Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/08cd93-0876-43fd-92c0-b863c0a98b2d/1/TDijBqN-6Hvr_3I2VT4NPLZyzRc.mft
File: TDijBqN-6Hvr_3I2VT4NPLZyzRc.mft (raw, json)
Hash identifier: Di4McgKsgxVjiV8zqxfFcswAW35ngzeZcwOqbFXYLLU=
Subject key identifier: F4:1E:83:6D:62:6C:57:56:E6:CB:22:65:E6:34:09:32:CA:6F:F6:53
Authority key identifier: 4C:38:A3:06:A3:7E:E8:7B:EB:FF:72:36:55:3E:0D:3C:B6:72:CD:17
Certificate issuer: /CN=4c38a306a37ee87bebff7236553e0d3cb672cd17
Certificate serial: 019FAD1B0EA056636E0CA3338932AAEF86C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TDijBqN-6Hvr_3I2VT4NPLZyzRc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/08cd93-0876-43fd-92c0-b863c0a98b2d/1/TDijBqN-6Hvr_3I2VT4NPLZyzRc.mft
Manifest number: 04AB
Signing time: Wed 29 Jul 2026 09:00:59 +0000
Manifest this update: Wed 29 Jul 2026 09:00:59 +0000
Manifest next update: Thu 30 Jul 2026 09:00:59 +0000
Files and hashes: 1: TDijBqN-6Hvr_3I2VT4NPLZyzRc.crl (hash: Y8bI39r5BFK6e+cMXPhJqdR27NITZcc5R0Yzf+WbESI=)
2: bJu0scpN1gj7kvsBcbxVtC9ztlc.roa (hash: ZoOwH22u+aOphRV9ROY0fMKWfnDnA+VojJ7jB+e5a1E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/08cd93-0876-43fd-92c0-b863c0a98b2d/1/TDijBqN-6Hvr_3I2VT4NPLZyzRc.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/08cd93-0876-43fd-92c0-b863c0a98b2d/1/TDijBqN-6Hvr_3I2VT4NPLZyzRc.mft
rsync://rpki.ripe.net/repository/DEFAULT/TDijBqN-6Hvr_3I2VT4NPLZyzRc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ad:1b:0e:a0:56:63:6e:0c:a3:33:89:32:aa:ef:86:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c38a306a37ee87bebff7236553e0d3cb672cd17
Validity
Not Before: Jul 29 09:00:59 2026 GMT
Not After : Jul 30 09:00:59 2026 GMT
Subject: CN=f41e836d626c5756e6cb2265e6340932ca6ff653
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:0f:03:1f:bb:84:ba:12:3d:bb:06:1b:46:44:
65:49:39:1a:8c:97:67:88:b0:b1:d6:91:f4:83:3b:
6a:b0:77:e0:53:98:3b:c4:9f:94:4b:01:8d:a4:54:
58:8c:da:ca:da:9b:3b:1b:bd:da:ed:ac:9d:22:aa:
5c:98:6e:be:95:aa:e2:31:7d:55:31:c2:b9:cf:fe:
ae:1d:09:9e:14:cd:1b:f6:4a:6d:4c:fc:85:af:f8:
1d:8a:00:fc:93:98:80:3a:c9:df:e3:c9:50:31:f0:
6c:dd:2e:66:5d:02:4e:45:c5:d8:a8:c7:7b:98:30:
8d:dc:18:ac:53:50:28:1b:01:3a:64:79:48:60:ad:
66:76:29:b9:8c:02:f6:66:90:36:62:9a:cd:20:6f:
da:5c:2a:e8:bd:95:ac:ba:ec:48:5a:68:77:9a:6c:
a0:10:62:e8:3e:aa:6a:ea:1e:9d:b3:1b:77:0f:30:
1d:91:79:07:76:97:6e:65:bd:c3:98:51:b6:d2:b2:
07:28:5d:41:38:e3:44:56:28:84:27:72:2d:06:ae:
7c:ae:0c:17:06:07:28:ff:32:00:ef:87:ac:46:f8:
e6:81:53:29:9e:a0:e7:0a:20:a7:d9:90:79:7e:4e:
fe:e1:4f:ca:b8:8e:cf:64:03:6a:ab:15:97:8f:0b:
88:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:1E:83:6D:62:6C:57:56:E6:CB:22:65:E6:34:09:32:CA:6F:F6:53
X509v3 Authority Key Identifier:
keyid:4C:38:A3:06:A3:7E:E8:7B:EB:FF:72:36:55:3E:0D:3C:B6:72:CD:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TDijBqN-6Hvr_3I2VT4NPLZyzRc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/08cd93-0876-43fd-92c0-b863c0a98b2d/1/TDijBqN-6Hvr_3I2VT4NPLZyzRc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/08cd93-0876-43fd-92c0-b863c0a98b2d/1/TDijBqN-6Hvr_3I2VT4NPLZyzRc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:78:92:e1:61:0f:bd:37:03:18:43:a3:c8:e1:35:cb:54:0f:
32:90:07:e4:d3:e6:4c:0f:39:26:4e:36:c6:da:c8:94:ab:e2:
2b:04:5c:67:87:dd:b5:73:49:9d:cc:46:21:92:ad:91:05:a2:
9f:b6:78:a7:5b:42:2e:0b:fb:13:9c:91:50:90:f0:20:6f:65:
1e:f9:80:15:a9:ff:2b:2f:f6:b1:df:6f:b6:e3:80:ef:fb:63:
09:0c:13:63:6a:f7:5d:77:90:04:d0:84:57:e8:a6:76:89:bc:
6f:ee:6f:d5:33:cd:41:7b:88:04:57:d7:09:2a:f7:58:76:b1:
8d:e1:f1:a0:62:05:d9:30:a3:22:2a:95:d6:1b:fb:0a:88:59:
8d:1c:55:bd:ef:c7:f1:74:83:1f:db:fb:3b:95:81:65:e6:76:
5a:bd:c5:31:d8:0c:09:c6:8d:3c:79:ca:a0:0e:82:89:40:2c:
25:d2:2d:b5:8d:e4:8a:eb:28:20:2c:eb:13:f1:ff:4b:a5:e0:
23:96:b2:19:57:32:21:4d:4d:af:10:93:bc:69:da:c1:43:e8:
0e:93:f0:d9:df:e1:f5:b5:69:f2:b9:71:db:a4:f8:f1:2d:62:
f3:1b:43:83:41:9d:f8:e5:b2:2d:a1:f0:af:ed:08:42:93:36:
24:a1:f1:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 12:03:39 2026 by rpki-client