Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/03a325-a169-44ce-84ec-5728fb24bf0e/1/tDJYoYz00SKOXHkHDfpjMRaDIMU.mft
File: tDJYoYz00SKOXHkHDfpjMRaDIMU.mft (raw, json)
Hash identifier: 1uKwLJpJbo6iFfuZl8KtQbMdR07zVESg/uOR7qIXa04=
Subject key identifier: A8:D4:DD:FA:29:1D:15:65:84:43:61:0A:49:04:58:A2:1F:DA:44:4B
Authority key identifier: B4:32:58:A1:8C:F4:D1:22:8E:5C:79:07:0D:FA:63:31:16:83:20:C5
Certificate issuer: /CN=b43258a18cf4d1228e5c79070dfa6331168320c5
Certificate serial: 019D9998EBD4967849782DC074A06F1AEAE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDJYoYz00SKOXHkHDfpjMRaDIMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/03a325-a169-44ce-84ec-5728fb24bf0e/1/tDJYoYz00SKOXHkHDfpjMRaDIMU.mft
Manifest number: 1705
Signing time: Fri 17 Apr 2026 04:00:29 +0000
Manifest this update: Fri 17 Apr 2026 04:00:29 +0000
Manifest next update: Sat 18 Apr 2026 04:00:29 +0000
Files and hashes: 1: LBEwWg6NXwV0Qivix1KpxT3aiNU.roa (hash: NAmrPdbUkUwZLyDdKu29iu1NmoDceqKiDehZJJ6AYqk=)
2: tDJYoYz00SKOXHkHDfpjMRaDIMU.crl (hash: vTIGDN2zMUjaGYhSEhHso/ytVhzFqOyX3m5BlkI/HQo=)
3: u3rQ39mTeV2kE1STzKrih9_L758.roa (hash: KWfkHmC+Pf41EAOenIiA1l0ufOFeet991JgGZvHoQlg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/03a325-a169-44ce-84ec-5728fb24bf0e/1/tDJYoYz00SKOXHkHDfpjMRaDIMU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/03a325-a169-44ce-84ec-5728fb24bf0e/1/tDJYoYz00SKOXHkHDfpjMRaDIMU.mft
rsync://rpki.ripe.net/repository/DEFAULT/tDJYoYz00SKOXHkHDfpjMRaDIMU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 04:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:98:eb:d4:96:78:49:78:2d:c0:74:a0:6f:1a:ea:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b43258a18cf4d1228e5c79070dfa6331168320c5
Validity
Not Before: Apr 17 04:00:29 2026 GMT
Not After : Apr 18 04:00:29 2026 GMT
Subject: CN=a8d4ddfa291d15658443610a490458a21fda444b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:8e:f4:6c:4f:2f:3f:09:f0:2b:3a:ba:97:4d:
0d:a1:15:b7:65:2c:4c:3e:48:b2:ac:28:c2:b0:2b:
ae:fa:ce:08:b9:f1:15:bd:7e:e0:c7:da:b0:f2:d1:
83:37:29:bf:bc:cd:d9:b0:ef:e3:a0:23:da:e1:a7:
91:ed:1c:32:33:10:6b:43:6d:09:26:4c:18:5a:bb:
c4:0e:c2:25:2e:5b:b2:ac:7b:3c:77:09:9a:40:12:
77:ca:9a:67:fd:78:4c:72:54:b4:8c:2d:3f:35:de:
12:9c:9e:2a:80:da:ae:01:8c:b7:19:57:fd:d2:62:
77:71:cf:02:73:b0:53:d4:b7:6e:28:aa:9d:ee:6f:
cf:e1:09:f9:c0:e4:4f:a2:8c:25:b0:ad:73:b3:db:
8f:f4:d1:67:71:e2:b0:49:07:3a:57:43:35:f1:3c:
41:f3:ec:a0:70:b9:ee:1b:60:f8:90:4c:26:ea:81:
60:77:4d:a7:df:02:d9:43:96:81:7f:93:3a:27:63:
67:1f:86:38:0b:c5:84:ec:6b:78:2a:c4:f7:c3:6c:
2f:35:bf:aa:a5:c2:ea:07:be:6a:50:cf:6b:d9:90:
15:16:3d:e2:fc:a2:ac:9a:3a:9e:42:96:4d:8d:c1:
7e:02:fb:d3:04:d8:07:b0:20:0c:95:1f:0d:e4:75:
ce:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:D4:DD:FA:29:1D:15:65:84:43:61:0A:49:04:58:A2:1F:DA:44:4B
X509v3 Authority Key Identifier:
keyid:B4:32:58:A1:8C:F4:D1:22:8E:5C:79:07:0D:FA:63:31:16:83:20:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDJYoYz00SKOXHkHDfpjMRaDIMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/03a325-a169-44ce-84ec-5728fb24bf0e/1/tDJYoYz00SKOXHkHDfpjMRaDIMU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/03a325-a169-44ce-84ec-5728fb24bf0e/1/tDJYoYz00SKOXHkHDfpjMRaDIMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:e3:1a:e2:5e:79:13:fb:e3:e6:31:ef:e4:d2:59:7a:77:21:
3d:b9:f4:e3:0a:03:41:0a:cb:e8:e8:d1:d2:04:69:bf:61:b1:
a1:00:dd:c0:62:91:19:d1:75:7d:ac:7a:d0:22:5c:9e:8d:ce:
fb:39:5c:74:e0:e8:d6:4a:63:e0:ef:58:4e:23:e8:f4:26:c6:
a6:59:59:6c:d7:f4:9e:59:9c:83:87:05:4b:dc:d6:c7:ad:ac:
da:1a:d9:00:b7:42:e5:2e:1c:f1:58:82:ef:0f:43:e4:15:5f:
6a:69:bc:00:ae:30:06:60:e3:45:a9:27:66:e9:9a:3b:19:1a:
f5:fd:aa:c5:f8:8b:eb:fb:7b:f1:f2:86:2c:5b:10:05:73:8b:
9e:5a:ce:a6:80:20:7e:f3:7a:47:ae:29:47:1b:f8:79:f1:8b:
da:32:25:63:0f:53:ee:c3:59:23:d7:ff:1c:a3:4e:c2:82:91:
17:29:ef:d5:e0:07:60:3e:38:46:f7:f6:33:7d:95:2f:c0:0b:
c9:98:ab:e0:14:4a:5d:ab:4a:51:15:c7:a0:e1:77:63:39:47:
3b:53:40:7f:7f:8f:73:de:5c:93:46:a8:5e:48:52:25:79:e3:
8a:4e:ad:22:a0:24:d2:99:cb:66:90:35:9b:19:3c:49:3b:f8:
41:2f:47:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:05:30 2026 by rpki-client