Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/598415-445e-468d-9f8e-d19839206ce6/1/TDJWN81N6a_lO9TxIav2IkX2cU8.mft
File: TDJWN81N6a_lO9TxIav2IkX2cU8.mft (raw, json)
Hash identifier: IzY2yQSnkZd3fZncXsImSihpXXme+nyFUpsl0vUjHYk=
Subject key identifier: 91:01:AA:CD:8E:13:3F:FF:A8:71:60:2C:8D:CA:63:77:4A:8A:AA:42
Authority key identifier: 4C:32:56:37:CD:4D:E9:AF:E5:3B:D4:F1:21:AB:F6:22:45:F6:71:4F
Certificate issuer: /CN=4c325637cd4de9afe53bd4f121abf62245f6714f
Certificate serial: 019E1DC778F02D3BEAF0ABF8C6DFC71FAC8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TDJWN81N6a_lO9TxIav2IkX2cU8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/598415-445e-468d-9f8e-d19839206ce6/1/TDJWN81N6a_lO9TxIav2IkX2cU8.mft
Manifest number: 09FB
Signing time: Tue 12 May 2026 20:01:12 +0000
Manifest this update: Tue 12 May 2026 20:01:12 +0000
Manifest next update: Wed 13 May 2026 20:01:12 +0000
Files and hashes: 1: TDJWN81N6a_lO9TxIav2IkX2cU8.crl (hash: c7GMWiHlWDvYMpUIKDHjEVUaDL0cdPpmURdMvnv1YOM=)
2: oPCuq54P2bsSATikpn82yn6-AEM.roa (hash: lHLmqu6Ruee6ZqCasWZKuPLRXPXPUX8ZgrdyBMM4hU8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/598415-445e-468d-9f8e-d19839206ce6/1/TDJWN81N6a_lO9TxIav2IkX2cU8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/598415-445e-468d-9f8e-d19839206ce6/1/TDJWN81N6a_lO9TxIav2IkX2cU8.mft
rsync://rpki.ripe.net/repository/DEFAULT/TDJWN81N6a_lO9TxIav2IkX2cU8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:c7:78:f0:2d:3b:ea:f0:ab:f8:c6:df:c7:1f:ac:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c325637cd4de9afe53bd4f121abf62245f6714f
Validity
Not Before: May 12 20:01:12 2026 GMT
Not After : May 13 20:01:12 2026 GMT
Subject: CN=9101aacd8e133fffa871602c8dca63774a8aaa42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:dc:89:e0:6d:cd:30:fb:c7:a5:e6:d1:b9:0a:
50:b9:aa:cb:0e:52:c7:33:49:de:26:8c:d2:ad:8e:
8f:f8:3e:bb:77:d4:77:2a:0a:88:57:1a:83:dc:a0:
40:3f:6c:6f:8d:3f:0e:58:d9:19:3b:42:77:37:9e:
e5:30:bc:ac:72:70:8b:41:87:d3:c6:d8:1b:ec:4c:
b1:43:fc:b8:78:91:42:ab:18:64:9d:0a:6b:2d:0e:
de:77:23:dc:f8:bd:8e:a0:d8:c9:23:42:1d:d3:4b:
36:e0:bd:18:87:e3:d1:f2:ed:bd:29:a6:78:b5:07:
44:76:9e:7d:ad:91:af:8c:7d:8c:b4:54:f7:64:06:
74:c0:81:71:93:2f:e1:6f:05:8b:02:dd:12:5f:41:
ef:6f:11:bc:17:aa:3f:fe:24:02:48:84:ac:ca:7a:
35:6d:51:63:72:8f:a7:7a:60:4a:4a:d9:75:fe:e5:
18:c7:3a:7a:3c:32:5c:d4:7e:99:0d:6d:00:1b:50:
d1:bf:49:58:8c:6e:ab:ce:bd:64:ec:79:76:e0:19:
c6:6f:4f:9c:0f:40:2a:38:cc:31:f5:29:38:1c:21:
b4:0e:3d:e3:20:58:73:d1:47:94:61:3e:75:4b:c7:
38:d9:e0:2d:11:98:74:6d:61:9f:06:62:d5:cf:00:
27:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:01:AA:CD:8E:13:3F:FF:A8:71:60:2C:8D:CA:63:77:4A:8A:AA:42
X509v3 Authority Key Identifier:
keyid:4C:32:56:37:CD:4D:E9:AF:E5:3B:D4:F1:21:AB:F6:22:45:F6:71:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TDJWN81N6a_lO9TxIav2IkX2cU8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/598415-445e-468d-9f8e-d19839206ce6/1/TDJWN81N6a_lO9TxIav2IkX2cU8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/598415-445e-468d-9f8e-d19839206ce6/1/TDJWN81N6a_lO9TxIav2IkX2cU8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:f2:d9:25:c2:17:5e:73:ca:98:c0:3b:2b:a1:d7:25:9e:4e:
7b:a9:92:58:f7:45:09:61:ee:5d:ce:f1:3c:bc:8a:27:cb:69:
d7:4c:d1:12:c3:3e:95:79:da:5e:10:12:84:8d:14:4a:b3:99:
54:6f:97:26:11:8b:60:00:62:07:9d:4d:8b:7d:43:1a:4e:e1:
9d:76:77:3a:14:a4:ec:41:81:1e:2f:0c:8a:29:8a:6f:ff:07:
15:6b:69:90:16:3c:77:ef:3f:bb:8a:8d:b1:5f:8f:8c:29:3a:
04:60:1e:be:b6:da:de:1f:8c:02:d1:bf:3c:6b:0b:e3:f1:5b:
7e:5b:62:15:2f:73:05:74:ff:f7:ad:c9:8b:44:41:6d:09:60:
41:d9:72:7c:d7:9d:e5:d8:96:74:d0:4a:89:8a:c4:5e:cc:b7:
92:cc:f6:04:a2:2d:3f:fc:2b:ef:30:3e:ad:ca:a4:8f:db:13:
4b:7b:04:31:09:74:94:c8:2d:15:c1:99:bd:0f:b6:94:2e:d5:
69:2c:8c:7c:4a:8c:60:65:e4:d9:46:78:26:e1:4e:ac:39:e5:
42:39:10:f4:16:1a:c6:54:67:bd:77:b4:d2:7a:4d:a7:66:c2:
9d:54:f1:90:da:8a:bd:1e:42:05:a7:b9:9c:d9:a7:48:9c:32:
f8:dc:a1:e4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4dx3jwLTvq8Kv4xt/HH6yPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjMzI1NjM3Y2Q0ZGU5YWZlNTNiZDRmMTIxYWJmNjIyNDVm
NjcxNGYwHhcNMjYwNTEyMjAwMTEyWhcNMjYwNTEzMjAwMTEyWjAzMTEwLwYDVQQD
Eyg5MTAxYWFjZDhlMTMzZmZmYTg3MTYwMmM4ZGNhNjM3NzRhOGFhYTQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0NyJ4G3NMPvHpebRuQpQuarLDlLH
M0neJozSrY6P+D67d9R3KgqIVxqD3KBAP2xvjT8OWNkZO0J3N57lMLyscnCLQYfT
xtgb7EyxQ/y4eJFCqxhknQprLQ7edyPc+L2OoNjJI0Id00s24L0Yh+PR8u29KaZ4
tQdEdp59rZGvjH2MtFT3ZAZ0wIFxky/hbwWLAt0SX0HvbxG8F6o//iQCSISsyno1
bVFjco+nemBKStl1/uUYxzp6PDJc1H6ZDW0AG1DRv0lYjG6rzr1k7Hl24BnGb0+c
D0AqOMwx9Sk4HCG0Dj3jIFhz0UeUYT51S8c42eAtEZh0bWGfBmLVzwAnxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJEBqs2OEz//qHFgLI3KY3dKiqpCMB8GA1UdIwQY
MBaAFEwyVjfNTemv5TvU8SGr9iJF9nFPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVERKV044MU42YV9sTzlUeElhdjJJa1gyY1U4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy81OTg0MTUtNDQ1ZS00NjhkLTlmOGUt
ZDE5ODM5MjA2Y2U2LzEvVERKV044MU42YV9sTzlUeElhdjJJa1gyY1U4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy81OTg0MTUtNDQ1ZS00NjhkLTlmOGUtZDE5ODM5MjA2Y2U2
LzEvVERKV044MU42YV9sTzlUeElhdjJJa1gyY1U4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIfLZJcIX
XnPKmMA7K6HXJZ5Oe6mSWPdFCWHuXc7xPLyKJ8tp10zREsM+lXnaXhAShI0USrOZ
VG+XJhGLYABiB51Ni31DGk7hnXZ3OhSk7EGBHi8MiimKb/8HFWtpkBY8d+8/u4qN
sV+PjCk6BGAevrba3h+MAtG/PGsL4/FbfltiFS9zBXT/963Ji0RBbQlgQdlyfNed
5diWdNBKiYrEXsy3ksz2BKItP/wr7zA+rcqkj9sTS3sEMQl0lMgtFcGZvQ+2lC7V
aSyMfEqMYGXk2UZ4JuFOrDnlQjkQ9BYaxlRnvXe00npNp2bCnVTxkNqKvR5CBae5
nNmnSJwy+Nyh5A==
-----END CERTIFICATE-----
Generated at Wed May 13 07:33:10 2026 by rpki-client