Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/09cea0-ef2b-4f20-a19a-eb5a627e76a3/1/TDfyfrSZezvvnygmajlpQFD-dPk.mft
File: TDfyfrSZezvvnygmajlpQFD-dPk.mft (raw, json)
Hash identifier: Xh2eLCMte5hAcQHUgUr+39/0y2QcpewpzKj5cs6aX1c=
Subject key identifier: 00:AB:1A:23:FF:2F:85:11:46:EC:0E:D0:DB:8B:98:AC:CC:91:08:B1
Authority key identifier: 4C:37:F2:7E:B4:99:7B:3B:EF:9F:28:26:6A:39:69:40:50:FE:74:F9
Certificate issuer: /CN=4c37f27eb4997b3bef9f28266a39694050fe74f9
Certificate serial: 019CAAFCFD7F5C56F447CB7107A89C3583AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TDfyfrSZezvvnygmajlpQFD-dPk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/09cea0-ef2b-4f20-a19a-eb5a627e76a3/1/TDfyfrSZezvvnygmajlpQFD-dPk.mft
Manifest number: 18A6
Signing time: Sun 01 Mar 2026 20:00:32 +0000
Manifest this update: Sun 01 Mar 2026 20:00:32 +0000
Manifest next update: Mon 02 Mar 2026 20:00:32 +0000
Files and hashes: 1: 3mj4BF15-QsrQeXNqlhp9O0RF8Q.roa (hash: vXL9dy1/SgEnnpISMc/F/t6U8c7+bWH7fiwFFAUniPU=)
2: TDfyfrSZezvvnygmajlpQFD-dPk.crl (hash: /k+hzmfZXHz+ZzKMPNAIH/muFwYQc5Kn2UcfFioSwWs=)
3: dDIM-ljTCDKhWIxv1515WUGeQvk.roa (hash: /ksxNXhqwhx98qeq21Eca7WB/KLYXy3qx2dkD35mKTc=)
4: i6gAOaaWdEjygKv3yzfVHTmBR5s.roa (hash: jK1Yhe3ibqhPTKxiBNM7KW7h9KKeRctQT02L1qcBze8=)
5: kFLjuN4_tRjI-IILkJq8lcLpDdc.roa (hash: lQTRIEBvMUBY3vX80dFs9U0bSNDBYvB6Uew+srrzZ9A=)
6: qrG9XLPl84E40eGjaluMQlHH30g.roa (hash: JZCVwj3aTdfzcFTKEfr0xBq4Umu2aHhpSpk1hh5GgSQ=)
7: sNbxwr_VlMceIOoORfjNh48fthg.roa (hash: og1IfOlO+B5tux3x/JdwIjbchpmcSQUOsvTa4SrXgws=)
8: sPyU_Xm3Mi4DrCYd-xCPHCu7Yj8.roa (hash: R+jYi2MX3/3kpxkJYiEg+3YO+SpdTf42NvPMvZti0mw=)
9: yjcAiOmQGkj7hTD0MZWHr2J1Je4.roa (hash: S7VwEQTFRcxL/FXQlqzu5pVh1KvvK3fwPwSXMI469EY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/09cea0-ef2b-4f20-a19a-eb5a627e76a3/1/TDfyfrSZezvvnygmajlpQFD-dPk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/09cea0-ef2b-4f20-a19a-eb5a627e76a3/1/TDfyfrSZezvvnygmajlpQFD-dPk.mft
rsync://rpki.ripe.net/repository/DEFAULT/TDfyfrSZezvvnygmajlpQFD-dPk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fc:fd:7f:5c:56:f4:47:cb:71:07:a8:9c:35:83:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c37f27eb4997b3bef9f28266a39694050fe74f9
Validity
Not Before: Mar 1 20:00:32 2026 GMT
Not After : Mar 2 20:00:32 2026 GMT
Subject: CN=00ab1a23ff2f851146ec0ed0db8b98accc9108b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:a4:94:8b:9d:d6:da:2a:52:e8:11:a7:65:6f:
19:98:d2:d9:f5:e0:8c:74:6a:ae:05:c6:0c:e4:e0:
14:74:9b:93:f6:85:31:e3:26:df:a6:3e:59:fc:72:
a0:58:87:98:9e:bb:d9:fb:1c:79:f3:98:df:43:08:
b7:3e:c7:09:2f:77:69:95:ac:5a:58:d0:43:2b:6a:
a0:52:a4:cc:9f:23:00:ce:0f:3c:8e:ea:cb:22:49:
b0:44:94:c4:f4:56:08:df:bc:de:77:be:9b:16:7b:
0b:02:b0:91:41:19:ea:26:09:eb:52:85:9d:d0:7a:
e2:32:87:fe:a3:98:62:1b:60:d4:02:f9:19:b6:20:
30:67:14:27:c8:e6:a4:d8:44:b2:fd:e8:df:66:3b:
40:38:75:23:c7:f5:00:5f:00:1a:2a:38:df:86:f0:
c5:11:1d:0e:e6:29:d9:f1:08:74:83:ff:ce:3d:bd:
e2:b9:f4:35:08:d3:58:cb:6b:35:ea:05:e5:fe:26:
47:b1:b7:21:ad:38:a5:cd:64:08:f7:21:57:7c:01:
2c:83:85:07:77:63:b5:e3:e9:44:c3:74:54:f1:60:
0b:7d:60:a2:b0:ae:c9:6c:c4:d4:d8:fe:ab:c2:ec:
24:be:f0:c5:58:80:79:9b:31:92:c8:69:58:9b:4c:
2b:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:AB:1A:23:FF:2F:85:11:46:EC:0E:D0:DB:8B:98:AC:CC:91:08:B1
X509v3 Authority Key Identifier:
keyid:4C:37:F2:7E:B4:99:7B:3B:EF:9F:28:26:6A:39:69:40:50:FE:74:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TDfyfrSZezvvnygmajlpQFD-dPk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/09cea0-ef2b-4f20-a19a-eb5a627e76a3/1/TDfyfrSZezvvnygmajlpQFD-dPk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/09cea0-ef2b-4f20-a19a-eb5a627e76a3/1/TDfyfrSZezvvnygmajlpQFD-dPk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:22:9c:a7:4b:ff:f5:8d:27:aa:87:43:59:9b:c1:52:7d:95:
1e:b8:4c:24:83:77:14:77:a9:9b:ec:53:7a:2e:65:1e:9c:15:
d1:82:81:5f:f6:f5:9f:6f:8b:03:1e:5e:8e:1e:2e:da:5a:5b:
eb:26:c7:10:c2:32:8e:54:7e:a7:f9:cc:fb:9d:f7:99:ea:f1:
81:6e:fc:a9:16:73:65:18:b0:1a:e8:b2:17:a9:45:79:99:9e:
50:dd:2f:a4:b9:80:97:27:aa:93:ec:76:3e:cf:55:d5:ef:78:
ab:87:99:ad:fe:b0:53:8a:b5:33:3e:05:7b:eb:a0:61:bc:65:
bd:71:e5:db:74:bc:68:e8:6e:af:f2:08:40:01:31:48:3e:01:
38:fb:70:3b:92:25:ee:ef:a4:4c:4a:41:0d:37:c7:40:03:68:
0c:84:c6:07:90:19:25:66:79:79:f2:99:90:d8:db:5b:55:ed:
6a:c6:50:19:fe:1f:45:06:7a:08:76:07:b8:66:bb:72:87:cd:
db:95:4d:59:f8:e1:41:d3:e8:2c:34:84:c9:88:b8:26:67:53:
17:ce:87:a2:75:a9:f5:fe:0a:cf:08:c6:3c:a9:7f:ba:67:e8:
86:2d:eb:83:89:dd:4f:02:0f:1a:74:65:12:d9:af:5b:9d:47:
4e:ba:63:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:51:52 2026 by rpki-client