
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/d3558d-9057-47db-9959-3060b36b8506/1/tFBNKOZ6IeyW2VsnRj7AMD_hdiw.mft
File: tFBNKOZ6IeyW2VsnRj7AMD_hdiw.mft (raw, json)
Hash identifier: 0Wb8N7+5lTIldMkdYnt/bGhZhC95JSWM1rE9k6WXkMs=
Subject key identifier: 2A:81:EA:3C:B4:E4:01:47:17:E2:C1:C1:E2:0F:D5:AA:05:F5:EA:4B
Authority key identifier: B4:50:4D:28:E6:7A:21:EC:96:D9:5B:27:46:3E:C0:30:3F:E1:76:2C
Certificate issuer: /CN=b4504d28e67a21ec96d95b27463ec0303fe1762c
Certificate serial: 019F9D037CA2C019D21D0C9ABE80D382D175
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tFBNKOZ6IeyW2VsnRj7AMD_hdiw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/d3558d-9057-47db-9959-3060b36b8506/1/tFBNKOZ6IeyW2VsnRj7AMD_hdiw.mft
Manifest number: 46
Signing time: Sun 26 Jul 2026 06:01:19 +0000
Manifest this update: Sun 26 Jul 2026 06:01:19 +0000
Manifest next update: Mon 27 Jul 2026 06:01:19 +0000
Files and hashes: 1: tFBNKOZ6IeyW2VsnRj7AMD_hdiw.crl (hash: 8V1cNQLhGnEIOgdwybvyC6O+CkeiwNK/66mfaDOu18Y=)
2: vJbwHPz8RQ4zs2gU1mqro7zoibU.roa (hash: sBjiZn8iplUkAmpK3IUiwbDEIQyYz8gkgjFlOTL9wqQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/d3558d-9057-47db-9959-3060b36b8506/1/tFBNKOZ6IeyW2VsnRj7AMD_hdiw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/d3558d-9057-47db-9959-3060b36b8506/1/tFBNKOZ6IeyW2VsnRj7AMD_hdiw.mft
rsync://rpki.ripe.net/repository/DEFAULT/tFBNKOZ6IeyW2VsnRj7AMD_hdiw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 06:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:9d:03:7c:a2:c0:19:d2:1d:0c:9a:be:80:d3:82:d1:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4504d28e67a21ec96d95b27463ec0303fe1762c
Validity
Not Before: Jul 26 06:01:19 2026 GMT
Not After : Jul 27 06:01:19 2026 GMT
Subject: CN=2a81ea3cb4e4014717e2c1c1e20fd5aa05f5ea4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:b8:bb:2a:01:ca:03:29:c8:6b:0e:8e:0a:93:
8b:e4:21:9b:be:78:a6:e9:17:1e:27:55:19:8f:ca:
00:92:51:44:35:7f:84:b5:e8:4c:2f:f6:86:87:0c:
e3:16:e8:a7:8b:77:94:93:d2:e1:2a:7b:70:b5:b0:
06:e0:fc:fd:28:91:5a:d4:af:87:4b:fb:19:94:32:
3f:3b:7a:13:bc:49:e0:05:ce:8d:70:50:b4:3e:55:
a3:24:8f:37:fc:74:4d:fd:6b:49:ed:c3:de:ff:f9:
70:61:eb:ba:c6:4b:73:c9:c3:eb:b2:c1:6c:f4:eb:
d7:7c:ac:25:1a:ca:03:95:53:25:6e:42:ac:85:35:
c9:8b:37:94:cb:25:96:e9:01:01:29:9e:85:05:42:
6c:53:7c:7a:6b:5c:10:d8:15:a3:31:8e:4b:44:fd:
80:23:a7:fc:4f:4b:83:f2:97:60:1f:b0:28:dc:4d:
8b:65:ac:ac:01:fb:76:01:67:49:c4:b5:f1:0b:6c:
4c:7a:c1:14:70:66:8a:a4:a5:f4:05:65:e9:7e:c5:
5d:60:7f:8b:89:40:f7:50:84:0f:24:5a:54:a1:35:
9b:d9:b6:b6:86:66:21:17:87:d9:56:c7:a2:6c:cd:
5c:ca:bf:59:a2:18:11:5f:7f:b2:9a:e5:aa:54:09:
dd:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:81:EA:3C:B4:E4:01:47:17:E2:C1:C1:E2:0F:D5:AA:05:F5:EA:4B
X509v3 Authority Key Identifier:
keyid:B4:50:4D:28:E6:7A:21:EC:96:D9:5B:27:46:3E:C0:30:3F:E1:76:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tFBNKOZ6IeyW2VsnRj7AMD_hdiw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/d3558d-9057-47db-9959-3060b36b8506/1/tFBNKOZ6IeyW2VsnRj7AMD_hdiw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/d3558d-9057-47db-9959-3060b36b8506/1/tFBNKOZ6IeyW2VsnRj7AMD_hdiw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:a4:49:fd:2d:94:db:00:e4:6a:26:4b:6f:67:74:3a:4a:73:
f1:9b:80:47:60:66:de:5f:05:e6:c5:d3:d7:9e:6d:84:f3:73:
51:d0:b2:d4:80:8e:47:a2:19:63:d3:59:36:9e:3c:9d:04:f7:
83:5c:df:29:77:b5:6b:09:0c:d9:46:94:79:7f:bf:6e:d6:de:
95:9a:21:69:c3:4d:71:3d:03:82:64:c0:8f:8c:6d:37:80:0c:
dc:dc:ad:cf:08:62:d0:36:28:94:3d:fb:83:a8:ef:db:b6:d8:
90:31:c7:a6:d8:7b:36:96:ef:86:c1:ac:69:d1:6d:b5:a9:0a:
bd:72:e0:f8:33:05:ea:c5:8e:5d:fa:8a:75:f1:03:d5:cd:19:
ff:f1:9c:85:8c:c3:36:6b:b7:d0:d1:f9:47:5b:27:28:30:83:
e3:66:43:cd:92:68:62:55:c4:e6:3e:68:af:25:5b:18:91:2c:
e3:a4:d6:a8:3b:9a:c0:3a:f0:63:6b:9b:86:ca:ca:54:37:c7:
0c:51:39:b3:3a:50:bf:10:6c:2e:46:77:70:20:28:fb:58:b7:
ee:11:c0:95:47:11:60:3c:4f:29:e1:3e:9c:b1:d5:cd:f8:38:
5f:98:ad:b5:ba:4c:34:85:76:04:91:10:9a:9a:49:30:06:94:
5a:72:1b:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 26 15:46:11 2026 by rpki-client