Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/84bbe3-4c61-4033-b9af-9320fe13e5fe/1/TDn4uP66ttIJokmB45n9YEMuHMk.mft
File: TDn4uP66ttIJokmB45n9YEMuHMk.mft (raw, json)
Hash identifier: PmMcX09BA6U3JT+CpLAW1I3pLgy53zjO3PKLIdqDVNI=
Subject key identifier: AC:7E:8F:CF:86:44:25:10:74:F0:75:80:A2:98:75:0F:A9:3F:63:5B
Authority key identifier: 4C:39:F8:B8:FE:BA:B6:D2:09:A2:49:81:E3:99:FD:60:43:2E:1C:C9
Certificate issuer: /CN=4c39f8b8febab6d209a24981e399fd60432e1cc9
Certificate serial: 019CAC4740C7994D23E506DF9313A3E1A660
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TDn4uP66ttIJokmB45n9YEMuHMk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/84bbe3-4c61-4033-b9af-9320fe13e5fe/1/TDn4uP66ttIJokmB45n9YEMuHMk.mft
Manifest number: 0CB3
Signing time: Mon 02 Mar 2026 02:01:16 +0000
Manifest this update: Mon 02 Mar 2026 02:01:16 +0000
Manifest next update: Tue 03 Mar 2026 02:01:16 +0000
Files and hashes: 1: Oz2JTTFEUToA4rcARVfBKfZ-bNM.roa (hash: fQeMDFsyE9NlA+JYKajgKZ3XxSRtkUJy780HUIKIiOE=)
2: TDn4uP66ttIJokmB45n9YEMuHMk.crl (hash: lRvIzFt3fFibIM/H/VRenx1pBmRVAV7/9MxFE8wWx+c=)
3: p2AFdxK-ZHTv-IUkNOyxXK_-F34.roa (hash: XMvgQ2GpOxolBIvE+NkJU3WDfGq3UMdrz3BN6w9ftF0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/84bbe3-4c61-4033-b9af-9320fe13e5fe/1/TDn4uP66ttIJokmB45n9YEMuHMk.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/84bbe3-4c61-4033-b9af-9320fe13e5fe/1/TDn4uP66ttIJokmB45n9YEMuHMk.mft
rsync://rpki.ripe.net/repository/DEFAULT/TDn4uP66ttIJokmB45n9YEMuHMk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:47:40:c7:99:4d:23:e5:06:df:93:13:a3:e1:a6:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c39f8b8febab6d209a24981e399fd60432e1cc9
Validity
Not Before: Mar 2 02:01:16 2026 GMT
Not After : Mar 3 02:01:16 2026 GMT
Subject: CN=ac7e8fcf8644251074f07580a298750fa93f635b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:5e:d4:98:36:24:c3:b1:eb:db:d4:27:45:53:
11:c1:cd:ea:58:bc:f5:6d:39:97:f1:e9:6e:b2:e6:
2c:42:26:71:ef:38:4e:6c:1c:d0:22:73:b6:9c:f1:
bb:8c:59:db:1f:74:77:a3:b9:d0:97:26:88:b8:df:
f9:90:c3:0c:bc:75:e2:24:de:77:e0:90:9a:a4:df:
0a:1c:68:cc:da:62:a3:89:4c:22:f7:b8:87:ba:70:
e5:34:19:c9:90:eb:91:cb:07:c9:87:e4:b6:6a:a2:
45:80:bc:29:b5:f1:38:d1:3b:bd:8e:7a:01:ce:18:
28:17:e9:48:75:2a:71:b1:2d:af:50:2f:32:be:91:
9a:d0:78:1d:92:56:71:c7:59:86:dc:9f:0d:f9:a0:
2d:be:24:9a:db:f2:88:44:07:66:18:d3:6f:ea:47:
ef:44:d1:3d:47:ce:4d:f2:7d:40:96:9d:2b:04:4b:
a9:0f:a1:f5:16:91:2b:ba:19:7b:f0:1a:c2:1f:99:
9b:cb:24:df:aa:f8:bc:03:5e:a2:ce:e8:1b:12:13:
1a:66:18:1d:dd:f3:9c:c3:b4:ee:a7:30:b4:0b:24:
c1:52:ee:0f:e2:d5:8b:03:62:8c:9c:e3:90:2b:bc:
c0:a9:fa:68:03:fe:2d:8d:68:1d:0f:36:ed:6a:31:
34:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:7E:8F:CF:86:44:25:10:74:F0:75:80:A2:98:75:0F:A9:3F:63:5B
X509v3 Authority Key Identifier:
keyid:4C:39:F8:B8:FE:BA:B6:D2:09:A2:49:81:E3:99:FD:60:43:2E:1C:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TDn4uP66ttIJokmB45n9YEMuHMk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/84bbe3-4c61-4033-b9af-9320fe13e5fe/1/TDn4uP66ttIJokmB45n9YEMuHMk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/84bbe3-4c61-4033-b9af-9320fe13e5fe/1/TDn4uP66ttIJokmB45n9YEMuHMk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:52:d0:3f:94:36:27:60:07:6d:ff:af:e5:71:b5:c4:2a:a8:
e4:5b:77:73:62:79:14:3e:f1:42:57:05:8d:f5:84:a7:9f:07:
78:64:ed:ff:15:91:71:a8:0a:84:37:85:d8:a6:f4:05:e4:b6:
e4:dd:94:a7:03:7c:b6:57:51:00:f4:56:43:3b:57:e6:5b:30:
9d:ce:d0:af:20:39:81:4c:a5:c0:6f:a7:77:32:ce:cd:26:37:
49:de:f0:7e:db:49:9a:a7:4c:ea:54:f2:90:ec:53:2c:0a:dc:
2c:c0:5a:38:3b:56:6b:70:2d:e5:97:5e:bc:c1:67:3a:bb:cb:
b5:86:44:68:a0:af:35:6a:35:ae:54:5d:af:6a:ce:68:23:76:
29:25:ca:96:f8:b7:cb:21:1d:e2:7e:57:ba:d4:ba:e6:83:d9:
8d:38:75:e1:c2:60:e8:16:3f:ae:1e:e2:b2:27:c8:cf:27:fc:
76:a9:4f:01:db:88:9a:59:8b:89:36:ca:66:b1:a2:60:f7:03:
0e:c8:96:88:62:c7:cb:76:88:c8:bd:f9:db:5c:9c:ef:8f:77:
47:d1:6e:bb:ee:bc:73:90:9d:18:ac:5f:b3:21:8c:29:62:ff:
15:c2:61:17:6e:37:2e:94:f3:66:a5:ef:48:a1:ed:ef:e7:ab:
0a:99:c4:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:57:32 2026 by rpki-client