Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/b9a830-6992-49c6-8973-eacb4965fe38/1/TD6do79ZOALMgz_l2UelJpb1jI0.mft
File: TD6do79ZOALMgz_l2UelJpb1jI0.mft (raw, json)
Hash identifier: K0yRuVv/tBDNV9HjXRbmDrFEGbLW6iM9g+iayJ+HvdI=
Subject key identifier: A5:22:A3:B4:E0:7B:57:92:69:A6:4B:09:A5:62:41:A8:3B:B5:8C:66
Authority key identifier: 4C:3E:9D:A3:BF:59:38:02:CC:83:3F:E5:D9:47:A5:26:96:F5:8C:8D
Certificate issuer: /CN=4c3e9da3bf593802cc833fe5d947a52696f58c8d
Certificate serial: 019EFA9463AD09CF4F7B45E1EF36846CF371
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TD6do79ZOALMgz_l2UelJpb1jI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/b9a830-6992-49c6-8973-eacb4965fe38/1/TD6do79ZOALMgz_l2UelJpb1jI0.mft
Manifest number: 18B9
Signing time: Wed 24 Jun 2026 17:01:29 +0000
Manifest this update: Wed 24 Jun 2026 17:01:29 +0000
Manifest next update: Thu 25 Jun 2026 17:01:29 +0000
Files and hashes: 1: TD6do79ZOALMgz_l2UelJpb1jI0.crl (hash: jEYLs6/9sOf0cJxAvJDeZv4HXYmdxUsj0axc6H+3uqE=)
2: xoBSepf056vB7VihaJfLbbA7rl8.roa (hash: FqEFR7+yy5fGMc3KqbC1V37aXIXlQqiTJ1sLZ3ECBNg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/b9a830-6992-49c6-8973-eacb4965fe38/1/TD6do79ZOALMgz_l2UelJpb1jI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/b9a830-6992-49c6-8973-eacb4965fe38/1/TD6do79ZOALMgz_l2UelJpb1jI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/TD6do79ZOALMgz_l2UelJpb1jI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 25 Jun 2026 17:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:fa:94:63:ad:09:cf:4f:7b:45:e1:ef:36:84:6c:f3:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c3e9da3bf593802cc833fe5d947a52696f58c8d
Validity
Not Before: Jun 24 17:01:29 2026 GMT
Not After : Jun 25 17:01:29 2026 GMT
Subject: CN=a522a3b4e07b579269a64b09a56241a83bb58c66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:51:0d:07:bf:88:3e:7f:ad:03:83:20:7d:20:
26:06:eb:13:fe:2e:92:67:8d:01:76:52:17:43:6d:
9b:83:24:3b:8e:25:6f:6f:12:b8:4e:a9:96:49:64:
c8:72:4b:cd:06:a7:94:d8:8d:03:e0:3f:22:da:27:
b7:19:73:95:87:6c:d0:7f:46:85:83:0d:93:e1:2c:
bd:66:75:9a:d9:66:c8:56:25:67:a5:b4:0b:83:c4:
f1:9d:4b:49:b5:39:b3:e8:04:de:d7:62:a3:2c:6b:
f5:cb:62:69:ff:e4:6e:be:4b:3a:bd:8f:87:a3:01:
0f:c3:b1:ca:2b:b3:24:1f:c9:a6:4e:71:02:6a:2a:
ea:4f:9e:2e:43:b2:00:0b:b9:69:a9:6d:9a:47:cf:
33:18:c3:7a:e4:ce:4c:d9:58:2d:e5:c6:e1:17:16:
63:7a:a8:fd:b8:87:e2:1e:8c:80:8e:46:ec:30:7f:
77:77:c6:d1:df:02:f1:e4:2d:29:5c:43:e6:76:84:
6b:b3:7f:2f:42:68:bd:aa:36:47:66:ff:f1:f2:52:
2d:55:48:69:cc:31:72:28:8f:9a:9b:d4:3e:4b:9c:
32:c6:82:96:ab:f5:ac:ab:6b:4b:d7:ae:9c:73:66:
61:e8:e3:f1:b3:82:5b:28:5f:3f:6c:3b:00:d5:28:
c3:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:22:A3:B4:E0:7B:57:92:69:A6:4B:09:A5:62:41:A8:3B:B5:8C:66
X509v3 Authority Key Identifier:
keyid:4C:3E:9D:A3:BF:59:38:02:CC:83:3F:E5:D9:47:A5:26:96:F5:8C:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TD6do79ZOALMgz_l2UelJpb1jI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/b9a830-6992-49c6-8973-eacb4965fe38/1/TD6do79ZOALMgz_l2UelJpb1jI0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/b9a830-6992-49c6-8973-eacb4965fe38/1/TD6do79ZOALMgz_l2UelJpb1jI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:4e:26:f3:1a:dc:23:37:3a:1f:97:2c:f5:f1:c0:92:75:a0:
c5:6d:30:91:44:a1:88:38:9f:03:a7:f2:89:ff:95:9c:44:96:
35:1e:36:12:20:09:ab:7f:0e:f3:0b:66:32:81:9c:77:f4:93:
e9:84:6a:4f:37:86:30:00:cb:70:b3:25:9a:a9:62:b1:b0:07:
4b:39:f0:2b:81:5d:ef:03:c5:c0:37:aa:35:da:19:06:e1:60:
72:65:ea:91:05:10:53:e4:e0:e1:68:1b:25:05:f5:89:47:8b:
4e:3f:0a:49:27:06:47:92:cb:da:15:ac:13:ff:ee:6f:cd:17:
31:95:eb:cb:cd:5a:b1:32:cc:a6:04:fc:12:c3:e1:be:52:44:
e5:d1:5c:fc:5f:01:73:5b:76:05:96:d0:ba:6f:06:0b:a8:3f:
18:78:d7:4f:36:20:d2:8d:01:56:9a:0c:eb:79:a2:75:30:2e:
db:4e:e8:df:37:ee:04:76:7e:03:c5:1d:8a:59:30:6c:54:e3:
90:6c:c5:d6:5e:aa:6f:79:1f:9c:03:bf:09:a5:5c:b3:4b:5d:
5a:81:54:ea:0f:57:29:a0:31:7e:9f:fc:74:a4:b9:35:d3:df:
bb:9e:c9:d1:d2:e6:4a:37:81:de:0e:98:81:fe:74:27:bd:b7:
a7:4e:26:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 25 02:26:55 2026 by rpki-client