Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/08cd93-0876-43fd-92c0-b863c0a98b2d/1/TDijBqN-6Hvr_3I2VT4NPLZyzRc.mft
File: TDijBqN-6Hvr_3I2VT4NPLZyzRc.mft (raw, json)
Hash identifier: rHyBaL4IxptbixFon5dtYb3trr5JEpaIeHC1Tk83JU4=
Subject key identifier: 56:AA:3C:52:39:7C:10:CA:FA:EE:E7:54:6A:0E:1E:13:37:4A:C4:55
Authority key identifier: 4C:38:A3:06:A3:7E:E8:7B:EB:FF:72:36:55:3E:0D:3C:B6:72:CD:17
Certificate issuer: /CN=4c38a306a37ee87bebff7236553e0d3cb672cd17
Certificate serial: 019D9A074B2C194715D4CD957B1B29D9A5BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TDijBqN-6Hvr_3I2VT4NPLZyzRc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/08cd93-0876-43fd-92c0-b863c0a98b2d/1/TDijBqN-6Hvr_3I2VT4NPLZyzRc.mft
Manifest number: 0398
Signing time: Fri 17 Apr 2026 06:01:02 +0000
Manifest this update: Fri 17 Apr 2026 06:01:02 +0000
Manifest next update: Sat 18 Apr 2026 06:01:02 +0000
Files and hashes: 1: TDijBqN-6Hvr_3I2VT4NPLZyzRc.crl (hash: SX5OL3pI3X4TUyf2nIJY3D5PtsXU85/NQFOzUA1PHbI=)
2: bJu0scpN1gj7kvsBcbxVtC9ztlc.roa (hash: ZoOwH22u+aOphRV9ROY0fMKWfnDnA+VojJ7jB+e5a1E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/08cd93-0876-43fd-92c0-b863c0a98b2d/1/TDijBqN-6Hvr_3I2VT4NPLZyzRc.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/08cd93-0876-43fd-92c0-b863c0a98b2d/1/TDijBqN-6Hvr_3I2VT4NPLZyzRc.mft
rsync://rpki.ripe.net/repository/DEFAULT/TDijBqN-6Hvr_3I2VT4NPLZyzRc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:07:4b:2c:19:47:15:d4:cd:95:7b:1b:29:d9:a5:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c38a306a37ee87bebff7236553e0d3cb672cd17
Validity
Not Before: Apr 17 06:01:02 2026 GMT
Not After : Apr 18 06:01:02 2026 GMT
Subject: CN=56aa3c52397c10cafaeee7546a0e1e13374ac455
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:30:a3:bc:39:cc:8d:b5:d5:5a:a0:4c:fd:ab:
97:84:03:75:25:d2:06:03:88:22:48:42:14:4b:e1:
4f:b4:65:33:4b:ac:a5:fa:34:0b:8e:56:d3:47:04:
7a:a5:84:80:a1:e0:6f:87:77:af:21:7b:12:3e:52:
b3:75:49:88:a7:94:61:d2:02:65:01:95:c5:29:d2:
93:82:fc:25:ab:39:99:d9:bf:b4:be:18:1e:63:ba:
17:62:11:d2:27:a1:b4:0c:d8:4d:6e:9a:0f:91:ca:
a8:9a:7f:ce:0b:6a:b4:21:74:f3:ff:0a:3e:03:32:
93:c5:30:da:89:fc:5b:25:8a:ef:d8:7a:8a:af:a7:
d4:23:74:5c:f4:59:50:dc:09:03:bf:ec:49:b2:bf:
57:5c:f7:42:51:4c:f0:e1:4a:24:33:38:7a:8a:b9:
de:13:27:4a:9e:14:36:4d:fb:30:41:86:b5:e1:37:
0e:ec:36:4a:88:8c:48:ff:79:b3:5c:88:0a:ae:77:
90:24:2b:0c:7c:41:bd:72:1e:81:3a:eb:1a:aa:9f:
6b:72:08:33:30:98:c5:5d:71:cb:56:f3:3d:8b:ad:
97:83:1a:d4:92:d1:fa:02:17:8a:1f:6a:d0:f7:bd:
b6:f1:42:c3:20:ae:38:d3:b9:47:24:97:9e:9d:7e:
3f:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:AA:3C:52:39:7C:10:CA:FA:EE:E7:54:6A:0E:1E:13:37:4A:C4:55
X509v3 Authority Key Identifier:
keyid:4C:38:A3:06:A3:7E:E8:7B:EB:FF:72:36:55:3E:0D:3C:B6:72:CD:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TDijBqN-6Hvr_3I2VT4NPLZyzRc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/08cd93-0876-43fd-92c0-b863c0a98b2d/1/TDijBqN-6Hvr_3I2VT4NPLZyzRc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/08cd93-0876-43fd-92c0-b863c0a98b2d/1/TDijBqN-6Hvr_3I2VT4NPLZyzRc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:67:b8:a5:64:ad:79:ff:1c:18:a0:b9:6d:c0:61:4c:7d:d0:
d2:b9:0d:0a:d9:0d:f5:69:e8:96:06:c3:07:8f:d0:be:96:90:
7f:b6:fe:a8:16:9a:c2:51:d9:26:e2:6e:62:66:b6:8f:50:df:
6d:3b:c1:d4:d8:40:53:ec:95:79:5a:f4:00:df:47:a5:05:ed:
1a:f1:df:40:e7:26:ca:2b:07:d5:55:7f:d3:cf:00:13:57:83:
13:21:19:b8:7b:7d:fe:fb:bd:ce:33:96:e0:af:f0:07:a5:bc:
c3:3a:f0:3d:02:71:79:4c:d4:a1:5a:05:6a:1c:a0:fe:69:26:
90:53:72:ff:76:4d:06:ed:86:c4:b3:39:a4:52:39:e1:f4:59:
fc:5d:4b:20:3b:18:ea:cf:bc:81:1f:bc:e3:51:c9:42:e3:72:
a5:e4:99:d7:13:ab:55:7a:4e:de:65:e0:0c:18:2b:94:20:38:
f6:aa:4f:18:dd:b0:14:36:34:04:16:3c:3b:1b:70:c8:eb:4d:
b0:d2:bc:64:82:08:b8:35:6b:0f:bb:28:75:82:83:3b:8e:4b:
7e:e9:16:1a:8f:de:9f:5b:cb:54:bc:a3:db:02:a2:a2:6b:69:
e4:86:c1:cc:da:8b:df:c7:04:ff:a6:17:e0:b3:f2:1b:3d:6b:
99:3d:c7:bb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2aB0ssGUcV1M2Vexsp2aW9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjMzhhMzA2YTM3ZWU4N2JlYmZmNzIzNjU1M2UwZDNjYjY3
MmNkMTcwHhcNMjYwNDE3MDYwMTAyWhcNMjYwNDE4MDYwMTAyWjAzMTEwLwYDVQQD
Eyg1NmFhM2M1MjM5N2MxMGNhZmFlZWU3NTQ2YTBlMWUxMzM3NGFjNDU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0TCjvDnMjbXVWqBM/auXhAN1JdIG
A4giSEIUS+FPtGUzS6yl+jQLjlbTRwR6pYSAoeBvh3evIXsSPlKzdUmIp5Rh0gJl
AZXFKdKTgvwlqzmZ2b+0vhgeY7oXYhHSJ6G0DNhNbpoPkcqomn/OC2q0IXTz/wo+
AzKTxTDaifxbJYrv2HqKr6fUI3Rc9FlQ3AkDv+xJsr9XXPdCUUzw4UokMzh6irne
EydKnhQ2TfswQYa14TcO7DZKiIxI/3mzXIgKrneQJCsMfEG9ch6BOusaqp9rcggz
MJjFXXHLVvM9i62XgxrUktH6AheKH2rQ97228ULDIK4407lHJJeenX4/7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFaqPFI5fBDK+u7nVGoOHhM3SsRVMB8GA1UdIwQY
MBaAFEw4owajfuh76/9yNlU+DTy2cs0XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVERpakJxTi02SHZyXzNJMlZUNE5QTFp5elJjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny8wOGNkOTMtMDg3Ni00M2ZkLTkyYzAt
Yjg2M2MwYTk4YjJkLzEvVERpakJxTi02SHZyXzNJMlZUNE5QTFp5elJjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ny8wOGNkOTMtMDg3Ni00M2ZkLTkyYzAtYjg2M2MwYTk4YjJk
LzEvVERpakJxTi02SHZyXzNJMlZUNE5QTFp5elJjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOGe4pWSt
ef8cGKC5bcBhTH3Q0rkNCtkN9WnolgbDB4/QvpaQf7b+qBaawlHZJuJuYma2j1Df
bTvB1NhAU+yVeVr0AN9HpQXtGvHfQOcmyisH1VV/088AE1eDEyEZuHt9/vu9zjOW
4K/wB6W8wzrwPQJxeUzUoVoFahyg/mkmkFNy/3ZNBu2GxLM5pFI54fRZ/F1LIDsY
6s+8gR+841HJQuNypeSZ1xOrVXpO3mXgDBgrlCA49qpPGN2wFDY0BBY8OxtwyOtN
sNK8ZIIIuDVrD7sodYKDO45LfukWGo/en1vLVLyj2wKiomtp5IbBzNqL38cE/6YX
4LPyGz1rmT3Huw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 15:13:51 2026 by rpki-client