Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/84bbe3-4c61-4033-b9af-9320fe13e5fe/1/TDn4uP66ttIJokmB45n9YEMuHMk.mft
File: TDn4uP66ttIJokmB45n9YEMuHMk.mft (raw, json)
Hash identifier: 9AjIuYqeBzSwnwoKdX8ZNNdieX5o4LFbjBXQ2UvIMcA=
Subject key identifier: 2A:05:01:B1:56:9F:46:78:62:F9:01:1D:35:91:4E:89:B3:05:64:49
Authority key identifier: 4C:39:F8:B8:FE:BA:B6:D2:09:A2:49:81:E3:99:FD:60:43:2E:1C:C9
Certificate issuer: /CN=4c39f8b8febab6d209a24981e399fd60432e1cc9
Certificate serial: 019D99CFF904ACE25A9A0963DD29A2F995FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TDn4uP66ttIJokmB45n9YEMuHMk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/84bbe3-4c61-4033-b9af-9320fe13e5fe/1/TDn4uP66ttIJokmB45n9YEMuHMk.mft
Manifest number: 0D2E
Signing time: Fri 17 Apr 2026 05:00:36 +0000
Manifest this update: Fri 17 Apr 2026 05:00:36 +0000
Manifest next update: Sat 18 Apr 2026 05:00:36 +0000
Files and hashes: 1: Oz2JTTFEUToA4rcARVfBKfZ-bNM.roa (hash: fQeMDFsyE9NlA+JYKajgKZ3XxSRtkUJy780HUIKIiOE=)
2: TDn4uP66ttIJokmB45n9YEMuHMk.crl (hash: 4mHPDb6OgGW9fjqdohj4cHsg8ewGZEMMKAYUxQa2CX8=)
3: p2AFdxK-ZHTv-IUkNOyxXK_-F34.roa (hash: XMvgQ2GpOxolBIvE+NkJU3WDfGq3UMdrz3BN6w9ftF0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/84bbe3-4c61-4033-b9af-9320fe13e5fe/1/TDn4uP66ttIJokmB45n9YEMuHMk.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/84bbe3-4c61-4033-b9af-9320fe13e5fe/1/TDn4uP66ttIJokmB45n9YEMuHMk.mft
rsync://rpki.ripe.net/repository/DEFAULT/TDn4uP66ttIJokmB45n9YEMuHMk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:cf:f9:04:ac:e2:5a:9a:09:63:dd:29:a2:f9:95:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c39f8b8febab6d209a24981e399fd60432e1cc9
Validity
Not Before: Apr 17 05:00:36 2026 GMT
Not After : Apr 18 05:00:36 2026 GMT
Subject: CN=2a0501b1569f467862f9011d35914e89b3056449
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:cd:60:0e:7a:1e:12:43:6c:66:d0:45:60:73:
75:69:dd:15:ee:23:fc:ef:98:eb:2b:d7:90:38:58:
8e:62:28:22:3a:e2:6c:1c:72:5f:92:73:87:16:a4:
57:43:1e:a9:80:e6:06:a1:48:07:71:49:73:3f:7a:
e2:0c:0c:03:c5:99:2e:f8:58:93:d4:59:12:4f:71:
cb:f8:eb:56:c3:b5:32:4a:a8:27:93:6f:42:74:89:
67:c7:2f:5a:0e:c5:30:ad:77:10:91:aa:70:09:79:
3d:63:1a:b4:2f:81:07:69:e5:fa:fc:a1:4e:8b:04:
38:3e:e2:6b:45:dd:d7:df:5f:60:67:96:41:74:8c:
f6:d1:73:40:10:5b:17:03:1e:39:be:61:a2:f0:41:
94:38:42:86:40:4f:d9:f3:98:4e:04:86:b2:fa:b3:
e3:0d:b6:a1:b0:94:01:ed:9a:47:f6:9f:06:95:35:
f1:e9:a7:38:ab:a8:a7:0e:83:2f:99:c7:ef:58:3a:
23:cc:a2:da:1c:f8:30:54:c9:6b:9c:bf:3c:63:6c:
36:2e:94:01:a9:0d:4a:bf:79:f3:db:07:ac:7a:22:
80:77:8f:d1:b3:f5:c0:ff:17:ef:d0:fd:ff:54:ef:
af:86:6a:f7:22:0a:ca:5f:d9:3b:d2:c3:d5:9f:ef:
e5:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:05:01:B1:56:9F:46:78:62:F9:01:1D:35:91:4E:89:B3:05:64:49
X509v3 Authority Key Identifier:
keyid:4C:39:F8:B8:FE:BA:B6:D2:09:A2:49:81:E3:99:FD:60:43:2E:1C:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TDn4uP66ttIJokmB45n9YEMuHMk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/84bbe3-4c61-4033-b9af-9320fe13e5fe/1/TDn4uP66ttIJokmB45n9YEMuHMk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/84bbe3-4c61-4033-b9af-9320fe13e5fe/1/TDn4uP66ttIJokmB45n9YEMuHMk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:f9:7c:1e:f4:07:86:ba:aa:37:b1:d8:8e:63:57:9e:3e:16:
d2:cb:12:1e:70:2a:45:c1:4c:9a:e3:a8:f5:a2:02:9e:42:b5:
fc:5e:32:c9:e2:14:c9:a2:06:1f:7f:bb:ea:09:94:68:a6:14:
4f:15:d6:06:a9:8a:50:33:81:e7:40:64:38:16:d4:f6:94:2e:
07:2f:f3:12:34:0c:a7:0b:66:b8:56:c7:e4:37:c2:5c:f6:51:
cf:88:b4:dc:e6:1b:5f:5a:2a:90:6f:c6:e8:ab:6c:f2:54:d0:
8a:a7:17:b8:0d:59:85:12:d0:ff:4a:12:b9:8a:85:f4:96:f2:
f2:a9:e4:e4:3d:8a:91:2c:7a:d5:1f:6e:5c:a7:8c:f7:8a:4c:
46:69:2f:5b:5d:25:a4:d9:52:01:2f:ee:c9:96:b4:ff:1b:2f:
94:0e:c3:69:8e:98:3c:75:aa:c4:10:53:36:79:b5:83:41:73:
30:15:81:0a:dc:5c:7c:17:92:cc:91:24:31:1f:6e:2f:e8:02:
b6:1c:42:42:4f:2a:c3:46:53:74:70:15:0c:57:c8:d1:ca:66:
ab:61:b5:2f:99:83:f5:26:67:9b:c3:5f:bd:56:9f:b3:9e:a6:
ab:21:7f:92:93:b7:3a:01:5d:e7:94:d2:96:ef:e2:96:5c:56:
b3:17:ef:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:09:12 2026 by rpki-client