Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/c9d523-0bb9-4573-9595-76a3a10a26f2/1/TdA6WGuXinCqqC4JWKkBUucmedk.mft
File: TdA6WGuXinCqqC4JWKkBUucmedk.mft (raw, json)
Hash identifier: XCN6ZLj1i2ShCSer1hwAste/df3KUZ4tXlhlQQUh7N4=
Subject key identifier: 24:C0:CD:24:6B:54:87:A1:19:54:42:F9:5C:2A:34:00:47:7D:44:BE
Authority key identifier: 4D:D0:3A:58:6B:97:8A:70:AA:A8:2E:09:58:A9:01:52:E7:26:79:D9
Certificate issuer: /CN=4dd03a586b978a70aaa82e0958a90152e72679d9
Certificate serial: 019CA9EA8C6189003B0CEBC7397B8E474D7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TdA6WGuXinCqqC4JWKkBUucmedk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/c9d523-0bb9-4573-9595-76a3a10a26f2/1/TdA6WGuXinCqqC4JWKkBUucmedk.mft
Manifest number: 0AA6
Signing time: Sun 01 Mar 2026 15:00:46 +0000
Manifest this update: Sun 01 Mar 2026 15:00:46 +0000
Manifest next update: Mon 02 Mar 2026 15:00:46 +0000
Files and hashes: 1: FKpOhOuuXOF2CQyUBzWT1pdpVqc.roa (hash: ysT9E+YNysEYFfe5RzvJVpbtqR6v2fUqt40v4tEcOBQ=)
2: TdA6WGuXinCqqC4JWKkBUucmedk.crl (hash: 8osF4Y57RcsZ86xkZJBOpW3fQwXWeDDfO97W5CEg2jc=)
3: ttNXspnBYOBylc9inYKHFOll37k.roa (hash: RLGAiX60Eg9+/H6cmMZLT7RRPoDY5hArHpeHbk6ZQf8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/c9d523-0bb9-4573-9595-76a3a10a26f2/1/TdA6WGuXinCqqC4JWKkBUucmedk.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/c9d523-0bb9-4573-9595-76a3a10a26f2/1/TdA6WGuXinCqqC4JWKkBUucmedk.mft
rsync://rpki.ripe.net/repository/DEFAULT/TdA6WGuXinCqqC4JWKkBUucmedk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:ea:8c:61:89:00:3b:0c:eb:c7:39:7b:8e:47:4d:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4dd03a586b978a70aaa82e0958a90152e72679d9
Validity
Not Before: Mar 1 15:00:46 2026 GMT
Not After : Mar 2 15:00:46 2026 GMT
Subject: CN=24c0cd246b5487a1195442f95c2a3400477d44be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:8d:98:03:04:ad:35:c3:e6:41:8f:a8:fc:eb:
dc:ac:70:8c:f7:21:af:fc:7b:18:01:8d:19:2e:c9:
ac:1d:d5:be:98:22:1c:e1:68:72:18:d6:33:a3:50:
1e:a2:fc:0e:73:f1:c5:60:f9:f3:41:9f:2f:33:79:
c4:da:7a:bc:b6:07:0b:5a:40:2d:24:4b:fd:3d:7b:
57:1a:96:c8:b1:e6:69:f7:19:35:f7:21:fc:ff:88:
8a:17:f7:85:0d:23:e3:8f:62:b1:07:ec:39:88:18:
e2:21:42:ea:8e:5e:eb:ad:b7:db:1f:ed:6c:77:4b:
1e:10:7a:d4:42:04:03:5c:fe:87:1d:44:25:cd:54:
a5:eb:a1:87:56:4e:73:e9:4f:81:8f:04:e0:68:e3:
14:2c:12:ea:ef:31:64:90:a6:62:e7:15:fe:dd:fe:
a4:d4:b3:64:76:9e:ad:44:31:2d:3e:26:ad:aa:7b:
15:e6:67:ae:0f:bb:7f:7c:7d:d6:56:4f:10:3a:8c:
b4:0d:dc:5d:97:19:43:94:eb:52:a4:d0:cb:7f:1d:
34:43:60:d1:45:5e:9f:45:7a:3f:48:04:8e:51:06:
ff:2d:f4:09:03:ed:8e:2f:c5:88:e2:57:e6:5b:70:
25:4d:81:e7:35:3a:05:06:a6:a7:46:85:6c:9e:83:
ed:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:C0:CD:24:6B:54:87:A1:19:54:42:F9:5C:2A:34:00:47:7D:44:BE
X509v3 Authority Key Identifier:
keyid:4D:D0:3A:58:6B:97:8A:70:AA:A8:2E:09:58:A9:01:52:E7:26:79:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TdA6WGuXinCqqC4JWKkBUucmedk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/c9d523-0bb9-4573-9595-76a3a10a26f2/1/TdA6WGuXinCqqC4JWKkBUucmedk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/c9d523-0bb9-4573-9595-76a3a10a26f2/1/TdA6WGuXinCqqC4JWKkBUucmedk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:f9:2b:6b:13:69:65:96:93:cd:d3:d8:21:f1:ac:49:22:31:
ad:55:be:6f:e7:9b:4d:7a:9c:58:d2:46:e8:ce:9e:1c:e0:6b:
18:b7:c4:bd:55:0d:0c:26:22:b4:b6:b6:17:67:df:40:1f:7c:
a3:c2:79:13:20:ab:7e:3b:81:d4:a9:3f:4d:25:42:b0:f5:b4:
e3:61:d2:cd:c6:e5:88:35:03:38:c2:b8:4c:c8:1d:92:aa:1a:
38:3d:72:36:46:7d:dd:f6:ac:4a:fb:63:5e:f5:5d:a8:ed:15:
cb:28:25:f5:ad:03:27:d3:90:50:74:b8:09:5d:97:74:47:c8:
d1:5a:67:c2:6c:a2:c6:02:96:06:3a:68:05:ee:7f:00:8c:a1:
3c:58:cb:f2:31:7c:53:c7:70:3f:ba:96:4e:0c:76:7d:8d:9b:
bc:b6:0d:0d:f7:64:3b:6d:12:2c:25:d9:92:94:42:53:e1:90:
02:c5:ac:6c:f8:a8:86:b2:83:e0:b3:ee:3c:c2:30:0a:b9:c1:
8d:39:85:c3:21:3f:65:0b:4f:03:1d:cb:7e:d5:03:5f:ca:28:
83:df:15:cc:7c:be:4d:38:76:c3:2d:6d:09:d3:48:7c:71:2c:
e0:8f:eb:07:f8:64:6d:0a:54:32:76:ba:98:26:6d:70:ba:83:
3a:38:d8:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:08:04 2026 by rpki-client