Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/598415-445e-468d-9f8e-d19839206ce6/1/TDJWN81N6a_lO9TxIav2IkX2cU8.mft
File: TDJWN81N6a_lO9TxIav2IkX2cU8.mft (raw, json)
Hash identifier: MmZVF0RycxgMAP5vvgZZAninYSD4pZ65vziQBZF/kQg=
Subject key identifier: 79:77:09:84:22:CD:4A:AA:CC:B6:42:26:EA:06:91:B9:49:CB:32:F2
Authority key identifier: 4C:32:56:37:CD:4D:E9:AF:E5:3B:D4:F1:21:AB:F6:22:45:F6:71:4F
Certificate issuer: /CN=4c325637cd4de9afe53bd4f121abf62245f6714f
Certificate serial: 019F927F160B930E88412AFA24417E97EDF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TDJWN81N6a_lO9TxIav2IkX2cU8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/598415-445e-468d-9f8e-d19839206ce6/1/TDJWN81N6a_lO9TxIav2IkX2cU8.mft
Manifest number: 0ABC
Signing time: Fri 24 Jul 2026 05:00:29 +0000
Manifest this update: Fri 24 Jul 2026 05:00:29 +0000
Manifest next update: Sat 25 Jul 2026 05:00:29 +0000
Files and hashes: 1: TDJWN81N6a_lO9TxIav2IkX2cU8.crl (hash: kEQA2+zMwOTYUXGaMrU0VNaV5TVACrcBYPyKcC6lVeQ=)
2: oPCuq54P2bsSATikpn82yn6-AEM.roa (hash: lHLmqu6Ruee6ZqCasWZKuPLRXPXPUX8ZgrdyBMM4hU8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/598415-445e-468d-9f8e-d19839206ce6/1/TDJWN81N6a_lO9TxIav2IkX2cU8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/598415-445e-468d-9f8e-d19839206ce6/1/TDJWN81N6a_lO9TxIav2IkX2cU8.mft
rsync://rpki.ripe.net/repository/DEFAULT/TDJWN81N6a_lO9TxIav2IkX2cU8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:7f:16:0b:93:0e:88:41:2a:fa:24:41:7e:97:ed:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c325637cd4de9afe53bd4f121abf62245f6714f
Validity
Not Before: Jul 24 05:00:29 2026 GMT
Not After : Jul 25 05:00:29 2026 GMT
Subject: CN=7977098422cd4aaaccb64226ea0691b949cb32f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:64:39:d6:9a:f7:84:b3:43:d8:d1:61:18:ad:
9c:0e:14:8c:97:ef:06:7e:41:2b:13:5e:cc:d3:bf:
2e:25:d2:83:c8:fb:a3:e1:6b:95:32:f6:ec:b8:db:
ce:d2:3b:be:4d:b0:aa:93:18:55:89:d9:12:0e:15:
b0:8e:4e:4a:f9:fe:47:71:7f:23:45:2a:e7:80:df:
83:b9:06:40:26:c0:63:50:66:67:c3:80:52:a2:19:
0a:50:fb:b5:79:15:8c:bc:de:dc:a9:9c:4f:69:c5:
a7:6b:a9:5b:74:c8:70:4c:32:a1:d1:9d:af:e3:61:
01:bf:f6:db:67:ab:6f:4b:cb:11:29:6e:d0:2b:86:
0e:55:1f:28:d1:d6:e7:1b:76:5f:c3:d0:a6:57:c0:
87:c1:78:21:0c:9c:0a:e2:d7:7d:be:6d:ef:3b:c4:
d3:1f:2d:3f:41:64:6e:c2:38:51:06:9f:9c:57:15:
6b:b7:0f:c5:17:37:b7:77:b6:91:b5:9b:4a:0b:78:
12:a4:94:68:d5:a2:60:ee:60:da:9b:28:1d:95:ae:
e4:cd:f6:da:89:a1:34:63:73:1d:2a:d0:f7:e5:12:
ec:32:c9:46:da:76:f2:46:e3:e4:8c:85:ef:a4:2e:
13:1f:f8:e1:c3:06:46:e4:e6:a3:05:84:8e:ab:49:
18:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:77:09:84:22:CD:4A:AA:CC:B6:42:26:EA:06:91:B9:49:CB:32:F2
X509v3 Authority Key Identifier:
keyid:4C:32:56:37:CD:4D:E9:AF:E5:3B:D4:F1:21:AB:F6:22:45:F6:71:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TDJWN81N6a_lO9TxIav2IkX2cU8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/598415-445e-468d-9f8e-d19839206ce6/1/TDJWN81N6a_lO9TxIav2IkX2cU8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/598415-445e-468d-9f8e-d19839206ce6/1/TDJWN81N6a_lO9TxIav2IkX2cU8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:17:6f:30:4a:ce:b1:58:e5:83:0d:20:12:a4:e9:7d:59:69:
f4:d5:5a:5d:2f:b0:a3:55:95:a7:61:48:e2:e2:23:5e:d4:ce:
a0:45:a2:3b:dd:29:81:52:89:e8:27:61:b2:04:6c:77:34:0b:
c3:19:05:95:d3:84:0b:27:49:c7:a9:2c:74:cc:96:cb:da:43:
4f:ba:d1:ec:0b:36:b5:ee:39:ec:b5:f5:8c:80:59:f8:1c:6f:
98:05:fa:4d:ab:d2:d0:5f:88:54:b0:8c:7e:fb:e0:77:65:68:
3f:97:5e:a3:6d:3a:24:18:de:fd:6b:9e:81:d8:09:be:5f:e4:
c0:64:3b:3f:b9:0c:56:5e:05:24:e2:83:dc:03:f6:6c:e1:53:
68:6a:7c:c3:69:59:73:96:3d:43:37:07:de:92:05:03:4d:c6:
74:96:0a:fd:d2:f8:95:d9:1b:be:cc:3c:7a:a2:b6:b5:0b:db:
e0:25:c2:63:b4:35:d5:ca:60:41:43:20:56:ee:23:90:ad:28:
19:f9:9c:05:62:c2:3e:5f:4f:e7:85:5d:76:bc:0e:f3:9b:b8:
52:5f:2a:b1:7f:b0:e6:cd:6c:3a:23:14:57:d1:cd:0c:a3:4b:
cf:25:fb:66:9f:f6:c6:6c:f0:cf:38:9b:ee:6a:0b:eb:fe:8d:
6d:42:5d:14
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+SfxYLkw6IQSr6JEF+l+3zMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjMzI1NjM3Y2Q0ZGU5YWZlNTNiZDRmMTIxYWJmNjIyNDVm
NjcxNGYwHhcNMjYwNzI0MDUwMDI5WhcNMjYwNzI1MDUwMDI5WjAzMTEwLwYDVQQD
Eyg3OTc3MDk4NDIyY2Q0YWFhY2NiNjQyMjZlYTA2OTFiOTQ5Y2IzMmYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1GQ51pr3hLND2NFhGK2cDhSMl+8G
fkErE17M078uJdKDyPuj4WuVMvbsuNvO0ju+TbCqkxhVidkSDhWwjk5K+f5HcX8j
RSrngN+DuQZAJsBjUGZnw4BSohkKUPu1eRWMvN7cqZxPacWna6lbdMhwTDKh0Z2v
42EBv/bbZ6tvS8sRKW7QK4YOVR8o0dbnG3Zfw9CmV8CHwXghDJwK4td9vm3vO8TT
Hy0/QWRuwjhRBp+cVxVrtw/FFze3d7aRtZtKC3gSpJRo1aJg7mDamygdla7kzfba
iaE0Y3MdKtD35RLsMslG2nbyRuPkjIXvpC4TH/jhwwZG5OajBYSOq0kYCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHl3CYQizUqqzLZCJuoGkblJyzLyMB8GA1UdIwQY
MBaAFEwyVjfNTemv5TvU8SGr9iJF9nFPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVERKV044MU42YV9sTzlUeElhdjJJa1gyY1U4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy81OTg0MTUtNDQ1ZS00NjhkLTlmOGUt
ZDE5ODM5MjA2Y2U2LzEvVERKV044MU42YV9sTzlUeElhdjJJa1gyY1U4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy81OTg0MTUtNDQ1ZS00NjhkLTlmOGUtZDE5ODM5MjA2Y2U2
LzEvVERKV044MU42YV9sTzlUeElhdjJJa1gyY1U4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQxdvMErO
sVjlgw0gEqTpfVlp9NVaXS+wo1WVp2FI4uIjXtTOoEWiO90pgVKJ6CdhsgRsdzQL
wxkFldOECydJx6ksdMyWy9pDT7rR7As2te457LX1jIBZ+BxvmAX6TavS0F+IVLCM
fvvgd2VoP5deo206JBje/WuegdgJvl/kwGQ7P7kMVl4FJOKD3AP2bOFTaGp8w2lZ
c5Y9QzcH3pIFA03GdJYK/dL4ldkbvsw8eqK2tQvb4CXCY7Q11cpgQUMgVu4jkK0o
GfmcBWLCPl9P54VddrwO85u4Ul8qsX+w5s1sOiMUV9HNDKNLzyX7Zp/2xmzwzzib
7moL6/6NbUJdFA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 06:27:24 2026 by rpki-client