Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/19/c9d523-0bb9-4573-9595-76a3a10a26f2/1/TdA6WGuXinCqqC4JWKkBUucmedk.mft
File: TdA6WGuXinCqqC4JWKkBUucmedk.mft (raw, json)
Hash identifier: 95bQf27BdG9pgxFkEPty/34Y4Z8XPiIHK7lZe8Rh3qA=
Subject key identifier: D4:E0:0E:5F:DA:D1:B3:35:5E:A9:D6:7D:DC:D8:1E:5C:B6:76:DD:80
Authority key identifier: 4D:D0:3A:58:6B:97:8A:70:AA:A8:2E:09:58:A9:01:52:E7:26:79:D9
Certificate issuer: /CN=4dd03a586b978a70aaa82e0958a90152e72679d9
Certificate serial: 01A0DF868C81FBA2AF6F0CB3BF46DBF3C66D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TdA6WGuXinCqqC4JWKkBUucmedk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/c9d523-0bb9-4573-9595-76a3a10a26f2/1/TdA6WGuXinCqqC4JWKkBUucmedk.mft
Manifest number: 0CD4
Signing time: Sat 26 Sep 2026 21:02:11 +0000
Manifest this update: Sat 26 Sep 2026 21:02:11 +0000
Manifest next update: Sun 27 Sep 2026 21:02:11 +0000
Files and hashes: 1: FKpOhOuuXOF2CQyUBzWT1pdpVqc.roa (hash: ysT9E+YNysEYFfe5RzvJVpbtqR6v2fUqt40v4tEcOBQ=)
2: TdA6WGuXinCqqC4JWKkBUucmedk.crl (hash: WMQVJ4rJqX0Dc4jndApfZzCMw2zYxsBRtWMNhbzgq1E=)
3: ttNXspnBYOBylc9inYKHFOll37k.roa (hash: RLGAiX60Eg9+/H6cmMZLT7RRPoDY5hArHpeHbk6ZQf8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/c9d523-0bb9-4573-9595-76a3a10a26f2/1/TdA6WGuXinCqqC4JWKkBUucmedk.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/c9d523-0bb9-4573-9595-76a3a10a26f2/1/TdA6WGuXinCqqC4JWKkBUucmedk.mft
rsync://rpki.ripe.net/repository/DEFAULT/TdA6WGuXinCqqC4JWKkBUucmedk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 19:30:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:df:86:8c:81:fb:a2:af:6f:0c:b3:bf:46:db:f3:c6:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4dd03a586b978a70aaa82e0958a90152e72679d9
Validity
Not Before: Sep 26 21:02:11 2026 GMT
Not After : Sep 27 21:02:11 2026 GMT
Subject: CN=d4e00e5fdad1b3355ea9d67ddcd81e5cb676dd80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:1f:3b:0a:39:3e:b5:96:d3:cc:34:ff:bb:f5:
39:98:81:d2:fd:b7:b1:69:5a:69:4f:9b:6e:f6:4c:
b3:00:e1:8a:35:9e:c1:6f:68:7f:62:b6:f5:97:03:
ec:22:03:d9:3d:d9:1c:12:6a:eb:00:e3:10:dd:73:
c3:58:e7:27:0b:8e:45:bd:1e:65:2f:be:a8:2d:79:
18:f2:2b:c3:ea:12:5d:6a:eb:0c:0e:97:b1:00:2a:
5c:0c:ae:34:42:91:e3:e2:4f:66:1c:b7:6f:8b:78:
e9:16:54:5a:0c:64:a4:af:ac:2e:2c:2f:b2:32:44:
41:0e:94:34:ce:48:c9:8d:50:66:01:83:8a:88:d2:
8d:f4:62:54:e8:10:cf:46:56:b9:a3:03:2e:c1:9e:
9b:88:78:7d:0a:fd:60:36:dd:04:a4:8a:5c:d6:a2:
dd:33:3e:15:61:f3:dc:3f:14:be:1b:f9:d6:3b:b4:
51:b6:a1:ad:3d:da:d4:bf:5a:ab:d5:44:7c:ca:50:
94:fb:d1:8f:f6:08:0b:1a:7b:11:f8:7f:f7:1b:6a:
d9:a7:44:02:60:77:be:0c:6c:77:33:9d:c6:c8:19:
c8:a4:4c:0f:b2:c7:1f:a0:92:7f:8d:68:66:69:d2:
1c:db:6b:fb:fd:0d:5a:cd:6b:b8:d1:df:41:f3:b2:
11:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:E0:0E:5F:DA:D1:B3:35:5E:A9:D6:7D:DC:D8:1E:5C:B6:76:DD:80
X509v3 Authority Key Identifier:
keyid:4D:D0:3A:58:6B:97:8A:70:AA:A8:2E:09:58:A9:01:52:E7:26:79:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TdA6WGuXinCqqC4JWKkBUucmedk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/c9d523-0bb9-4573-9595-76a3a10a26f2/1/TdA6WGuXinCqqC4JWKkBUucmedk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/c9d523-0bb9-4573-9595-76a3a10a26f2/1/TdA6WGuXinCqqC4JWKkBUucmedk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:89:93:5c:d0:e8:7e:90:d5:ca:ef:9d:f1:59:be:3d:4f:07:
f1:74:06:1f:bf:4d:da:2f:85:f0:14:ca:a0:e9:07:85:99:e9:
19:aa:49:ca:69:c5:dd:54:ab:a1:78:0e:66:19:d4:e5:8a:30:
1e:58:fd:aa:07:3a:f7:ed:72:ef:38:86:fe:ba:97:25:02:63:
a6:2d:45:f6:96:06:91:45:fb:14:19:1c:44:c9:54:06:b3:38:
20:88:d2:bb:15:c5:ed:97:d4:04:e0:1b:10:51:50:ac:c3:f8:
c6:a4:7e:ff:be:05:45:76:a3:51:15:ce:5e:be:e0:29:da:c5:
d8:74:45:da:5f:d5:4e:1b:5c:af:7c:f3:02:b7:6f:5a:ca:99:
63:07:08:fb:56:7f:e5:c3:04:18:f6:8f:f5:5a:f9:39:5c:f2:
c6:6b:6e:55:e9:a2:57:c1:11:b0:b1:04:ab:86:5a:f8:42:06:
a3:0d:49:7b:58:8d:ab:01:9d:a4:e0:b1:2f:db:0e:98:28:2e:
1e:56:b2:7b:38:35:86:41:97:54:58:a2:80:08:74:9a:d1:ed:
13:30:45:1c:4b:91:71:8d:5c:96:4b:17:48:30:d3:e8:64:61:
79:30:cd:7e:5b:46:8c:e8:86:a9:20:dc:d0:d3:6f:f1:9e:12:
ce:c6:3a:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 06:24:26 2026 by rpki-client