Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/08cd93-0876-43fd-92c0-b863c0a98b2d/1/TDijBqN-6Hvr_3I2VT4NPLZyzRc.mft
File: TDijBqN-6Hvr_3I2VT4NPLZyzRc.mft (raw, json)
Hash identifier: 8AwL1bKbssWKPeHgqTuoHDNzGcT4mci5ZkhA6LLr2m4=
Subject key identifier: 21:DD:E1:D8:4D:81:43:24:F2:32:F5:0B:E7:44:F1:86:F7:EF:F4:40
Authority key identifier: 4C:38:A3:06:A3:7E:E8:7B:EB:FF:72:36:55:3E:0D:3C:B6:72:CD:17
Certificate issuer: /CN=4c38a306a37ee87bebff7236553e0d3cb672cd17
Certificate serial: 019E1F47A0579EEDB1222E3F6C77C371FC7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TDijBqN-6Hvr_3I2VT4NPLZyzRc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/08cd93-0876-43fd-92c0-b863c0a98b2d/1/TDijBqN-6Hvr_3I2VT4NPLZyzRc.mft
Manifest number: 03DD
Signing time: Wed 13 May 2026 03:00:48 +0000
Manifest this update: Wed 13 May 2026 03:00:48 +0000
Manifest next update: Thu 14 May 2026 03:00:48 +0000
Files and hashes: 1: TDijBqN-6Hvr_3I2VT4NPLZyzRc.crl (hash: K4E2xFPYrWdKsi5nvJhq0Xd1eI5V3FDswkIYZmGxByA=)
2: bJu0scpN1gj7kvsBcbxVtC9ztlc.roa (hash: ZoOwH22u+aOphRV9ROY0fMKWfnDnA+VojJ7jB+e5a1E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/08cd93-0876-43fd-92c0-b863c0a98b2d/1/TDijBqN-6Hvr_3I2VT4NPLZyzRc.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/08cd93-0876-43fd-92c0-b863c0a98b2d/1/TDijBqN-6Hvr_3I2VT4NPLZyzRc.mft
rsync://rpki.ripe.net/repository/DEFAULT/TDijBqN-6Hvr_3I2VT4NPLZyzRc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:47:a0:57:9e:ed:b1:22:2e:3f:6c:77:c3:71:fc:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c38a306a37ee87bebff7236553e0d3cb672cd17
Validity
Not Before: May 13 03:00:48 2026 GMT
Not After : May 14 03:00:48 2026 GMT
Subject: CN=21dde1d84d814324f232f50be744f186f7eff440
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:c3:9c:dc:58:72:d5:86:b9:22:47:b5:10:79:
1c:e2:1a:f2:4e:d6:8c:b8:1f:ff:b7:f7:61:a4:e6:
d6:34:ee:7b:94:d1:9c:5e:59:a7:45:58:ed:6e:4c:
aa:72:2c:ec:c5:9c:d1:2a:7f:5f:1f:3c:d6:c7:0b:
3d:9b:0f:33:5a:bc:8f:b3:28:f6:60:d8:68:86:29:
a3:d0:85:52:22:98:04:7e:fc:46:59:07:fb:f4:18:
7d:e7:07:67:93:d8:2e:b2:93:86:b6:da:11:0f:52:
80:58:97:d7:af:4b:66:c0:0b:ca:89:f4:6d:c2:61:
77:a0:bc:ab:c5:5d:ce:d5:6a:b4:58:1e:a3:ba:30:
06:3b:60:d4:11:aa:de:8e:83:e6:8f:c8:b3:26:6d:
80:b6:2e:81:31:f5:d4:c2:0c:c3:14:53:1d:44:5a:
82:44:a8:73:ed:e5:b7:e5:b3:46:60:3c:47:ec:5e:
14:af:57:46:dc:93:73:f8:71:6e:58:ed:c9:ad:4f:
74:ea:24:f9:38:a4:fb:69:0b:0e:22:d3:bd:b1:1d:
22:9a:3c:66:5c:b1:29:af:b6:76:87:d8:64:5b:0c:
f1:13:2e:91:74:71:c1:54:05:d0:a1:04:8a:72:50:
0c:08:a4:4a:be:1b:1d:47:54:17:d8:33:d7:6f:ae:
1f:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:DD:E1:D8:4D:81:43:24:F2:32:F5:0B:E7:44:F1:86:F7:EF:F4:40
X509v3 Authority Key Identifier:
keyid:4C:38:A3:06:A3:7E:E8:7B:EB:FF:72:36:55:3E:0D:3C:B6:72:CD:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TDijBqN-6Hvr_3I2VT4NPLZyzRc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/08cd93-0876-43fd-92c0-b863c0a98b2d/1/TDijBqN-6Hvr_3I2VT4NPLZyzRc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/08cd93-0876-43fd-92c0-b863c0a98b2d/1/TDijBqN-6Hvr_3I2VT4NPLZyzRc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:73:62:49:e0:9a:59:e1:17:be:70:d2:c4:a6:7c:70:4d:52:
54:f3:d8:22:da:2b:3d:2e:6d:b9:d4:07:47:c4:7a:ea:3c:b4:
c0:80:7c:23:d5:51:99:e3:a8:10:4a:e1:df:cb:9d:32:fc:eb:
79:c1:7a:d1:43:c8:2c:8c:4b:08:c0:e1:37:28:e4:dd:15:53:
c3:b5:43:d1:a5:fd:4c:ad:eb:b5:3d:a3:35:af:cf:cf:57:0a:
b3:77:d3:ab:f4:46:38:06:ad:c2:7f:ed:21:71:c9:39:48:78:
db:9e:65:bb:6c:9f:fb:19:30:db:e8:a7:3f:da:04:31:ca:b1:
7d:f7:1c:e6:34:61:ed:84:61:41:f1:16:2a:40:c7:b3:68:6c:
04:e2:c4:93:09:d2:25:d2:a7:8e:21:d3:3b:74:8b:fc:c5:d9:
8f:2d:c0:3d:f5:98:df:a4:d3:dd:de:aa:f7:6e:d5:85:b4:fd:
fa:a8:6a:87:35:05:41:05:21:5e:89:8c:73:4a:76:ad:cc:d1:
45:96:65:e9:1a:6d:3c:3d:f6:8d:7f:b6:9e:63:a8:51:3b:ae:
c6:53:4e:b6:e8:d9:dc:49:b6:0c:7f:f9:60:a1:fa:91:07:85:
a1:00:f6:62:d2:54:b2:84:17:b7:d4:94:52:53:98:f1:fb:73:
3e:18:4d:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:31:42 2026 by rpki-client