Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/6b66b4-064c-42ee-a5ee-1a65b91bee58/1/TDxmXlHMTLXK8FuClIQ-JzOhPe4.mft
File: TDxmXlHMTLXK8FuClIQ-JzOhPe4.mft (raw, json)
Hash identifier: GYGYdNzlJ0siX9XoZ6CLyrWQ3ijP6y2cqamQqzYOGgU=
Subject key identifier: 03:92:EC:8E:5D:FE:EA:57:F3:71:62:A4:03:DD:8D:26:E8:7A:D8:15
Authority key identifier: 4C:3C:66:5E:51:CC:4C:B5:CA:F0:5B:82:94:84:3E:27:33:A1:3D:EE
Certificate issuer: /CN=4c3c665e51cc4cb5caf05b8294843e2733a13dee
Certificate serial: 019E1E6C78BE8E15387FCB16C7B7E32031B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TDxmXlHMTLXK8FuClIQ-JzOhPe4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/6b66b4-064c-42ee-a5ee-1a65b91bee58/1/TDxmXlHMTLXK8FuClIQ-JzOhPe4.mft
Manifest number: 0352
Signing time: Tue 12 May 2026 23:01:25 +0000
Manifest this update: Tue 12 May 2026 23:01:25 +0000
Manifest next update: Wed 13 May 2026 23:01:25 +0000
Files and hashes: 1: TDxmXlHMTLXK8FuClIQ-JzOhPe4.crl (hash: oT1e2Wau3bF++NxFj797AKd2MIut58Z5wT1rehMTHss=)
2: frya0jA5P_fi8uygo2aIO2RW1ZQ.roa (hash: V1yhc9udgYV2uaOOmzTxwzsxFa2raTN+Q6jBXM4XvRY=)
3: mRzvmC1aHGh_d8mo-JwJurED3EM.roa (hash: aWOSV+LdM92bHZ1nT4erzPsOFlC7zRAjulRxerR5wEc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/6b66b4-064c-42ee-a5ee-1a65b91bee58/1/TDxmXlHMTLXK8FuClIQ-JzOhPe4.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/6b66b4-064c-42ee-a5ee-1a65b91bee58/1/TDxmXlHMTLXK8FuClIQ-JzOhPe4.mft
rsync://rpki.ripe.net/repository/DEFAULT/TDxmXlHMTLXK8FuClIQ-JzOhPe4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:6c:78:be:8e:15:38:7f:cb:16:c7:b7:e3:20:31:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c3c665e51cc4cb5caf05b8294843e2733a13dee
Validity
Not Before: May 12 23:01:25 2026 GMT
Not After : May 13 23:01:25 2026 GMT
Subject: CN=0392ec8e5dfeea57f37162a403dd8d26e87ad815
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:29:b2:cc:dc:75:7c:e3:95:0b:f6:b5:c3:00:
a0:b4:32:60:91:59:29:94:21:fd:d0:5c:e9:b0:c1:
22:29:0e:49:70:a8:29:59:d2:a1:55:8e:18:20:90:
b3:39:07:79:e7:d8:ef:61:6d:ba:c7:da:fa:e2:88:
11:a8:8d:29:e6:95:7f:2b:77:4c:68:97:d3:9c:6d:
2e:51:de:92:1b:16:58:70:91:8e:38:59:fe:4c:c3:
d4:cc:6b:f6:62:aa:60:5b:59:7a:93:bf:f7:e6:11:
b9:b4:cd:42:7b:c4:12:c2:7a:96:a6:9c:6c:3b:96:
1a:82:bf:93:10:e8:6a:c1:15:bd:47:0f:95:26:c2:
d3:77:73:59:36:1e:06:62:b4:cd:16:cc:e7:53:25:
94:1b:e5:91:fb:6c:c3:53:d9:38:89:2e:9a:8e:11:
ea:23:86:d4:de:99:23:dd:a4:7c:7f:90:05:4f:d4:
0f:2b:6a:73:fb:01:1d:31:77:99:4f:12:78:6c:e2:
f7:28:42:79:25:cd:6c:99:e8:f9:76:32:39:4c:3f:
fe:9a:92:e9:d8:ae:96:bf:8a:42:63:66:84:98:ac:
47:a1:16:40:12:c7:79:d5:17:b6:01:c2:c1:00:62:
a2:59:43:df:13:0d:2e:26:99:01:5f:e4:1c:ab:d3:
c8:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:92:EC:8E:5D:FE:EA:57:F3:71:62:A4:03:DD:8D:26:E8:7A:D8:15
X509v3 Authority Key Identifier:
keyid:4C:3C:66:5E:51:CC:4C:B5:CA:F0:5B:82:94:84:3E:27:33:A1:3D:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TDxmXlHMTLXK8FuClIQ-JzOhPe4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/6b66b4-064c-42ee-a5ee-1a65b91bee58/1/TDxmXlHMTLXK8FuClIQ-JzOhPe4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/6b66b4-064c-42ee-a5ee-1a65b91bee58/1/TDxmXlHMTLXK8FuClIQ-JzOhPe4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:e3:0b:7d:cb:ca:44:ce:30:8f:e8:d4:de:d5:07:7e:5a:27:
67:af:4e:1e:c9:13:69:cf:76:f7:58:a7:e6:23:92:de:01:58:
16:4c:2d:4b:cd:ee:fa:83:5d:66:ea:e6:41:aa:2d:4d:36:2b:
17:31:70:6a:f9:c8:e8:54:94:54:a8:d5:24:8a:4c:48:a0:04:
c0:c7:28:64:63:fb:90:3d:ac:0a:84:c1:e4:b3:ba:3f:51:95:
d0:84:37:63:d4:29:21:78:bc:a0:cf:88:b6:56:0b:64:b7:ad:
7e:c9:a6:b2:8c:35:5a:19:ee:4c:0b:05:75:3d:b0:69:d7:f9:
a7:2d:69:16:7c:11:23:7e:07:bd:cc:eb:3f:6f:22:d8:64:9d:
eb:7d:b9:99:6f:ed:19:fc:43:3d:fa:5b:31:65:14:c2:50:d5:
c2:ce:3f:bb:d9:a9:19:34:bd:48:94:4d:51:c0:d0:37:bc:32:
93:24:7e:03:50:89:39:1f:d6:92:af:ef:8c:0f:e1:34:16:bd:
ec:fc:13:23:35:c6:ef:1f:05:67:f3:42:c1:6b:ec:12:69:36:
46:3a:07:53:c0:98:05:4f:21:0c:26:61:c6:18:db:88:3a:8c:
2a:93:18:bb:2b:3b:de:2d:74:6c:0f:9a:0e:af:5c:e8:60:42:
83:9c:59:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:45:17 2026 by rpki-client