Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/97/08cd93-0876-43fd-92c0-b863c0a98b2d/1/TDijBqN-6Hvr_3I2VT4NPLZyzRc.mft
File: TDijBqN-6Hvr_3I2VT4NPLZyzRc.mft (raw, json)
Hash identifier: q5FCGyGXJxItRhySb99VeGyW6rCG2h9bbQlLnxKKB2Y=
Subject key identifier: 00:28:8D:81:52:37:C9:BF:A6:51:D5:7D:98:D7:6B:89:D6:4B:43:29
Authority key identifier: 4C:38:A3:06:A3:7E:E8:7B:EB:FF:72:36:55:3E:0D:3C:B6:72:CD:17
Certificate issuer: /CN=4c38a306a37ee87bebff7236553e0d3cb672cd17
Certificate serial: 01A0DA5FCADC5EEDF12C829F861EA27CE674
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TDijBqN-6Hvr_3I2VT4NPLZyzRc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/08cd93-0876-43fd-92c0-b863c0a98b2d/1/TDijBqN-6Hvr_3I2VT4NPLZyzRc.mft
Manifest number: 0547
Signing time: Fri 25 Sep 2026 21:01:45 +0000
Manifest this update: Fri 25 Sep 2026 21:01:45 +0000
Manifest next update: Sat 26 Sep 2026 21:01:45 +0000
Files and hashes: 1: TDijBqN-6Hvr_3I2VT4NPLZyzRc.crl (hash: vhmB+YTDEO1b8lKtA516jKS3PS3e85lcEai4DBGoM80=)
2: bJu0scpN1gj7kvsBcbxVtC9ztlc.roa (hash: ZoOwH22u+aOphRV9ROY0fMKWfnDnA+VojJ7jB+e5a1E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/08cd93-0876-43fd-92c0-b863c0a98b2d/1/TDijBqN-6Hvr_3I2VT4NPLZyzRc.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/08cd93-0876-43fd-92c0-b863c0a98b2d/1/TDijBqN-6Hvr_3I2VT4NPLZyzRc.mft
rsync://rpki.ripe.net/repository/DEFAULT/TDijBqN-6Hvr_3I2VT4NPLZyzRc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 21:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:da:5f:ca:dc:5e:ed:f1:2c:82:9f:86:1e:a2:7c:e6:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c38a306a37ee87bebff7236553e0d3cb672cd17
Validity
Not Before: Sep 25 21:01:45 2026 GMT
Not After : Sep 26 21:01:45 2026 GMT
Subject: CN=00288d815237c9bfa651d57d98d76b89d64b4329
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:07:cf:d0:b0:81:40:77:b8:37:24:b4:c5:ff:
86:d6:c4:aa:d2:05:91:f8:44:d7:16:51:e0:be:31:
a1:06:4e:53:fb:34:df:4d:ca:6b:01:35:81:33:38:
c9:a3:f1:26:f2:78:68:3b:dc:27:f3:07:ac:50:c6:
0d:e0:2f:f6:2c:98:1a:21:55:e8:89:8b:3b:44:68:
6c:51:1d:d6:6f:b2:70:b2:93:0f:e9:52:af:54:c4:
c9:02:0d:cf:e0:27:1b:c7:e1:9b:6e:ff:db:ac:57:
3b:b7:1e:bc:52:05:0b:80:af:c2:8f:bf:4d:8a:93:
26:fb:4e:76:ba:46:41:40:8e:1f:8c:67:81:0d:d5:
32:51:0a:b1:60:db:bb:85:d3:c6:0a:40:34:e6:b0:
b1:56:44:34:e4:4e:a1:7a:61:99:0d:03:1a:ff:af:
6d:74:e1:61:72:1d:da:cc:40:9f:d4:32:b5:2b:07:
1b:80:cc:b6:73:84:d2:a8:ea:13:7c:c1:cc:ff:43:
58:0d:87:cd:74:3b:48:7e:65:93:da:52:d2:eb:af:
de:3f:8d:52:cc:0e:4c:c7:d1:2b:bf:cf:da:c8:8e:
b9:ca:42:3f:0a:4b:7b:17:87:32:79:e6:47:02:52:
f7:c2:78:71:3c:1a:1c:77:3d:70:81:37:d1:5f:bd:
6d:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:28:8D:81:52:37:C9:BF:A6:51:D5:7D:98:D7:6B:89:D6:4B:43:29
X509v3 Authority Key Identifier:
keyid:4C:38:A3:06:A3:7E:E8:7B:EB:FF:72:36:55:3E:0D:3C:B6:72:CD:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TDijBqN-6Hvr_3I2VT4NPLZyzRc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/08cd93-0876-43fd-92c0-b863c0a98b2d/1/TDijBqN-6Hvr_3I2VT4NPLZyzRc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/08cd93-0876-43fd-92c0-b863c0a98b2d/1/TDijBqN-6Hvr_3I2VT4NPLZyzRc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:f6:da:e5:8f:aa:c6:88:aa:aa:2d:35:3a:85:ba:d2:95:aa:
75:89:61:a7:9f:79:88:1a:de:b8:25:51:ee:f0:9f:1c:03:f6:
b8:21:39:3a:70:8d:e6:e3:dc:32:51:33:80:27:9f:d4:63:1c:
28:27:20:1d:b1:d5:de:3f:ef:1a:59:09:73:a0:c0:c4:f0:18:
af:3a:97:27:e5:1b:fd:8c:07:18:d9:fe:d8:ff:6d:c0:69:2b:
40:2e:99:f0:1e:2e:5e:26:1f:bd:62:ae:01:4d:fc:f7:a2:dd:
47:a2:a2:fd:18:c5:f2:b1:c4:6d:f8:10:9e:77:0b:77:19:1e:
0f:a7:7c:9c:9f:c4:3b:f0:3a:b8:7a:db:22:b6:e2:a9:b8:f2:
d1:f7:aa:1a:56:19:07:f9:f0:12:cc:fa:ff:0e:e0:f8:ff:4a:
c0:34:8d:eb:55:74:5f:b8:b9:e1:ce:ba:6f:ab:6f:4a:88:78:
e5:5f:7d:01:44:f3:f6:91:40:d9:ab:b1:e0:1e:53:78:50:12:
9e:7f:d8:55:f6:d5:d1:08:ab:d5:c0:90:fb:af:23:90:0e:e5:
1b:ef:d9:14:3b:c2:2c:f5:1b:62:42:ec:d1:fe:2c:5c:fb:74:
6b:14:60:05:a6:4d:fa:fb:f9:e8:a5:0b:d4:7b:cd:ce:93:37:
98:49:d7:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 06:03:36 2026 by rpki-client