Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f3/ec5584-6618-4b12-a11c-3055cb729bcf/1/TDuIzbE_PrEqm-VKsZuqkFWbOWo.mft
File: TDuIzbE_PrEqm-VKsZuqkFWbOWo.mft (raw, json)
Hash identifier: C3UT55be0DxZZbsRhJyZCUlb+xOYp8hnOPlbw2aJFLA=
Subject key identifier: C6:AA:66:CC:96:80:B2:D2:C3:34:A9:85:C0:D3:A9:04:C1:30:53:B4
Authority key identifier: 4C:3B:88:CD:B1:3F:3E:B1:2A:9B:E5:4A:B1:9B:AA:90:55:9B:39:6A
Certificate issuer: /CN=4c3b88cdb13f3eb12a9be54ab19baa90559b396a
Certificate serial: 01A183ACE767EBE2430D8D55B28A858D470F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TDuIzbE_PrEqm-VKsZuqkFWbOWo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/ec5584-6618-4b12-a11c-3055cb729bcf/1/TDuIzbE_PrEqm-VKsZuqkFWbOWo.mft
Manifest number: 0C63
Signing time: Wed 28 Oct 2026 18:01:49 +0000
Manifest this update: Wed 28 Oct 2026 18:01:49 +0000
Manifest next update: Thu 29 Oct 2026 18:01:49 +0000
Files and hashes: 1: NSzxR15lxLwAdc7Ga165-6mKacc.roa (hash: 3N9qBcothKO0rosVFxeggNkLbRm7QTKDO+BXyY2NEkk=)
2: QXNEa0rLZxlRlsB-8HuZ_VSJWP0.asa (hash: 6rji+pOpggUWT3pycZRN/hU8sc0Lzb5vIQ3TtjqmA1k=)
3: TDuIzbE_PrEqm-VKsZuqkFWbOWo.crl (hash: tgHma73q8spBdFjPXUFQ4XzdTXVvOo+3IJ2YNWEL8Bw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/ec5584-6618-4b12-a11c-3055cb729bcf/1/TDuIzbE_PrEqm-VKsZuqkFWbOWo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/ec5584-6618-4b12-a11c-3055cb729bcf/1/TDuIzbE_PrEqm-VKsZuqkFWbOWo.mft
rsync://rpki.ripe.net/repository/DEFAULT/TDuIzbE_PrEqm-VKsZuqkFWbOWo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 14:14:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:83:ac:e7:67:eb:e2:43:0d:8d:55:b2:8a:85:8d:47:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c3b88cdb13f3eb12a9be54ab19baa90559b396a
Validity
Not Before: Oct 28 18:01:49 2026 GMT
Not After : Oct 29 18:01:49 2026 GMT
Subject: CN=c6aa66cc9680b2d2c334a985c0d3a904c13053b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:e0:ac:d6:d0:73:85:75:d0:5a:59:3e:51:ff:
3e:54:a5:49:92:a9:05:e3:04:9b:11:f7:9e:bb:f1:
2a:d5:8f:54:6e:0f:e6:ef:cb:a0:4d:1f:57:2f:25:
7a:bc:02:90:4e:23:06:46:e0:33:11:96:ec:da:76:
9e:a1:4f:a7:b8:39:3f:1b:2f:bb:06:1b:db:f9:a0:
74:fa:ba:97:ad:a1:89:86:d1:74:c8:99:3a:c1:2f:
e9:cd:97:92:07:30:84:a6:fd:32:7b:44:c7:d3:a2:
8f:94:2e:a7:52:12:72:1d:cf:8c:12:91:01:f6:6d:
0d:1a:f4:0f:a5:94:63:37:4f:52:6e:c6:b6:dd:9a:
78:55:ad:2a:7a:42:6d:90:3f:03:e1:2b:26:87:92:
6e:89:e6:28:e1:40:54:68:33:c6:68:3c:04:bb:5e:
76:d3:3c:0e:62:6b:9a:f5:d6:2b:0d:5d:6f:bb:24:
01:07:bf:4b:f4:cc:fb:59:64:bf:ea:b2:6f:e8:ec:
7d:d7:14:ba:92:31:7f:0f:bf:96:d0:0f:3a:2a:8c:
ab:40:00:bd:61:be:48:fb:9a:79:bb:b6:fd:ce:3e:
9d:ef:6f:b0:49:1f:c7:f4:3a:9d:19:b5:e5:28:a1:
84:66:36:73:1a:c1:a5:ce:49:56:31:10:a0:e6:07:
f6:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:AA:66:CC:96:80:B2:D2:C3:34:A9:85:C0:D3:A9:04:C1:30:53:B4
X509v3 Authority Key Identifier:
keyid:4C:3B:88:CD:B1:3F:3E:B1:2A:9B:E5:4A:B1:9B:AA:90:55:9B:39:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TDuIzbE_PrEqm-VKsZuqkFWbOWo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/ec5584-6618-4b12-a11c-3055cb729bcf/1/TDuIzbE_PrEqm-VKsZuqkFWbOWo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/ec5584-6618-4b12-a11c-3055cb729bcf/1/TDuIzbE_PrEqm-VKsZuqkFWbOWo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:d7:49:7a:ec:e5:8f:48:8f:31:5e:f5:02:46:53:37:ae:ac:
11:3a:2f:a5:20:96:e7:47:97:8d:cb:76:b1:6b:62:29:82:d5:
93:0c:7d:9c:1b:ae:6a:08:15:dd:92:e0:25:20:7c:ea:db:87:
1c:92:0c:a8:35:81:c3:4c:d1:e7:1f:39:04:d9:b8:d8:51:5f:
04:ce:2a:d2:b1:66:1b:b7:94:05:61:65:42:6b:c1:91:8c:da:
1a:4c:bd:3d:48:a9:59:98:b1:f9:b0:2a:a2:f8:55:f5:1a:89:
46:20:5d:d9:4a:78:43:60:1b:9b:19:6e:be:3c:89:af:fd:5e:
c3:54:8c:a4:32:3f:4a:42:d6:30:90:f1:4c:95:b2:7e:13:c5:
c3:f4:54:d7:66:0c:fc:eb:c0:47:9c:ec:f9:7d:8a:57:75:ae:
80:db:b5:b6:62:13:83:3a:ad:ff:1a:20:8e:1b:3f:75:7c:9a:
2a:ff:52:d2:68:ea:46:ab:42:67:1e:46:1e:15:08:ce:4a:61:
d1:02:54:d6:b2:6f:49:a4:3f:b1:a6:b5:74:57:43:46:17:b8:
85:b0:d7:8f:d4:35:1a:2e:3f:77:6c:b9:ef:80:d6:f9:46:29:
6d:30:dd:6d:97:9a:dd:59:43:aa:f9:6a:99:5b:2d:b1:2b:35:
45:4f:50:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 21:50:58 2026 by rpki-client