Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/598415-445e-468d-9f8e-d19839206ce6/1/TDJWN81N6a_lO9TxIav2IkX2cU8.mft
File: TDJWN81N6a_lO9TxIav2IkX2cU8.mft (raw, json)
Hash identifier: PyDiBrLaGC26uFqEcXChYBXgmzVb4jqeofvYGC+kUhQ=
Subject key identifier: 56:D2:A8:0F:24:D5:C5:26:B6:B1:08:F8:1C:12:03:99:60:C4:8B:54
Authority key identifier: 4C:32:56:37:CD:4D:E9:AF:E5:3B:D4:F1:21:AB:F6:22:45:F6:71:4F
Certificate issuer: /CN=4c325637cd4de9afe53bd4f121abf62245f6714f
Certificate serial: 019FAB9A0B4367103206B6597AC8E6E59E1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TDJWN81N6a_lO9TxIav2IkX2cU8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/598415-445e-468d-9f8e-d19839206ce6/1/TDJWN81N6a_lO9TxIav2IkX2cU8.mft
Manifest number: 0AC9
Signing time: Wed 29 Jul 2026 02:00:26 +0000
Manifest this update: Wed 29 Jul 2026 02:00:26 +0000
Manifest next update: Thu 30 Jul 2026 02:00:26 +0000
Files and hashes: 1: TDJWN81N6a_lO9TxIav2IkX2cU8.crl (hash: mRv+Ejiu32sKM2tUbwMwiT0RA0dU1eq2ou5w938Pr2g=)
2: oPCuq54P2bsSATikpn82yn6-AEM.roa (hash: lHLmqu6Ruee6ZqCasWZKuPLRXPXPUX8ZgrdyBMM4hU8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/598415-445e-468d-9f8e-d19839206ce6/1/TDJWN81N6a_lO9TxIav2IkX2cU8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/598415-445e-468d-9f8e-d19839206ce6/1/TDJWN81N6a_lO9TxIav2IkX2cU8.mft
rsync://rpki.ripe.net/repository/DEFAULT/TDJWN81N6a_lO9TxIav2IkX2cU8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:9a:0b:43:67:10:32:06:b6:59:7a:c8:e6:e5:9e:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c325637cd4de9afe53bd4f121abf62245f6714f
Validity
Not Before: Jul 29 02:00:26 2026 GMT
Not After : Jul 30 02:00:26 2026 GMT
Subject: CN=56d2a80f24d5c526b6b108f81c12039960c48b54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:22:5d:d4:fc:bf:e1:90:56:40:6b:a9:0c:91:
93:77:06:07:87:8a:90:c8:3e:ab:18:88:e0:cd:6b:
7d:27:be:36:79:ec:6c:5f:7c:2f:48:4a:42:71:95:
23:df:6e:59:84:33:c0:b6:d1:e8:87:66:38:a1:52:
99:7c:8d:f5:6d:c3:53:de:40:dd:44:3f:a3:96:e1:
2a:90:5a:7e:d3:64:0a:d8:1e:71:03:de:71:6e:c3:
6e:90:f6:57:35:ca:eb:2d:b6:7c:67:27:4b:5d:4d:
2c:89:10:79:d8:c9:70:34:dc:e6:87:2a:dd:0d:f0:
86:06:ac:7e:52:a6:bf:f3:9a:0f:f2:88:a2:66:54:
24:09:69:85:2b:ef:44:35:12:c3:7b:c5:39:f0:0e:
5f:c1:10:dd:9e:36:52:2f:e7:ba:dc:27:57:5d:b0:
c8:8b:fa:c6:37:73:5f:e6:2f:3a:dd:b2:40:68:1b:
37:4f:0a:f2:6a:94:3e:6a:97:d6:09:3c:9f:5f:c6:
14:48:b6:6c:bf:1c:bf:9d:17:fc:66:5d:b1:fc:42:
3f:32:09:a5:35:a8:73:10:52:76:73:4e:49:e8:65:
9e:73:c1:4d:6d:10:82:4a:77:55:0e:8f:e3:db:c8:
37:5a:59:dc:b2:1a:88:6a:46:1a:d7:60:e8:a0:a2:
99:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:D2:A8:0F:24:D5:C5:26:B6:B1:08:F8:1C:12:03:99:60:C4:8B:54
X509v3 Authority Key Identifier:
keyid:4C:32:56:37:CD:4D:E9:AF:E5:3B:D4:F1:21:AB:F6:22:45:F6:71:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TDJWN81N6a_lO9TxIav2IkX2cU8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/598415-445e-468d-9f8e-d19839206ce6/1/TDJWN81N6a_lO9TxIav2IkX2cU8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/598415-445e-468d-9f8e-d19839206ce6/1/TDJWN81N6a_lO9TxIav2IkX2cU8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:b8:d7:41:fb:a9:7f:9b:40:b5:34:f3:a8:71:f9:94:3a:0c:
58:fa:6c:08:62:51:55:ec:5a:aa:b2:2f:7b:59:a7:91:36:5d:
4f:bd:42:de:07:3a:17:24:7d:05:bd:35:d6:bc:4b:85:2f:53:
e0:c6:22:f4:9d:2a:b0:c7:45:8a:5f:d6:8f:15:f2:ad:89:fb:
13:b5:24:31:15:fe:9a:19:ce:7d:1e:ab:b9:48:31:3a:e8:41:
75:df:5e:7d:d3:2c:54:6d:71:ef:5e:3d:a8:e5:b6:af:21:96:
19:95:2b:d0:24:c4:05:f3:d0:3b:d7:a5:63:f0:17:4d:7e:c9:
b4:2b:f1:51:80:3b:55:a6:02:4e:73:12:cd:cb:d1:d7:72:08:
c6:0d:c4:16:93:18:b4:81:fe:d6:79:fd:cc:76:71:1a:2a:41:
da:ad:27:07:d1:a4:9b:d2:b2:7d:ba:c5:80:1f:d2:a3:0a:b0:
49:16:b4:61:da:33:88:20:4b:77:53:cb:81:b2:1e:bb:59:90:
06:7c:1a:ad:19:06:3f:12:1b:eb:24:48:37:a4:ae:53:e7:38:
0a:d6:7e:50:90:8b:ba:12:64:10:9f:54:30:ee:7b:6f:c0:d1:
c8:d3:e3:98:35:16:c4:88:83:04:f3:30:13:22:fa:d1:97:31:
2b:dd:07:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:46:58 2026 by rpki-client