Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/84bbe3-4c61-4033-b9af-9320fe13e5fe/1/TDn4uP66ttIJokmB45n9YEMuHMk.mft
File: TDn4uP66ttIJokmB45n9YEMuHMk.mft (raw, json)
Hash identifier: ijdG0/36Hkbx9PsdT9VlQqQEOPUoPT7UPpUQ39KeDbs=
Subject key identifier: 41:5B:36:68:9B:6E:30:FC:00:08:FB:DC:6E:3F:0E:B6:0D:15:61:3A
Authority key identifier: 4C:39:F8:B8:FE:BA:B6:D2:09:A2:49:81:E3:99:FD:60:43:2E:1C:C9
Certificate issuer: /CN=4c39f8b8febab6d209a24981e399fd60432e1cc9
Certificate serial: 019FAAF5AFB7E4C7F06A44E6B1E235F5DD22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TDn4uP66ttIJokmB45n9YEMuHMk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/84bbe3-4c61-4033-b9af-9320fe13e5fe/1/TDn4uP66ttIJokmB45n9YEMuHMk.mft
Manifest number: 0E40
Signing time: Tue 28 Jul 2026 23:00:55 +0000
Manifest this update: Tue 28 Jul 2026 23:00:55 +0000
Manifest next update: Wed 29 Jul 2026 23:00:55 +0000
Files and hashes: 1: Oz2JTTFEUToA4rcARVfBKfZ-bNM.roa (hash: fQeMDFsyE9NlA+JYKajgKZ3XxSRtkUJy780HUIKIiOE=)
2: TDn4uP66ttIJokmB45n9YEMuHMk.crl (hash: WS3CdTKvDtpQWJ5wWS7/U9IMHIJY3N6fp7QvKpe6rtE=)
3: p2AFdxK-ZHTv-IUkNOyxXK_-F34.roa (hash: XMvgQ2GpOxolBIvE+NkJU3WDfGq3UMdrz3BN6w9ftF0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/84bbe3-4c61-4033-b9af-9320fe13e5fe/1/TDn4uP66ttIJokmB45n9YEMuHMk.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/84bbe3-4c61-4033-b9af-9320fe13e5fe/1/TDn4uP66ttIJokmB45n9YEMuHMk.mft
rsync://rpki.ripe.net/repository/DEFAULT/TDn4uP66ttIJokmB45n9YEMuHMk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:f5:af:b7:e4:c7:f0:6a:44:e6:b1:e2:35:f5:dd:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c39f8b8febab6d209a24981e399fd60432e1cc9
Validity
Not Before: Jul 28 23:00:55 2026 GMT
Not After : Jul 29 23:00:55 2026 GMT
Subject: CN=415b36689b6e30fc0008fbdc6e3f0eb60d15613a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:3b:17:60:8e:e3:de:d0:91:29:a8:61:56:6b:
8f:a4:09:de:6f:05:58:2e:4d:6f:69:b8:65:aa:1e:
fb:e2:13:14:2c:f0:75:bb:5d:6f:1a:f5:15:ab:82:
73:e3:4e:a8:dc:ed:ab:3a:d8:8a:0a:a2:d2:80:41:
f7:47:84:d0:7c:2d:a2:20:5d:41:fc:7a:4f:50:cb:
5a:d9:9a:6e:31:9a:1f:8b:87:07:18:68:d9:7c:2c:
7f:c9:f1:f1:44:ed:23:d5:af:fc:81:80:65:f4:a5:
8e:a4:ae:7b:7b:ac:48:15:1f:ac:f3:03:27:b0:e1:
fc:12:29:cb:0e:ba:4f:32:f3:7d:4e:2c:4e:07:74:
c5:5d:04:f6:02:07:f6:78:68:99:7c:b0:c8:6b:b9:
bb:90:7d:cf:ab:75:ef:fa:d5:0a:97:ef:0b:b1:13:
b5:67:4c:25:16:e6:d2:1d:1c:9c:d8:0d:f2:de:6f:
50:67:79:65:57:f2:52:17:93:2a:73:f4:4f:63:09:
94:6c:1c:16:a4:07:0c:28:e3:5a:88:79:45:73:a1:
6b:0a:ae:a0:77:a5:75:70:b4:7d:03:ce:d4:f8:96:
61:c9:62:3e:75:1d:a4:6a:da:7c:36:3f:34:13:f3:
e3:46:da:92:b8:94:41:fe:18:b8:74:6b:e4:9a:94:
09:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:5B:36:68:9B:6E:30:FC:00:08:FB:DC:6E:3F:0E:B6:0D:15:61:3A
X509v3 Authority Key Identifier:
keyid:4C:39:F8:B8:FE:BA:B6:D2:09:A2:49:81:E3:99:FD:60:43:2E:1C:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TDn4uP66ttIJokmB45n9YEMuHMk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/84bbe3-4c61-4033-b9af-9320fe13e5fe/1/TDn4uP66ttIJokmB45n9YEMuHMk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/84bbe3-4c61-4033-b9af-9320fe13e5fe/1/TDn4uP66ttIJokmB45n9YEMuHMk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:ab:d9:76:a6:18:a3:6e:34:9a:62:a4:6f:4a:29:22:ad:d0:
0b:d3:69:ac:37:ac:6b:57:a6:e5:29:a0:97:6d:f3:93:3c:15:
72:2e:f1:07:b2:27:3d:33:07:87:44:8d:0b:2f:85:3d:58:2a:
ba:73:0d:93:cb:a5:3c:80:a5:2a:66:a7:ec:cc:64:a4:69:84:
a2:e4:eb:c0:b4:5d:cc:f6:4a:60:4c:8e:93:74:40:9a:56:c0:
76:00:ac:2e:84:c3:9f:40:54:04:99:0b:a9:0b:b2:77:16:97:
22:e8:09:07:64:d4:ce:f1:27:86:aa:53:ee:a6:8d:7e:5e:e5:
66:c7:7a:a7:85:82:1f:7e:32:3d:dd:10:6c:3a:4b:a5:dc:c0:
e5:ee:c5:cc:7b:f0:28:a7:5b:07:49:65:7d:6d:6f:96:9c:e7:
0f:0e:e8:7e:4e:53:de:ee:df:60:de:55:e5:30:30:f9:6c:99:
13:ad:2f:73:be:67:84:c0:8e:6f:ac:19:ed:57:dc:73:56:b3:
85:8a:51:84:ec:95:59:37:5d:3e:93:05:17:ba:1e:31:3a:4e:
3a:a2:b0:5f:e4:57:ca:5e:a0:7e:b4:a2:58:29:6f:73:b3:91:
9b:2c:c9:03:6a:05:60:98:77:b1:9e:ad:60:9e:ae:ca:0d:1e:
46:29:53:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:35:28 2026 by rpki-client