Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e6a3c7-38d5-4540-b925-92bad5641598/1/Tdgz3893GGXftIVZ4fHG-TWOXrs.mft
File: Tdgz3893GGXftIVZ4fHG-TWOXrs.mft (raw, json)
Hash identifier: jkz2833Lvg9EyrqewQvvZ6+aJyqrMzDkUZ2UjkOjqQs=
Subject key identifier: 7A:4B:C8:42:0A:4B:C6:5F:EC:07:01:4F:14:2E:C5:D7:93:A8:B8:AE
Authority key identifier: 4D:D8:33:DF:CF:77:18:65:DF:B4:85:59:E1:F1:C6:F9:35:8E:5E:BB
Certificate issuer: /CN=4dd833dfcf771865dfb48559e1f1c6f9358e5ebb
Certificate serial: 019E1DC75259BEFD39D2DD2712BE40A1D186
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tdgz3893GGXftIVZ4fHG-TWOXrs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e6a3c7-38d5-4540-b925-92bad5641598/1/Tdgz3893GGXftIVZ4fHG-TWOXrs.mft
Manifest number: 32
Signing time: Tue 12 May 2026 20:01:02 +0000
Manifest this update: Tue 12 May 2026 20:01:02 +0000
Manifest next update: Wed 13 May 2026 20:01:02 +0000
Files and hashes: 1: Tdgz3893GGXftIVZ4fHG-TWOXrs.crl (hash: sMbzxev4VHXq474nqnZ5qnh9ngN1ZYke5eqmNUNNUIw=)
2: vY2tTuvU2bXmD8ZEra6Cc_X15hw.asa (hash: fzDYYNkCwUZhlvkjfrFr/hgbEcIoXdhFh+55Z0wgexM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/e6a3c7-38d5-4540-b925-92bad5641598/1/Tdgz3893GGXftIVZ4fHG-TWOXrs.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/e6a3c7-38d5-4540-b925-92bad5641598/1/Tdgz3893GGXftIVZ4fHG-TWOXrs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tdgz3893GGXftIVZ4fHG-TWOXrs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:c7:52:59:be:fd:39:d2:dd:27:12:be:40:a1:d1:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4dd833dfcf771865dfb48559e1f1c6f9358e5ebb
Validity
Not Before: May 12 20:01:02 2026 GMT
Not After : May 13 20:01:02 2026 GMT
Subject: CN=7a4bc8420a4bc65fec07014f142ec5d793a8b8ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:ba:84:38:1d:31:92:03:56:2c:65:a0:85:48:
e8:0c:f6:6d:42:f2:49:90:3a:c6:6f:cd:36:95:9d:
ba:8a:8f:4f:bb:00:98:22:0a:84:70:17:c0:da:fd:
59:58:d8:8d:91:36:13:06:53:e8:c3:e0:6c:25:04:
b2:04:93:c2:48:ce:cd:6b:e3:40:f0:da:fc:7b:0e:
34:8b:09:f5:02:de:01:95:f5:da:3d:d0:5b:94:f0:
35:91:4f:b0:90:02:f1:f0:28:04:d5:25:a1:7d:06:
5f:95:5b:3a:95:4c:4b:db:96:89:d6:61:23:64:b8:
f6:f3:54:11:9d:e1:f8:05:8d:39:8a:0c:ec:90:dd:
91:3a:c6:90:34:52:2e:95:39:0c:a1:bd:97:a2:08:
07:75:cb:5c:e3:66:e9:0a:32:34:eb:be:10:6d:f7:
9f:a6:0d:02:f7:02:d1:22:66:46:44:c8:19:d8:2d:
03:96:ae:d1:c7:83:e3:c9:a2:fd:a3:3e:94:21:1e:
24:b2:1c:cd:a8:be:ae:55:0a:66:79:62:c3:8e:fc:
93:14:ca:0c:f8:c6:b2:2d:e4:89:a3:09:79:8e:bb:
1f:87:9b:b8:c1:ac:de:37:75:bb:89:07:49:e8:62:
e6:10:ac:32:26:33:14:f2:58:15:5d:84:59:74:c8:
13:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:4B:C8:42:0A:4B:C6:5F:EC:07:01:4F:14:2E:C5:D7:93:A8:B8:AE
X509v3 Authority Key Identifier:
keyid:4D:D8:33:DF:CF:77:18:65:DF:B4:85:59:E1:F1:C6:F9:35:8E:5E:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tdgz3893GGXftIVZ4fHG-TWOXrs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e6a3c7-38d5-4540-b925-92bad5641598/1/Tdgz3893GGXftIVZ4fHG-TWOXrs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e6a3c7-38d5-4540-b925-92bad5641598/1/Tdgz3893GGXftIVZ4fHG-TWOXrs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:5e:25:00:81:81:6f:b2:41:d5:0e:dd:45:46:bc:52:db:27:
72:1c:67:49:7b:d1:35:61:f3:31:49:66:d9:9a:e3:3a:f1:d6:
63:96:11:a2:c2:13:f9:a0:00:c6:54:e3:1c:00:92:df:55:fe:
09:8d:76:e4:77:d3:d0:b4:1a:1d:87:06:15:31:0f:bb:50:e0:
75:da:2f:4f:fe:1b:da:b2:dc:77:ae:24:87:6c:f8:47:39:8a:
71:b4:58:be:9b:e9:72:b7:bd:0f:ef:c0:07:5d:da:31:6c:ce:
13:74:03:b8:6a:1e:a9:0c:7e:f9:b5:bc:51:c7:fc:d6:1b:0a:
be:79:9e:51:5f:d9:94:92:b8:ca:13:b7:0e:fb:4c:ff:22:ce:
a3:ff:b7:34:92:da:51:d9:3f:f0:2a:de:74:7d:4b:66:5c:74:
8f:c8:e7:37:46:bb:b8:f1:50:ac:9a:a6:a2:e3:58:c7:6f:3e:
46:f1:1d:42:d5:c2:74:cd:92:1a:ff:43:c5:c5:51:e6:ab:06:
6b:5d:f7:92:cf:9c:0d:0d:24:80:02:80:bc:54:a2:3d:1a:28:
8e:60:60:bc:c2:e2:2f:70:55:a8:6a:9a:62:e3:cb:e7:92:b2:
b6:ea:ff:5d:f7:25:fb:7b:34:ac:22:79:c6:98:6b:51:7d:b0:
41:2c:dc:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:27:01 2026 by rpki-client