30:b0:a5:a3:9b:5c:31:75:e9:df:61:
71:77:b2:ff:53:a2:d9:fe:89:a3:82:62:6b:dd:11:67:9f:6d:
7c:00:cb:c5:6e:ee:92:12:fb:de:3c:07:11:3f:17:05:e3:3e:
f6:5d:40:4b:11:78:b0:6f:92:af:75:17:e1:dd:e7:39:b2:50:
5d:20:6e:f8:66:1e:11:a5:3f:d3:2c:db:a1:1f:4f:24:cc:08:
2c:d7:a3:bc:55:83:dc:45:6e:15:be:5c:62:0d:e7:ee:e4:45:
a7:71:74:87:b9:59:53:94:17:dc:00:51:06:b6:1c:42:f5:bc:
03:6a:58:df:0a:eb:86:da:c4:3e:f7:73:f1:66:a1:27:a2:b2:
d4:12:0c:f6:96:b8:a9:8d:7e:a4:ec:41:4f:59:f2:ec:22:91:
65:b6:4e:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 22 00:09:03 2026 by rpki-client