Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/09cea0-ef2b-4f20-a19a-eb5a627e76a3/1/TDfyfrSZezvvnygmajlpQFD-dPk.mft
File: TDfyfrSZezvvnygmajlpQFD-dPk.mft (raw, json)
Hash identifier: Hopr4L/w4/gu91zftbEVj7glWcjP0N7PAiNVduZliXE=
Subject key identifier: 82:C4:AB:FB:01:EB:1E:46:9C:E2:F4:DD:F3:49:E5:F4:18:E9:3D:D5
Authority key identifier: 4C:37:F2:7E:B4:99:7B:3B:EF:9F:28:26:6A:39:69:40:50:FE:74:F9
Certificate issuer: /CN=4c37f27eb4997b3bef9f28266a39694050fe74f9
Certificate serial: 019E1DC732FFE88404559C5F8D93555AE422
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TDfyfrSZezvvnygmajlpQFD-dPk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/09cea0-ef2b-4f20-a19a-eb5a627e76a3/1/TDfyfrSZezvvnygmajlpQFD-dPk.mft
Manifest number: 1966
Signing time: Tue 12 May 2026 20:00:54 +0000
Manifest this update: Tue 12 May 2026 20:00:54 +0000
Manifest next update: Wed 13 May 2026 20:00:54 +0000
Files and hashes: 1: 3mj4BF15-QsrQeXNqlhp9O0RF8Q.roa (hash: vXL9dy1/SgEnnpISMc/F/t6U8c7+bWH7fiwFFAUniPU=)
2: TDfyfrSZezvvnygmajlpQFD-dPk.crl (hash: rAZx6Ph+ACC7Eiw0nwblZtQadEbCWkSbaxc0KHT+D0A=)
3: dDIM-ljTCDKhWIxv1515WUGeQvk.roa (hash: /ksxNXhqwhx98qeq21Eca7WB/KLYXy3qx2dkD35mKTc=)
4: i6gAOaaWdEjygKv3yzfVHTmBR5s.roa (hash: jK1Yhe3ibqhPTKxiBNM7KW7h9KKeRctQT02L1qcBze8=)
5: kFLjuN4_tRjI-IILkJq8lcLpDdc.roa (hash: lQTRIEBvMUBY3vX80dFs9U0bSNDBYvB6Uew+srrzZ9A=)
6: qrG9XLPl84E40eGjaluMQlHH30g.roa (hash: JZCVwj3aTdfzcFTKEfr0xBq4Umu2aHhpSpk1hh5GgSQ=)
7: sNbxwr_VlMceIOoORfjNh48fthg.roa (hash: og1IfOlO+B5tux3x/JdwIjbchpmcSQUOsvTa4SrXgws=)
8: sPyU_Xm3Mi4DrCYd-xCPHCu7Yj8.roa (hash: R+jYi2MX3/3kpxkJYiEg+3YO+SpdTf42NvPMvZti0mw=)
9: yjcAiOmQGkj7hTD0MZWHr2J1Je4.roa (hash: S7VwEQTFRcxL/FXQlqzu5pVh1KvvK3fwPwSXMI469EY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/09cea0-ef2b-4f20-a19a-eb5a627e76a3/1/TDfyfrSZezvvnygmajlpQFD-dPk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/09cea0-ef2b-4f20-a19a-eb5a627e76a3/1/TDfyfrSZezvvnygmajlpQFD-dPk.mft
rsync://rpki.ripe.net/repository/DEFAULT/TDfyfrSZezvvnygmajlpQFD-dPk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:c7:32:ff:e8:84:04:55:9c:5f:8d:93:55:5a:e4:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c37f27eb4997b3bef9f28266a39694050fe74f9
Validity
Not Before: May 12 20:00:54 2026 GMT
Not After : May 13 20:00:54 2026 GMT
Subject: CN=82c4abfb01eb1e469ce2f4ddf349e5f418e93dd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:20:d2:e2:f7:7a:bb:f0:89:d0:70:b3:e1:5e:
9d:d8:a7:a9:95:5d:0b:7a:26:4a:7a:bd:7f:08:7f:
4e:94:ae:ae:04:ca:02:47:e9:03:8f:f0:18:48:5d:
7e:45:be:65:8c:fb:e5:01:be:6e:e6:c7:cb:76:11:
a7:fa:cf:a0:d5:71:d3:06:b8:c4:7b:c8:19:25:4b:
8d:62:54:e4:68:e7:4d:4c:30:0a:c3:02:f5:70:03:
2e:06:f3:de:89:46:d6:2f:52:83:80:72:bb:1a:fa:
df:8f:33:0e:60:c2:e5:f2:7e:90:37:ee:fd:70:74:
29:68:d1:22:fd:1a:e0:26:7c:6a:f3:b3:01:ad:9d:
41:01:7f:fe:b1:c2:b2:c0:25:ad:e4:18:14:e6:a8:
a4:65:9f:d1:74:62:d4:6b:a0:69:17:18:3d:ff:ab:
5a:21:78:e8:85:6d:32:a9:3d:69:2e:9f:6f:43:60:
1d:8e:e6:2e:f4:03:ce:de:d1:ab:8a:e0:c7:c3:1f:
d8:91:cb:d9:87:83:3a:01:9f:99:55:24:f0:a4:17:
f7:a0:78:0e:21:70:58:b8:37:86:ff:03:cd:0c:c7:
a2:d7:24:65:83:a1:38:d1:c2:8b:09:ac:25:d0:8e:
c1:2d:c5:3c:15:16:60:58:c2:b8:e9:8e:02:a2:a0:
4d:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:C4:AB:FB:01:EB:1E:46:9C:E2:F4:DD:F3:49:E5:F4:18:E9:3D:D5
X509v3 Authority Key Identifier:
keyid:4C:37:F2:7E:B4:99:7B:3B:EF:9F:28:26:6A:39:69:40:50:FE:74:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TDfyfrSZezvvnygmajlpQFD-dPk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/09cea0-ef2b-4f20-a19a-eb5a627e76a3/1/TDfyfrSZezvvnygmajlpQFD-dPk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/09cea0-ef2b-4f20-a19a-eb5a627e76a3/1/TDfyfrSZezvvnygmajlpQFD-dPk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:df:db:b5:c4:13:43:99:7f:f9:40:ce:65:84:55:33:02:b7:
c4:fb:a6:67:4b:a3:1e:3c:4f:d4:23:a1:03:c3:c0:b4:7f:b5:
8a:ac:1b:68:09:0e:cd:17:34:83:7b:55:9c:6b:2d:a3:e2:8c:
fb:40:ac:fb:99:bc:b9:60:b5:ba:b8:a8:1f:37:4e:bc:02:ac:
4e:a5:cf:28:b8:0f:8b:58:65:d1:94:8e:c0:f0:58:e1:7e:16:
da:31:08:df:3c:05:3d:c0:64:55:ee:73:49:cc:52:57:5d:23:
5f:05:6b:9f:6f:e4:67:2e:91:6e:63:db:6a:a6:c5:99:0d:7b:
93:3a:01:5d:d3:7c:f9:7a:30:5a:f5:7b:53:bc:9b:46:da:0b:
ee:da:ae:81:62:5b:ac:90:38:93:d8:32:21:da:fd:7d:94:44:
e1:84:81:88:a8:82:a6:75:a5:71:f4:8c:8b:54:46:60:d1:8d:
d5:08:67:ad:8c:05:56:61:9a:fd:49:2e:f2:a3:e3:e7:25:9a:
75:da:22:c0:7e:19:75:c7:09:b1:36:bf:ff:47:9f:f8:93:88:
28:90:f7:af:69:c1:a5:9d:3c:bd:4c:5e:9e:ca:a9:04:ea:68:
94:75:0d:44:bc:91:3e:ba:5e:79:26:43:21:24:6a:93:23:93:
5b:fe:79:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:05:38 2026 by rpki-client