Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/84bbe3-4c61-4033-b9af-9320fe13e5fe/1/TDn4uP66ttIJokmB45n9YEMuHMk.mft
File: TDn4uP66ttIJokmB45n9YEMuHMk.mft (raw, json)
Hash identifier: 14crrbzwgXKPb+xlv6H7I+jjy4wW2FWpydhRV69XGqU=
Subject key identifier: DA:69:14:33:14:B5:E7:F9:81:84:8A:F1:32:BF:6A:32:2B:66:BE:72
Authority key identifier: 4C:39:F8:B8:FE:BA:B6:D2:09:A2:49:81:E3:99:FD:60:43:2E:1C:C9
Certificate issuer: /CN=4c39f8b8febab6d209a24981e399fd60432e1cc9
Certificate serial: 019D9BBE5BB347B767CC23FF337693B318E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TDn4uP66ttIJokmB45n9YEMuHMk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/84bbe3-4c61-4033-b9af-9320fe13e5fe/1/TDn4uP66ttIJokmB45n9YEMuHMk.mft
Manifest number: 0D2F
Signing time: Fri 17 Apr 2026 14:00:36 +0000
Manifest this update: Fri 17 Apr 2026 14:00:36 +0000
Manifest next update: Sat 18 Apr 2026 14:00:36 +0000
Files and hashes: 1: Oz2JTTFEUToA4rcARVfBKfZ-bNM.roa (hash: fQeMDFsyE9NlA+JYKajgKZ3XxSRtkUJy780HUIKIiOE=)
2: TDn4uP66ttIJokmB45n9YEMuHMk.crl (hash: 2sKf9jXA1FgCLLiqmHcF3DDMNNsqAqzlGezzrI6OLSk=)
3: p2AFdxK-ZHTv-IUkNOyxXK_-F34.roa (hash: XMvgQ2GpOxolBIvE+NkJU3WDfGq3UMdrz3BN6w9ftF0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/84bbe3-4c61-4033-b9af-9320fe13e5fe/1/TDn4uP66ttIJokmB45n9YEMuHMk.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/84bbe3-4c61-4033-b9af-9320fe13e5fe/1/TDn4uP66ttIJokmB45n9YEMuHMk.mft
rsync://rpki.ripe.net/repository/DEFAULT/TDn4uP66ttIJokmB45n9YEMuHMk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:be:5b:b3:47:b7:67:cc:23:ff:33:76:93:b3:18:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c39f8b8febab6d209a24981e399fd60432e1cc9
Validity
Not Before: Apr 17 14:00:36 2026 GMT
Not After : Apr 18 14:00:36 2026 GMT
Subject: CN=da69143314b5e7f981848af132bf6a322b66be72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:2a:d7:a7:15:a4:58:ac:3a:cc:42:81:0c:87:
c6:9b:d3:2b:9e:08:5f:6e:0d:7b:ee:f9:f4:c8:32:
42:d0:03:0a:78:6d:02:9a:35:0e:32:68:0f:8c:13:
dd:59:a9:82:43:11:67:6e:4c:87:ea:2d:30:fc:97:
46:4b:d9:ed:84:ed:8b:4e:02:99:2f:42:3e:d1:17:
f0:34:22:52:aa:40:a6:05:1e:bd:e4:ed:b8:62:bb:
53:0b:73:e5:22:5d:40:fe:27:77:25:dc:43:93:e1:
d8:c8:7e:57:57:00:0d:84:87:a3:62:e7:0a:6e:f0:
0b:6c:92:40:86:96:31:c3:28:ed:4e:62:29:eb:fc:
07:09:7d:a4:d6:a2:69:75:c8:b3:ec:8a:1c:6c:80:
a9:0d:73:f5:be:4a:2f:bd:e9:b6:50:f5:e8:63:10:
d2:cf:87:bc:55:bc:75:2b:ab:1a:81:a1:d4:fa:5c:
19:ea:84:11:53:f3:40:ca:45:34:6b:75:80:2d:80:
16:47:a0:dd:ce:4f:63:f5:62:fa:42:e7:c0:80:77:
51:13:b1:a8:6c:25:44:0b:ca:1e:12:c6:ed:56:dc:
8c:6e:73:80:a7:2c:bb:08:c5:1d:eb:4d:d1:c0:39:
2e:bf:53:85:05:c4:e4:60:6d:96:2e:09:9e:02:8e:
a2:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:69:14:33:14:B5:E7:F9:81:84:8A:F1:32:BF:6A:32:2B:66:BE:72
X509v3 Authority Key Identifier:
keyid:4C:39:F8:B8:FE:BA:B6:D2:09:A2:49:81:E3:99:FD:60:43:2E:1C:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TDn4uP66ttIJokmB45n9YEMuHMk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/84bbe3-4c61-4033-b9af-9320fe13e5fe/1/TDn4uP66ttIJokmB45n9YEMuHMk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/84bbe3-4c61-4033-b9af-9320fe13e5fe/1/TDn4uP66ttIJokmB45n9YEMuHMk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:03:9d:04:c1:b0:0d:d5:b9:ed:97:ad:a3:04:d0:d7:bc:89:
a9:11:1e:9d:b0:8a:2f:98:10:24:56:88:1d:31:3b:00:ec:4d:
1f:4f:8c:44:f5:c4:43:a5:46:b8:c2:33:90:dc:a6:57:f0:54:
97:8a:9d:04:c9:7c:3f:e3:03:bf:2a:65:cf:12:1f:ef:d5:56:
c6:f3:ec:64:a6:a9:64:8b:b3:69:dd:91:00:41:b4:79:92:d9:
ce:a0:9e:c7:64:53:02:fd:c2:ba:69:1f:c2:57:95:cb:8a:ca:
2c:5e:5a:21:11:ed:8f:97:92:d4:e7:f1:f7:73:15:b2:24:49:
f6:37:dd:b0:25:bd:66:b2:09:86:c9:f1:9e:e3:8c:09:05:22:
d3:7f:3b:b7:82:80:cb:47:d9:b6:04:6a:ba:34:6e:5d:0c:e0:
2b:fc:9f:ad:23:f9:f6:1b:6a:c2:20:93:1f:a3:44:e8:fb:b2:
93:75:0e:de:a2:49:87:4c:65:52:3c:e3:d8:d5:93:0b:60:19:
a5:3c:12:b7:f3:47:58:82:92:4e:87:de:f8:9a:4a:c4:64:9a:
39:79:e8:50:8c:f5:b0:2d:0b:a7:57:ad:04:f0:c1:94:e4:61:
95:6e:cb:43:72:36:0e:9f:d1:06:17:a2:57:ee:f4:2b:b5:72:
e6:29:37:61
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2bvluzR7dnzCP/M3aTsxjlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjMzlmOGI4ZmViYWI2ZDIwOWEyNDk4MWUzOTlmZDYwNDMy
ZTFjYzkwHhcNMjYwNDE3MTQwMDM2WhcNMjYwNDE4MTQwMDM2WjAzMTEwLwYDVQQD
EyhkYTY5MTQzMzE0YjVlN2Y5ODE4NDhhZjEzMmJmNmEzMjJiNjZiZTcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmSrXpxWkWKw6zEKBDIfGm9Mrnghf
bg177vn0yDJC0AMKeG0CmjUOMmgPjBPdWamCQxFnbkyH6i0w/JdGS9nthO2LTgKZ
L0I+0RfwNCJSqkCmBR695O24YrtTC3PlIl1A/id3JdxDk+HYyH5XVwANhIejYucK
bvALbJJAhpYxwyjtTmIp6/wHCX2k1qJpdciz7IocbICpDXP1vkovvem2UPXoYxDS
z4e8Vbx1K6sagaHU+lwZ6oQRU/NAykU0a3WALYAWR6Ddzk9j9WL6QufAgHdRE7Go
bCVEC8oeEsbtVtyMbnOApyy7CMUd603RwDkuv1OFBcTkYG2WLgmeAo6i+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNppFDMUtef5gYSK8TK/ajIrZr5yMB8GA1UdIwQY
MBaAFEw5+Lj+urbSCaJJgeOZ/WBDLhzJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVERuNHVQNjZ0dElKb2ttQjQ1bjlZRU11SE1rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi84NGJiZTMtNGM2MS00MDMzLWI5YWYt
OTMyMGZlMTNlNWZlLzEvVERuNHVQNjZ0dElKb2ttQjQ1bjlZRU11SE1rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZi84NGJiZTMtNGM2MS00MDMzLWI5YWYtOTMyMGZlMTNlNWZl
LzEvVERuNHVQNjZ0dElKb2ttQjQ1bjlZRU11SE1rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdQOdBMGw
DdW57ZetowTQ17yJqREenbCKL5gQJFaIHTE7AOxNH0+MRPXEQ6VGuMIzkNymV/BU
l4qdBMl8P+MDvyplzxIf79VWxvPsZKapZIuzad2RAEG0eZLZzqCex2RTAv3Cumkf
wleVy4rKLF5aIRHtj5eS1Ofx93MVsiRJ9jfdsCW9ZrIJhsnxnuOMCQUi0387t4KA
y0fZtgRqujRuXQzgK/yfrSP59htqwiCTH6NE6Puyk3UO3qJJh0xlUjzj2NWTC2AZ
pTwSt/NHWIKSTofe+JpKxGSaOXnoUIz1sC0Lp1etBPDBlORhlW7LQ3I2Dp/RBhei
V+70K7Vy5ik3YQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 16:56:52 2026 by rpki-client