Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/ec5584-6618-4b12-a11c-3055cb729bcf/1/TDuIzbE_PrEqm-VKsZuqkFWbOWo.mft
File: TDuIzbE_PrEqm-VKsZuqkFWbOWo.mft (raw, json)
Hash identifier: wSh0iZEVvMztkdCPz1CHWncWRd5YrP3bhIXr7pMr6p0=
Subject key identifier: F9:23:0A:D1:1D:A6:26:A6:8F:21:58:F1:DF:CC:F4:DF:63:ED:2C:92
Authority key identifier: 4C:3B:88:CD:B1:3F:3E:B1:2A:9B:E5:4A:B1:9B:AA:90:55:9B:39:6A
Certificate issuer: /CN=4c3b88cdb13f3eb12a9be54ab19baa90559b396a
Certificate serial: 019E20915195CB64BBD7FADD9FC65869514C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TDuIzbE_PrEqm-VKsZuqkFWbOWo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/ec5584-6618-4b12-a11c-3055cb729bcf/1/TDuIzbE_PrEqm-VKsZuqkFWbOWo.mft
Manifest number: 0AA2
Signing time: Wed 13 May 2026 09:00:54 +0000
Manifest this update: Wed 13 May 2026 09:00:54 +0000
Manifest next update: Thu 14 May 2026 09:00:54 +0000
Files and hashes: 1: NSzxR15lxLwAdc7Ga165-6mKacc.roa (hash: 3N9qBcothKO0rosVFxeggNkLbRm7QTKDO+BXyY2NEkk=)
2: QXNEa0rLZxlRlsB-8HuZ_VSJWP0.asa (hash: 6rji+pOpggUWT3pycZRN/hU8sc0Lzb5vIQ3TtjqmA1k=)
3: TDuIzbE_PrEqm-VKsZuqkFWbOWo.crl (hash: mCqT8kIF10yEHtAJGsLavDW+qW1E7ZnMakjqFUV8BwA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/ec5584-6618-4b12-a11c-3055cb729bcf/1/TDuIzbE_PrEqm-VKsZuqkFWbOWo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/ec5584-6618-4b12-a11c-3055cb729bcf/1/TDuIzbE_PrEqm-VKsZuqkFWbOWo.mft
rsync://rpki.ripe.net/repository/DEFAULT/TDuIzbE_PrEqm-VKsZuqkFWbOWo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:91:51:95:cb:64:bb:d7:fa:dd:9f:c6:58:69:51:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c3b88cdb13f3eb12a9be54ab19baa90559b396a
Validity
Not Before: May 13 09:00:54 2026 GMT
Not After : May 14 09:00:54 2026 GMT
Subject: CN=f9230ad11da626a68f2158f1dfccf4df63ed2c92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:4c:c6:bc:f8:c0:b0:3e:06:5d:cc:64:08:e4:
e1:08:75:23:bf:34:17:11:02:4b:f4:02:ee:ec:c4:
ab:c1:ea:6e:b0:2a:cf:fa:fc:eb:d6:82:77:e9:54:
9c:48:7c:17:76:cb:ee:da:f4:c1:40:e9:8a:43:1b:
2d:59:d4:0e:e6:95:5d:e0:fd:ac:a3:a4:24:3e:72:
15:2d:2e:63:af:bc:cf:02:ed:71:61:78:9c:40:4e:
23:8f:d4:58:f8:27:3e:bd:1b:3e:17:32:62:e4:e1:
b6:84:df:23:b4:e3:22:8d:b3:90:29:97:b1:65:a4:
2a:77:0b:65:57:93:42:77:a8:f4:8d:90:61:40:f4:
37:82:f5:d7:f7:b5:80:39:6f:48:d2:bd:ee:23:ed:
9e:73:2a:29:d4:83:2f:af:94:00:e4:c4:8b:b3:4b:
c5:7a:fb:83:e6:74:44:ac:89:be:15:52:65:cc:ad:
81:1a:bf:5d:44:5b:db:c1:ef:e6:59:61:22:fd:63:
c2:bc:73:fe:be:71:f0:6c:39:75:0f:3e:4a:08:90:
55:b2:ff:d1:91:a6:26:53:3f:e3:28:a2:7f:ab:51:
69:34:33:ca:35:52:5c:b2:34:75:be:92:c8:f6:86:
de:3c:de:c5:96:2e:75:92:e5:17:ae:0b:05:3f:59:
14:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:23:0A:D1:1D:A6:26:A6:8F:21:58:F1:DF:CC:F4:DF:63:ED:2C:92
X509v3 Authority Key Identifier:
keyid:4C:3B:88:CD:B1:3F:3E:B1:2A:9B:E5:4A:B1:9B:AA:90:55:9B:39:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TDuIzbE_PrEqm-VKsZuqkFWbOWo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/ec5584-6618-4b12-a11c-3055cb729bcf/1/TDuIzbE_PrEqm-VKsZuqkFWbOWo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/ec5584-6618-4b12-a11c-3055cb729bcf/1/TDuIzbE_PrEqm-VKsZuqkFWbOWo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:00:ad:7e:cc:c8:ff:fd:28:36:5c:f3:74:4c:d4:8c:34:36:
8a:0c:c6:ca:53:55:63:01:a5:f8:04:52:da:45:bd:61:c2:61:
c3:9f:c1:4e:2f:68:0f:25:da:90:39:fd:1f:f3:23:d3:97:30:
c0:a1:ab:28:b3:42:56:03:fe:ee:48:a2:7b:b1:88:cf:e4:b0:
2b:46:87:e9:7c:fe:d4:5c:23:ac:8b:7f:c7:aa:b2:6a:54:62:
09:46:9b:de:f9:0e:e0:cc:32:82:b5:89:d8:2e:7e:8e:16:16:
26:6f:de:7f:37:87:fd:0f:45:8f:dd:a0:81:aa:47:83:7a:65:
9a:c6:56:f7:e0:a5:29:c4:64:ed:92:50:4d:ba:f1:9a:0d:06:
6c:5e:59:df:41:3a:0a:c6:2c:8a:15:e3:ee:94:41:16:bb:9b:
44:95:4d:4f:e0:4a:f9:d1:8c:04:e3:6c:db:d8:6b:a1:79:5a:
cf:e9:f3:dd:a2:0d:39:be:07:b0:9e:47:2c:b5:fe:40:b2:52:
93:7c:d3:a9:12:8f:5c:7f:c5:fd:88:e8:0e:11:3a:d9:7f:8c:
d2:4f:11:9d:44:2f:f7:30:7e:90:c1:d6:32:88:f9:88:8d:92:
b9:cd:7c:1a:0d:ab:4c:56:36:98:c2:cd:a5:c6:66:8a:17:99:
de:59:38:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:15:06 2026 by rpki-client