Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/df6e25-923c-4838-864f-d4b37e44ab7c/1/TDkFWmmQuCQIzxq_KTE3gOJJpMk.mft
File: TDkFWmmQuCQIzxq_KTE3gOJJpMk.mft (raw, json)
Hash identifier: P5L8AvizsbtV5pZ3JzPYQqo0m1r8KTaSdvTnwJ6uA/Y=
Subject key identifier: DD:24:5C:D6:AF:C2:AF:F8:78:FA:11:3E:E7:18:F6:F8:88:3E:9C:A9
Authority key identifier: 4C:39:05:5A:69:90:B8:24:08:CF:1A:BF:29:31:37:80:E2:49:A4:C9
Certificate issuer: /CN=4c39055a6990b82408cf1abf29313780e249a4c9
Certificate serial: 019D37F759D4F784355AC222026A5908EBD0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TDkFWmmQuCQIzxq_KTE3gOJJpMk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/df6e25-923c-4838-864f-d4b37e44ab7c/1/TDkFWmmQuCQIzxq_KTE3gOJJpMk.mft
Manifest number: 13F8
Signing time: Sun 29 Mar 2026 05:00:50 +0000
Manifest this update: Sun 29 Mar 2026 05:00:50 +0000
Manifest next update: Mon 30 Mar 2026 05:00:50 +0000
Files and hashes: 1: HUsAlOvemtR2fE4jnbiG5JPoxag.roa (hash: f7lJEppqzDneJ9AJzuUYrOlyEaByUZeV+0bof3SkTsE=)
2: TDkFWmmQuCQIzxq_KTE3gOJJpMk.crl (hash: nJYkzHkQaKi4O9SlUb2QTj+Nj50YrApq/fEFJdqir4g=)
3: l0q8XWJ1Kq-tzhNgucWKrkROmtg.roa (hash: 6lWXlqZNdk+BzRRkFfjQUwCi/8dW4M9stYINXvYCgl8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/df6e25-923c-4838-864f-d4b37e44ab7c/1/TDkFWmmQuCQIzxq_KTE3gOJJpMk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/df6e25-923c-4838-864f-d4b37e44ab7c/1/TDkFWmmQuCQIzxq_KTE3gOJJpMk.mft
rsync://rpki.ripe.net/repository/DEFAULT/TDkFWmmQuCQIzxq_KTE3gOJJpMk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:59:d4:f7:84:35:5a:c2:22:02:6a:59:08:eb:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c39055a6990b82408cf1abf29313780e249a4c9
Validity
Not Before: Mar 29 05:00:50 2026 GMT
Not After : Mar 30 05:00:50 2026 GMT
Subject: CN=dd245cd6afc2aff878fa113ee718f6f8883e9ca9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:6b:b9:0b:7d:38:6a:09:62:37:a7:6a:d4:62:
ab:06:83:99:b8:fe:51:da:c1:20:74:56:4e:07:e6:
36:ee:e0:97:fc:7e:97:68:76:19:9a:7a:9f:5c:24:
12:56:db:a7:66:df:25:ae:03:43:46:c8:ce:8f:86:
49:03:3d:5c:71:5d:c5:c4:fc:9d:36:8e:6e:e5:33:
4e:e8:80:94:aa:70:cd:74:ec:e9:6d:19:58:b1:cc:
bd:aa:4c:54:96:92:dc:54:4b:5c:6c:19:b3:c8:2a:
81:ea:97:35:31:8c:f8:14:90:64:e0:09:71:30:89:
3a:e6:ca:4a:74:ab:32:01:c4:3e:1c:52:4f:a5:0f:
56:ae:6c:e9:fc:e8:a2:f7:98:15:47:0f:5d:0b:e3:
3c:cc:dd:da:e3:89:69:c4:93:23:aa:7c:dd:05:1e:
7b:53:2d:44:d2:ce:9a:9f:f1:90:91:fd:d6:0b:ec:
de:65:0d:c6:3f:e5:69:ec:f2:66:0a:09:44:b8:6e:
e2:94:cd:5a:d4:47:c6:79:ea:83:e2:51:15:ee:01:
cc:91:3e:bd:e9:a4:a5:30:b2:82:df:ef:eb:ba:7c:
01:8c:c9:f1:fc:ec:ac:2c:30:56:0d:6e:ab:dd:3a:
3a:70:8c:b0:47:13:f5:81:44:71:22:d3:3f:92:a6:
42:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:24:5C:D6:AF:C2:AF:F8:78:FA:11:3E:E7:18:F6:F8:88:3E:9C:A9
X509v3 Authority Key Identifier:
keyid:4C:39:05:5A:69:90:B8:24:08:CF:1A:BF:29:31:37:80:E2:49:A4:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TDkFWmmQuCQIzxq_KTE3gOJJpMk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/df6e25-923c-4838-864f-d4b37e44ab7c/1/TDkFWmmQuCQIzxq_KTE3gOJJpMk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/df6e25-923c-4838-864f-d4b37e44ab7c/1/TDkFWmmQuCQIzxq_KTE3gOJJpMk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:db:41:b1:ed:79:41:a7:80:77:fc:c7:48:b8:f7:e9:c5:85:
9d:62:ba:9c:9c:d0:9c:1a:5d:25:94:3c:d7:eb:b2:af:1a:2b:
46:0d:51:64:37:cc:c8:20:1a:2a:a4:d5:ac:53:87:09:32:4b:
20:fc:1f:3f:eb:21:9b:34:35:b0:e4:8e:60:76:e5:56:18:ec:
db:cb:51:40:c1:87:5d:20:3e:f0:66:ba:1d:b8:1f:ab:6c:a9:
98:40:3c:49:62:e1:33:6b:49:dc:b9:32:28:81:c7:6c:c5:7d:
7a:d9:9c:bf:4a:cd:8d:b4:98:7c:ff:a7:ef:a2:70:c8:ab:5a:
4b:3b:d3:eb:93:95:ac:ee:0e:0f:4b:c2:74:12:69:17:03:2e:
a7:ee:4d:71:57:e4:1d:5f:c9:30:8a:0c:50:c0:10:a5:ea:7c:
8c:5b:a4:83:a3:1a:6a:76:9d:d2:37:ee:38:d2:df:e5:0d:0a:
18:61:b9:6f:12:b8:94:49:7a:8c:43:7e:bb:0d:c8:68:c9:54:
05:48:0d:7d:ae:d8:d1:11:a5:fe:e2:26:2d:89:23:f3:bc:10:
3f:5b:ec:5d:56:d1:08:77:91:f5:31:d2:5c:f5:79:b5:de:2c:
a7:fe:d9:85:a1:aa:71:76:21:e8:4e:98:98:b1:f7:12:7c:79:
7a:b4:bc:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:14:23 2026 by rpki-client