Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/598415-445e-468d-9f8e-d19839206ce6/1/TDJWN81N6a_lO9TxIav2IkX2cU8.mft
File: TDJWN81N6a_lO9TxIav2IkX2cU8.mft (raw, json)
Hash identifier: NkwnYTeSgqibNy+ITvhs/IBqXuqNe2ggaaPcq3oWOnU=
Subject key identifier: 60:0A:AD:01:9C:E3:B0:34:A6:23:99:63:24:C0:F3:B2:CC:2E:B1:20
Authority key identifier: 4C:32:56:37:CD:4D:E9:AF:E5:3B:D4:F1:21:AB:F6:22:45:F6:71:4F
Certificate issuer: /CN=4c325637cd4de9afe53bd4f121abf62245f6714f
Certificate serial: 019D9A74993B1DCDF129577064D950FB635A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TDJWN81N6a_lO9TxIav2IkX2cU8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/598415-445e-468d-9f8e-d19839206ce6/1/TDJWN81N6a_lO9TxIav2IkX2cU8.mft
Manifest number: 09B7
Signing time: Fri 17 Apr 2026 08:00:25 +0000
Manifest this update: Fri 17 Apr 2026 08:00:25 +0000
Manifest next update: Sat 18 Apr 2026 08:00:25 +0000
Files and hashes: 1: TDJWN81N6a_lO9TxIav2IkX2cU8.crl (hash: g1eNONjW9PXcfzRsOMVTTo5m/tscWl05kQsCjVjz/mA=)
2: oPCuq54P2bsSATikpn82yn6-AEM.roa (hash: lHLmqu6Ruee6ZqCasWZKuPLRXPXPUX8ZgrdyBMM4hU8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/598415-445e-468d-9f8e-d19839206ce6/1/TDJWN81N6a_lO9TxIav2IkX2cU8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/598415-445e-468d-9f8e-d19839206ce6/1/TDJWN81N6a_lO9TxIav2IkX2cU8.mft
rsync://rpki.ripe.net/repository/DEFAULT/TDJWN81N6a_lO9TxIav2IkX2cU8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:74:99:3b:1d:cd:f1:29:57:70:64:d9:50:fb:63:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c325637cd4de9afe53bd4f121abf62245f6714f
Validity
Not Before: Apr 17 08:00:25 2026 GMT
Not After : Apr 18 08:00:25 2026 GMT
Subject: CN=600aad019ce3b034a623996324c0f3b2cc2eb120
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:b1:f8:94:2d:c9:0e:e7:88:fe:71:6d:12:a4:
46:22:58:1f:f3:1b:04:5b:0f:7b:cf:79:57:3c:68:
eb:1e:0f:71:87:e3:69:c4:8b:9e:2b:c5:66:9e:ce:
0a:91:8a:1a:31:aa:cc:35:a0:02:a6:2e:60:79:b4:
79:3b:78:a7:4e:16:6f:9f:90:19:cc:20:15:d1:43:
40:9f:70:e0:68:20:85:b6:27:a5:09:fc:20:be:81:
0a:da:64:46:d9:79:f5:77:07:d1:e2:ce:9e:09:d2:
a5:f4:48:f0:7d:9e:cf:06:f3:3d:86:e9:34:b0:b9:
55:54:69:a8:95:9a:1b:dc:42:bf:3e:37:a7:1e:54:
a5:78:7a:8a:ec:da:57:77:2e:05:f7:24:b5:ea:c5:
73:a2:4c:f2:f9:5c:52:d3:b6:79:d8:b4:6a:28:76:
1d:0a:77:5e:dd:ef:14:cb:31:e5:08:6a:dd:b0:b8:
e6:26:20:0a:21:25:c7:93:2a:a3:bb:82:31:45:f2:
e1:ed:de:46:ab:d5:a7:cc:e7:77:17:1b:0d:70:8d:
80:a1:b7:35:c4:5a:76:46:d9:42:ed:83:b9:21:11:
b3:ee:ec:37:86:56:af:76:d6:a0:7f:8e:ca:72:1c:
45:45:83:d4:cc:70:de:31:9c:bf:19:67:73:4f:a7:
67:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:0A:AD:01:9C:E3:B0:34:A6:23:99:63:24:C0:F3:B2:CC:2E:B1:20
X509v3 Authority Key Identifier:
keyid:4C:32:56:37:CD:4D:E9:AF:E5:3B:D4:F1:21:AB:F6:22:45:F6:71:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TDJWN81N6a_lO9TxIav2IkX2cU8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/598415-445e-468d-9f8e-d19839206ce6/1/TDJWN81N6a_lO9TxIav2IkX2cU8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/598415-445e-468d-9f8e-d19839206ce6/1/TDJWN81N6a_lO9TxIav2IkX2cU8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:3a:0d:9c:21:8c:cd:df:89:c6:6a:af:6c:8a:3f:04:a4:40:
d8:44:cb:cd:12:5c:9d:60:1b:24:4e:10:7a:13:4b:96:06:15:
30:85:35:1c:c4:79:49:95:4e:bb:38:c8:11:3d:58:d7:31:62:
9f:d9:2b:d1:c7:cb:07:15:23:b8:e5:e1:c5:5a:11:bc:2e:d8:
7b:75:81:90:f4:9b:69:bd:1c:13:76:1a:dc:a4:61:ba:05:d2:
8e:06:07:14:1d:cd:b0:fd:c7:72:b1:59:83:b9:76:6c:f2:f4:
f2:28:03:f1:98:68:54:a1:f8:31:6a:b2:f8:9b:6e:06:10:2d:
d6:58:30:ab:65:32:77:96:98:7b:d5:80:29:6d:33:d0:6c:3f:
24:71:76:e1:f3:3d:23:f0:6d:9f:16:e5:f2:ca:29:13:99:c0:
2a:28:7d:e9:64:bb:0d:80:84:a9:11:e9:24:87:b0:2e:82:46:
34:61:b2:c5:a3:65:26:ce:ed:74:7f:54:5e:80:54:13:21:66:
2c:7b:e2:83:0b:ed:6d:b4:f2:f9:12:b1:b2:bb:35:e1:9f:35:
ee:ad:e8:8a:f9:4f:e8:05:25:d9:f0:53:00:23:ef:60:f4:a3:
d5:34:06:8c:c9:e0:56:a8:3c:a1:f1:63:ab:65:2e:f1:5a:7f:
88:66:e2:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:08:18 2026 by rpki-client