Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/84bbe3-4c61-4033-b9af-9320fe13e5fe/1/TDn4uP66ttIJokmB45n9YEMuHMk.mft
File: TDn4uP66ttIJokmB45n9YEMuHMk.mft (raw, json)
Hash identifier: Ttk1Nx2mDOQOrZaUv3NrIdiw2myW/GG0QaxXx0+K8fU=
Subject key identifier: 62:70:98:4E:48:C8:69:EE:44:1C:6A:BF:DF:63:EF:10:2E:C3:61:85
Authority key identifier: 4C:39:F8:B8:FE:BA:B6:D2:09:A2:49:81:E3:99:FD:60:43:2E:1C:C9
Certificate issuer: /CN=4c39f8b8febab6d209a24981e399fd60432e1cc9
Certificate serial: 019EB5B2D22B0F7D50B4F67808C752A3E93E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TDn4uP66ttIJokmB45n9YEMuHMk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/84bbe3-4c61-4033-b9af-9320fe13e5fe/1/TDn4uP66ttIJokmB45n9YEMuHMk.mft
Manifest number: 0DC1
Signing time: Thu 11 Jun 2026 08:00:55 +0000
Manifest this update: Thu 11 Jun 2026 08:00:55 +0000
Manifest next update: Fri 12 Jun 2026 08:00:55 +0000
Files and hashes: 1: Oz2JTTFEUToA4rcARVfBKfZ-bNM.roa (hash: fQeMDFsyE9NlA+JYKajgKZ3XxSRtkUJy780HUIKIiOE=)
2: TDn4uP66ttIJokmB45n9YEMuHMk.crl (hash: PcE+OLkT6PBRTHf6V7lItM05CjkWutgfTfWctOM+/ng=)
3: p2AFdxK-ZHTv-IUkNOyxXK_-F34.roa (hash: XMvgQ2GpOxolBIvE+NkJU3WDfGq3UMdrz3BN6w9ftF0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/84bbe3-4c61-4033-b9af-9320fe13e5fe/1/TDn4uP66ttIJokmB45n9YEMuHMk.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/84bbe3-4c61-4033-b9af-9320fe13e5fe/1/TDn4uP66ttIJokmB45n9YEMuHMk.mft
rsync://rpki.ripe.net/repository/DEFAULT/TDn4uP66ttIJokmB45n9YEMuHMk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 08:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b5:b2:d2:2b:0f:7d:50:b4:f6:78:08:c7:52:a3:e9:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c39f8b8febab6d209a24981e399fd60432e1cc9
Validity
Not Before: Jun 11 08:00:55 2026 GMT
Not After : Jun 12 08:00:55 2026 GMT
Subject: CN=6270984e48c869ee441c6abfdf63ef102ec36185
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:56:72:d3:14:ef:e1:2a:55:c9:3f:b7:e6:1d:
17:2b:23:4a:4a:3a:6e:e6:c3:12:6c:57:c5:b3:ad:
b0:04:66:27:b3:d8:b3:5b:cc:f6:5e:9f:f4:3e:d5:
10:36:9c:30:34:27:c8:33:4b:25:43:74:26:d4:db:
13:7a:35:b4:27:a5:43:7d:cb:d3:5a:5d:ef:1d:7c:
89:a9:4f:51:27:bb:df:70:96:0a:ee:57:cf:52:75:
e2:50:6a:c8:47:79:67:0d:e5:9a:aa:54:be:b6:e4:
09:55:65:4a:36:58:d2:a7:5f:18:64:78:03:b7:77:
22:16:c3:a8:3b:ba:d9:df:f4:08:1f:2e:fc:85:a5:
af:8d:54:b2:1a:2c:82:e6:f3:13:b8:bd:ac:35:4a:
a9:7b:fd:35:d2:16:9f:fb:f6:ab:68:37:ae:1e:2e:
e9:ea:82:c6:f1:b1:03:6d:4c:19:72:16:69:90:e1:
1b:ab:55:ca:0d:dc:a1:be:cb:5f:c8:18:aa:43:34:
11:80:3a:20:a4:87:f9:3c:37:67:64:2c:90:d1:d8:
5c:91:6d:c7:e7:8a:94:90:01:72:f3:a9:69:c9:9a:
d8:b1:93:d6:88:d7:ec:cb:af:1a:95:3d:7c:13:c1:
0c:5e:2a:4f:6a:d2:19:f9:1e:b3:71:76:79:fc:6f:
ad:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:70:98:4E:48:C8:69:EE:44:1C:6A:BF:DF:63:EF:10:2E:C3:61:85
X509v3 Authority Key Identifier:
keyid:4C:39:F8:B8:FE:BA:B6:D2:09:A2:49:81:E3:99:FD:60:43:2E:1C:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TDn4uP66ttIJokmB45n9YEMuHMk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/84bbe3-4c61-4033-b9af-9320fe13e5fe/1/TDn4uP66ttIJokmB45n9YEMuHMk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/84bbe3-4c61-4033-b9af-9320fe13e5fe/1/TDn4uP66ttIJokmB45n9YEMuHMk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:8d:f1:0e:27:a9:6a:0e:c0:30:18:20:3f:3b:eb:d7:aa:fb:
6e:5e:0c:17:bf:e4:65:0a:c3:ac:72:57:85:3d:a1:1c:43:4d:
c8:86:61:22:bf:3d:45:1d:21:d5:60:d6:c5:2c:1a:0c:ec:88:
79:12:e5:78:31:d5:07:47:31:59:0a:90:39:35:de:5e:9a:5e:
57:3d:0d:31:4b:53:59:68:d0:a7:d0:1c:9d:98:af:40:64:6e:
ac:2d:ca:76:d9:82:d3:d0:b0:87:84:db:de:6b:34:b7:c2:fb:
30:42:74:c4:19:53:68:8e:76:3b:37:38:92:23:1f:a2:8f:05:
a9:25:a3:13:43:17:b4:f7:10:4b:f4:11:f0:c5:6d:11:f8:8e:
eb:49:6d:04:0a:31:84:1a:7b:6a:cc:a4:e4:39:2f:a7:94:72:
30:23:bc:b6:6b:86:e4:04:44:98:19:e6:a9:cd:c6:7a:62:87:
b7:74:aa:2c:e4:89:e8:93:ab:0c:32:40:c7:2a:74:4d:ae:64:
c4:59:5f:04:e5:41:f0:39:a5:67:15:d3:7c:0c:5a:db:7f:7e:
da:9d:a6:2d:0a:36:ea:2b:7a:65:fb:3b:c8:be:8e:94:c1:47:
fe:3b:c3:d2:00:a1:a2:09:19:06:6a:e1:3e:83:77:fc:eb:6c:
8a:42:9a:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 18:10:50 2026 by rpki-client