Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/84bbe3-4c61-4033-b9af-9320fe13e5fe/1/TDn4uP66ttIJokmB45n9YEMuHMk.mft
File: TDn4uP66ttIJokmB45n9YEMuHMk.mft (raw, json)
Hash identifier: xb3maJ6S2lp8cbkAkRmXMJtEFiqAwS29omC5k25BI5M=
Subject key identifier: BB:F8:C2:57:9A:AC:A5:33:46:3C:87:86:9D:22:CB:BB:A5:4A:C4:98
Authority key identifier: 4C:39:F8:B8:FE:BA:B6:D2:09:A2:49:81:E3:99:FD:60:43:2E:1C:C9
Certificate issuer: /CN=4c39f8b8febab6d209a24981e399fd60432e1cc9
Certificate serial: 019EB7A1278739F861D871BB25B8949DD5B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TDn4uP66ttIJokmB45n9YEMuHMk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/84bbe3-4c61-4033-b9af-9320fe13e5fe/1/TDn4uP66ttIJokmB45n9YEMuHMk.mft
Manifest number: 0DC2
Signing time: Thu 11 Jun 2026 17:00:52 +0000
Manifest this update: Thu 11 Jun 2026 17:00:52 +0000
Manifest next update: Fri 12 Jun 2026 17:00:52 +0000
Files and hashes: 1: Oz2JTTFEUToA4rcARVfBKfZ-bNM.roa (hash: fQeMDFsyE9NlA+JYKajgKZ3XxSRtkUJy780HUIKIiOE=)
2: TDn4uP66ttIJokmB45n9YEMuHMk.crl (hash: 04aK1ZeUTy06hKGgFAZKCfAIKCIs0qNKOENLPinGjJc=)
3: p2AFdxK-ZHTv-IUkNOyxXK_-F34.roa (hash: XMvgQ2GpOxolBIvE+NkJU3WDfGq3UMdrz3BN6w9ftF0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/84bbe3-4c61-4033-b9af-9320fe13e5fe/1/TDn4uP66ttIJokmB45n9YEMuHMk.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/84bbe3-4c61-4033-b9af-9320fe13e5fe/1/TDn4uP66ttIJokmB45n9YEMuHMk.mft
rsync://rpki.ripe.net/repository/DEFAULT/TDn4uP66ttIJokmB45n9YEMuHMk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 13:27:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b7:a1:27:87:39:f8:61:d8:71:bb:25:b8:94:9d:d5:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c39f8b8febab6d209a24981e399fd60432e1cc9
Validity
Not Before: Jun 11 17:00:52 2026 GMT
Not After : Jun 12 17:00:52 2026 GMT
Subject: CN=bbf8c2579aaca533463c87869d22cbbba54ac498
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:c3:c0:30:5a:8d:87:ba:07:77:36:39:2b:ec:
4f:7e:70:06:ef:66:21:ea:10:c1:4c:7f:16:63:d2:
30:4b:e2:8d:c4:9e:af:ed:f3:3e:d4:ed:7a:e1:0f:
53:54:f2:13:ae:4b:96:73:c0:74:dd:61:50:92:87:
f7:ef:cf:49:da:88:f9:f7:15:cb:8d:9b:b5:d3:19:
a0:b6:e1:45:3c:04:1b:03:c2:3e:93:b6:13:ad:09:
13:90:71:60:70:2d:d7:37:2c:6f:86:6d:ab:32:df:
ee:8a:de:07:0d:30:eb:c6:92:27:60:09:98:b1:57:
ab:0e:4a:b1:b4:55:3e:f7:48:b6:bc:d4:01:1b:f5:
be:09:56:9a:d1:b7:90:ca:07:ee:81:e7:df:52:18:
18:b1:0e:6a:5d:9c:1f:d3:79:f2:95:8d:45:6d:eb:
be:77:85:cf:8f:7f:6b:c8:a5:1b:ff:a4:b1:94:ca:
21:0e:97:2e:9d:a2:e8:cd:93:94:4a:e6:54:d2:4b:
4c:a6:d3:90:72:9a:4f:68:30:95:31:34:11:64:c6:
ac:ad:fb:fa:d8:4f:32:58:af:85:6f:77:32:aa:ae:
1e:d6:10:91:e4:5c:98:37:12:98:51:9b:ef:d4:8e:
49:67:90:c8:33:f5:09:db:c4:ff:32:fb:61:e9:f6:
70:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:F8:C2:57:9A:AC:A5:33:46:3C:87:86:9D:22:CB:BB:A5:4A:C4:98
X509v3 Authority Key Identifier:
keyid:4C:39:F8:B8:FE:BA:B6:D2:09:A2:49:81:E3:99:FD:60:43:2E:1C:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TDn4uP66ttIJokmB45n9YEMuHMk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/84bbe3-4c61-4033-b9af-9320fe13e5fe/1/TDn4uP66ttIJokmB45n9YEMuHMk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/84bbe3-4c61-4033-b9af-9320fe13e5fe/1/TDn4uP66ttIJokmB45n9YEMuHMk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:5a:29:ba:61:41:55:df:54:25:8b:dd:01:86:4f:82:58:61:
52:ce:6d:26:b6:65:19:31:fd:0f:11:05:47:df:94:31:0b:5c:
f7:12:d1:ae:92:a1:d0:8c:62:ba:f1:ba:27:c5:ce:e5:a1:e3:
ca:c7:7b:f0:77:65:82:cc:fe:c8:ac:6b:1f:56:c6:12:4d:02:
c0:cc:41:aa:64:f1:75:c3:37:e2:fa:8b:3c:a7:44:bf:00:e5:
68:e6:f0:ed:eb:36:f0:1f:65:cb:68:29:ce:f2:08:e9:40:6f:
8e:f0:0f:6d:b7:1e:6a:36:64:7c:34:5f:80:06:86:c0:68:3e:
bf:af:7e:0c:e1:60:15:42:6a:1f:49:60:af:ca:ee:f1:97:d9:
48:a2:99:f3:0b:a2:75:b7:b8:19:7d:25:f8:7a:cc:d0:4b:87:
0a:36:c1:28:02:47:f1:15:89:0b:17:4d:de:97:2e:0e:38:1c:
d6:1a:5a:94:6f:6b:51:b0:1c:db:62:e1:ca:aa:e4:08:a8:02:
cc:32:79:91:7b:62:77:5c:4c:e7:fe:27:c8:52:fd:1d:bf:d5:
cb:db:a9:fc:4e:c7:ac:a2:c6:44:ae:fb:70:55:5c:5c:8c:18:
f7:bd:1e:2b:1b:00:70:e1:fc:d8:af:8e:9b:6c:3e:38:d8:40:
9f:44:49:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 19:20:20 2026 by rpki-client