Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/07/e6a3c7-38d5-4540-b925-92bad5641598/1/Tdgz3893GGXftIVZ4fHG-TWOXrs.mft
File: Tdgz3893GGXftIVZ4fHG-TWOXrs.mft (raw, json)
Hash identifier: lk4zc9YiBeVw8sgzwA4AqqUQUQ1hRnNhhPrLkio/CPw=
Subject key identifier: A7:33:28:EA:3E:65:1A:F5:F7:7D:3A:08:1F:E8:62:FA:1C:24:DB:D5
Authority key identifier: 4D:D8:33:DF:CF:77:18:65:DF:B4:85:59:E1:F1:C6:F9:35:8E:5E:BB
Certificate issuer: /CN=4dd833dfcf771865dfb48559e1f1c6f9358e5ebb
Certificate serial: 01A10D02D9DE08061BA59BDA50B6BAE7984E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tdgz3893GGXftIVZ4fHG-TWOXrs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e6a3c7-38d5-4540-b925-92bad5641598/1/Tdgz3893GGXftIVZ4fHG-TWOXrs.mft
Manifest number: 01B7
Signing time: Mon 05 Oct 2026 17:00:52 +0000
Manifest this update: Mon 05 Oct 2026 17:00:52 +0000
Manifest next update: Tue 06 Oct 2026 17:00:52 +0000
Files and hashes: 1: Tdgz3893GGXftIVZ4fHG-TWOXrs.crl (hash: N02TeeHsj6XPZlpk8lN4feGLKKWuplIeLN+VzXXyyyA=)
2: vY2tTuvU2bXmD8ZEra6Cc_X15hw.asa (hash: fzDYYNkCwUZhlvkjfrFr/hgbEcIoXdhFh+55Z0wgexM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/e6a3c7-38d5-4540-b925-92bad5641598/1/Tdgz3893GGXftIVZ4fHG-TWOXrs.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/e6a3c7-38d5-4540-b925-92bad5641598/1/Tdgz3893GGXftIVZ4fHG-TWOXrs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tdgz3893GGXftIVZ4fHG-TWOXrs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 Oct 2026 14:13:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0d:02:d9:de:08:06:1b:a5:9b:da:50:b6:ba:e7:98:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4dd833dfcf771865dfb48559e1f1c6f9358e5ebb
Validity
Not Before: Oct 5 17:00:52 2026 GMT
Not After : Oct 6 17:00:52 2026 GMT
Subject: CN=a73328ea3e651af5f77d3a081fe862fa1c24dbd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:6f:2f:0d:c5:63:db:5a:7b:a7:0e:09:70:0d:
ae:63:e2:13:3c:c6:cf:94:8f:d9:91:02:fe:67:a7:
b1:be:5c:e9:2f:72:37:55:0f:44:2d:8a:cd:12:38:
07:ea:ec:cf:3f:cb:2a:43:c6:d1:73:c2:a9:78:70:
c9:11:2f:5a:84:fb:8d:d0:f1:68:ad:c5:25:c2:84:
24:1f:00:69:ee:a6:01:53:ce:54:ce:42:1a:5d:44:
17:d9:05:f1:7d:fb:57:90:15:00:40:f0:f8:b9:45:
9d:1b:98:c4:90:fb:b0:04:72:43:77:43:e2:c3:15:
25:bf:a6:97:9e:40:13:e4:fb:77:92:20:33:f0:e7:
5c:d6:b3:e7:ae:49:52:c0:83:14:b0:d9:1b:cc:f9:
cf:c4:e7:ad:69:4b:95:b6:a4:41:a6:39:b4:30:6d:
80:e8:90:b0:5d:f9:f2:ef:25:63:0f:bd:bf:28:0b:
6f:90:1a:83:c2:26:ae:f5:96:7b:8e:b5:89:62:eb:
5b:27:64:65:28:ae:f6:29:5c:47:2b:1a:e5:f9:72:
83:a7:5c:fd:b0:41:ae:47:ba:bf:49:e1:e4:d3:a3:
de:fc:3a:65:72:98:5b:d7:49:ec:19:0f:6c:04:b0:
a0:94:37:b1:20:34:76:b4:f8:dc:e1:11:f8:6f:7f:
39:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:33:28:EA:3E:65:1A:F5:F7:7D:3A:08:1F:E8:62:FA:1C:24:DB:D5
X509v3 Authority Key Identifier:
keyid:4D:D8:33:DF:CF:77:18:65:DF:B4:85:59:E1:F1:C6:F9:35:8E:5E:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tdgz3893GGXftIVZ4fHG-TWOXrs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e6a3c7-38d5-4540-b925-92bad5641598/1/Tdgz3893GGXftIVZ4fHG-TWOXrs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e6a3c7-38d5-4540-b925-92bad5641598/1/Tdgz3893GGXftIVZ4fHG-TWOXrs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:30:e1:1e:85:64:02:62:3f:1d:88:73:0d:5b:d4:b6:f8:57:
9d:cf:f2:3c:9a:e0:0d:a5:2e:59:a8:8e:41:c6:9a:5a:e2:50:
df:3a:84:4c:22:74:1a:18:b5:d2:6d:41:0f:5d:88:fe:a4:e8:
6e:a4:a0:31:ea:89:68:d7:ea:92:73:94:06:82:6f:f8:30:fc:
da:2d:33:71:92:5a:8a:e2:1b:e7:a0:d1:d6:16:30:4f:ad:c5:
fd:e5:a9:98:45:d3:cd:d4:08:49:34:b8:7a:61:3c:f4:0e:76:
85:ac:50:ae:fd:f5:45:b0:45:96:bb:86:af:aa:2e:e2:94:9b:
1d:d3:12:c8:d1:17:d4:cb:36:2f:04:6c:7e:e5:45:94:30:b0:
ab:05:04:f1:2a:c6:3f:e4:73:60:59:02:38:a8:51:78:b3:ff:
8d:e3:eb:6a:3c:8d:65:60:5f:e0:2f:e4:b4:01:2a:56:d7:64:
49:23:0c:4e:d5:80:80:10:92:69:ef:12:4b:fa:47:63:e9:c9:
6d:66:e9:5c:8e:fb:22:ef:41:85:5c:d5:e3:77:f6:46:bf:82:
41:c4:76:13:02:06:80:20:73:79:e1:98:da:53:af:5b:2e:85:
9e:36:20:33:b7:d4:44:c8:b5:fb:9f:28:5e:16:af:76:9d:09:
7f:f9:61:40
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaENAtneCAYbpZvaULa655hOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRkZDgzM2RmY2Y3NzE4NjVkZmI0ODU1OWUxZjFjNmY5MzU4
ZTVlYmIwHhcNMjYxMDA1MTcwMDUyWhcNMjYxMDA2MTcwMDUyWjAzMTEwLwYDVQQD
EyhhNzMzMjhlYTNlNjUxYWY1Zjc3ZDNhMDgxZmU4NjJmYTFjMjRkYmQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmm8vDcVj21p7pw4JcA2uY+ITPMbP
lI/ZkQL+Z6exvlzpL3I3VQ9ELYrNEjgH6uzPP8sqQ8bRc8KpeHDJES9ahPuN0PFo
rcUlwoQkHwBp7qYBU85UzkIaXUQX2QXxfftXkBUAQPD4uUWdG5jEkPuwBHJDd0Pi
wxUlv6aXnkAT5Pt3kiAz8Odc1rPnrklSwIMUsNkbzPnPxOetaUuVtqRBpjm0MG2A
6JCwXfny7yVjD72/KAtvkBqDwiau9ZZ7jrWJYutbJ2RlKK72KVxHKxrl+XKDp1z9
sEGuR7q/SeHk06Pe/Dplcphb10nsGQ9sBLCglDexIDR2tPjc4RH4b385xQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKczKOo+ZRr19306CB/oYvocJNvVMB8GA1UdIwQY
MBaAFE3YM9/Pdxhl37SFWeHxxvk1jl67MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVGRnejM4OTNHR1hmdElWWjRmSEctVFdPWHJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy9lNmEzYzctMzhkNS00NTQwLWI5MjUt
OTJiYWQ1NjQxNTk4LzEvVGRnejM4OTNHR1hmdElWWjRmSEctVFdPWHJzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNy9lNmEzYzctMzhkNS00NTQwLWI5MjUtOTJiYWQ1NjQxNTk4
LzEvVGRnejM4OTNHR1hmdElWWjRmSEctVFdPWHJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdjDhHoVk
AmI/HYhzDVvUtvhXnc/yPJrgDaUuWaiOQcaaWuJQ3zqETCJ0Ghi10m1BD12I/qTo
bqSgMeqJaNfqknOUBoJv+DD82i0zcZJaiuIb56DR1hYwT63F/eWpmEXTzdQISTS4
emE89A52haxQrv31RbBFlruGr6ou4pSbHdMSyNEX1Ms2LwRsfuVFlDCwqwUE8SrG
P+RzYFkCOKhReLP/jePrajyNZWBf4C/ktAEqVtdkSSMMTtWAgBCSae8SS/pHY+nJ
bWbpXI77Iu9BhVzV43f2Rr+CQcR2EwIGgCBzeeGY2lOvWy6FnjYgM7fURMi1+58o
Xhavdp0Jf/lhQA==
-----END CERTIFICATE-----
Generated at Tue Oct 6 00:41:58 2026 by rpki-client