Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/08cd93-0876-43fd-92c0-b863c0a98b2d/1/TDijBqN-6Hvr_3I2VT4NPLZyzRc.mft
File: TDijBqN-6Hvr_3I2VT4NPLZyzRc.mft (raw, json)
Hash identifier: fLipam4/KrXSebumlWP2IqxoJtjA56RtuddmDD8mstM=
Subject key identifier: 62:94:EB:F2:C7:83:FD:83:49:C9:29:59:22:BD:B4:14:E6:90:D4:9D
Authority key identifier: 4C:38:A3:06:A3:7E:E8:7B:EB:FF:72:36:55:3E:0D:3C:B6:72:CD:17
Certificate issuer: /CN=4c38a306a37ee87bebff7236553e0d3cb672cd17
Certificate serial: 019CAE6C54FC9EA022B2F356426B9D9689F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TDijBqN-6Hvr_3I2VT4NPLZyzRc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/08cd93-0876-43fd-92c0-b863c0a98b2d/1/TDijBqN-6Hvr_3I2VT4NPLZyzRc.mft
Manifest number: 031E
Signing time: Mon 02 Mar 2026 12:01:00 +0000
Manifest this update: Mon 02 Mar 2026 12:01:00 +0000
Manifest next update: Tue 03 Mar 2026 12:01:00 +0000
Files and hashes: 1: TDijBqN-6Hvr_3I2VT4NPLZyzRc.crl (hash: KcbZjs+dqzgAYvSBJ3HwhN2ynoKsZGkth73mNcJaPVQ=)
2: bJu0scpN1gj7kvsBcbxVtC9ztlc.roa (hash: ZoOwH22u+aOphRV9ROY0fMKWfnDnA+VojJ7jB+e5a1E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/08cd93-0876-43fd-92c0-b863c0a98b2d/1/TDijBqN-6Hvr_3I2VT4NPLZyzRc.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/08cd93-0876-43fd-92c0-b863c0a98b2d/1/TDijBqN-6Hvr_3I2VT4NPLZyzRc.mft
rsync://rpki.ripe.net/repository/DEFAULT/TDijBqN-6Hvr_3I2VT4NPLZyzRc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:6c:54:fc:9e:a0:22:b2:f3:56:42:6b:9d:96:89:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c38a306a37ee87bebff7236553e0d3cb672cd17
Validity
Not Before: Mar 2 12:01:00 2026 GMT
Not After : Mar 3 12:01:00 2026 GMT
Subject: CN=6294ebf2c783fd8349c9295922bdb414e690d49d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:9a:e6:07:c6:ac:af:c3:da:f2:b6:18:40:56:
d2:1e:04:05:d6:d1:72:e9:7b:84:5c:66:45:66:1b:
a0:84:60:4b:48:41:50:70:5e:46:b0:8f:5c:01:00:
aa:57:da:8b:bf:f1:20:7d:0b:35:60:0f:77:c9:d7:
6b:56:96:f5:4d:77:6b:25:d7:dc:dd:3c:62:21:fa:
ed:2e:ef:be:ad:e0:66:41:85:f7:7f:a3:92:70:34:
9e:27:f5:57:0b:d0:7d:a4:df:60:c2:97:07:39:f9:
06:2c:b7:2a:51:24:f7:fb:4a:00:db:60:84:5b:7c:
1d:de:14:51:16:d1:48:24:fc:49:1d:74:03:f8:81:
4d:5b:32:cf:7b:58:d6:8c:70:65:ee:a3:4d:b7:b9:
46:82:74:6d:13:7a:ad:05:3d:b9:89:52:d6:49:ee:
ff:a6:5e:34:0f:e7:b0:dd:6f:f0:51:86:5d:59:8a:
4b:c3:cf:18:82:92:ac:54:44:8f:ee:7b:48:8b:bf:
39:a1:c1:ba:33:a6:03:da:c5:cd:92:e4:e4:ce:35:
3b:2c:cb:5b:ff:65:fe:16:c8:a9:fd:62:48:40:ef:
95:9b:83:f9:54:96:5f:0e:c7:65:d7:e3:85:d2:e8:
36:99:42:eb:cc:9a:ef:c5:0f:2a:0b:d6:94:73:23:
e1:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:94:EB:F2:C7:83:FD:83:49:C9:29:59:22:BD:B4:14:E6:90:D4:9D
X509v3 Authority Key Identifier:
keyid:4C:38:A3:06:A3:7E:E8:7B:EB:FF:72:36:55:3E:0D:3C:B6:72:CD:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TDijBqN-6Hvr_3I2VT4NPLZyzRc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/08cd93-0876-43fd-92c0-b863c0a98b2d/1/TDijBqN-6Hvr_3I2VT4NPLZyzRc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/08cd93-0876-43fd-92c0-b863c0a98b2d/1/TDijBqN-6Hvr_3I2VT4NPLZyzRc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:c3:0c:9c:ff:67:a1:95:cc:92:5a:96:42:e4:81:58:7c:e7:
03:85:f2:d8:ae:aa:2a:b2:61:02:aa:6a:c5:7d:ab:7e:be:65:
62:00:b7:42:2b:a8:e0:c6:82:c6:f4:9d:69:06:c1:fd:71:42:
b4:2a:8a:d6:2c:d5:bf:f1:08:85:b0:52:c2:d1:d9:d6:ca:65:
5e:94:23:df:3f:78:19:2a:b8:76:70:11:7f:f3:14:f2:03:56:
bd:ce:d0:0b:d3:c8:c2:62:1b:1d:b1:b1:95:7c:9b:c0:e3:78:
09:44:6c:49:5b:92:ba:e1:c0:de:f4:14:a5:43:44:99:41:4e:
41:47:ba:91:dc:0b:46:94:42:e6:2a:04:f9:a9:06:c8:04:71:
fe:af:8a:f2:57:04:83:dc:af:dd:3f:a9:3d:fc:e8:0c:f1:20:
d6:15:f4:5f:c4:a4:bf:38:a2:c8:43:b4:70:e0:45:76:0f:34:
43:5e:53:70:6a:61:27:b5:80:08:80:d2:d1:9d:6f:f7:bc:83:
ab:eb:a0:cd:02:22:63:ab:41:d4:4d:8a:a9:d2:fd:0f:a6:82:
1c:22:3a:00:c2:7a:76:c1:0b:c5:b5:41:52:0f:0c:a1:2e:dc:
d4:55:1d:b5:98:23:a9:eb:66:1f:70:f4:9c:83:e5:5a:d3:69:
69:96:76:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:50:57 2026 by rpki-client