Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/08cd93-0876-43fd-92c0-b863c0a98b2d/1/TDijBqN-6Hvr_3I2VT4NPLZyzRc.mft
File: TDijBqN-6Hvr_3I2VT4NPLZyzRc.mft (raw, json)
Hash identifier: DQo2VhMryevUs8iP2JBbw33cz2U12PfrOjFXDWiKXhA=
Subject key identifier: EB:A9:49:FF:A2:5A:B4:84:4F:E8:93:5E:F5:AD:9D:07:B4:C0:85:2B
Authority key identifier: 4C:38:A3:06:A3:7E:E8:7B:EB:FF:72:36:55:3E:0D:3C:B6:72:CD:17
Certificate issuer: /CN=4c38a306a37ee87bebff7236553e0d3cb672cd17
Certificate serial: 019D2628657C81C85B87A20BDD6EE2707077
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TDijBqN-6Hvr_3I2VT4NPLZyzRc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/08cd93-0876-43fd-92c0-b863c0a98b2d/1/TDijBqN-6Hvr_3I2VT4NPLZyzRc.mft
Manifest number: 035C
Signing time: Wed 25 Mar 2026 18:01:14 +0000
Manifest this update: Wed 25 Mar 2026 18:01:14 +0000
Manifest next update: Thu 26 Mar 2026 18:01:14 +0000
Files and hashes: 1: TDijBqN-6Hvr_3I2VT4NPLZyzRc.crl (hash: 64NLyhxHJ5yjsZA2YJ7ULIN7zX7XlMukzhL6Y+iNYLA=)
2: bJu0scpN1gj7kvsBcbxVtC9ztlc.roa (hash: ZoOwH22u+aOphRV9ROY0fMKWfnDnA+VojJ7jB+e5a1E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/08cd93-0876-43fd-92c0-b863c0a98b2d/1/TDijBqN-6Hvr_3I2VT4NPLZyzRc.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/08cd93-0876-43fd-92c0-b863c0a98b2d/1/TDijBqN-6Hvr_3I2VT4NPLZyzRc.mft
rsync://rpki.ripe.net/repository/DEFAULT/TDijBqN-6Hvr_3I2VT4NPLZyzRc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:28:65:7c:81:c8:5b:87:a2:0b:dd:6e:e2:70:70:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c38a306a37ee87bebff7236553e0d3cb672cd17
Validity
Not Before: Mar 25 18:01:14 2026 GMT
Not After : Mar 26 18:01:14 2026 GMT
Subject: CN=eba949ffa25ab4844fe8935ef5ad9d07b4c0852b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:4e:f7:9d:f6:d9:8e:c2:ee:09:16:fb:b8:f6:
8c:9f:a4:8e:4e:b6:a9:d2:8a:b1:fa:0b:2c:ee:8a:
d3:5f:42:a0:59:a8:d5:a6:12:bd:17:ca:88:b7:b5:
ce:43:e4:3e:b8:b6:26:f7:bb:95:80:d1:4a:eb:44:
b7:60:74:6d:3d:47:f1:53:a0:85:7b:d6:4a:cb:84:
28:81:88:0c:89:5d:13:35:5f:ae:29:21:4b:6a:40:
87:a2:cd:d8:10:1d:08:6a:16:05:35:86:53:e8:18:
a8:54:49:81:f6:4c:b6:a5:28:8a:b4:20:94:38:56:
15:22:54:a3:cc:ed:c3:96:c0:e6:68:34:47:f4:3c:
8b:8e:46:77:dc:e5:ff:05:51:d7:c9:a1:8c:bb:f2:
fd:45:d1:ed:ea:56:d7:64:ba:a3:3b:2a:3e:ab:38:
5f:f3:8b:c1:cb:a1:1b:71:50:c5:5d:2b:9a:49:86:
aa:7d:8b:37:c0:61:ab:de:aa:8f:16:dc:95:cc:e1:
b0:47:d6:a0:9f:5b:e6:c7:64:7d:65:f6:b0:d2:c7:
7e:11:b7:56:0e:20:97:9c:12:5b:5e:d8:0d:f9:76:
46:fe:0c:e8:28:bc:d1:75:90:a9:16:fc:1c:1b:f9:
69:01:68:1a:1e:d8:32:ae:65:a3:b3:c8:97:e9:0d:
1a:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:A9:49:FF:A2:5A:B4:84:4F:E8:93:5E:F5:AD:9D:07:B4:C0:85:2B
X509v3 Authority Key Identifier:
keyid:4C:38:A3:06:A3:7E:E8:7B:EB:FF:72:36:55:3E:0D:3C:B6:72:CD:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TDijBqN-6Hvr_3I2VT4NPLZyzRc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/08cd93-0876-43fd-92c0-b863c0a98b2d/1/TDijBqN-6Hvr_3I2VT4NPLZyzRc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/08cd93-0876-43fd-92c0-b863c0a98b2d/1/TDijBqN-6Hvr_3I2VT4NPLZyzRc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:ca:02:4d:b0:c2:d1:81:23:1d:18:aa:d4:af:8d:ef:00:d9:
42:a8:f2:01:b7:55:e6:8c:bf:7f:0e:84:8e:5f:e6:77:5a:67:
6d:ad:a7:be:5d:41:5f:99:46:a8:ee:44:88:ac:d3:fe:b7:e5:
f0:19:20:29:2e:e4:c7:bd:b4:00:54:12:59:9c:22:60:aa:e0:
5b:78:dc:63:dd:4b:5d:7c:4b:a3:92:3e:f7:52:8f:c6:95:3f:
16:2c:a2:64:a0:fe:7a:fb:e6:2d:57:0d:6d:b5:a4:d4:20:37:
01:52:3c:78:0f:c5:ac:8f:c7:4d:6d:4e:4f:cf:da:a6:07:67:
04:d1:5b:74:17:df:d9:53:3f:05:89:0e:4e:7b:f6:f4:a4:e7:
37:27:ea:47:e1:86:2d:87:95:43:0d:6d:7d:22:1b:6f:a0:d7:
52:63:28:a5:6c:49:73:28:c2:64:e0:e2:97:a4:25:af:31:b6:
af:d1:39:c9:88:6f:3c:1e:b8:0b:8f:8b:28:8c:65:66:16:f8:
2b:55:4c:e0:da:ea:cd:10:b9:68:fe:db:ca:9b:cb:89:6a:ea:
77:2d:0a:8e:8e:6e:15:66:52:13:73:81:17:c5:44:a3:cc:71:
2a:44:a0:e1:55:d4:0e:52:b4:36:08:36:bb:ba:65:ba:17:7a:
5a:2d:b8:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:23:24 2026 by rpki-client