Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/da/bfb817-7e2d-4458-bab1-d1750020caf5/1/_tdzOdk4vvCHWZKTwgGzufgiNiM.mft
File: _tdzOdk4vvCHWZKTwgGzufgiNiM.mft (raw, json)
Hash identifier: h9PaYaYdlELJCXdbYY6P4tXLC/un7CKXKMDCEHdxETE=
Subject key identifier: 55:49:E4:A9:50:E8:85:ED:72:3F:EA:29:4B:F1:5F:6A:7D:E2:8B:FD
Authority key identifier: FE:D7:73:39:D9:38:BE:F0:87:59:92:93:C2:01:B3:B9:F8:22:36:23
Certificate issuer: /CN=fed77339d938bef087599293c201b3b9f8223623
Certificate serial: 01A1DC4B5F685963DF2D84829A1BFED30917
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_tdzOdk4vvCHWZKTwgGzufgiNiM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/bfb817-7e2d-4458-bab1-d1750020caf5/1/_tdzOdk4vvCHWZKTwgGzufgiNiM.mft
Manifest number: 1A88
Signing time: Sat 14 Nov 2026 23:01:29 +0000
Manifest this update: Sat 14 Nov 2026 23:01:29 +0000
Manifest next update: Sun 15 Nov 2026 23:01:29 +0000
Files and hashes: 1: _tdzOdk4vvCHWZKTwgGzufgiNiM.crl (hash: 8KNpC3K1/9UgDl27vnE+22YLVy8auvjkk93bHhgiibs=)
2: dVMqcvXursPYfDYSCDAE4DhRFlc.roa (hash: Yq3X9779TMJZn56pp7FdF+bqg71vRgvQymxrtb6IBFY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/bfb817-7e2d-4458-bab1-d1750020caf5/1/_tdzOdk4vvCHWZKTwgGzufgiNiM.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/bfb817-7e2d-4458-bab1-d1750020caf5/1/_tdzOdk4vvCHWZKTwgGzufgiNiM.mft
rsync://rpki.ripe.net/repository/DEFAULT/_tdzOdk4vvCHWZKTwgGzufgiNiM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 23:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dc:4b:5f:68:59:63:df:2d:84:82:9a:1b:fe:d3:09:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fed77339d938bef087599293c201b3b9f8223623
Validity
Not Before: Nov 14 23:01:29 2026 GMT
Not After : Nov 15 23:01:29 2026 GMT
Subject: CN=5549e4a950e885ed723fea294bf15f6a7de28bfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:e2:d2:65:b0:37:db:bf:9f:16:09:76:38:da:
8b:56:37:31:fa:8d:b8:01:f9:70:a1:9a:1b:b7:51:
bf:11:1f:65:c3:3d:ae:d4:aa:18:bf:7b:f7:e8:db:
5d:23:87:83:30:74:36:34:1a:3e:80:51:d9:10:80:
58:f4:88:28:74:2c:c2:e0:4e:37:b9:09:b0:cb:73:
ea:55:f5:29:e4:7c:cd:29:0a:0a:33:dc:a3:af:58:
c8:fa:cb:ac:48:5c:79:65:f8:02:f2:2d:cc:ba:5d:
57:a3:8b:85:ca:ef:12:db:33:74:87:a6:53:c7:91:
f4:a3:7f:0f:1f:5c:bb:37:ee:c1:03:f5:db:c1:71:
61:c0:2c:55:5d:87:2a:6e:cc:d4:ce:e6:f3:42:c1:
15:71:25:02:e6:f0:d4:75:ad:72:0d:f8:99:ce:67:
4d:90:2a:ac:f5:ec:82:92:ea:ba:07:83:f0:17:e8:
65:1b:54:3f:c7:ac:60:21:aa:d3:0a:16:32:87:84:
3b:85:43:df:ac:9e:52:64:82:23:63:00:b6:b9:13:
87:55:5a:44:03:11:3f:bc:00:02:44:0c:34:a7:87:
ef:18:98:69:87:f7:3c:c6:54:40:05:0d:02:bf:70:
27:4e:18:e6:fc:8d:a6:30:93:4d:3d:3a:c3:d4:87:
9b:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:49:E4:A9:50:E8:85:ED:72:3F:EA:29:4B:F1:5F:6A:7D:E2:8B:FD
X509v3 Authority Key Identifier:
keyid:FE:D7:73:39:D9:38:BE:F0:87:59:92:93:C2:01:B3:B9:F8:22:36:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_tdzOdk4vvCHWZKTwgGzufgiNiM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/bfb817-7e2d-4458-bab1-d1750020caf5/1/_tdzOdk4vvCHWZKTwgGzufgiNiM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/bfb817-7e2d-4458-bab1-d1750020caf5/1/_tdzOdk4vvCHWZKTwgGzufgiNiM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:8c:80:4f:9f:eb:58:d2:9c:f9:1b:ca:8d:44:0d:95:af:c1:
ba:00:96:6a:0f:f7:97:16:bb:58:bf:b7:2e:b4:d7:77:37:2d:
3c:42:ee:e3:eb:92:f1:6b:2b:f6:1e:c4:c9:b8:6f:48:ed:1b:
d3:c0:2e:6d:f4:ad:f6:7b:08:9d:04:b3:00:36:5a:c5:48:f2:
fc:7b:d2:01:02:7c:f4:c8:f7:36:a2:b2:04:61:f2:cc:07:46:
a6:f1:ef:b2:e9:29:c9:46:a2:9f:11:4f:e3:2c:7b:ec:9a:31:
9b:7c:83:69:5d:e3:32:bd:4e:09:75:6d:38:71:0a:d3:43:31:
79:18:2e:a5:6a:71:25:0f:6a:27:95:bc:19:3e:30:4b:18:cd:
90:31:ba:9d:81:17:8f:7e:a9:25:23:e6:68:ce:90:e0:68:1d:
3e:ac:96:c9:83:fb:ce:95:c6:5e:67:5c:6a:7e:95:ef:93:a1:
7f:1a:51:e2:3e:01:2f:01:9b:6a:03:2b:e3:a0:7c:e9:e4:8c:
ca:32:ba:15:5c:fa:4c:04:5a:03:df:4d:a7:b8:d0:f4:1a:fe:
ed:5e:c4:69:9d:dd:c1:14:24:c4:1b:16:3c:e3:12:43:48:db:
12:3d:78:19:68:cb:dc:9d:88:41:3b:0a:aa:e2:5d:6d:6e:b2:
04:4b:8d:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 09:56:53 2026 by rpki-client