Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/c9d523-0bb9-4573-9595-76a3a10a26f2/1/TdA6WGuXinCqqC4JWKkBUucmedk.mft
File: TdA6WGuXinCqqC4JWKkBUucmedk.mft (raw, json)
Hash identifier: yjs+Z+GauK40TcljEhyuYaXQXMYRGZMDEy3+/RAcP8k=
Subject key identifier: 93:C7:06:02:B4:A4:66:96:A3:28:E9:D5:F7:19:05:02:DF:73:77:CF
Authority key identifier: 4D:D0:3A:58:6B:97:8A:70:AA:A8:2E:09:58:A9:01:52:E7:26:79:D9
Certificate issuer: /CN=4dd03a586b978a70aaa82e0958a90152e72679d9
Certificate serial: 019D2771B9C10BB609578B27D65B309C8E0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TdA6WGuXinCqqC4JWKkBUucmedk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/c9d523-0bb9-4573-9595-76a3a10a26f2/1/TdA6WGuXinCqqC4JWKkBUucmedk.mft
Manifest number: 0AE7
Signing time: Thu 26 Mar 2026 00:00:57 +0000
Manifest this update: Thu 26 Mar 2026 00:00:57 +0000
Manifest next update: Fri 27 Mar 2026 00:00:57 +0000
Files and hashes: 1: FKpOhOuuXOF2CQyUBzWT1pdpVqc.roa (hash: ysT9E+YNysEYFfe5RzvJVpbtqR6v2fUqt40v4tEcOBQ=)
2: TdA6WGuXinCqqC4JWKkBUucmedk.crl (hash: d6IcuFLm84STkmRtu/p6hxiAFOizJ6mFa1J4aAWgc1Q=)
3: ttNXspnBYOBylc9inYKHFOll37k.roa (hash: RLGAiX60Eg9+/H6cmMZLT7RRPoDY5hArHpeHbk6ZQf8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/c9d523-0bb9-4573-9595-76a3a10a26f2/1/TdA6WGuXinCqqC4JWKkBUucmedk.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/c9d523-0bb9-4573-9595-76a3a10a26f2/1/TdA6WGuXinCqqC4JWKkBUucmedk.mft
rsync://rpki.ripe.net/repository/DEFAULT/TdA6WGuXinCqqC4JWKkBUucmedk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:71:b9:c1:0b:b6:09:57:8b:27:d6:5b:30:9c:8e:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4dd03a586b978a70aaa82e0958a90152e72679d9
Validity
Not Before: Mar 26 00:00:57 2026 GMT
Not After : Mar 27 00:00:57 2026 GMT
Subject: CN=93c70602b4a46696a328e9d5f7190502df7377cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:ee:ae:91:a9:ac:dc:5d:5f:11:06:ad:0a:27:
ce:e1:6a:4b:48:f0:88:f7:25:50:aa:93:0b:98:79:
e9:e2:56:52:94:92:49:06:1b:84:e8:1f:6e:ec:8f:
7f:13:af:b6:4a:5f:7d:1b:93:7b:a7:00:8d:b4:5c:
db:c4:35:40:d0:d1:68:c9:b5:2b:cf:13:c1:d6:35:
5d:37:9d:af:a1:27:8e:1d:b0:3f:fb:19:79:e8:63:
71:32:df:cd:fb:35:46:50:4d:a1:a2:25:c8:d1:28:
59:16:23:a9:f4:3b:e4:ea:90:a9:70:8e:4c:80:5b:
da:8a:f8:30:6c:40:1b:69:d3:fb:69:85:58:9c:fc:
a3:03:05:4b:01:ec:2f:0a:4f:51:a1:21:0c:a7:3b:
42:91:06:12:5a:94:d3:a0:91:1f:f7:c3:83:88:ba:
e2:f1:17:09:8e:5e:75:7d:6e:2c:e2:c7:38:59:7c:
b7:73:df:2d:9c:b2:53:fd:c3:ab:1a:b8:c3:bf:44:
73:03:5c:68:76:7e:e4:f4:d1:9f:e6:c2:1f:28:88:
44:a8:94:2d:94:39:f3:69:fd:11:4f:92:4d:10:dd:
2a:31:17:e0:e9:07:eb:13:31:0b:57:f7:34:ce:c5:
b5:c0:e8:67:ec:94:38:d8:32:89:48:b8:b1:52:1e:
28:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:C7:06:02:B4:A4:66:96:A3:28:E9:D5:F7:19:05:02:DF:73:77:CF
X509v3 Authority Key Identifier:
keyid:4D:D0:3A:58:6B:97:8A:70:AA:A8:2E:09:58:A9:01:52:E7:26:79:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TdA6WGuXinCqqC4JWKkBUucmedk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/c9d523-0bb9-4573-9595-76a3a10a26f2/1/TdA6WGuXinCqqC4JWKkBUucmedk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/c9d523-0bb9-4573-9595-76a3a10a26f2/1/TdA6WGuXinCqqC4JWKkBUucmedk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c9:d5:68:a4:14:07:a7:a9:81:9a:8e:31:8d:de:49:84:f7:3a:
19:22:25:19:7b:26:f5:7d:a3:96:1a:18:e3:62:d7:ac:70:7e:
fe:f2:08:00:da:91:e1:d3:e9:d5:78:0f:79:56:73:98:c1:93:
c1:bb:e6:f4:98:fd:6a:52:d4:e8:09:29:32:4d:22:c8:fd:bc:
82:61:5b:ad:3a:65:cd:8f:42:81:df:8b:c8:51:2a:58:f5:ca:
58:b3:77:55:93:a7:49:01:3c:94:bc:83:75:09:56:4a:52:8e:
22:55:ea:f4:83:23:9a:cc:3a:dd:60:2d:e4:80:0f:6b:24:de:
fa:c9:2c:fe:34:cc:c7:d4:93:d1:46:49:19:b2:7a:cd:0e:a9:
74:5d:14:c6:7a:94:f8:fe:64:d4:44:bb:a5:cb:b7:a9:7d:d0:
4e:ca:ec:09:65:22:7b:1d:4e:33:26:0c:03:05:ef:87:03:1a:
06:a9:1a:c6:2f:b6:23:83:fe:8f:b7:bf:6b:78:e1:38:f3:81:
3e:33:70:a7:80:98:71:c1:ee:6d:94:09:3c:7a:0a:9f:bb:be:
d3:54:f9:8f:87:39:62:51:3e:14:c7:a9:27:bc:92:e8:d4:d5:
42:6f:75:a1:22:77:1b:af:9f:7a:77:10:f2:f7:3b:2d:39:09:
d9:43:03:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:51:58 2026 by rpki-client