Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/f5c6ba-170d-47c5-9c7c-1766a277d85b/1/TdI0IiZKecAxVILtTyfHUTU_Jrs.mft
File: TdI0IiZKecAxVILtTyfHUTU_Jrs.mft (raw, json)
Hash identifier: jvVZWtTxYNkL7Cc22oAIrH44HXyA3YJlLO76WstlE1M=
Subject key identifier: 8A:83:3C:B8:ED:C5:F2:B2:1F:DC:41:BE:AA:F7:67:CD:55:22:3B:06
Authority key identifier: 4D:D2:34:22:26:4A:79:C0:31:54:82:ED:4F:27:C7:51:35:3F:26:BB
Certificate issuer: /CN=4dd23422264a79c0315482ed4f27c751353f26bb
Certificate serial: 019D292957DAF97001AF71654D60FBCE1CEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TdI0IiZKecAxVILtTyfHUTU_Jrs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/f5c6ba-170d-47c5-9c7c-1766a277d85b/1/TdI0IiZKecAxVILtTyfHUTU_Jrs.mft
Manifest number: 09D4
Signing time: Thu 26 Mar 2026 08:01:08 +0000
Manifest this update: Thu 26 Mar 2026 08:01:08 +0000
Manifest next update: Fri 27 Mar 2026 08:01:08 +0000
Files and hashes: 1: R5RdCB9jBqc-I8sQkC7bDMJCJEM.roa (hash: TI8xD7ZekXFKyUpXLrhp0xuP0vXKDHQ1CwoOHjH85AQ=)
2: TdI0IiZKecAxVILtTyfHUTU_Jrs.crl (hash: 9gcpygOccA3UW/ksbWykNfjCDbcMU3pwtorbJYDsuEw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/f5c6ba-170d-47c5-9c7c-1766a277d85b/1/TdI0IiZKecAxVILtTyfHUTU_Jrs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/f5c6ba-170d-47c5-9c7c-1766a277d85b/1/TdI0IiZKecAxVILtTyfHUTU_Jrs.mft
rsync://rpki.ripe.net/repository/DEFAULT/TdI0IiZKecAxVILtTyfHUTU_Jrs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:29:57:da:f9:70:01:af:71:65:4d:60:fb:ce:1c:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4dd23422264a79c0315482ed4f27c751353f26bb
Validity
Not Before: Mar 26 08:01:08 2026 GMT
Not After : Mar 27 08:01:08 2026 GMT
Subject: CN=8a833cb8edc5f2b21fdc41beaaf767cd55223b06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:05:de:66:34:45:27:f3:ae:6b:0a:5c:af:f3:
bc:4a:a5:69:74:0f:69:a4:f1:e5:05:04:a7:0a:f4:
d7:27:42:85:ed:db:e7:47:6f:7a:63:38:51:a9:a0:
0e:5e:a3:de:cb:64:fa:ff:5c:0d:a8:47:d5:a3:48:
be:96:66:f6:76:c8:21:ee:3b:cd:2d:62:a9:11:1a:
8d:98:51:5b:f9:c6:92:47:d2:8a:43:a9:d2:7f:57:
49:bc:06:4a:53:d1:8d:b4:20:44:b2:b1:d4:f1:6e:
ab:95:99:5a:6b:da:2f:b3:4c:39:82:9f:9c:60:3b:
12:d4:a3:09:51:ed:6a:29:82:80:2e:fd:ef:03:95:
be:30:22:1a:81:8a:54:ba:7d:55:10:7f:68:30:eb:
8e:6f:69:6b:5b:ff:e7:ef:d1:93:13:7c:34:fa:f1:
63:43:a4:d8:8a:c1:a7:57:9d:ba:9e:00:6d:94:af:
cb:79:d5:57:99:88:5d:0b:6e:05:ff:1b:7d:05:f7:
64:93:7c:e5:ba:45:05:77:98:3c:25:49:1d:b8:cf:
d0:66:3d:3b:d6:00:63:07:f4:82:34:74:e4:d7:81:
d4:f4:cc:e3:65:58:dd:10:98:bf:1e:27:a5:8c:c7:
6b:ca:f3:22:4d:57:37:44:ec:4c:84:46:d9:ea:10:
42:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:83:3C:B8:ED:C5:F2:B2:1F:DC:41:BE:AA:F7:67:CD:55:22:3B:06
X509v3 Authority Key Identifier:
keyid:4D:D2:34:22:26:4A:79:C0:31:54:82:ED:4F:27:C7:51:35:3F:26:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TdI0IiZKecAxVILtTyfHUTU_Jrs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/f5c6ba-170d-47c5-9c7c-1766a277d85b/1/TdI0IiZKecAxVILtTyfHUTU_Jrs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/f5c6ba-170d-47c5-9c7c-1766a277d85b/1/TdI0IiZKecAxVILtTyfHUTU_Jrs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:0a:fa:65:ce:71:18:06:88:df:88:72:84:71:0f:4f:82:2c:
86:72:49:a4:26:76:95:15:c1:4a:b3:b1:bc:53:87:eb:fa:6c:
d7:df:61:10:f1:e4:eb:be:55:6d:68:3f:30:f2:40:63:d0:28:
db:88:44:8f:6d:ef:d1:08:22:4c:e9:22:09:f7:e2:19:4d:43:
cb:71:b1:fb:f8:d1:df:a1:30:ca:bf:97:0b:eb:5d:3c:58:54:
3a:d4:e8:1b:e2:fe:69:cc:af:60:8e:d7:94:1e:9b:81:29:82:
77:c3:c6:eb:58:1e:ab:34:42:c1:22:19:1b:89:21:da:e1:4f:
21:dd:26:ca:cb:4c:7f:95:ea:79:ce:84:20:82:2b:53:8c:a9:
09:43:0d:19:64:1f:db:bf:4e:bb:23:06:05:8e:b3:6e:09:7f:
77:f4:2c:18:99:58:73:33:e0:c3:a6:8b:3c:25:b6:0b:02:73:
ad:46:52:3f:eb:dc:e8:70:84:96:b2:d0:45:c9:2a:d4:74:ab:
20:4d:9f:76:2c:2d:6b:f1:95:17:42:ae:8d:9c:9a:40:ff:bd:
e4:55:5f:48:fd:1a:46:30:1d:7b:e0:bd:b5:80:ff:2c:08:27:
90:3f:3f:ab:76:21:67:6d:75:b3:38:31:90:4b:76:a6:23:b9:
6e:68:5a:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:10:51 2026 by rpki-client