Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/55/6b66b4-064c-42ee-a5ee-1a65b91bee58/1/TDxmXlHMTLXK8FuClIQ-JzOhPe4.mft
File: TDxmXlHMTLXK8FuClIQ-JzOhPe4.mft (raw, json)
Hash identifier: w7WwVX4JsEutW5BQfQmwS9H2TWYRR1Z9lJNDpaShZaw=
Subject key identifier: C4:9F:01:3B:2B:88:D4:F0:31:3E:59:C8:8A:1C:49:84:43:4E:F5:E7
Authority key identifier: 4C:3C:66:5E:51:CC:4C:B5:CA:F0:5B:82:94:84:3E:27:33:A1:3D:EE
Certificate issuer: /CN=4c3c665e51cc4cb5caf05b8294843e2733a13dee
Certificate serial: 01A1280C418750B6CA4A76BFDA9AA73AB96F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TDxmXlHMTLXK8FuClIQ-JzOhPe4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/6b66b4-064c-42ee-a5ee-1a65b91bee58/1/TDxmXlHMTLXK8FuClIQ-JzOhPe4.mft
Manifest number: 04EA
Signing time: Sat 10 Oct 2026 23:00:54 +0000
Manifest this update: Sat 10 Oct 2026 23:00:54 +0000
Manifest next update: Sun 11 Oct 2026 23:00:54 +0000
Files and hashes: 1: Hp24GG6uSG8sQb8jkFqa197vWxk.roa (hash: dVGmnh+jbiESkwvHH2VOIhilfiq/4OOnJSaQFQ2DP7Y=)
2: TDxmXlHMTLXK8FuClIQ-JzOhPe4.crl (hash: LC9HAk+Gg42sXpCZv8xyZvZe5uF1nAt5wW3yIEuRk6Q=)
3: cjwbOJtXa2kt3CFJB7UkbYV9oq8.roa (hash: OqZn/Ns7ibJgbGiTjuz4lHbfFzpm2v7TCBQjtoWY4Bw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/6b66b4-064c-42ee-a5ee-1a65b91bee58/1/TDxmXlHMTLXK8FuClIQ-JzOhPe4.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/6b66b4-064c-42ee-a5ee-1a65b91bee58/1/TDxmXlHMTLXK8FuClIQ-JzOhPe4.mft
rsync://rpki.ripe.net/repository/DEFAULT/TDxmXlHMTLXK8FuClIQ-JzOhPe4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 20:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:28:0c:41:87:50:b6:ca:4a:76:bf:da:9a:a7:3a:b9:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c3c665e51cc4cb5caf05b8294843e2733a13dee
Validity
Not Before: Oct 10 23:00:54 2026 GMT
Not After : Oct 11 23:00:54 2026 GMT
Subject: CN=c49f013b2b88d4f0313e59c88a1c4984434ef5e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:0f:74:4f:09:aa:f5:7e:b0:0c:5a:01:83:b9:
1e:90:c6:21:a4:43:53:3d:30:29:3b:37:ab:c5:40:
d3:23:12:99:28:33:ce:7e:a3:c5:1f:11:29:e6:6f:
9d:03:89:ae:94:65:4f:ca:d8:24:65:be:76:2a:ec:
bd:86:65:03:27:90:74:30:25:8b:7c:96:b4:fc:6e:
92:ee:7f:ac:e9:66:77:d1:6c:3d:ba:4d:78:ee:fb:
51:4a:b1:4c:4f:b8:52:fe:23:3a:69:d6:9b:15:b3:
97:32:6b:1b:53:49:fb:1c:9d:16:75:1c:78:eb:97:
f9:6d:bb:70:7b:8c:f0:69:02:17:fc:d2:70:09:f4:
d7:e1:4d:f4:d8:05:3a:24:f5:ee:c5:cb:f6:bb:8b:
20:20:6c:1c:04:8c:ac:69:04:6f:f9:c1:52:2b:a7:
e0:01:ef:eb:97:2c:a9:5c:75:a7:34:43:f2:a3:03:
91:bc:ef:c1:83:37:0b:98:42:69:2c:2b:fa:ef:8b:
3b:cf:48:eb:e4:08:f6:76:a7:34:7e:d1:6a:5d:1b:
36:7c:06:ca:e2:42:07:ec:e3:0b:23:15:db:2b:9b:
31:b2:b7:46:5a:b0:49:2d:60:6e:71:06:f8:09:2b:
cd:a6:b3:40:94:f3:24:72:d4:df:30:4d:a4:6d:e1:
30:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:9F:01:3B:2B:88:D4:F0:31:3E:59:C8:8A:1C:49:84:43:4E:F5:E7
X509v3 Authority Key Identifier:
keyid:4C:3C:66:5E:51:CC:4C:B5:CA:F0:5B:82:94:84:3E:27:33:A1:3D:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TDxmXlHMTLXK8FuClIQ-JzOhPe4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/6b66b4-064c-42ee-a5ee-1a65b91bee58/1/TDxmXlHMTLXK8FuClIQ-JzOhPe4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/6b66b4-064c-42ee-a5ee-1a65b91bee58/1/TDxmXlHMTLXK8FuClIQ-JzOhPe4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:37:08:6d:e9:c2:26:53:8e:c4:c2:a2:f8:ac:05:17:1e:66:
73:c7:f1:cf:fc:41:0f:0b:06:2b:5c:ed:d4:43:01:b7:1a:13:
22:57:41:15:7c:0b:c9:b6:57:5c:ec:07:27:6a:4f:e4:20:a2:
73:b5:31:6b:de:05:43:f6:b4:aa:cb:7e:4b:85:72:10:6d:33:
e2:8f:ff:2a:80:08:e7:f2:d9:26:77:e1:1e:4c:88:6c:02:d9:
3d:c3:a9:02:49:32:c8:67:b0:56:08:f6:68:ff:c0:1c:11:c7:
bb:ae:64:86:72:db:85:4f:4a:f9:47:83:3f:be:ef:62:0e:b4:
c2:63:da:07:98:b6:3a:0a:cc:57:b2:e6:08:9d:b7:c3:b1:a4:
c2:94:6c:1a:d9:c4:78:9a:27:77:b8:eb:02:f1:48:52:01:60:
7c:e7:60:8f:cc:bb:63:b0:27:8a:fd:92:21:2b:67:12:a8:c7:
c8:a3:b0:ac:2f:8f:55:c7:3a:a2:a9:14:e5:a0:92:67:70:9e:
d3:db:ed:ec:b4:4e:63:38:04:78:6d:fd:97:11:ad:31:bc:9d:
98:d4:3e:ee:93:b5:66:e2:0c:63:6a:c3:ff:08:f9:bb:a5:69:
75:a9:f1:28:ae:7c:6d:c6:f6:ab:1d:24:5f:3f:f0:6c:39:d6:
48:f4:30:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 06:19:44 2026 by rpki-client