Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/84bbe3-4c61-4033-b9af-9320fe13e5fe/1/TDn4uP66ttIJokmB45n9YEMuHMk.mft
File: TDn4uP66ttIJokmB45n9YEMuHMk.mft (raw, json)
Hash identifier: ANQSuEGvZHQcMSE0evObvfSB1QYmGGcF6PcnA0ZQF0A=
Subject key identifier: C2:36:3F:2E:73:48:15:32:05:55:63:D2:0A:8B:74:C0:3C:7F:44:77
Authority key identifier: 4C:39:F8:B8:FE:BA:B6:D2:09:A2:49:81:E3:99:FD:60:43:2E:1C:C9
Certificate issuer: /CN=4c39f8b8febab6d209a24981e399fd60432e1cc9
Certificate serial: 019DCC06868A93B532119226D3A120115E29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TDn4uP66ttIJokmB45n9YEMuHMk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/84bbe3-4c61-4033-b9af-9320fe13e5fe/1/TDn4uP66ttIJokmB45n9YEMuHMk.mft
Manifest number: 0D48
Signing time: Sun 26 Apr 2026 23:01:12 +0000
Manifest this update: Sun 26 Apr 2026 23:01:12 +0000
Manifest next update: Mon 27 Apr 2026 23:01:12 +0000
Files and hashes: 1: Oz2JTTFEUToA4rcARVfBKfZ-bNM.roa (hash: fQeMDFsyE9NlA+JYKajgKZ3XxSRtkUJy780HUIKIiOE=)
2: TDn4uP66ttIJokmB45n9YEMuHMk.crl (hash: LpX9cyaenaYU9hQJ3W41DOl2FvBGUe9YUSl51hnNNdw=)
3: p2AFdxK-ZHTv-IUkNOyxXK_-F34.roa (hash: XMvgQ2GpOxolBIvE+NkJU3WDfGq3UMdrz3BN6w9ftF0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/84bbe3-4c61-4033-b9af-9320fe13e5fe/1/TDn4uP66ttIJokmB45n9YEMuHMk.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/84bbe3-4c61-4033-b9af-9320fe13e5fe/1/TDn4uP66ttIJokmB45n9YEMuHMk.mft
rsync://rpki.ripe.net/repository/DEFAULT/TDn4uP66ttIJokmB45n9YEMuHMk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Apr 2026 23:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cc:06:86:8a:93:b5:32:11:92:26:d3:a1:20:11:5e:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c39f8b8febab6d209a24981e399fd60432e1cc9
Validity
Not Before: Apr 26 23:01:12 2026 GMT
Not After : Apr 27 23:01:12 2026 GMT
Subject: CN=c2363f2e73481532055563d20a8b74c03c7f4477
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:5b:73:89:80:07:28:b3:c3:03:30:b9:45:d3:
89:08:c4:a1:4b:fd:17:c6:f5:0c:26:8e:10:ea:9b:
03:2a:1e:2a:44:c2:ae:96:74:e6:c9:af:17:79:6d:
8e:54:c8:3d:f8:63:6f:38:61:ae:1d:a4:16:82:a7:
a3:04:71:bc:2c:05:51:29:9b:d6:ad:c8:3c:f5:c7:
d5:37:f5:61:0e:10:8f:d9:38:78:66:72:62:d3:a2:
c8:63:fa:0f:33:7b:8f:2c:2a:4f:a7:cc:12:7b:22:
54:eb:80:2d:02:f0:35:51:90:cf:16:04:81:c6:e0:
a3:06:15:9f:b6:db:9e:ff:1e:8a:13:b1:87:54:4d:
12:3b:97:20:e5:60:f7:f9:af:82:cf:2c:31:6e:68:
25:ea:3a:72:a4:f6:5d:6f:c5:42:57:73:b5:d9:c7:
0e:87:6c:3a:e5:f3:e0:2e:27:99:9b:4b:63:c4:9a:
d3:03:22:1a:a2:c1:f9:3d:f5:e3:7a:6c:f2:2a:fd:
16:7d:ee:c7:f3:47:41:9a:b1:00:5b:1a:bc:e6:ef:
7d:32:90:60:ad:8a:12:ad:8a:45:a8:80:1c:f4:09:
fd:8d:43:ed:68:3c:2a:9b:76:a4:72:8e:45:4e:fc:
8a:d4:4d:3e:4b:c7:64:bc:7e:42:83:f3:2b:ca:f4:
27:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:36:3F:2E:73:48:15:32:05:55:63:D2:0A:8B:74:C0:3C:7F:44:77
X509v3 Authority Key Identifier:
keyid:4C:39:F8:B8:FE:BA:B6:D2:09:A2:49:81:E3:99:FD:60:43:2E:1C:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TDn4uP66ttIJokmB45n9YEMuHMk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/84bbe3-4c61-4033-b9af-9320fe13e5fe/1/TDn4uP66ttIJokmB45n9YEMuHMk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/84bbe3-4c61-4033-b9af-9320fe13e5fe/1/TDn4uP66ttIJokmB45n9YEMuHMk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:84:1d:c2:97:55:43:7e:4f:13:cb:e8:8f:d9:c8:12:42:98:
c7:70:a2:64:cf:1e:26:60:c7:76:4e:83:2e:28:4f:1c:26:ca:
c1:47:5b:83:0a:61:9e:70:80:9b:ce:92:95:90:82:73:7f:b4:
c0:c9:bc:43:d6:da:dc:5a:a1:08:40:65:c8:aa:ff:b7:e6:85:
a3:39:85:cd:7e:35:ce:5f:90:ef:fb:49:96:2a:5d:39:0c:77:
e0:f8:f6:16:e5:d1:47:f6:8c:e3:eb:2f:7d:49:f1:23:8e:3c:
d2:fc:91:04:1e:09:d8:5f:43:cc:eb:70:bf:84:1e:dd:50:30:
76:13:81:2e:a4:dd:81:70:10:01:1f:5f:42:bd:2a:b4:66:dd:
c7:84:04:3e:51:60:56:a5:7a:c7:11:e8:76:6b:ce:42:18:28:
7f:74:a5:15:64:36:93:f1:4b:6d:c4:55:98:db:00:17:f6:67:
aa:97:3c:e8:ab:58:5b:02:ad:cc:70:45:a9:7d:83:a3:80:20:
ba:aa:23:56:01:0a:da:8b:ae:a5:60:e2:7a:7e:a7:1e:17:36:
a0:f4:80:a7:dc:e9:3e:35:87:d6:d8:ed:d2:d2:db:6b:9d:63:
71:a0:eb:8c:c3:6c:5b:3d:98:99:1d:1c:10:15:af:88:04:1b:
5d:9e:36:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 09:16:31 2026 by rpki-client