Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/df6e25-923c-4838-864f-d4b37e44ab7c/1/TDkFWmmQuCQIzxq_KTE3gOJJpMk.mft
File: TDkFWmmQuCQIzxq_KTE3gOJJpMk.mft (raw, json)
Hash identifier: dB7cS8k+fT58syh7pDjtns58e/Qfqxkx/hN+oG+FTKQ=
Subject key identifier: C9:9D:49:6D:DD:E6:12:A7:69:DA:03:62:5A:49:8C:46:40:A7:25:3D
Authority key identifier: 4C:39:05:5A:69:90:B8:24:08:CF:1A:BF:29:31:37:80:E2:49:A4:C9
Certificate issuer: /CN=4c39055a6990b82408cf1abf29313780e249a4c9
Certificate serial: 019D9A750C52FA34387A35D17440520C119B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TDkFWmmQuCQIzxq_KTE3gOJJpMk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/df6e25-923c-4838-864f-d4b37e44ab7c/1/TDkFWmmQuCQIzxq_KTE3gOJJpMk.mft
Manifest number: 142B
Signing time: Fri 17 Apr 2026 08:00:55 +0000
Manifest this update: Fri 17 Apr 2026 08:00:55 +0000
Manifest next update: Sat 18 Apr 2026 08:00:55 +0000
Files and hashes: 1: HUsAlOvemtR2fE4jnbiG5JPoxag.roa (hash: f7lJEppqzDneJ9AJzuUYrOlyEaByUZeV+0bof3SkTsE=)
2: TDkFWmmQuCQIzxq_KTE3gOJJpMk.crl (hash: VAobonO1jSGRHS9TbwQPkAd86P8qhuXKJC16EHa6rfs=)
3: l0q8XWJ1Kq-tzhNgucWKrkROmtg.roa (hash: 6lWXlqZNdk+BzRRkFfjQUwCi/8dW4M9stYINXvYCgl8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/df6e25-923c-4838-864f-d4b37e44ab7c/1/TDkFWmmQuCQIzxq_KTE3gOJJpMk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/df6e25-923c-4838-864f-d4b37e44ab7c/1/TDkFWmmQuCQIzxq_KTE3gOJJpMk.mft
rsync://rpki.ripe.net/repository/DEFAULT/TDkFWmmQuCQIzxq_KTE3gOJJpMk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:75:0c:52:fa:34:38:7a:35:d1:74:40:52:0c:11:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c39055a6990b82408cf1abf29313780e249a4c9
Validity
Not Before: Apr 17 08:00:55 2026 GMT
Not After : Apr 18 08:00:55 2026 GMT
Subject: CN=c99d496ddde612a769da03625a498c4640a7253d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:d5:2e:fa:e4:db:22:85:1a:e9:aa:e2:6a:1b:
33:b4:0c:27:7a:81:57:ce:2f:22:3f:3b:4a:c0:d8:
df:5b:8c:4f:82:3a:7e:47:b4:55:74:f5:6a:f4:1d:
9e:88:23:15:5e:84:41:d7:58:31:c5:21:5f:66:a5:
41:f8:94:74:92:2d:af:30:a1:1b:f4:45:0a:be:fc:
46:90:18:df:96:d0:e8:7d:12:97:be:4b:c7:d0:fc:
23:f2:48:cb:60:fb:f4:8f:48:da:7b:87:fb:28:cd:
e5:03:e7:7a:6d:bb:e3:ce:70:ab:12:56:99:94:34:
2e:76:4e:6a:e5:85:dc:5d:11:da:0f:e3:28:d1:97:
dc:26:d9:6d:b1:60:f0:5a:6f:87:98:2c:eb:3e:08:
73:c4:fc:1d:43:fe:cf:a3:e7:7e:6e:0d:9e:c5:88:
cb:0a:d8:39:b0:aa:b9:17:77:28:dd:a6:9c:33:8f:
41:ad:7c:b6:00:0c:37:db:1a:0f:92:0f:f3:ca:09:
50:ac:26:8f:f8:22:98:95:40:7d:b0:4f:b1:c3:6a:
01:00:b1:ed:bb:3d:ae:fa:a9:ab:9b:22:c5:fd:85:
33:a0:14:ed:cf:f6:e0:5a:7c:e1:d1:df:33:e0:75:
e6:c4:4f:b4:c8:1e:4b:c1:cd:fc:11:31:49:cc:6c:
60:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:9D:49:6D:DD:E6:12:A7:69:DA:03:62:5A:49:8C:46:40:A7:25:3D
X509v3 Authority Key Identifier:
keyid:4C:39:05:5A:69:90:B8:24:08:CF:1A:BF:29:31:37:80:E2:49:A4:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TDkFWmmQuCQIzxq_KTE3gOJJpMk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/df6e25-923c-4838-864f-d4b37e44ab7c/1/TDkFWmmQuCQIzxq_KTE3gOJJpMk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/df6e25-923c-4838-864f-d4b37e44ab7c/1/TDkFWmmQuCQIzxq_KTE3gOJJpMk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:7f:51:3a:5e:9e:04:4b:05:cc:6c:f3:b1:8f:a3:60:a1:76:
5a:cb:58:70:e2:05:d0:a5:b9:30:cc:62:e5:88:a4:1d:5b:3e:
f3:9b:27:b4:76:52:bf:14:ef:80:eb:92:eb:82:00:16:c2:0f:
f0:48:bb:eb:20:d4:2d:5b:6f:12:36:5a:e8:2e:d6:f8:4e:dc:
ca:12:c8:82:7f:e2:db:2a:1d:96:fa:8d:51:b8:67:c3:f5:8e:
0b:85:4b:3d:5c:00:f8:bb:b8:a5:c9:cb:b6:de:bd:76:36:ad:
c8:91:8e:f9:43:a9:a9:90:d1:23:63:7c:24:a8:8f:e4:c4:af:
30:de:95:60:76:cd:59:0e:cb:2d:9b:fc:c0:e1:42:5f:cc:98:
3b:0d:24:eb:13:f3:4c:33:ae:78:3d:de:65:e7:a5:ed:68:2a:
a8:53:4b:f5:33:5a:79:eb:ce:c5:1e:e8:45:26:d1:2e:9d:0b:
64:60:de:0c:af:b3:c5:eb:1f:01:30:30:0f:d1:c2:df:8c:1f:
f3:5a:63:1a:84:cd:50:72:70:ff:ad:8d:a1:76:b5:f3:ed:05:
07:fe:98:44:ac:ae:df:32:ca:cd:39:17:af:2b:8b:68:fb:a7:
74:d1:68:65:dc:5e:72:0b:26:4d:1e:ed:16:bb:a7:09:93:e6:
a9:f0:ee:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:39:21 2026 by rpki-client