
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/b9a830-6992-49c6-8973-eacb4965fe38/1/TD6do79ZOALMgz_l2UelJpb1jI0.mft
File: TD6do79ZOALMgz_l2UelJpb1jI0.mft (raw, json)
Hash identifier: gEMpeB/ThC0h9CL97Co2gctvyWy8HLUqex2r0Jxk6lE=
Subject key identifier: 5D:E3:39:AA:73:E4:3F:4F:AD:B3:52:35:29:45:65:5B:B4:8D:BD:88
Authority key identifier: 4C:3E:9D:A3:BF:59:38:02:CC:83:3F:E5:D9:47:A5:26:96:F5:8C:8D
Certificate issuer: /CN=4c3e9da3bf593802cc833fe5d947a52696f58c8d
Certificate serial: 019CABA255C4ED042BC5A747B73BFEA6211C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TD6do79ZOALMgz_l2UelJpb1jI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/b9a830-6992-49c6-8973-eacb4965fe38/1/TD6do79ZOALMgz_l2UelJpb1jI0.mft
Manifest number: 1787
Signing time: Sun 01 Mar 2026 23:01:08 +0000
Manifest this update: Sun 01 Mar 2026 23:01:08 +0000
Manifest next update: Mon 02 Mar 2026 23:01:08 +0000
Files and hashes: 1: TD6do79ZOALMgz_l2UelJpb1jI0.crl (hash: 9GyKG3Nb0OK7XMd2tvBI8xB+taIFGaK9ZufyNbyGQsU=)
2: xoBSepf056vB7VihaJfLbbA7rl8.roa (hash: FqEFR7+yy5fGMc3KqbC1V37aXIXlQqiTJ1sLZ3ECBNg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/b9a830-6992-49c6-8973-eacb4965fe38/1/TD6do79ZOALMgz_l2UelJpb1jI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/b9a830-6992-49c6-8973-eacb4965fe38/1/TD6do79ZOALMgz_l2UelJpb1jI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/TD6do79ZOALMgz_l2UelJpb1jI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a2:55:c4:ed:04:2b:c5:a7:47:b7:3b:fe:a6:21:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c3e9da3bf593802cc833fe5d947a52696f58c8d
Validity
Not Before: Mar 1 23:01:08 2026 GMT
Not After : Mar 2 23:01:08 2026 GMT
Subject: CN=5de339aa73e43f4fadb352352945655bb48dbd88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:e1:a8:16:26:e8:2c:7f:74:ad:98:6d:c8:2e:
7f:13:21:70:28:01:e0:c6:5d:10:92:ff:f5:22:88:
82:a0:4d:fe:fc:90:b8:f9:85:a3:5f:a5:8c:74:90:
4e:24:17:ea:24:8f:6a:e0:2e:a1:e9:c0:75:bc:87:
75:5b:7b:0f:aa:87:79:5a:ce:06:a8:83:dd:ee:4e:
73:88:e0:27:98:42:6e:a5:f6:3d:3a:79:f7:b2:45:
08:c8:e8:67:fb:8e:7d:e3:d9:bc:35:17:ec:89:2d:
a2:fc:57:61:ac:51:b7:84:99:9d:2e:5f:0e:74:e9:
81:5d:14:7d:45:20:2d:ed:c4:65:37:47:8f:38:da:
56:1e:87:7f:c7:c7:8a:d3:8f:5b:f2:44:ed:51:9a:
c1:87:e8:be:02:03:19:8e:6a:22:06:1f:a6:70:12:
e1:c2:91:77:49:74:ed:6d:ec:73:a6:7f:38:5e:64:
60:2c:b2:2a:e6:0e:60:e2:49:8c:bf:b1:6f:84:3b:
17:91:e7:50:79:b3:41:a4:39:95:3f:d3:99:16:c7:
54:14:f3:f2:fb:8b:71:9f:4f:ec:70:62:3f:34:5f:
2c:b5:17:2b:b1:7f:3e:42:31:fa:c9:3e:19:1a:03:
d3:90:74:ca:0b:aa:e5:16:9a:23:30:98:43:b1:7f:
e3:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:E3:39:AA:73:E4:3F:4F:AD:B3:52:35:29:45:65:5B:B4:8D:BD:88
X509v3 Authority Key Identifier:
keyid:4C:3E:9D:A3:BF:59:38:02:CC:83:3F:E5:D9:47:A5:26:96:F5:8C:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TD6do79ZOALMgz_l2UelJpb1jI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/b9a830-6992-49c6-8973-eacb4965fe38/1/TD6do79ZOALMgz_l2UelJpb1jI0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/b9a830-6992-49c6-8973-eacb4965fe38/1/TD6do79ZOALMgz_l2UelJpb1jI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:5e:73:b7:d1:99:35:d5:b0:00:a3:6f:8d:27:89:8e:cf:6f:
92:48:0f:68:5b:78:1a:ca:6f:f0:d5:10:32:cc:55:51:5c:c2:
3b:e1:91:82:bc:50:24:1a:28:a1:f9:9c:79:f8:f7:2f:c5:f5:
8b:8e:84:2b:06:07:17:75:e6:ce:ca:9a:41:7b:d2:bd:97:b1:
a7:bb:5f:90:11:6e:85:26:b9:d8:be:0c:3a:35:37:85:27:0e:
87:da:df:c1:d7:0e:0a:45:c0:b8:a7:34:88:80:85:56:9e:72:
5e:60:40:86:a2:fe:fe:fa:60:72:9a:eb:ad:cc:7a:75:c4:07:
82:48:8c:dc:b1:6c:52:0b:3b:13:ba:e1:61:f7:0e:6e:93:5b:
37:69:ff:36:75:32:a0:44:b2:a4:38:cf:07:58:4b:e5:b9:a5:
90:3b:42:d0:d5:d1:3b:b7:8c:c4:93:92:b9:44:86:50:3f:44:
44:be:d7:8b:42:ea:1c:1b:f6:9c:f2:72:8a:ee:85:c2:33:8f:
3e:0e:63:5d:fa:6a:a1:b8:2e:ac:5d:d6:c9:4a:4a:22:22:87:
22:3f:3c:2f:11:4c:dd:79:ba:35:f3:48:56:1e:6a:1e:d2:2d:
96:a7:73:dd:b4:7d:0a:8f:f4:0e:19:4d:ce:b5:46:bc:d3:ae:
a9:3e:2b:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:15:59 2026 by rpki-client