Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d7/df6e25-923c-4838-864f-d4b37e44ab7c/1/TDkFWmmQuCQIzxq_KTE3gOJJpMk.mft
File: TDkFWmmQuCQIzxq_KTE3gOJJpMk.mft (raw, json)
Hash identifier: rnn53bR9w8zwXwEVN0Gv3M8k146dmAHZKQMKqf2pAIU=
Subject key identifier: F7:39:F1:51:DC:6F:7F:B3:4B:5A:83:07:B2:04:26:D6:47:21:C0:87
Authority key identifier: 4C:39:05:5A:69:90:B8:24:08:CF:1A:BF:29:31:37:80:E2:49:A4:C9
Certificate issuer: /CN=4c39055a6990b82408cf1abf29313780e249a4c9
Certificate serial: 01A0D2DDE5D9BD2F3CA4135B438473FD0EFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TDkFWmmQuCQIzxq_KTE3gOJJpMk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/df6e25-923c-4838-864f-d4b37e44ab7c/1/TDkFWmmQuCQIzxq_KTE3gOJJpMk.mft
Manifest number: 15D7
Signing time: Thu 24 Sep 2026 10:02:32 +0000
Manifest this update: Thu 24 Sep 2026 10:02:32 +0000
Manifest next update: Fri 25 Sep 2026 10:02:32 +0000
Files and hashes: 1: 0cFklTq5mcU3EaGFeQ9ahLNCFS0.roa (hash: IjEBs0Y3nrFmZdto8V+GvCaLtfCze3iFGsvEQJ0wMpA=)
2: TDkFWmmQuCQIzxq_KTE3gOJJpMk.crl (hash: lKFZcFIT1xVEmmLmeoWTLV6gvRigQvQVJnwI4wweLUI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/df6e25-923c-4838-864f-d4b37e44ab7c/1/TDkFWmmQuCQIzxq_KTE3gOJJpMk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/df6e25-923c-4838-864f-d4b37e44ab7c/1/TDkFWmmQuCQIzxq_KTE3gOJJpMk.mft
rsync://rpki.ripe.net/repository/DEFAULT/TDkFWmmQuCQIzxq_KTE3gOJJpMk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 10:02:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:dd:e5:d9:bd:2f:3c:a4:13:5b:43:84:73:fd:0e:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c39055a6990b82408cf1abf29313780e249a4c9
Validity
Not Before: Sep 24 10:02:32 2026 GMT
Not After : Sep 25 10:02:32 2026 GMT
Subject: CN=f739f151dc6f7fb34b5a8307b20426d64721c087
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:64:d0:bf:52:b0:3c:f8:46:d4:71:e1:8a:19:
10:5f:77:e8:5c:ff:72:db:85:dd:6b:be:1d:ac:c9:
bc:f6:97:ae:bc:85:01:23:15:39:4f:eb:70:1a:74:
e1:40:2a:24:92:b1:34:3e:95:15:4a:43:f1:6a:ce:
18:74:26:4d:7f:d7:7b:60:a2:f1:fd:60:9f:7a:d2:
e4:4d:58:fd:1d:96:76:07:f7:66:ef:00:de:d3:1f:
58:d2:85:b1:73:64:fe:80:72:05:07:a1:ce:76:1d:
d9:67:f9:07:40:39:6c:4e:89:24:7b:93:9f:ca:49:
78:f8:be:77:b4:af:80:37:d9:36:4d:50:ad:f6:92:
96:79:c0:46:dd:d3:5c:b1:2d:f1:ec:be:c2:1e:8a:
79:21:8c:8c:52:2f:77:82:05:76:2d:3b:aa:ac:87:
ee:16:d9:6d:70:af:ed:14:ed:9c:09:5b:43:e7:74:
00:91:fe:dc:ea:06:a6:84:e7:ec:81:60:0c:f9:67:
c7:9f:03:f2:77:a1:41:b8:3a:fe:fc:99:a9:ad:88:
db:eb:66:14:4f:cb:c7:f2:ef:09:b8:2a:ed:b2:de:
c7:41:20:b5:0d:e9:b3:c0:2b:d3:1c:39:97:b2:2f:
47:cc:14:8a:67:fd:d7:71:25:cf:42:20:6f:9a:9d:
2b:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:39:F1:51:DC:6F:7F:B3:4B:5A:83:07:B2:04:26:D6:47:21:C0:87
X509v3 Authority Key Identifier:
keyid:4C:39:05:5A:69:90:B8:24:08:CF:1A:BF:29:31:37:80:E2:49:A4:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TDkFWmmQuCQIzxq_KTE3gOJJpMk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/df6e25-923c-4838-864f-d4b37e44ab7c/1/TDkFWmmQuCQIzxq_KTE3gOJJpMk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/df6e25-923c-4838-864f-d4b37e44ab7c/1/TDkFWmmQuCQIzxq_KTE3gOJJpMk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:6a:8a:68:b6:a8:8f:10:c6:20:c2:08:07:81:c6:18:4a:57:
f9:ca:7f:8d:63:44:b9:e8:3f:fc:5b:d7:39:75:a5:65:fe:17:
91:62:f5:1d:5b:34:a5:ae:8c:cc:09:e3:1e:c6:55:90:02:ac:
dc:dc:d1:5a:18:b8:0b:01:06:db:af:64:21:44:e0:3d:fb:e8:
59:ac:50:10:73:9e:88:67:2c:a3:c3:5d:aa:3e:7a:96:21:9f:
cb:da:2b:4b:73:5e:17:13:8f:08:8f:79:2b:d5:b8:76:90:7c:
be:8f:a2:59:54:47:7f:75:cc:05:20:0b:3a:2c:dc:fa:65:b9:
7d:94:e0:70:4b:86:65:71:b8:97:e5:85:e9:04:53:d4:12:36:
21:38:4a:7a:fd:91:1a:79:60:69:7e:2a:97:ce:73:63:61:7a:
b0:94:2d:d0:76:1d:70:65:c0:b5:35:df:f5:86:26:b4:01:43:
a1:80:df:b4:b8:0a:38:98:d3:50:f1:9d:7d:1b:bb:d2:d9:4f:
a5:ce:12:e7:58:99:80:21:08:4d:a6:c8:bb:48:be:19:e2:1c:
e0:e5:c1:69:de:1c:14:2e:21:8e:89:e0:c9:59:d7:cb:12:d9:
b0:96:77:fc:03:e5:81:e8:e6:ff:94:00:20:3c:86:ff:81:3f:
b6:98:6c:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 16:26:23 2026 by rpki-client