Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3f/84bbe3-4c61-4033-b9af-9320fe13e5fe/1/TDn4uP66ttIJokmB45n9YEMuHMk.mft
File: TDn4uP66ttIJokmB45n9YEMuHMk.mft (raw, json)
Hash identifier: Bz6SGBKG48b1E1+7RuNUt3aX8elb5D4fxYCr6e2lzM4=
Subject key identifier: 2F:A7:0F:AF:CC:E6:4E:0C:55:76:D4:3E:28:A7:45:DE:65:C9:36:EB
Authority key identifier: 4C:39:F8:B8:FE:BA:B6:D2:09:A2:49:81:E3:99:FD:60:43:2E:1C:C9
Certificate issuer: /CN=4c39f8b8febab6d209a24981e399fd60432e1cc9
Certificate serial: 01A1841A484575641C655CD6B911FE6B6083
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TDn4uP66ttIJokmB45n9YEMuHMk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/84bbe3-4c61-4033-b9af-9320fe13e5fe/1/TDn4uP66ttIJokmB45n9YEMuHMk.mft
Manifest number: 0F35
Signing time: Wed 28 Oct 2026 20:01:17 +0000
Manifest this update: Wed 28 Oct 2026 20:01:17 +0000
Manifest next update: Thu 29 Oct 2026 20:01:17 +0000
Files and hashes: 1: Oz2JTTFEUToA4rcARVfBKfZ-bNM.roa (hash: fQeMDFsyE9NlA+JYKajgKZ3XxSRtkUJy780HUIKIiOE=)
2: TDn4uP66ttIJokmB45n9YEMuHMk.crl (hash: 7IzTCW0Ipk9d88y6Qn0WmlGBI/em2ZsMLc8uo7fN6+g=)
3: p2AFdxK-ZHTv-IUkNOyxXK_-F34.roa (hash: XMvgQ2GpOxolBIvE+NkJU3WDfGq3UMdrz3BN6w9ftF0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/84bbe3-4c61-4033-b9af-9320fe13e5fe/1/TDn4uP66ttIJokmB45n9YEMuHMk.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/84bbe3-4c61-4033-b9af-9320fe13e5fe/1/TDn4uP66ttIJokmB45n9YEMuHMk.mft
rsync://rpki.ripe.net/repository/DEFAULT/TDn4uP66ttIJokmB45n9YEMuHMk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 20:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:84:1a:48:45:75:64:1c:65:5c:d6:b9:11:fe:6b:60:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c39f8b8febab6d209a24981e399fd60432e1cc9
Validity
Not Before: Oct 28 20:01:17 2026 GMT
Not After : Oct 29 20:01:17 2026 GMT
Subject: CN=2fa70fafcce64e0c5576d43e28a745de65c936eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:d6:f2:47:a6:63:0e:2a:8e:41:9e:2c:22:26:
a7:14:e0:af:41:15:5e:70:c8:c8:04:7a:13:1c:e6:
f4:4b:6a:29:ea:3e:f0:07:93:cc:18:82:48:31:c5:
75:b6:2c:96:e7:51:ca:ef:20:c7:ac:a0:8b:1a:34:
16:8d:f7:ca:b5:5d:53:23:0c:33:cb:04:74:68:f0:
0c:3d:0d:c4:71:ac:8f:ab:88:f8:23:d4:c3:34:54:
65:7a:9d:3c:ce:2c:b1:8f:a1:ed:55:72:1e:9d:06:
62:ae:ee:75:bd:b9:a6:f5:62:ca:7e:b1:52:de:4a:
e5:6d:fd:fe:9c:77:b8:72:c2:58:8a:e1:58:34:18:
f8:16:cf:74:17:15:12:09:a3:0a:42:57:9f:5e:a7:
3c:d8:4a:e8:63:ab:fc:2c:f8:f2:cf:a6:02:79:e9:
a8:54:2e:3f:f6:3b:f4:7c:17:90:87:7b:e2:60:f9:
a5:9e:c6:77:bd:23:7a:5a:d2:00:22:8d:16:ff:cc:
d6:fc:5e:24:4c:30:76:32:d5:95:26:4a:14:22:96:
bd:d1:13:c3:73:25:a2:36:e9:10:b3:fc:36:73:83:
c3:83:43:1a:f9:bf:13:a7:49:11:b8:6d:88:90:be:
00:ab:69:60:dd:9f:9d:95:96:3c:b1:98:03:24:66:
0a:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:A7:0F:AF:CC:E6:4E:0C:55:76:D4:3E:28:A7:45:DE:65:C9:36:EB
X509v3 Authority Key Identifier:
keyid:4C:39:F8:B8:FE:BA:B6:D2:09:A2:49:81:E3:99:FD:60:43:2E:1C:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TDn4uP66ttIJokmB45n9YEMuHMk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/84bbe3-4c61-4033-b9af-9320fe13e5fe/1/TDn4uP66ttIJokmB45n9YEMuHMk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/84bbe3-4c61-4033-b9af-9320fe13e5fe/1/TDn4uP66ttIJokmB45n9YEMuHMk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:68:1e:1c:d3:0d:c5:0e:3b:3f:64:3f:3b:e8:24:8f:33:3e:
9b:35:f6:1b:59:e0:6e:77:fb:b4:6e:52:82:26:6b:d0:55:b3:
9d:b6:dc:09:64:d1:d1:ac:3e:a4:e5:0e:5b:17:98:14:5a:0e:
10:57:a2:bc:1d:68:0b:98:11:42:77:47:21:64:91:41:01:7a:
3b:88:9b:89:cc:68:8f:bc:03:5e:66:a3:6b:01:3c:63:b2:48:
f6:04:ef:f4:10:24:8a:59:c9:07:ac:58:ba:df:54:61:5e:44:
64:22:86:58:ea:0e:4f:c5:0b:9d:91:fb:84:6e:5b:f5:10:a7:
ed:cd:58:6d:fa:2b:cb:c0:9a:47:d2:ae:23:df:70:a0:38:8d:
03:49:1f:c7:c9:f1:d6:56:39:a9:29:31:3e:f9:12:fa:80:f3:
0e:e4:e4:18:eb:00:98:23:5b:04:b2:ec:75:51:49:b5:92:9a:
bc:ed:e6:a3:35:2b:39:b5:e0:d4:85:cc:3f:e0:f0:79:cc:79:
a2:fe:8d:05:a6:85:a7:bd:6b:7f:c3:87:bd:a3:c1:11:6a:39:
40:cd:ce:8c:3d:81:03:0e:ef:68:e0:a7:49:64:37:08:f1:57:
b9:79:da:28:bf:bd:79:b0:5c:28:86:8c:d9:5d:1e:40:aa:41:
bd:73:44:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 05:48:20 2026 by rpki-client