Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/ec5584-6618-4b12-a11c-3055cb729bcf/1/TDuIzbE_PrEqm-VKsZuqkFWbOWo.mft
File: TDuIzbE_PrEqm-VKsZuqkFWbOWo.mft (raw, json)
Hash identifier: 2UFiMogxMdVsq/DlnABx1bqARy0W9zIFiODZDGY7pXQ=
Subject key identifier: F1:7F:8D:60:D5:19:FF:50:BE:50:B4:31:74:24:1F:72:9C:F8:81:3A
Authority key identifier: 4C:3B:88:CD:B1:3F:3E:B1:2A:9B:E5:4A:B1:9B:AA:90:55:9B:39:6A
Certificate issuer: /CN=4c3b88cdb13f3eb12a9be54ab19baa90559b396a
Certificate serial: 019D38D385D0DAE919FBB6AB32FD7E2C6C0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TDuIzbE_PrEqm-VKsZuqkFWbOWo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/ec5584-6618-4b12-a11c-3055cb729bcf/1/TDuIzbE_PrEqm-VKsZuqkFWbOWo.mft
Manifest number: 0A2A
Signing time: Sun 29 Mar 2026 09:01:19 +0000
Manifest this update: Sun 29 Mar 2026 09:01:19 +0000
Manifest next update: Mon 30 Mar 2026 09:01:19 +0000
Files and hashes: 1: NSzxR15lxLwAdc7Ga165-6mKacc.roa (hash: 3N9qBcothKO0rosVFxeggNkLbRm7QTKDO+BXyY2NEkk=)
2: QXNEa0rLZxlRlsB-8HuZ_VSJWP0.asa (hash: 6rji+pOpggUWT3pycZRN/hU8sc0Lzb5vIQ3TtjqmA1k=)
3: TDuIzbE_PrEqm-VKsZuqkFWbOWo.crl (hash: RzpdVisjXD8/DWG5hUBQKBqeSqvCn1FX764UPDwKWUc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/ec5584-6618-4b12-a11c-3055cb729bcf/1/TDuIzbE_PrEqm-VKsZuqkFWbOWo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/ec5584-6618-4b12-a11c-3055cb729bcf/1/TDuIzbE_PrEqm-VKsZuqkFWbOWo.mft
rsync://rpki.ripe.net/repository/DEFAULT/TDuIzbE_PrEqm-VKsZuqkFWbOWo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:85:d0:da:e9:19:fb:b6:ab:32:fd:7e:2c:6c:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c3b88cdb13f3eb12a9be54ab19baa90559b396a
Validity
Not Before: Mar 29 09:01:19 2026 GMT
Not After : Mar 30 09:01:19 2026 GMT
Subject: CN=f17f8d60d519ff50be50b43174241f729cf8813a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:8f:13:0d:99:68:58:51:d0:15:26:e5:a5:4a:
72:eb:e1:ad:aa:b8:f4:66:ff:99:99:59:5e:cb:f3:
4a:db:2d:51:75:eb:aa:58:71:56:9d:26:42:4a:0e:
e9:d8:35:e1:62:3a:b8:a4:99:72:e2:95:c6:7c:0c:
7c:b9:a4:bb:a9:d3:d4:1e:57:a3:36:3a:96:11:5e:
bf:28:16:03:84:de:c2:a7:8c:dc:30:1d:7f:70:7e:
bf:78:5b:79:c0:46:58:49:77:10:e1:16:c3:28:c7:
07:b8:18:8a:2f:03:63:1b:68:b2:34:35:c1:83:3e:
1c:90:7e:2d:e2:29:7f:47:72:55:24:8c:dc:9c:78:
7d:29:08:63:9d:e8:22:58:26:f3:61:f3:d0:53:98:
46:63:f8:f4:14:b2:9d:cc:e5:ca:22:1f:d9:25:ad:
a6:15:0f:aa:d0:eb:17:c0:1e:df:05:d9:14:f6:77:
ea:63:80:03:ae:63:c3:37:18:64:77:43:36:2c:40:
73:a1:91:b2:cb:dd:2c:9e:b3:76:45:8b:42:f1:32:
e9:39:4e:b4:d6:b1:48:af:9a:b6:ac:49:d1:d8:29:
0b:5c:b2:11:13:e5:88:c3:0f:69:39:85:94:fb:44:
18:5a:7d:a7:48:1c:34:01:34:24:31:66:24:c9:1e:
50:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:7F:8D:60:D5:19:FF:50:BE:50:B4:31:74:24:1F:72:9C:F8:81:3A
X509v3 Authority Key Identifier:
keyid:4C:3B:88:CD:B1:3F:3E:B1:2A:9B:E5:4A:B1:9B:AA:90:55:9B:39:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TDuIzbE_PrEqm-VKsZuqkFWbOWo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/ec5584-6618-4b12-a11c-3055cb729bcf/1/TDuIzbE_PrEqm-VKsZuqkFWbOWo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/ec5584-6618-4b12-a11c-3055cb729bcf/1/TDuIzbE_PrEqm-VKsZuqkFWbOWo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:d3:ea:6e:7c:dd:27:ad:31:84:6d:34:13:b5:a8:1b:29:56:
74:83:d8:04:3a:8f:0f:e9:e9:f8:71:49:51:b8:e4:0a:04:c7:
8f:12:c3:c3:80:6d:ec:6f:81:d1:ea:ff:54:fc:63:bc:dc:f9:
fd:d7:ee:54:aa:4b:31:70:30:e0:81:64:5c:62:20:69:70:5d:
1d:96:62:42:db:7a:82:ca:97:97:ea:69:23:4a:a7:62:69:78:
48:b3:d1:61:8b:56:1c:1d:65:4b:06:f0:5a:d8:53:dc:40:4c:
00:79:6b:7b:40:c5:75:53:75:15:27:8e:86:c9:e9:98:84:ec:
c9:ee:2d:eb:4e:2a:18:c7:d1:6b:9c:d8:4e:eb:de:0e:f2:19:
ef:10:9e:af:94:b1:98:21:23:4d:4a:8f:0c:88:29:d6:fd:9a:
de:d9:c6:21:92:81:d4:31:7d:bd:10:1b:d7:13:d6:6c:be:35:
ab:59:f1:3f:55:f0:6f:8b:7c:2b:e7:6d:bc:a4:66:00:5d:95:
e2:3d:41:07:bf:56:7e:f1:40:73:31:0b:ca:cd:10:57:3b:70:
69:60:49:08:47:53:41:6e:f1:b4:8c:a1:ac:82:72:0a:fd:91:
4d:ad:d8:23:9c:e3:d4:d1:8e:eb:dd:ee:b2:2d:cd:ab:34:1e:
3e:2d:cf:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:12:13 2026 by rpki-client