Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/b9a830-6992-49c6-8973-eacb4965fe38/1/TD6do79ZOALMgz_l2UelJpb1jI0.mft
File: TD6do79ZOALMgz_l2UelJpb1jI0.mft (raw, json)
Hash identifier: 4sS29VVzWOKt+k5KObjgQkdQN0TzytVw10xC5gjSwKE=
Subject key identifier: A4:7D:2B:28:B1:7C:6F:23:43:A0:85:B1:A7:21:87:0C:91:D2:32:FB
Authority key identifier: 4C:3E:9D:A3:BF:59:38:02:CC:83:3F:E5:D9:47:A5:26:96:F5:8C:8D
Certificate issuer: /CN=4c3e9da3bf593802cc833fe5d947a52696f58c8d
Certificate serial: 019D273AA42A079B36E30A38465403ECF20C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TD6do79ZOALMgz_l2UelJpb1jI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/b9a830-6992-49c6-8973-eacb4965fe38/1/TD6do79ZOALMgz_l2UelJpb1jI0.mft
Manifest number: 17C7
Signing time: Wed 25 Mar 2026 23:00:47 +0000
Manifest this update: Wed 25 Mar 2026 23:00:47 +0000
Manifest next update: Thu 26 Mar 2026 23:00:47 +0000
Files and hashes: 1: TD6do79ZOALMgz_l2UelJpb1jI0.crl (hash: BfHAZnZA+h8JlWH4htc/juEdBWoNHBoBfuXxZ82o8+M=)
2: xoBSepf056vB7VihaJfLbbA7rl8.roa (hash: FqEFR7+yy5fGMc3KqbC1V37aXIXlQqiTJ1sLZ3ECBNg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/b9a830-6992-49c6-8973-eacb4965fe38/1/TD6do79ZOALMgz_l2UelJpb1jI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/b9a830-6992-49c6-8973-eacb4965fe38/1/TD6do79ZOALMgz_l2UelJpb1jI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/TD6do79ZOALMgz_l2UelJpb1jI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:a4:2a:07:9b:36:e3:0a:38:46:54:03:ec:f2:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c3e9da3bf593802cc833fe5d947a52696f58c8d
Validity
Not Before: Mar 25 23:00:47 2026 GMT
Not After : Mar 26 23:00:47 2026 GMT
Subject: CN=a47d2b28b17c6f2343a085b1a721870c91d232fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:04:9b:2d:71:a1:ed:65:b9:3a:e2:47:06:57:
37:7b:ea:10:fd:12:2b:91:7e:5f:bb:1c:94:0a:c0:
7a:6a:c4:b0:ab:6b:75:89:e1:74:de:33:75:c4:0e:
16:83:92:e0:4a:e0:f2:4e:ce:a2:b8:00:ba:d5:83:
d0:5d:26:c3:d9:ba:47:4b:82:10:ec:a0:25:ce:ab:
14:7f:8f:06:c9:d1:14:0c:ae:34:72:1d:06:45:35:
c8:d4:b3:a2:40:08:7e:3f:59:45:75:83:e1:f5:65:
eb:f1:f6:8e:55:eb:eb:7c:38:72:ff:2f:e4:00:df:
a3:44:34:ea:1e:dd:de:2c:1a:37:1f:09:b2:58:0a:
da:a4:f3:1c:b3:60:b8:b3:4e:7a:9e:0f:75:e1:a7:
59:80:66:e1:bd:59:da:f1:aa:fa:4c:d0:f0:bc:14:
66:05:02:fd:7a:9c:e5:08:b6:45:99:5e:49:67:2b:
b4:80:15:77:42:9b:97:8c:a0:1b:c3:8f:0e:44:30:
0d:3e:f8:3b:1c:7c:5e:c4:b2:bb:5a:69:38:bf:1b:
55:35:34:05:63:15:63:82:29:24:2a:3d:7a:f3:3b:
7d:82:47:88:4d:0d:ff:07:97:7d:ef:dc:5b:07:fb:
69:70:be:aa:9a:50:7d:d3:b7:2c:ee:89:21:91:d6:
57:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:7D:2B:28:B1:7C:6F:23:43:A0:85:B1:A7:21:87:0C:91:D2:32:FB
X509v3 Authority Key Identifier:
keyid:4C:3E:9D:A3:BF:59:38:02:CC:83:3F:E5:D9:47:A5:26:96:F5:8C:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TD6do79ZOALMgz_l2UelJpb1jI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/b9a830-6992-49c6-8973-eacb4965fe38/1/TD6do79ZOALMgz_l2UelJpb1jI0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/b9a830-6992-49c6-8973-eacb4965fe38/1/TD6do79ZOALMgz_l2UelJpb1jI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ca:a6:7d:89:de:65:43:fd:d3:fb:97:06:88:1a:ab:75:e3:34:
98:5e:d2:e4:8a:7a:76:e9:b8:73:ae:1b:58:37:42:ce:7e:49:
60:f8:8d:5e:1d:6f:6c:ae:9d:fc:66:06:6b:9e:19:30:e1:64:
cf:f9:a0:3c:78:b9:13:d2:73:a3:b8:a8:0b:e6:5d:00:04:0b:
08:98:ed:ee:b1:01:e6:a4:03:1a:f9:78:ad:a2:b6:e6:3a:4d:
ee:e4:6b:0b:2e:82:bc:47:ba:53:2b:07:7f:bb:f9:42:b5:47:
6f:7a:d5:50:48:eb:68:1a:84:1d:3d:3e:20:97:4f:db:ca:1b:
58:b6:10:23:86:4a:50:74:ec:08:be:44:a5:e5:4c:81:0a:61:
51:72:70:d6:c8:d2:06:fa:2e:83:65:4b:51:d8:73:86:a6:1e:
35:ec:96:a2:92:51:3d:6e:a4:ac:33:a8:ce:7c:11:41:09:59:
a3:01:77:fd:07:19:e2:e5:67:cf:c9:d0:0b:5f:f8:b1:a4:13:
e6:b1:ca:6d:dd:90:80:99:d1:ea:86:86:b8:8e:89:e8:54:0f:
91:c1:c6:91:21:e3:2c:b3:d2:25:83:72:c5:68:a5:05:c0:a8:
a4:65:de:70:47:f0:87:f1:20:4a:b2:2b:80:7e:e1:6a:18:27:
f6:46:77:06
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nOqQqB5s24wo4RlQD7PIMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjM2U5ZGEzYmY1OTM4MDJjYzgzM2ZlNWQ5NDdhNTI2OTZm
NThjOGQwHhcNMjYwMzI1MjMwMDQ3WhcNMjYwMzI2MjMwMDQ3WjAzMTEwLwYDVQQD
EyhhNDdkMmIyOGIxN2M2ZjIzNDNhMDg1YjFhNzIxODcwYzkxZDIzMmZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3wSbLXGh7WW5OuJHBlc3e+oQ/RIr
kX5fuxyUCsB6asSwq2t1ieF03jN1xA4Wg5LgSuDyTs6iuAC61YPQXSbD2bpHS4IQ
7KAlzqsUf48GydEUDK40ch0GRTXI1LOiQAh+P1lFdYPh9WXr8faOVevrfDhy/y/k
AN+jRDTqHt3eLBo3HwmyWArapPMcs2C4s056ng914adZgGbhvVna8ar6TNDwvBRm
BQL9epzlCLZFmV5JZyu0gBV3QpuXjKAbw48ORDANPvg7HHxexLK7Wmk4vxtVNTQF
YxVjgikkKj168zt9gkeITQ3/B5d979xbB/tpcL6qmlB907cs7okhkdZXewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKR9KyixfG8jQ6CFsachhwyR0jL7MB8GA1UdIwQY
MBaAFEw+naO/WTgCzIM/5dlHpSaW9YyNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVEQ2ZG83OVpPQUxNZ3pfbDJVZWxKcGIxakkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC9iOWE4MzAtNjk5Mi00OWM2LTg5NzMt
ZWFjYjQ5NjVmZTM4LzEvVEQ2ZG83OVpPQUxNZ3pfbDJVZWxKcGIxakkwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC9iOWE4MzAtNjk5Mi00OWM2LTg5NzMtZWFjYjQ5NjVmZTM4
LzEvVEQ2ZG83OVpPQUxNZ3pfbDJVZWxKcGIxakkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyqZ9id5l
Q/3T+5cGiBqrdeM0mF7S5Ip6dum4c64bWDdCzn5JYPiNXh1vbK6d/GYGa54ZMOFk
z/mgPHi5E9Jzo7ioC+ZdAAQLCJjt7rEB5qQDGvl4raK25jpN7uRrCy6CvEe6UysH
f7v5QrVHb3rVUEjraBqEHT0+IJdP28obWLYQI4ZKUHTsCL5EpeVMgQphUXJw1sjS
Bvoug2VLUdhzhqYeNeyWopJRPW6krDOoznwRQQlZowF3/QcZ4uVnz8nQC1/4saQT
5rHKbd2QgJnR6oaGuI6J6FQPkcHGkSHjLLPSJYNyxWilBcCopGXecEfwh/EgSrIr
gH7hahgn9kZ3Bg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 06:54:00 2026 by rpki-client