Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/55/6b66b4-064c-42ee-a5ee-1a65b91bee58/1/TDxmXlHMTLXK8FuClIQ-JzOhPe4.mft
File: TDxmXlHMTLXK8FuClIQ-JzOhPe4.mft (raw, json)
Hash identifier: kP6F6Cjk5kC6gQUe06CYSHVX9SG8Wnsh/qdbE9kMPyc=
Subject key identifier: 16:34:BD:21:AE:CD:B9:3B:E2:13:41:4F:00:65:74:89:9A:F5:95:A0
Authority key identifier: 4C:3C:66:5E:51:CC:4C:B5:CA:F0:5B:82:94:84:3E:27:33:A1:3D:EE
Certificate issuer: /CN=4c3c665e51cc4cb5caf05b8294843e2733a13dee
Certificate serial: 01A14315F742A53A4C7FC8678721F1568D4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TDxmXlHMTLXK8FuClIQ-JzOhPe4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/6b66b4-064c-42ee-a5ee-1a65b91bee58/1/TDxmXlHMTLXK8FuClIQ-JzOhPe4.mft
Manifest number: 04F8
Signing time: Fri 16 Oct 2026 05:01:15 +0000
Manifest this update: Fri 16 Oct 2026 05:01:15 +0000
Manifest next update: Sat 17 Oct 2026 05:01:15 +0000
Files and hashes: 1: Hp24GG6uSG8sQb8jkFqa197vWxk.roa (hash: dVGmnh+jbiESkwvHH2VOIhilfiq/4OOnJSaQFQ2DP7Y=)
2: TDxmXlHMTLXK8FuClIQ-JzOhPe4.crl (hash: LRefx+0QXrb/CXFkQKdxsMY2aoyzXVzUZuw9POG2xvc=)
3: cjwbOJtXa2kt3CFJB7UkbYV9oq8.roa (hash: OqZn/Ns7ibJgbGiTjuz4lHbfFzpm2v7TCBQjtoWY4Bw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/6b66b4-064c-42ee-a5ee-1a65b91bee58/1/TDxmXlHMTLXK8FuClIQ-JzOhPe4.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/6b66b4-064c-42ee-a5ee-1a65b91bee58/1/TDxmXlHMTLXK8FuClIQ-JzOhPe4.mft
rsync://rpki.ripe.net/repository/DEFAULT/TDxmXlHMTLXK8FuClIQ-JzOhPe4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 17 Oct 2026 05:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:43:15:f7:42:a5:3a:4c:7f:c8:67:87:21:f1:56:8d:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c3c665e51cc4cb5caf05b8294843e2733a13dee
Validity
Not Before: Oct 16 05:01:15 2026 GMT
Not After : Oct 17 05:01:15 2026 GMT
Subject: CN=1634bd21aecdb93be213414f006574899af595a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:56:51:d3:52:60:ac:d2:c2:7a:f8:3c:4e:1f:
d1:fe:97:1b:f5:cc:ad:43:a4:49:22:58:a9:c1:e1:
ae:cf:c1:67:48:76:26:67:56:d1:2e:59:15:47:0f:
4f:78:f3:52:d5:63:2d:87:41:34:9b:22:6e:d9:c8:
47:76:cf:eb:15:d1:1b:f5:3f:11:de:8b:4c:aa:e6:
d2:19:77:81:a8:35:ed:0a:bc:0d:00:a2:3c:b9:2e:
5a:04:b7:d7:4b:ec:5c:35:53:34:06:e5:9a:55:7d:
ca:72:dd:7d:a4:0c:36:92:8d:42:3a:b8:ec:e1:e9:
8c:c7:42:8f:2b:11:45:ae:1f:b8:9c:81:e3:a4:28:
07:d0:58:82:b2:18:e3:ff:52:1b:b8:f3:fb:a1:a4:
27:c3:cf:b3:18:4a:32:8f:8e:fe:53:92:a4:bf:c3:
72:c0:2c:52:48:e1:65:60:9a:7b:f1:bd:50:41:2c:
a4:dc:6f:4e:b2:ed:7e:bc:88:65:e6:a9:29:47:e7:
31:ec:87:16:e5:60:c2:ed:ea:5d:7d:55:24:1b:61:
9e:fb:54:c4:6e:d1:a1:12:e4:31:3e:24:a2:5f:6d:
cb:1d:aa:72:1e:38:81:9e:75:6e:2e:1f:cf:08:56:
89:ab:6b:f0:8c:92:47:6a:26:4c:c7:d1:65:aa:88:
6e:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:34:BD:21:AE:CD:B9:3B:E2:13:41:4F:00:65:74:89:9A:F5:95:A0
X509v3 Authority Key Identifier:
keyid:4C:3C:66:5E:51:CC:4C:B5:CA:F0:5B:82:94:84:3E:27:33:A1:3D:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TDxmXlHMTLXK8FuClIQ-JzOhPe4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/6b66b4-064c-42ee-a5ee-1a65b91bee58/1/TDxmXlHMTLXK8FuClIQ-JzOhPe4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/6b66b4-064c-42ee-a5ee-1a65b91bee58/1/TDxmXlHMTLXK8FuClIQ-JzOhPe4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:56:50:9d:a1:2f:92:35:fc:a8:c7:98:46:ee:94:c9:4a:f7:
e5:75:7a:e2:29:9f:73:b5:75:db:12:aa:13:57:f0:4c:97:ff:
f4:c8:24:bd:13:7b:58:db:df:dd:91:e7:6e:94:a8:7f:13:37:
2c:fd:b0:47:88:d6:a8:c1:66:6b:54:fd:d9:e9:9b:22:75:23:
8a:22:da:93:60:46:04:2d:0e:64:60:7a:d8:fa:10:69:dc:ae:
0e:40:b8:c6:bb:e6:3b:c4:8a:e9:4b:15:3f:87:d5:f1:97:3e:
81:5e:06:e3:b8:ed:82:f9:d6:9f:b3:cb:45:b6:15:8c:20:0a:
45:bb:92:4d:68:3d:d6:74:61:85:83:0e:d5:b8:63:31:49:e9:
f1:26:66:cd:c1:71:6c:37:1f:aa:e4:e9:32:80:f6:36:0c:cd:
ce:48:79:44:b3:36:e3:fa:92:50:04:9a:0b:30:91:e3:8f:6f:
50:00:43:4d:27:b7:45:26:24:b4:dc:e7:2a:d3:a7:2c:68:54:
cd:58:78:f6:94:2c:f0:44:a6:5b:a9:44:99:13:07:99:15:8e:
d7:a5:3f:95:29:28:11:13:1c:ab:4e:ce:12:25:d5:a5:ae:2d:
62:e6:ad:28:14:7e:33:14:83:fe:ab:15:27:e4:f2:66:46:e5:
91:3d:c8:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 16 16:47:43 2026 by rpki-client