Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/c9d523-0bb9-4573-9595-76a3a10a26f2/1/TdA6WGuXinCqqC4JWKkBUucmedk.mft
File: TdA6WGuXinCqqC4JWKkBUucmedk.mft (raw, json)
Hash identifier: IRtV4YH0zo7x4aQPFvzh3nM92KaUq/+qdObnCFpCvN8=
Subject key identifier: 28:30:5D:22:10:E2:2B:D9:22:61:D0:92:8C:1E:83:9B:F3:30:7C:A5
Authority key identifier: 4D:D0:3A:58:6B:97:8A:70:AA:A8:2E:09:58:A9:01:52:E7:26:79:D9
Certificate issuer: /CN=4dd03a586b978a70aaa82e0958a90152e72679d9
Certificate serial: 019F935B1330AD0692CD13CAC43AE5945EF4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TdA6WGuXinCqqC4JWKkBUucmedk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/c9d523-0bb9-4573-9595-76a3a10a26f2/1/TdA6WGuXinCqqC4JWKkBUucmedk.mft
Manifest number: 0C28
Signing time: Fri 24 Jul 2026 09:00:47 +0000
Manifest this update: Fri 24 Jul 2026 09:00:47 +0000
Manifest next update: Sat 25 Jul 2026 09:00:47 +0000
Files and hashes: 1: FKpOhOuuXOF2CQyUBzWT1pdpVqc.roa (hash: ysT9E+YNysEYFfe5RzvJVpbtqR6v2fUqt40v4tEcOBQ=)
2: TdA6WGuXinCqqC4JWKkBUucmedk.crl (hash: CxoS9Xt725VE6hJuFAl5YorCSDWsvd84TV8rlm0K+V4=)
3: ttNXspnBYOBylc9inYKHFOll37k.roa (hash: RLGAiX60Eg9+/H6cmMZLT7RRPoDY5hArHpeHbk6ZQf8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/c9d523-0bb9-4573-9595-76a3a10a26f2/1/TdA6WGuXinCqqC4JWKkBUucmedk.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/c9d523-0bb9-4573-9595-76a3a10a26f2/1/TdA6WGuXinCqqC4JWKkBUucmedk.mft
rsync://rpki.ripe.net/repository/DEFAULT/TdA6WGuXinCqqC4JWKkBUucmedk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:5b:13:30:ad:06:92:cd:13:ca:c4:3a:e5:94:5e:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4dd03a586b978a70aaa82e0958a90152e72679d9
Validity
Not Before: Jul 24 09:00:47 2026 GMT
Not After : Jul 25 09:00:47 2026 GMT
Subject: CN=28305d2210e22bd92261d0928c1e839bf3307ca5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:28:31:60:76:4b:8e:2d:fe:f4:7e:a3:b7:4b:
c2:1b:df:a9:85:6b:1f:92:2f:f4:0c:81:ad:a3:87:
7c:4f:94:e7:e9:85:87:ee:69:1e:a6:93:0c:ff:71:
3a:c8:6d:c9:be:1e:69:c8:ba:f9:99:62:fb:0e:9d:
95:7e:ae:96:78:6d:75:40:04:f0:42:ef:f3:cb:73:
be:f5:87:9a:55:5c:5c:83:1a:ec:57:40:f2:81:cb:
12:ca:74:ec:9d:60:f3:84:2d:b4:ff:35:83:80:6f:
b5:40:5f:ad:dd:4c:f5:d3:29:45:24:da:f5:f2:e3:
3d:38:cf:f6:79:1e:c9:3b:d5:7d:35:e7:84:32:45:
cd:81:3a:54:8c:44:50:ae:a5:45:00:ce:1c:4d:2f:
1d:2a:77:a6:b6:6b:4d:c1:ee:2b:bf:3c:ec:91:1d:
81:16:87:d8:40:9f:5d:a6:26:a6:eb:5b:79:96:4e:
68:8c:1f:de:08:52:2b:7e:df:ae:4d:9b:29:39:57:
57:a9:f1:c1:5f:5b:47:75:19:6e:b9:7f:d3:d1:af:
38:c1:b2:d6:9c:54:cd:8f:33:6a:93:50:2d:95:ec:
00:a4:76:79:b7:9a:c4:ed:c4:1a:74:d1:45:3a:37:
c4:d8:6f:12:75:f5:a3:5d:5e:47:9b:59:f5:39:75:
b9:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:30:5D:22:10:E2:2B:D9:22:61:D0:92:8C:1E:83:9B:F3:30:7C:A5
X509v3 Authority Key Identifier:
keyid:4D:D0:3A:58:6B:97:8A:70:AA:A8:2E:09:58:A9:01:52:E7:26:79:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TdA6WGuXinCqqC4JWKkBUucmedk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/c9d523-0bb9-4573-9595-76a3a10a26f2/1/TdA6WGuXinCqqC4JWKkBUucmedk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/c9d523-0bb9-4573-9595-76a3a10a26f2/1/TdA6WGuXinCqqC4JWKkBUucmedk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:62:7a:8c:fe:a0:b9:7b:6f:00:2c:44:ce:1f:01:91:83:e0:
16:50:02:82:4b:08:17:9a:63:26:10:de:fd:7f:0e:9e:fc:58:
a0:22:8f:72:8e:e9:a0:3b:72:40:46:df:cf:16:cd:d9:60:40:
f2:8b:f3:a3:2f:54:44:23:c7:61:61:00:41:34:e3:94:ad:ad:
fc:62:e2:18:3f:82:8a:ec:c3:f0:aa:78:74:c1:6b:9a:14:a5:
bc:55:93:c0:b4:0a:69:c2:01:3b:29:bf:13:71:e3:4f:8f:27:
dd:b5:8e:41:0f:1c:71:ca:b3:ef:90:3d:1b:5c:7e:7f:c8:37:
30:85:40:1b:4a:b3:15:cc:74:85:9a:98:99:21:42:e6:b4:43:
67:6d:f3:59:62:03:85:a3:01:f0:15:57:cf:ff:d7:5a:8a:8f:
1e:ea:69:34:b5:92:f3:88:fa:a7:db:39:06:d6:b8:df:29:16:
4b:90:b6:2d:88:c2:5c:46:95:12:b9:9b:0b:4f:a0:5a:95:d4:
19:d4:fb:aa:e0:10:91:68:75:6b:06:86:33:9c:f6:73:8b:59:
0c:05:e0:17:ea:02:52:91:ed:be:e0:9f:16:bf:1f:08:61:38:
cc:27:71:b1:37:19:c6:ed:cb:6f:ab:5d:1d:46:c4:3d:4e:2b:
90:e7:c0:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:25:51 2026 by rpki-client