Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3f/84bbe3-4c61-4033-b9af-9320fe13e5fe/1/TDn4uP66ttIJokmB45n9YEMuHMk.mft
File: TDn4uP66ttIJokmB45n9YEMuHMk.mft (raw, json)
Hash identifier: ObgsP2MyZgJodEl6z9Ru2MCiZqzk8zeDnVFKDGXdpvs=
Subject key identifier: 2B:20:93:A8:15:AE:2E:F2:57:6F:C9:FA:7E:1F:CC:D6:9C:13:E0:24
Authority key identifier: 4C:39:F8:B8:FE:BA:B6:D2:09:A2:49:81:E3:99:FD:60:43:2E:1C:C9
Certificate issuer: /CN=4c39f8b8febab6d209a24981e399fd60432e1cc9
Certificate serial: 01A08AFA377D6E670AF6748346DBFC1DCB30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TDn4uP66ttIJokmB45n9YEMuHMk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/84bbe3-4c61-4033-b9af-9320fe13e5fe/1/TDn4uP66ttIJokmB45n9YEMuHMk.mft
Manifest number: 0EB4
Signing time: Thu 10 Sep 2026 11:00:48 +0000
Manifest this update: Thu 10 Sep 2026 11:00:48 +0000
Manifest next update: Fri 11 Sep 2026 11:00:48 +0000
Files and hashes: 1: Oz2JTTFEUToA4rcARVfBKfZ-bNM.roa (hash: fQeMDFsyE9NlA+JYKajgKZ3XxSRtkUJy780HUIKIiOE=)
2: TDn4uP66ttIJokmB45n9YEMuHMk.crl (hash: zAn0Fwk9zVeN4BQM/06qyCHVkNvYsW4GCPt+wuq2sJU=)
3: p2AFdxK-ZHTv-IUkNOyxXK_-F34.roa (hash: XMvgQ2GpOxolBIvE+NkJU3WDfGq3UMdrz3BN6w9ftF0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/84bbe3-4c61-4033-b9af-9320fe13e5fe/1/TDn4uP66ttIJokmB45n9YEMuHMk.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/84bbe3-4c61-4033-b9af-9320fe13e5fe/1/TDn4uP66ttIJokmB45n9YEMuHMk.mft
rsync://rpki.ripe.net/repository/DEFAULT/TDn4uP66ttIJokmB45n9YEMuHMk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 11:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:fa:37:7d:6e:67:0a:f6:74:83:46:db:fc:1d:cb:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c39f8b8febab6d209a24981e399fd60432e1cc9
Validity
Not Before: Sep 10 11:00:48 2026 GMT
Not After : Sep 11 11:00:48 2026 GMT
Subject: CN=2b2093a815ae2ef2576fc9fa7e1fccd69c13e024
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:6a:bd:42:61:43:5d:8c:2e:22:03:ab:94:61:
d5:51:81:f2:69:98:5b:dc:b8:ef:97:e7:d2:ff:a3:
ab:70:1e:88:28:3e:a3:8b:c6:a7:d1:71:f0:71:1f:
0c:29:bc:06:62:11:91:fd:6a:34:58:31:f7:e3:ac:
a5:8c:71:11:d8:06:3f:c8:07:37:e8:23:af:b9:d2:
3b:ff:86:d9:6d:6f:7c:cd:4b:7d:64:f2:c7:46:c2:
9b:36:33:fb:ef:0f:32:7e:d2:e5:01:91:31:97:9c:
bf:4e:1d:94:40:7f:28:41:a3:53:2b:04:d4:bc:eb:
d7:9a:9e:04:5f:69:01:0c:7c:76:1f:45:d6:04:d9:
d8:bc:57:bb:f0:51:38:9d:08:9d:68:ad:f1:45:1f:
1a:9e:18:47:76:3a:80:5b:72:ce:af:bb:52:b9:ea:
b7:4f:41:08:77:71:53:8f:c1:6f:c3:79:74:33:16:
36:84:8f:ec:c9:46:43:37:d8:62:08:f0:87:45:09:
fb:03:f9:bf:70:1c:9f:ce:f2:df:65:e7:92:29:4c:
ec:69:b8:2f:9d:8b:44:76:a3:06:e4:63:5c:15:fa:
bc:d1:b9:55:ce:e4:9e:85:4d:de:eb:93:6a:5d:db:
52:01:9b:48:0f:03:9b:d9:c1:ae:70:45:7a:85:cb:
e6:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:20:93:A8:15:AE:2E:F2:57:6F:C9:FA:7E:1F:CC:D6:9C:13:E0:24
X509v3 Authority Key Identifier:
keyid:4C:39:F8:B8:FE:BA:B6:D2:09:A2:49:81:E3:99:FD:60:43:2E:1C:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TDn4uP66ttIJokmB45n9YEMuHMk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/84bbe3-4c61-4033-b9af-9320fe13e5fe/1/TDn4uP66ttIJokmB45n9YEMuHMk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/84bbe3-4c61-4033-b9af-9320fe13e5fe/1/TDn4uP66ttIJokmB45n9YEMuHMk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:65:69:6d:14:2e:38:ae:a2:ec:21:f0:16:01:c3:93:ca:8d:
c0:43:65:c3:38:5b:d9:8c:6d:a9:49:70:f4:0d:72:9a:19:82:
d8:35:76:16:b1:4b:d2:62:a0:8c:0e:de:87:78:a2:05:48:59:
b2:da:3a:c2:18:b0:74:e3:52:ee:67:41:07:71:9b:71:5b:38:
23:66:76:ca:a6:78:b1:74:36:54:c3:1e:25:ff:83:12:8b:5e:
73:22:10:53:cd:94:72:01:72:56:25:53:e5:98:a2:c7:06:97:
08:81:43:bf:e9:59:fe:5d:4c:df:6c:da:a6:a0:d6:60:1c:63:
e7:5f:1d:26:22:1f:cb:3e:d2:fc:37:93:c4:a3:63:cf:57:13:
23:73:14:5d:a4:5f:25:25:98:f5:a3:9a:7a:2f:94:97:d0:f8:
bc:95:61:ff:17:12:07:d3:22:36:75:f6:62:67:35:21:f4:e5:
fa:8c:ef:9b:24:0b:b7:d5:e2:0a:7d:93:33:e6:d0:20:7c:de:
ac:07:1f:96:1e:3a:af:20:19:43:3d:f6:1f:ab:57:ef:65:66:
6a:a7:d0:9b:21:6d:a9:13:68:0c:b1:de:89:3a:cf:b5:49:b0:
9c:44:84:d8:ed:93:47:e8:c4:02:1e:51:94:4f:e8:9b:41:1b:
fe:6d:09:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 17:25:22 2026 by rpki-client