
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/c9d523-0bb9-4573-9595-76a3a10a26f2/1/TdA6WGuXinCqqC4JWKkBUucmedk.mft
File: TdA6WGuXinCqqC4JWKkBUucmedk.mft (raw, json)
Hash identifier: eW/BomogI6/aB98vmulcg16sUa14YN38drFnrkV85pA=
Subject key identifier: 0E:73:A4:0F:F9:4F:FE:82:25:23:9D:6D:7D:77:E5:05:F3:CB:77:90
Authority key identifier: 4D:D0:3A:58:6B:97:8A:70:AA:A8:2E:09:58:A9:01:52:E7:26:79:D9
Certificate issuer: /CN=4dd03a586b978a70aaa82e0958a90152e72679d9
Certificate serial: 019E1EA3E5C7CECF48E4DF07694FD66E97A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TdA6WGuXinCqqC4JWKkBUucmedk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/c9d523-0bb9-4573-9595-76a3a10a26f2/1/TdA6WGuXinCqqC4JWKkBUucmedk.mft
Manifest number: 0B67
Signing time: Wed 13 May 2026 00:01:57 +0000
Manifest this update: Wed 13 May 2026 00:01:57 +0000
Manifest next update: Thu 14 May 2026 00:01:57 +0000
Files and hashes: 1: FKpOhOuuXOF2CQyUBzWT1pdpVqc.roa (hash: ysT9E+YNysEYFfe5RzvJVpbtqR6v2fUqt40v4tEcOBQ=)
2: TdA6WGuXinCqqC4JWKkBUucmedk.crl (hash: 9bPMaqErzo1MWCPmekWWbpafN66MRrOTpXMuPJITe0A=)
3: ttNXspnBYOBylc9inYKHFOll37k.roa (hash: RLGAiX60Eg9+/H6cmMZLT7RRPoDY5hArHpeHbk6ZQf8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/c9d523-0bb9-4573-9595-76a3a10a26f2/1/TdA6WGuXinCqqC4JWKkBUucmedk.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/c9d523-0bb9-4573-9595-76a3a10a26f2/1/TdA6WGuXinCqqC4JWKkBUucmedk.mft
rsync://rpki.ripe.net/repository/DEFAULT/TdA6WGuXinCqqC4JWKkBUucmedk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:a3:e5:c7:ce:cf:48:e4:df:07:69:4f:d6:6e:97:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4dd03a586b978a70aaa82e0958a90152e72679d9
Validity
Not Before: May 13 00:01:57 2026 GMT
Not After : May 14 00:01:57 2026 GMT
Subject: CN=0e73a40ff94ffe8225239d6d7d77e505f3cb7790
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:14:7c:f6:86:26:7c:36:fb:ce:8f:fe:43:2c:
09:a2:ec:40:46:03:d5:61:42:d8:72:10:ec:23:26:
f8:e7:4d:d3:4f:4b:48:2e:c2:35:bd:4a:66:35:88:
70:5a:36:4e:53:2b:13:0a:b3:02:2e:78:6a:79:0f:
69:57:e8:7d:d7:e9:0b:bd:d2:87:12:cb:a7:e9:74:
a8:8c:31:37:2b:ca:71:bf:30:cc:cc:74:38:04:6e:
e2:6d:6b:46:b3:97:7b:ac:2e:d9:4e:06:ea:01:f2:
4c:8d:c2:38:78:c8:66:0b:fc:f7:fd:be:3a:e3:b0:
1f:a5:a0:26:24:6f:8b:79:6f:12:60:dd:04:8e:b3:
1d:03:b5:be:74:dd:94:89:38:09:f2:0e:c3:89:00:
a1:1f:f2:59:9c:d3:49:51:58:d9:bb:ab:d0:f9:cb:
e9:7b:7c:10:fb:21:6a:b6:13:4f:67:b2:20:2f:a1:
52:f4:7c:41:7a:8f:95:ff:ca:bf:fb:15:de:e4:df:
01:71:ce:08:13:25:dd:2e:0f:22:a6:e7:57:a3:49:
c8:af:02:36:f1:5e:a5:e3:3f:1b:92:7b:d0:3b:e6:
b2:c1:2c:b0:59:66:03:57:d7:34:b4:09:40:df:27:
05:b0:70:56:95:ef:54:c2:e0:85:62:50:24:d3:ac:
ac:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:73:A4:0F:F9:4F:FE:82:25:23:9D:6D:7D:77:E5:05:F3:CB:77:90
X509v3 Authority Key Identifier:
keyid:4D:D0:3A:58:6B:97:8A:70:AA:A8:2E:09:58:A9:01:52:E7:26:79:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TdA6WGuXinCqqC4JWKkBUucmedk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/c9d523-0bb9-4573-9595-76a3a10a26f2/1/TdA6WGuXinCqqC4JWKkBUucmedk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/c9d523-0bb9-4573-9595-76a3a10a26f2/1/TdA6WGuXinCqqC4JWKkBUucmedk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:f8:29:c4:47:bf:5c:69:d7:66:26:d8:96:9f:9b:0e:e2:6b:
c6:52:5c:d0:08:45:67:5d:bd:64:5c:31:63:68:c0:f7:63:6e:
c8:01:6d:56:0e:fc:67:3c:1d:d8:80:f5:9a:d2:61:bb:d9:f0:
63:7a:3a:26:9a:33:81:98:85:c5:bd:4c:af:50:73:23:60:8f:
f8:b4:62:80:1c:82:c0:4e:e8:45:f4:3c:98:b5:6f:29:af:09:
8c:97:63:e6:12:8a:c2:97:04:e6:94:50:b6:da:c2:f8:65:db:
38:cc:10:3f:b0:37:c4:25:61:17:2e:de:81:3a:ba:25:85:3c:
49:4e:dd:c4:7d:31:18:21:c3:d8:88:ef:79:2f:97:36:7c:e4:
25:13:1b:42:af:50:a2:5c:9a:f8:ba:52:fe:7d:57:6e:30:d4:
c8:c6:a4:3f:b6:86:2b:c2:4d:c6:7d:a1:6d:5c:42:d7:da:47:
ce:55:9e:53:63:36:66:28:c8:5d:b4:32:98:52:6a:f2:5b:03:
9c:4f:fc:00:37:47:85:4a:14:d1:8d:5b:6a:7d:65:1e:76:83:
86:60:21:24:d4:db:5e:43:4d:cc:db:46:de:e4:b5:99:23:8f:
eb:80:8e:7d:8e:9c:4f:d7:57:9d:b4:c4:b4:22:9c:98:f2:12:
6e:b6:ee:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:43:35 2026 by rpki-client