Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/6094af-72c5-4eb5-98ea-0e2ea6a02182/1/TDOTsqG9eRmFmAeDirHjsAN7i08.mft
File: TDOTsqG9eRmFmAeDirHjsAN7i08.mft (raw, json)
Hash identifier: TB/jrFE1JkMhtsYv0nzMxmPjV8kXC9uEH4ve6N74ECg=
Subject key identifier: 06:4F:4D:59:5D:BD:05:F9:61:0F:59:C1:52:38:C8:C4:0A:CC:29:69
Authority key identifier: 4C:33:93:B2:A1:BD:79:19:85:98:07:83:8A:B1:E3:B0:03:7B:8B:4F
Certificate issuer: /CN=4c3393b2a1bd7919859807838ab1e3b0037b8b4f
Certificate serial: 019D389BE9408603D00AC8BEDCE97F7FB2D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TDOTsqG9eRmFmAeDirHjsAN7i08.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/6094af-72c5-4eb5-98ea-0e2ea6a02182/1/TDOTsqG9eRmFmAeDirHjsAN7i08.mft
Manifest number: 0F8B
Signing time: Sun 29 Mar 2026 08:00:34 +0000
Manifest this update: Sun 29 Mar 2026 08:00:34 +0000
Manifest next update: Mon 30 Mar 2026 08:00:34 +0000
Files and hashes: 1: MZGCF8jJAiyoJpfcfKYeIqU-Sm0.roa (hash: skXEJp7MsTuCw1bxF6Ss3mHgzce5kN4hSKRqdlY6UhE=)
2: TDOTsqG9eRmFmAeDirHjsAN7i08.crl (hash: YiQQbqvCjlunZNpwrNUzNm019EmEeBOFvXVP3Yirf1s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/6094af-72c5-4eb5-98ea-0e2ea6a02182/1/TDOTsqG9eRmFmAeDirHjsAN7i08.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/6094af-72c5-4eb5-98ea-0e2ea6a02182/1/TDOTsqG9eRmFmAeDirHjsAN7i08.mft
rsync://rpki.ripe.net/repository/DEFAULT/TDOTsqG9eRmFmAeDirHjsAN7i08.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9b:e9:40:86:03:d0:0a:c8:be:dc:e9:7f:7f:b2:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c3393b2a1bd7919859807838ab1e3b0037b8b4f
Validity
Not Before: Mar 29 08:00:34 2026 GMT
Not After : Mar 30 08:00:34 2026 GMT
Subject: CN=064f4d595dbd05f9610f59c15238c8c40acc2969
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ee:6d:fe:52:af:81:12:71:6d:3d:43:3b:9f:
c1:83:13:46:17:8f:ce:ec:8b:52:d6:8f:0f:44:3a:
57:2c:4d:b3:02:6c:ae:72:7c:fe:ee:b3:9a:4e:f6:
2f:09:96:85:88:e9:c6:9e:47:bd:e8:09:2d:b6:2a:
a5:bd:9e:c1:e2:98:74:7c:e1:02:b0:36:4c:6f:7c:
06:7b:5d:af:ac:ff:40:6e:5c:45:6f:04:34:97:e9:
c8:11:57:70:3e:bc:6f:58:ff:4a:8d:77:47:0c:c3:
1e:37:b3:34:24:9a:bd:67:fc:ff:da:ea:d5:6f:44:
1b:fa:25:21:70:a6:36:67:c3:94:cb:3f:57:44:40:
e0:e0:a9:de:b4:43:37:3f:84:2e:34:55:06:98:23:
73:b1:3f:9f:e6:51:56:84:31:b8:84:ba:af:1b:6c:
1f:42:b5:47:fd:08:7c:97:7a:3d:c3:e8:27:f2:c1:
25:0e:7c:ed:ce:85:8b:5e:9a:1d:54:25:23:b0:d4:
0f:ba:b4:87:3e:51:4f:2c:c1:a3:dc:fc:01:5d:d5:
03:76:ae:22:d8:ce:e6:91:0b:fb:10:32:e7:24:2b:
96:ce:21:a4:bf:98:10:4a:4f:05:c2:9a:d9:bf:c3:
ea:48:66:28:65:40:61:fb:c6:f5:c5:e5:34:11:31:
4a:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:4F:4D:59:5D:BD:05:F9:61:0F:59:C1:52:38:C8:C4:0A:CC:29:69
X509v3 Authority Key Identifier:
keyid:4C:33:93:B2:A1:BD:79:19:85:98:07:83:8A:B1:E3:B0:03:7B:8B:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TDOTsqG9eRmFmAeDirHjsAN7i08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/6094af-72c5-4eb5-98ea-0e2ea6a02182/1/TDOTsqG9eRmFmAeDirHjsAN7i08.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/6094af-72c5-4eb5-98ea-0e2ea6a02182/1/TDOTsqG9eRmFmAeDirHjsAN7i08.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:74:ea:12:3e:a2:d6:58:6b:e6:d2:02:8c:81:ec:65:41:8d:
2c:6a:7c:57:93:a1:8a:a3:4e:cd:af:3b:af:e5:0b:b7:c5:90:
52:38:9d:51:4c:e9:83:01:62:7c:98:d2:d9:30:a4:36:f1:5a:
4b:12:43:17:af:89:0f:81:23:cf:7c:7d:f9:ca:e0:c2:88:2b:
7c:20:c0:be:f8:69:93:1b:b4:57:b6:1d:5b:53:39:90:e3:d0:
9f:e2:fa:ec:2f:64:56:b5:e1:4a:fc:89:37:ac:9c:b3:74:40:
ac:1b:d0:f9:69:26:41:7e:f0:69:a6:32:62:dc:8f:a2:f9:80:
9b:84:98:46:3e:35:63:97:e7:07:72:34:aa:af:3b:f8:b6:a0:
e0:7f:da:2d:92:5b:02:d0:25:42:f6:c3:31:27:a6:f4:cd:2b:
64:8d:8d:bd:0a:28:5d:bb:9a:37:ea:82:b5:78:8e:d3:33:9b:
d2:d2:11:22:7a:f0:84:64:85:71:aa:59:f8:23:6c:0a:ae:e1:
57:94:45:db:5d:36:c3:b5:66:a0:55:77:a0:68:ba:dd:a7:30:
d7:a4:9d:d7:66:a3:28:59:4b:b1:57:ee:7f:e7:9c:1d:ca:dd:
9b:6e:7a:74:2e:92:d9:74:b5:51:5b:fa:61:b2:4a:e4:0c:b4:
9e:d2:1e:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:13:20 2026 by rpki-client