Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/b9a830-6992-49c6-8973-eacb4965fe38/1/TD6do79ZOALMgz_l2UelJpb1jI0.mft
File: TD6do79ZOALMgz_l2UelJpb1jI0.mft (raw, json)
Hash identifier: I9L9VUaVELblRITsiAib/Yx5GgwjR4cvl+7cCCEmkCI=
Subject key identifier: 95:40:59:7B:53:30:8A:81:C9:DD:48:6A:4C:08:6D:87:4C:C3:33:12
Authority key identifier: 4C:3E:9D:A3:BF:59:38:02:CC:83:3F:E5:D9:47:A5:26:96:F5:8C:8D
Certificate issuer: /CN=4c3e9da3bf593802cc833fe5d947a52696f58c8d
Certificate serial: 019CF1280EEA1B42C42F2CE67E81977033B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TD6do79ZOALMgz_l2UelJpb1jI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/b9a830-6992-49c6-8973-eacb4965fe38/1/TD6do79ZOALMgz_l2UelJpb1jI0.mft
Manifest number: 17AB
Signing time: Sun 15 Mar 2026 11:00:59 +0000
Manifest this update: Sun 15 Mar 2026 11:00:59 +0000
Manifest next update: Mon 16 Mar 2026 11:00:59 +0000
Files and hashes: 1: TD6do79ZOALMgz_l2UelJpb1jI0.crl (hash: 2d/5noTsZ6wyUDTioDOKvQ5tNU44rvexvoiAN8Z/29E=)
2: xoBSepf056vB7VihaJfLbbA7rl8.roa (hash: FqEFR7+yy5fGMc3KqbC1V37aXIXlQqiTJ1sLZ3ECBNg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/b9a830-6992-49c6-8973-eacb4965fe38/1/TD6do79ZOALMgz_l2UelJpb1jI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/b9a830-6992-49c6-8973-eacb4965fe38/1/TD6do79ZOALMgz_l2UelJpb1jI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/TD6do79ZOALMgz_l2UelJpb1jI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Mar 2026 11:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:f1:28:0e:ea:1b:42:c4:2f:2c:e6:7e:81:97:70:33:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c3e9da3bf593802cc833fe5d947a52696f58c8d
Validity
Not Before: Mar 15 11:00:59 2026 GMT
Not After : Mar 16 11:00:59 2026 GMT
Subject: CN=9540597b53308a81c9dd486a4c086d874cc33312
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:94:f8:b2:66:6e:39:fe:26:1c:a1:94:0a:e4:
67:42:9e:4a:04:81:5b:7d:52:cf:bc:6d:50:ca:6b:
8e:ae:f0:d2:9f:3e:13:5d:44:25:a5:da:12:8c:81:
5b:92:77:67:22:1f:03:8d:ae:8f:70:e3:ab:57:ee:
ea:5b:1e:e8:9c:b2:b5:1a:83:3f:9a:23:c4:67:b3:
36:f2:48:98:2b:68:a1:a2:1d:ad:8a:23:10:b5:88:
91:0b:3e:74:8f:a3:a2:32:12:99:0b:31:f4:57:09:
6f:50:48:34:1b:83:18:b2:c8:20:98:91:a8:38:9d:
06:7b:33:ee:f9:c6:01:59:a2:df:11:04:e5:8c:bb:
8c:1c:03:94:57:b4:1c:f7:93:66:32:a7:7e:f4:74:
9d:5c:01:86:83:c9:3f:b4:ac:57:d2:20:c5:a9:f3:
9d:ae:b7:7d:8f:ec:85:1c:f6:b2:f7:c0:47:aa:68:
51:5f:09:5b:6e:5a:54:c6:f1:69:e1:c0:37:07:e7:
f1:97:12:ba:2f:4a:0a:73:d1:08:4a:a9:27:6f:59:
9d:64:d9:96:be:2f:d9:8b:a2:90:68:77:91:28:49:
b0:f3:81:44:15:45:7f:a6:7a:2f:3c:7b:74:a6:e6:
70:63:a5:f3:21:28:e2:d5:06:27:f2:c5:bf:57:f9:
ef:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:40:59:7B:53:30:8A:81:C9:DD:48:6A:4C:08:6D:87:4C:C3:33:12
X509v3 Authority Key Identifier:
keyid:4C:3E:9D:A3:BF:59:38:02:CC:83:3F:E5:D9:47:A5:26:96:F5:8C:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TD6do79ZOALMgz_l2UelJpb1jI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/b9a830-6992-49c6-8973-eacb4965fe38/1/TD6do79ZOALMgz_l2UelJpb1jI0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/b9a830-6992-49c6-8973-eacb4965fe38/1/TD6do79ZOALMgz_l2UelJpb1jI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:9f:d0:76:af:ff:c2:f9:86:13:27:b1:b9:79:e4:af:26:ea:
4b:61:d4:bd:43:d1:7c:51:ba:7c:3a:07:e7:70:73:18:5b:ea:
9f:f1:01:37:28:c4:5d:69:92:01:53:f6:6d:f7:ad:22:fa:6b:
75:be:f4:90:37:a2:46:d0:47:8a:4f:ed:c7:ee:56:97:45:01:
3a:cd:19:35:20:6e:ee:75:1f:cd:23:7d:c9:e2:b3:6a:1e:64:
32:68:24:4b:91:a7:69:6e:39:e3:2d:02:7e:91:43:3f:a8:a1:
59:96:64:11:94:c5:c7:03:70:6d:ae:72:e0:d2:31:3d:63:62:
fc:6e:4c:7f:12:3d:e9:3f:c0:19:4f:8f:9a:40:7e:5b:de:6c:
2c:c5:ae:59:7b:33:27:af:2e:bb:f3:ab:45:15:88:cf:e4:0f:
64:44:0a:dc:d9:90:9e:ba:30:59:fb:97:9b:c4:52:f9:10:a8:
34:20:7c:c6:1c:07:43:b5:23:27:1c:09:fc:1f:bb:c9:d6:ab:
65:b6:8f:84:69:d1:fc:2e:57:71:20:6a:43:2f:99:47:3a:93:
83:79:85:8e:36:e9:1f:00:89:b3:71:42:88:17:8d:2c:68:89:
8e:12:14:6c:6e:9c:a0:4a:18:a2:c5:68:e6:2a:f9:82:b5:b0:
00:6f:40:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 15 17:58:29 2026 by rpki-client