Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3f/84bbe3-4c61-4033-b9af-9320fe13e5fe/1/TDn4uP66ttIJokmB45n9YEMuHMk.mft
File: TDn4uP66ttIJokmB45n9YEMuHMk.mft (raw, json)
Hash identifier: apM4DgYmBXf7cDZu/UHXkTQoUXKbZFgfTx6BJ0Y4Cy8=
Subject key identifier: B0:2C:5F:F5:A5:FB:E9:E6:B2:45:03:9F:A2:87:98:34:C4:F1:C6:A5
Authority key identifier: 4C:39:F8:B8:FE:BA:B6:D2:09:A2:49:81:E3:99:FD:60:43:2E:1C:C9
Certificate issuer: /CN=4c39f8b8febab6d209a24981e399fd60432e1cc9
Certificate serial: 01A0CAB4EE317FD193267F8DB4489CFA5C19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TDn4uP66ttIJokmB45n9YEMuHMk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/84bbe3-4c61-4033-b9af-9320fe13e5fe/1/TDn4uP66ttIJokmB45n9YEMuHMk.mft
Manifest number: 0ED5
Signing time: Tue 22 Sep 2026 20:00:49 +0000
Manifest this update: Tue 22 Sep 2026 20:00:49 +0000
Manifest next update: Wed 23 Sep 2026 20:00:49 +0000
Files and hashes: 1: Oz2JTTFEUToA4rcARVfBKfZ-bNM.roa (hash: fQeMDFsyE9NlA+JYKajgKZ3XxSRtkUJy780HUIKIiOE=)
2: TDn4uP66ttIJokmB45n9YEMuHMk.crl (hash: ZOliAatM+qrZr9VSOSHf6idtp8W4kZ6yaD1XrdzfwVM=)
3: p2AFdxK-ZHTv-IUkNOyxXK_-F34.roa (hash: XMvgQ2GpOxolBIvE+NkJU3WDfGq3UMdrz3BN6w9ftF0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/84bbe3-4c61-4033-b9af-9320fe13e5fe/1/TDn4uP66ttIJokmB45n9YEMuHMk.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/84bbe3-4c61-4033-b9af-9320fe13e5fe/1/TDn4uP66ttIJokmB45n9YEMuHMk.mft
rsync://rpki.ripe.net/repository/DEFAULT/TDn4uP66ttIJokmB45n9YEMuHMk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:b4:ee:31:7f:d1:93:26:7f:8d:b4:48:9c:fa:5c:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c39f8b8febab6d209a24981e399fd60432e1cc9
Validity
Not Before: Sep 22 20:00:49 2026 GMT
Not After : Sep 23 20:00:49 2026 GMT
Subject: CN=b02c5ff5a5fbe9e6b245039fa2879834c4f1c6a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:05:94:ea:4a:93:c7:ee:2b:68:1e:5f:4f:14:
a6:08:41:04:3f:95:ac:98:31:0b:bd:b4:77:1a:5e:
b9:77:ca:f3:bf:44:15:e1:58:11:31:34:55:92:02:
f5:e6:5e:fa:41:61:a4:94:d2:91:da:7d:86:df:5e:
f0:d2:77:ff:9c:b5:d5:9c:9c:b8:f5:6a:99:31:3e:
72:a5:a4:54:36:b8:41:6e:38:a8:d9:27:5b:9e:16:
b0:22:b4:7f:df:e2:68:43:59:b8:f5:02:60:66:ab:
c8:ea:4f:4f:23:0e:1c:32:26:da:f6:e3:43:e5:a6:
0c:2f:8e:de:24:da:a8:af:db:17:ab:c5:25:51:f3:
f2:8e:76:28:f6:e9:04:c4:94:e6:9a:3e:f0:36:9e:
28:26:bc:c7:16:85:3c:79:0a:67:be:b6:70:b5:65:
e3:d3:ee:ad:dc:6c:0e:08:bc:0f:b1:e6:1d:30:91:
b8:50:1f:75:39:0e:86:5f:67:2f:8b:1a:8f:9c:19:
fb:71:82:8b:1b:bb:09:fb:e5:c9:cc:17:8d:52:cc:
bd:0d:af:d3:58:76:fa:e9:8b:1e:98:e6:6e:bf:5b:
5d:07:d2:59:93:6a:20:42:d4:e1:80:65:7d:00:73:
ea:eb:dc:bf:c4:dc:9c:4c:30:f1:0f:3d:46:d5:16:
5d:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:2C:5F:F5:A5:FB:E9:E6:B2:45:03:9F:A2:87:98:34:C4:F1:C6:A5
X509v3 Authority Key Identifier:
keyid:4C:39:F8:B8:FE:BA:B6:D2:09:A2:49:81:E3:99:FD:60:43:2E:1C:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TDn4uP66ttIJokmB45n9YEMuHMk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/84bbe3-4c61-4033-b9af-9320fe13e5fe/1/TDn4uP66ttIJokmB45n9YEMuHMk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/84bbe3-4c61-4033-b9af-9320fe13e5fe/1/TDn4uP66ttIJokmB45n9YEMuHMk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:8f:78:2e:c5:e4:82:bc:57:34:f6:8b:c6:7b:c3:0d:0f:f5:
22:de:d7:b7:e2:61:61:33:1d:2e:2c:af:e9:1f:5a:51:9b:f9:
1a:3d:e7:7e:78:2e:28:68:d3:08:b6:b2:13:d7:7e:3c:b4:59:
e0:68:48:f5:92:a9:52:1e:1c:c2:38:0c:d0:35:d6:f2:e8:f0:
4b:fe:7e:24:f3:ce:71:cf:00:e0:ae:48:ff:c1:4a:72:37:5d:
54:0f:04:ce:49:ac:2b:16:16:4c:47:b1:32:3a:63:4c:4b:06:
90:a7:76:54:59:08:b3:c8:c6:ff:78:d1:9f:49:d2:49:05:9c:
46:ac:e4:0f:ab:a6:c5:0b:1e:d4:4e:9a:bc:cf:e2:b0:de:d3:
b3:2e:d9:6c:ec:f9:1b:02:f9:3c:1a:79:7a:b7:4e:55:d1:36:
30:7c:02:68:3f:f4:24:39:77:42:99:fa:76:be:4f:74:5d:ef:
ad:57:15:11:e6:5f:a9:85:a2:39:90:f9:f8:a8:82:35:d7:be:
87:48:47:9a:76:00:8c:45:ba:06:50:23:e7:f0:50:bc:20:a6:
7d:1c:f3:56:97:dd:0e:c3:ce:5f:0a:36:cc:ad:4d:8b:73:44:
d9:83:1b:23:f1:71:a4:91:58:c4:1d:a1:0e:ca:1a:fc:b3:96:
79:d5:23:91
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDKtO4xf9GTJn+NtEic+lwZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjMzlmOGI4ZmViYWI2ZDIwOWEyNDk4MWUzOTlmZDYwNDMy
ZTFjYzkwHhcNMjYwOTIyMjAwMDQ5WhcNMjYwOTIzMjAwMDQ5WjAzMTEwLwYDVQQD
EyhiMDJjNWZmNWE1ZmJlOWU2YjI0NTAzOWZhMjg3OTgzNGM0ZjFjNmE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwgWU6kqTx+4raB5fTxSmCEEEP5Ws
mDELvbR3Gl65d8rzv0QV4VgRMTRVkgL15l76QWGklNKR2n2G317w0nf/nLXVnJy4
9WqZMT5ypaRUNrhBbjio2SdbnhawIrR/3+JoQ1m49QJgZqvI6k9PIw4cMiba9uND
5aYML47eJNqor9sXq8UlUfPyjnYo9ukExJTmmj7wNp4oJrzHFoU8eQpnvrZwtWXj
0+6t3GwOCLwPseYdMJG4UB91OQ6GX2cvixqPnBn7cYKLG7sJ++XJzBeNUsy9Da/T
WHb66YsemOZuv1tdB9JZk2ogQtThgGV9AHPq69y/xNycTDDxDz1G1RZd1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLAsX/Wl++nmskUDn6KHmDTE8calMB8GA1UdIwQY
MBaAFEw5+Lj+urbSCaJJgeOZ/WBDLhzJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVERuNHVQNjZ0dElKb2ttQjQ1bjlZRU11SE1rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi84NGJiZTMtNGM2MS00MDMzLWI5YWYt
OTMyMGZlMTNlNWZlLzEvVERuNHVQNjZ0dElKb2ttQjQ1bjlZRU11SE1rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZi84NGJiZTMtNGM2MS00MDMzLWI5YWYtOTMyMGZlMTNlNWZl
LzEvVERuNHVQNjZ0dElKb2ttQjQ1bjlZRU11SE1rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi494LsXk
grxXNPaLxnvDDQ/1It7Xt+JhYTMdLiyv6R9aUZv5Gj3nfnguKGjTCLayE9d+PLRZ
4GhI9ZKpUh4cwjgM0DXW8ujwS/5+JPPOcc8A4K5I/8FKcjddVA8EzkmsKxYWTEex
MjpjTEsGkKd2VFkIs8jG/3jRn0nSSQWcRqzkD6umxQse1E6avM/isN7Tsy7ZbOz5
GwL5PBp5erdOVdE2MHwCaD/0JDl3Qpn6dr5PdF3vrVcVEeZfqYWiOZD5+KiCNde+
h0hHmnYAjEW6BlAj5/BQvCCmfRzzVpfdDsPOXwo2zK1Ni3NE2YMbI/FxpJFYxB2h
Dsoa/LOWedUjkQ==
-----END CERTIFICATE-----
Generated at Wed Sep 23 01:02:50 2026 by rpki-client