Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/b9a830-6992-49c6-8973-eacb4965fe38/1/TD6do79ZOALMgz_l2UelJpb1jI0.mft
File: TD6do79ZOALMgz_l2UelJpb1jI0.mft (raw, json)
Hash identifier: BD1Ytr8MYeC9vd2d2/AdGof7kijUWw9k1XxF1Zu9QjY=
Subject key identifier: 20:EF:D2:F1:A5:27:61:E1:E1:60:C8:AD:55:4A:61:E5:AA:2A:FA:53
Authority key identifier: 4C:3E:9D:A3:BF:59:38:02:CC:83:3F:E5:D9:47:A5:26:96:F5:8C:8D
Certificate issuer: /CN=4c3e9da3bf593802cc833fe5d947a52696f58c8d
Certificate serial: 019DA4C1F4810423D3A03F0DBD4304093E94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TD6do79ZOALMgz_l2UelJpb1jI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/b9a830-6992-49c6-8973-eacb4965fe38/1/TD6do79ZOALMgz_l2UelJpb1jI0.mft
Manifest number: 1808
Signing time: Sun 19 Apr 2026 08:01:07 +0000
Manifest this update: Sun 19 Apr 2026 08:01:07 +0000
Manifest next update: Mon 20 Apr 2026 08:01:07 +0000
Files and hashes: 1: TD6do79ZOALMgz_l2UelJpb1jI0.crl (hash: g94EoWhpNlTfB/mbAHgvAUL6zg9lmkz18MZ8M8Ctuzw=)
2: xoBSepf056vB7VihaJfLbbA7rl8.roa (hash: FqEFR7+yy5fGMc3KqbC1V37aXIXlQqiTJ1sLZ3ECBNg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/b9a830-6992-49c6-8973-eacb4965fe38/1/TD6do79ZOALMgz_l2UelJpb1jI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/b9a830-6992-49c6-8973-eacb4965fe38/1/TD6do79ZOALMgz_l2UelJpb1jI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/TD6do79ZOALMgz_l2UelJpb1jI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:c1:f4:81:04:23:d3:a0:3f:0d:bd:43:04:09:3e:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c3e9da3bf593802cc833fe5d947a52696f58c8d
Validity
Not Before: Apr 19 08:01:07 2026 GMT
Not After : Apr 20 08:01:07 2026 GMT
Subject: CN=20efd2f1a52761e1e160c8ad554a61e5aa2afa53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:c1:83:2b:41:a4:13:48:59:8f:83:a5:be:39:
ba:00:5d:6f:04:02:db:5a:39:e6:08:38:e7:73:fe:
b1:bc:a0:4d:b0:a3:70:47:cb:10:d8:77:c9:1e:b5:
0f:10:15:5d:37:98:0b:5c:b3:02:b9:e3:d8:ea:8b:
8a:9a:aa:d6:86:30:e0:72:7d:4e:82:84:7c:36:21:
f2:85:c5:8c:c6:a2:d1:27:76:14:44:30:30:ea:56:
00:5b:95:84:90:ca:42:64:7f:78:c7:90:5a:32:21:
45:27:a2:69:d6:c2:ef:d3:0a:d5:9f:23:79:1b:61:
6a:1c:f7:24:2e:a2:f4:cc:cb:79:26:92:64:fe:6f:
a6:9f:6c:e4:83:bc:20:7f:e2:18:14:aa:43:7d:c7:
38:c8:fe:2a:d5:b8:ba:f9:34:06:1e:03:ae:fd:e5:
c8:64:e0:36:e8:ac:59:f1:5c:cf:b9:4e:1a:ea:27:
c0:ec:e8:16:b4:03:37:96:d9:89:5d:91:73:6b:a4:
e0:0e:1b:fb:b5:90:1a:8a:cd:88:04:37:c5:82:f9:
17:49:f3:91:07:35:8c:c8:00:4b:5b:26:04:70:39:
24:82:5b:32:b3:e2:85:ba:e7:6e:10:b3:62:f4:24:
98:21:45:4a:0e:88:63:88:40:ab:50:3f:67:58:7f:
65:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:EF:D2:F1:A5:27:61:E1:E1:60:C8:AD:55:4A:61:E5:AA:2A:FA:53
X509v3 Authority Key Identifier:
keyid:4C:3E:9D:A3:BF:59:38:02:CC:83:3F:E5:D9:47:A5:26:96:F5:8C:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TD6do79ZOALMgz_l2UelJpb1jI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/b9a830-6992-49c6-8973-eacb4965fe38/1/TD6do79ZOALMgz_l2UelJpb1jI0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/b9a830-6992-49c6-8973-eacb4965fe38/1/TD6do79ZOALMgz_l2UelJpb1jI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:cf:87:39:24:40:77:5f:a0:75:18:6b:10:19:f8:27:28:6a:
f2:34:50:45:51:27:90:f4:db:dc:79:cf:5d:68:e0:44:3c:fc:
7b:91:81:b6:43:60:6d:67:fd:25:36:78:7d:39:6a:5d:ea:38:
9d:f4:44:ea:fe:38:b0:67:e6:7b:bb:bd:3d:b5:26:87:a4:42:
d4:cf:7b:c7:63:b5:81:27:7d:d2:69:cd:83:08:e5:74:af:90:
6a:72:62:9b:52:83:c3:3d:b8:ae:06:4a:15:dc:86:d0:80:f5:
da:53:37:1c:66:b9:aa:f6:43:dd:41:96:d8:4b:57:14:a5:96:
64:0c:fa:ba:70:49:9e:eb:3e:5c:a8:f7:5b:a1:dc:17:25:3f:
6d:a2:a2:c3:08:d6:83:f1:82:82:f8:84:94:b4:ce:4e:07:3a:
e7:fc:61:20:76:b2:0a:f3:f6:04:d1:b7:ca:53:5a:4b:e2:67:
ec:71:72:6a:ab:af:b7:fe:e0:cc:fa:03:33:5f:82:04:64:eb:
61:96:0a:5b:19:d1:e4:4b:2b:7a:7b:43:b4:ee:3a:30:59:f2:
1a:63:61:40:ce:bd:73:6b:1f:25:7f:5c:7c:12:2e:c4:f8:fe:
40:f7:2a:6e:ae:96:3b:4f:b2:65:1e:46:67:d9:44:f1:d7:53:
9d:0d:65:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:36:14 2026 by rpki-client