Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/09cea0-ef2b-4f20-a19a-eb5a627e76a3/1/TDfyfrSZezvvnygmajlpQFD-dPk.mft
File: TDfyfrSZezvvnygmajlpQFD-dPk.mft (raw, json)
Hash identifier: 5JiF5SBzNXSMVwopfpMTOuIcZS0PcXgJn1dpqRGuuRw=
Subject key identifier: 44:89:7D:14:7F:06:16:57:FB:3F:AE:A4:41:3D:5C:02:D0:12:60:01
Authority key identifier: 4C:37:F2:7E:B4:99:7B:3B:EF:9F:28:26:6A:39:69:40:50:FE:74:F9
Certificate issuer: /CN=4c37f27eb4997b3bef9f28266a39694050fe74f9
Certificate serial: 019D9886597BD8CC563117B18F979A62F580
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TDfyfrSZezvvnygmajlpQFD-dPk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/09cea0-ef2b-4f20-a19a-eb5a627e76a3/1/TDfyfrSZezvvnygmajlpQFD-dPk.mft
Manifest number: 1921
Signing time: Thu 16 Apr 2026 23:00:34 +0000
Manifest this update: Thu 16 Apr 2026 23:00:34 +0000
Manifest next update: Fri 17 Apr 2026 23:00:34 +0000
Files and hashes: 1: 3mj4BF15-QsrQeXNqlhp9O0RF8Q.roa (hash: vXL9dy1/SgEnnpISMc/F/t6U8c7+bWH7fiwFFAUniPU=)
2: TDfyfrSZezvvnygmajlpQFD-dPk.crl (hash: r2EujTqDNOGca7yITD3ygg6+x3ScXICeNALLfBzlzGw=)
3: dDIM-ljTCDKhWIxv1515WUGeQvk.roa (hash: /ksxNXhqwhx98qeq21Eca7WB/KLYXy3qx2dkD35mKTc=)
4: i6gAOaaWdEjygKv3yzfVHTmBR5s.roa (hash: jK1Yhe3ibqhPTKxiBNM7KW7h9KKeRctQT02L1qcBze8=)
5: kFLjuN4_tRjI-IILkJq8lcLpDdc.roa (hash: lQTRIEBvMUBY3vX80dFs9U0bSNDBYvB6Uew+srrzZ9A=)
6: qrG9XLPl84E40eGjaluMQlHH30g.roa (hash: JZCVwj3aTdfzcFTKEfr0xBq4Umu2aHhpSpk1hh5GgSQ=)
7: sNbxwr_VlMceIOoORfjNh48fthg.roa (hash: og1IfOlO+B5tux3x/JdwIjbchpmcSQUOsvTa4SrXgws=)
8: sPyU_Xm3Mi4DrCYd-xCPHCu7Yj8.roa (hash: R+jYi2MX3/3kpxkJYiEg+3YO+SpdTf42NvPMvZti0mw=)
9: yjcAiOmQGkj7hTD0MZWHr2J1Je4.roa (hash: S7VwEQTFRcxL/FXQlqzu5pVh1KvvK3fwPwSXMI469EY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/09cea0-ef2b-4f20-a19a-eb5a627e76a3/1/TDfyfrSZezvvnygmajlpQFD-dPk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/09cea0-ef2b-4f20-a19a-eb5a627e76a3/1/TDfyfrSZezvvnygmajlpQFD-dPk.mft
rsync://rpki.ripe.net/repository/DEFAULT/TDfyfrSZezvvnygmajlpQFD-dPk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:86:59:7b:d8:cc:56:31:17:b1:8f:97:9a:62:f5:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c37f27eb4997b3bef9f28266a39694050fe74f9
Validity
Not Before: Apr 16 23:00:34 2026 GMT
Not After : Apr 17 23:00:34 2026 GMT
Subject: CN=44897d147f061657fb3faea4413d5c02d0126001
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:8a:8f:17:7e:93:a4:67:5d:7b:f3:bb:1d:c2:
98:13:56:83:7a:68:ac:e9:2e:88:5f:06:0e:4e:35:
f4:88:61:a3:2e:fa:0d:99:f3:6b:2a:70:e6:c9:dc:
67:1a:f1:ed:1a:f3:93:96:f8:62:00:e8:2f:3f:dd:
2c:5c:bf:8e:6a:0b:af:0e:33:89:ce:ee:f0:f9:2b:
ad:46:d6:99:cf:16:9c:92:23:07:bc:e8:2c:b8:3a:
e7:f3:96:4b:ef:8b:47:e5:5a:8c:94:c5:0b:93:4e:
ba:1d:4f:4c:ad:61:f9:19:7a:ac:e4:7e:42:d5:92:
0b:3d:26:cd:3c:7b:7f:a5:b5:fa:93:62:52:54:35:
95:a7:bb:bc:f9:ed:2a:e1:7b:47:4d:1b:aa:43:1e:
dd:14:2c:07:d9:e8:f2:68:1d:f3:78:ae:50:f5:51:
ae:07:bb:48:4b:30:08:38:a0:dc:34:d0:b8:07:f1:
95:73:74:62:72:1c:a5:d6:38:21:96:da:c2:a9:8e:
a0:ac:f8:5e:c9:f7:ee:a6:60:3e:f9:9f:2a:02:11:
89:39:00:d8:da:d1:e2:0e:9d:0b:32:5e:01:58:7e:
c5:c9:44:94:fb:c8:9a:42:42:6f:53:96:e8:93:94:
0f:45:be:e8:90:17:25:2f:c7:1c:6c:ee:cf:67:63:
8c:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:89:7D:14:7F:06:16:57:FB:3F:AE:A4:41:3D:5C:02:D0:12:60:01
X509v3 Authority Key Identifier:
keyid:4C:37:F2:7E:B4:99:7B:3B:EF:9F:28:26:6A:39:69:40:50:FE:74:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TDfyfrSZezvvnygmajlpQFD-dPk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/09cea0-ef2b-4f20-a19a-eb5a627e76a3/1/TDfyfrSZezvvnygmajlpQFD-dPk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/09cea0-ef2b-4f20-a19a-eb5a627e76a3/1/TDfyfrSZezvvnygmajlpQFD-dPk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:d2:ee:d8:47:8f:d2:bf:43:a4:fd:d0:9e:17:a5:52:8a:1d:
6a:73:d2:69:66:68:bf:e2:46:fa:62:9d:e1:84:27:12:c1:1d:
9e:ca:fe:a7:4d:05:24:87:d3:84:35:5d:cf:10:28:05:d2:a2:
f1:5b:bc:bd:ad:e6:e8:e2:f3:d6:29:ce:aa:67:b9:fa:6d:24:
11:27:4d:f8:af:c1:e3:24:44:c6:de:e8:e2:d3:dd:7f:43:94:
13:b1:8d:b2:f5:aa:e0:d6:ca:2b:8b:d0:88:d2:7d:09:12:34:
3e:f1:16:84:b1:3c:7f:c6:c6:3a:15:44:94:e1:47:06:5a:e4:
8a:30:34:b3:87:cb:0d:d5:1e:f8:53:e3:58:ed:2b:43:5e:a8:
0d:89:fe:13:c9:5a:9c:3b:69:28:9d:fc:15:be:73:ef:cb:52:
67:8e:0d:15:65:df:89:0e:d1:36:3c:c6:de:ea:18:a4:50:fb:
9f:1b:5f:ff:fa:34:ca:79:c0:ba:96:c3:cc:8c:74:2a:e7:c2:
58:fc:21:56:3f:a0:48:0f:cf:f6:a7:f3:cb:92:17:b9:77:61:
3f:83:64:72:a9:61:be:1d:e8:2c:b1:30:a0:92:61:d6:7b:b0:
28:41:8d:81:85:8d:20:d5:92:75:33:a6:c4:9a:2f:d4:e4:cc:
fb:45:ab:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:47:48 2026 by rpki-client