Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/84bbe3-4c61-4033-b9af-9320fe13e5fe/1/TDn4uP66ttIJokmB45n9YEMuHMk.mft
File: TDn4uP66ttIJokmB45n9YEMuHMk.mft (raw, json)
Hash identifier: 9vUMR1+20vAv1K3fWWejGuDFwDthXX7Dqsstr3QbYCw=
Subject key identifier: 41:B5:93:6C:35:1D:05:37:C2:AE:4E:43:FC:5F:7F:D0:86:0D:70:79
Authority key identifier: 4C:39:F8:B8:FE:BA:B6:D2:09:A2:49:81:E3:99:FD:60:43:2E:1C:C9
Certificate issuer: /CN=4c39f8b8febab6d209a24981e399fd60432e1cc9
Certificate serial: 019CAA584D171D77912EFB9D0EC25108FD68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TDn4uP66ttIJokmB45n9YEMuHMk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/84bbe3-4c61-4033-b9af-9320fe13e5fe/1/TDn4uP66ttIJokmB45n9YEMuHMk.mft
Manifest number: 0CB2
Signing time: Sun 01 Mar 2026 17:00:39 +0000
Manifest this update: Sun 01 Mar 2026 17:00:39 +0000
Manifest next update: Mon 02 Mar 2026 17:00:39 +0000
Files and hashes: 1: Oz2JTTFEUToA4rcARVfBKfZ-bNM.roa (hash: fQeMDFsyE9NlA+JYKajgKZ3XxSRtkUJy780HUIKIiOE=)
2: TDn4uP66ttIJokmB45n9YEMuHMk.crl (hash: pUJo3UpGE2jYNTEi7gzlt+KZf7L6foas4eBZYkMAIvE=)
3: p2AFdxK-ZHTv-IUkNOyxXK_-F34.roa (hash: XMvgQ2GpOxolBIvE+NkJU3WDfGq3UMdrz3BN6w9ftF0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/84bbe3-4c61-4033-b9af-9320fe13e5fe/1/TDn4uP66ttIJokmB45n9YEMuHMk.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/84bbe3-4c61-4033-b9af-9320fe13e5fe/1/TDn4uP66ttIJokmB45n9YEMuHMk.mft
rsync://rpki.ripe.net/repository/DEFAULT/TDn4uP66ttIJokmB45n9YEMuHMk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:4d:17:1d:77:91:2e:fb:9d:0e:c2:51:08:fd:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c39f8b8febab6d209a24981e399fd60432e1cc9
Validity
Not Before: Mar 1 17:00:39 2026 GMT
Not After : Mar 2 17:00:39 2026 GMT
Subject: CN=41b5936c351d0537c2ae4e43fc5f7fd0860d7079
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:b1:06:3d:2d:55:c3:3d:25:e0:7d:50:63:c4:
88:68:de:4c:e7:d9:7b:5a:6b:e8:ea:da:f8:7c:ad:
36:57:d1:c7:90:f1:c2:68:e4:22:4b:79:6b:33:7a:
14:d3:2b:a2:2f:a1:a3:db:52:4f:3d:0c:80:f6:a8:
7f:26:f9:2c:da:2b:7a:06:d0:2b:40:41:30:46:66:
3f:49:e5:1a:1f:0b:3f:0c:af:87:12:28:4f:16:a0:
f4:e3:ca:1b:1f:35:df:b8:45:db:04:bb:4e:96:a3:
14:12:3a:24:22:25:3b:42:9f:4f:8a:da:12:6c:a7:
1c:47:9c:dc:c5:a2:c7:fb:84:41:77:55:66:5b:a3:
9c:46:c2:f9:fb:74:3b:d7:37:f7:3c:ad:30:a2:04:
ef:2b:a1:75:c1:63:be:08:ac:3c:46:e7:bd:f6:07:
d5:e8:7d:79:b4:ed:57:9d:41:b4:b4:55:99:eb:a7:
5d:6a:74:e9:55:74:cb:45:b3:b0:f4:05:a8:7c:df:
83:f2:5b:5e:97:e0:26:69:2e:03:4e:80:1a:32:4e:
42:dd:51:fa:a7:de:82:e2:5c:10:3c:57:68:b8:86:
9e:32:32:61:40:58:e9:05:2f:1b:58:ca:28:9d:2f:
55:81:84:95:17:74:c7:e7:3d:aa:40:c5:14:b5:98:
d8:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:B5:93:6C:35:1D:05:37:C2:AE:4E:43:FC:5F:7F:D0:86:0D:70:79
X509v3 Authority Key Identifier:
keyid:4C:39:F8:B8:FE:BA:B6:D2:09:A2:49:81:E3:99:FD:60:43:2E:1C:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TDn4uP66ttIJokmB45n9YEMuHMk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/84bbe3-4c61-4033-b9af-9320fe13e5fe/1/TDn4uP66ttIJokmB45n9YEMuHMk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/84bbe3-4c61-4033-b9af-9320fe13e5fe/1/TDn4uP66ttIJokmB45n9YEMuHMk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:2f:89:d1:d5:99:8f:f0:86:35:d9:2f:93:94:2f:f8:78:f2:
44:2c:a2:63:9d:a4:58:aa:3e:83:be:11:bb:d5:bf:58:cf:6f:
bd:1d:8d:08:20:7d:f1:25:c2:6a:be:15:3f:bc:5a:5d:22:4b:
a8:1b:e7:e9:ce:77:ff:8d:8a:88:4c:04:08:0b:8c:9c:bf:84:
bd:c4:c5:a2:f1:a7:28:4e:40:13:9c:9d:b1:0d:b6:ba:ed:a1:
36:dd:70:ac:6b:3a:cf:7d:a8:53:e7:74:b3:0b:a9:7f:03:db:
67:61:20:f7:96:1f:cc:57:39:3f:30:5f:04:97:1e:df:79:4e:
80:ec:1c:6b:f1:0f:39:6d:94:24:ac:8f:08:ab:8a:1e:88:2f:
d6:2a:2a:01:4a:7d:59:ea:75:0d:e2:7b:ca:f0:96:d2:f9:6b:
ee:68:be:64:62:77:cb:81:b0:5c:b8:46:01:e7:ea:c6:fc:a4:
31:cd:c1:ac:49:df:4f:c1:ed:06:44:94:d8:30:9c:c5:ee:4d:
a6:76:c6:1a:30:4f:57:7d:9d:5c:6b:09:b6:1e:af:68:68:69:
64:c2:d5:1c:3c:c9:54:b6:a8:6a:1c:f8:c8:a2:ff:8e:03:d2:
70:b9:71:e6:a4:6e:f9:db:cd:f3:c5:a9:19:23:d9:46:15:9f:
26:3d:e6:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:17:46 2026 by rpki-client