Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/84bbe3-4c61-4033-b9af-9320fe13e5fe/1/TDn4uP66ttIJokmB45n9YEMuHMk.mft
File: TDn4uP66ttIJokmB45n9YEMuHMk.mft (raw, json)
Hash identifier: MlOwqyPttF1W3mYwWme7IiLpcI/XilgbV0s6keJiuF4=
Subject key identifier: 2E:A5:44:18:A8:B9:B4:7F:39:F0:FC:CC:B3:40:54:83:94:DC:AF:36
Authority key identifier: 4C:39:F8:B8:FE:BA:B6:D2:09:A2:49:81:E3:99:FD:60:43:2E:1C:C9
Certificate issuer: /CN=4c39f8b8febab6d209a24981e399fd60432e1cc9
Certificate serial: 019F9F5FFB3ADE3EE0BE7E6604581E8DBA04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TDn4uP66ttIJokmB45n9YEMuHMk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/84bbe3-4c61-4033-b9af-9320fe13e5fe/1/TDn4uP66ttIJokmB45n9YEMuHMk.mft
Manifest number: 0E3A
Signing time: Sun 26 Jul 2026 17:01:35 +0000
Manifest this update: Sun 26 Jul 2026 17:01:35 +0000
Manifest next update: Mon 27 Jul 2026 17:01:35 +0000
Files and hashes: 1: Oz2JTTFEUToA4rcARVfBKfZ-bNM.roa (hash: fQeMDFsyE9NlA+JYKajgKZ3XxSRtkUJy780HUIKIiOE=)
2: TDn4uP66ttIJokmB45n9YEMuHMk.crl (hash: 7sBfierXQK3LD2Uh7wi9cGinKhekEYH475xL2Bsi2rg=)
3: p2AFdxK-ZHTv-IUkNOyxXK_-F34.roa (hash: XMvgQ2GpOxolBIvE+NkJU3WDfGq3UMdrz3BN6w9ftF0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/84bbe3-4c61-4033-b9af-9320fe13e5fe/1/TDn4uP66ttIJokmB45n9YEMuHMk.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/84bbe3-4c61-4033-b9af-9320fe13e5fe/1/TDn4uP66ttIJokmB45n9YEMuHMk.mft
rsync://rpki.ripe.net/repository/DEFAULT/TDn4uP66ttIJokmB45n9YEMuHMk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 14:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:9f:5f:fb:3a:de:3e:e0:be:7e:66:04:58:1e:8d:ba:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c39f8b8febab6d209a24981e399fd60432e1cc9
Validity
Not Before: Jul 26 17:01:35 2026 GMT
Not After : Jul 27 17:01:35 2026 GMT
Subject: CN=2ea54418a8b9b47f39f0fcccb340548394dcaf36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:73:cc:fd:36:d8:06:9a:e8:9a:66:60:0a:29:
87:ef:9d:89:64:29:7d:ca:6b:81:6a:3d:3f:fa:b8:
ca:5c:92:ad:24:d8:a6:37:42:ce:2f:30:fd:9c:4a:
9a:1c:5c:2c:30:e9:db:79:c6:7c:4a:91:bc:c4:7e:
e2:61:0e:18:0b:c8:7e:68:f6:dc:f7:5d:6c:65:88:
8c:02:61:19:0b:ae:90:94:12:d9:41:0a:4f:1c:cc:
0e:77:43:9e:91:1d:eb:db:66:a5:f0:d6:44:de:53:
f8:4a:51:ba:2f:f8:b5:fe:df:53:ca:7e:f7:23:3c:
17:92:03:ea:49:90:8e:7e:0a:14:36:9c:64:46:ad:
f5:de:3d:18:50:7e:a6:61:e1:ca:85:e0:c6:17:61:
10:61:bc:10:15:49:ee:aa:52:45:1e:f1:4e:54:a7:
1c:b3:48:2a:cc:0d:e9:96:76:fa:c3:84:03:97:f5:
95:79:fc:2b:41:ef:09:3a:5e:fe:99:78:e4:1c:96:
03:13:c4:c2:9f:bc:5d:38:70:60:f2:f2:6e:59:7a:
43:34:bd:ad:77:85:1f:ea:f1:c4:25:b6:26:1e:6e:
88:43:d8:63:a7:6b:89:e8:00:53:78:47:4b:fa:c3:
d7:ef:7f:fc:54:93:6f:c8:83:58:e7:39:88:9b:90:
0e:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:A5:44:18:A8:B9:B4:7F:39:F0:FC:CC:B3:40:54:83:94:DC:AF:36
X509v3 Authority Key Identifier:
keyid:4C:39:F8:B8:FE:BA:B6:D2:09:A2:49:81:E3:99:FD:60:43:2E:1C:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TDn4uP66ttIJokmB45n9YEMuHMk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/84bbe3-4c61-4033-b9af-9320fe13e5fe/1/TDn4uP66ttIJokmB45n9YEMuHMk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/84bbe3-4c61-4033-b9af-9320fe13e5fe/1/TDn4uP66ttIJokmB45n9YEMuHMk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:89:38:16:34:40:35:ec:f2:2a:2b:2c:04:52:fc:65:c6:3d:
53:07:2a:9d:85:3d:15:46:67:40:82:df:81:fc:47:15:26:bd:
72:fa:f4:af:37:60:60:75:65:5d:a3:03:a4:e5:50:31:54:08:
36:ba:c0:fa:e7:86:88:a2:2f:96:ef:2e:42:4e:06:c0:30:d5:
10:ce:2d:c7:0f:ff:4a:85:a0:94:72:af:1c:a1:39:87:a6:aa:
ec:97:93:d2:33:9c:6f:17:a1:ef:c0:07:5d:99:cf:4a:7e:8b:
57:78:91:70:e8:41:c0:67:b1:d2:d1:86:c9:e6:91:ac:24:47:
cc:95:99:25:3b:30:0c:87:c0:3d:98:36:c8:31:d9:bc:97:1a:
f0:92:c9:db:3b:57:ff:5e:a7:2d:18:e9:ff:cb:9f:a0:6b:eb:
11:ec:c8:db:d2:25:42:76:d8:bb:67:c0:8e:be:cf:18:00:44:
b5:41:ab:18:1b:2e:cc:26:06:04:2b:41:40:3d:0d:30:00:ac:
02:91:ee:d4:9b:13:48:76:44:54:fe:2e:6b:54:19:30:1e:6e:
74:ac:b0:0a:93:e4:79:9e:0e:84:36:76:55:7a:7c:5b:86:8f:
ba:10:7e:b5:c9:04:3a:b4:60:e8:48:25:ba:a1:bc:b2:1f:1b:
19:12:30:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 26 21:24:54 2026 by rpki-client