Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3f/84bbe3-4c61-4033-b9af-9320fe13e5fe/1/TDn4uP66ttIJokmB45n9YEMuHMk.mft
File: TDn4uP66ttIJokmB45n9YEMuHMk.mft (raw, json)
Hash identifier: y21dIQIrXPhyuqUC3NpK01yj77KsVqbtwDeVV//JazA=
Subject key identifier: 3F:9C:21:75:02:AD:DF:9F:41:A7:D2:15:F4:3F:21:35:C4:DA:04:ED
Authority key identifier: 4C:39:F8:B8:FE:BA:B6:D2:09:A2:49:81:E3:99:FD:60:43:2E:1C:C9
Certificate issuer: /CN=4c39f8b8febab6d209a24981e399fd60432e1cc9
Certificate serial: 01A0EB89FC47B0A87AC9BADE5E94FCDB9259
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TDn4uP66ttIJokmB45n9YEMuHMk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/84bbe3-4c61-4033-b9af-9320fe13e5fe/1/TDn4uP66ttIJokmB45n9YEMuHMk.mft
Manifest number: 0EE6
Signing time: Tue 29 Sep 2026 05:01:23 +0000
Manifest this update: Tue 29 Sep 2026 05:01:23 +0000
Manifest next update: Wed 30 Sep 2026 05:01:23 +0000
Files and hashes: 1: Oz2JTTFEUToA4rcARVfBKfZ-bNM.roa (hash: fQeMDFsyE9NlA+JYKajgKZ3XxSRtkUJy780HUIKIiOE=)
2: TDn4uP66ttIJokmB45n9YEMuHMk.crl (hash: RtXQBhwqojoHWxHVEIKKT6ikxd/2SYgjLzrHJnS3Slw=)
3: p2AFdxK-ZHTv-IUkNOyxXK_-F34.roa (hash: XMvgQ2GpOxolBIvE+NkJU3WDfGq3UMdrz3BN6w9ftF0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/84bbe3-4c61-4033-b9af-9320fe13e5fe/1/TDn4uP66ttIJokmB45n9YEMuHMk.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/84bbe3-4c61-4033-b9af-9320fe13e5fe/1/TDn4uP66ttIJokmB45n9YEMuHMk.mft
rsync://rpki.ripe.net/repository/DEFAULT/TDn4uP66ttIJokmB45n9YEMuHMk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 05:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:eb:89:fc:47:b0:a8:7a:c9:ba:de:5e:94:fc:db:92:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c39f8b8febab6d209a24981e399fd60432e1cc9
Validity
Not Before: Sep 29 05:01:23 2026 GMT
Not After : Sep 30 05:01:23 2026 GMT
Subject: CN=3f9c217502addf9f41a7d215f43f2135c4da04ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:75:ea:e1:37:7e:02:f3:eb:e6:02:9a:83:59:
51:36:73:cd:7f:f1:3e:80:b9:52:de:ae:32:54:bd:
d8:cb:3e:cf:ee:cb:9b:ed:c1:fb:9a:52:ba:ab:a8:
9b:e9:39:f0:13:3d:66:e6:b2:45:6e:cf:ae:90:2d:
cd:aa:c1:d4:13:03:78:46:4b:a9:69:09:89:a8:8e:
25:d1:43:fd:13:53:90:7e:e0:ff:36:f1:16:ec:09:
78:3d:e1:07:c9:b6:b4:2c:f8:cf:19:36:64:82:ab:
1d:fa:82:79:b7:e4:83:60:24:43:02:2a:cc:97:7d:
1a:9c:84:c6:d9:e0:96:9e:e5:b7:1f:a3:e9:51:37:
00:60:dd:bc:ca:d9:41:e0:f4:2f:ba:60:8e:6b:4e:
86:12:80:55:59:5f:9f:e9:c4:3c:b1:fc:1d:7c:6c:
73:f3:00:9d:d8:a6:ae:eb:4b:ef:52:f0:7d:b0:70:
b1:a5:1f:ff:4e:41:0a:01:f1:30:f8:e8:bd:0f:9a:
e4:6e:ac:b9:6a:e0:7f:e5:d0:ec:bc:26:cb:f8:f9:
33:48:ab:14:fa:da:71:1d:1b:bf:6a:81:36:28:42:
d2:32:c3:09:a1:5e:aa:10:ea:73:ee:70:71:7a:35:
05:cf:a6:1a:4a:8a:39:ae:e8:75:29:ae:64:d8:1f:
5f:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:9C:21:75:02:AD:DF:9F:41:A7:D2:15:F4:3F:21:35:C4:DA:04:ED
X509v3 Authority Key Identifier:
keyid:4C:39:F8:B8:FE:BA:B6:D2:09:A2:49:81:E3:99:FD:60:43:2E:1C:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TDn4uP66ttIJokmB45n9YEMuHMk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/84bbe3-4c61-4033-b9af-9320fe13e5fe/1/TDn4uP66ttIJokmB45n9YEMuHMk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/84bbe3-4c61-4033-b9af-9320fe13e5fe/1/TDn4uP66ttIJokmB45n9YEMuHMk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ce:c5:c6:51:83:30:20:8b:7a:3d:c7:be:d1:5a:c5:7f:d6:fd:
c2:2a:3f:7f:2f:2f:cb:6a:06:a4:66:07:cf:63:d1:53:d3:57:
3c:b9:34:b0:25:81:57:00:13:07:f8:08:b9:58:9e:bb:fd:17:
df:71:b6:b4:91:d9:80:9e:77:14:92:29:d2:d8:8b:e4:bb:27:
73:d3:a3:d6:6e:6c:41:4e:83:71:41:eb:84:1f:a9:4d:1f:3b:
61:97:86:ad:e5:30:81:db:c5:27:fa:a2:5c:63:6b:95:73:2f:
ff:be:75:aa:b5:d2:32:a0:e4:ac:46:88:04:9e:83:80:4f:53:
40:32:d5:6e:0e:19:ac:4e:0c:fe:0b:5e:4d:e6:c9:1a:0e:99:
80:83:ee:27:47:5e:7e:7d:3f:b3:1c:ef:2d:29:ce:88:4d:82:
c6:a2:ae:bb:f0:1f:da:12:fb:91:27:b8:9a:c0:b1:9f:f4:8d:
45:9a:bd:4f:69:bc:89:aa:83:02:66:bc:b8:b3:83:b5:34:1c:
5c:70:56:63:2f:2e:d0:06:88:dc:17:75:69:be:e9:42:22:05:
8e:1d:e6:47:68:49:fc:9d:e1:a9:b2:52:ac:ca:1b:de:36:f3:
93:cd:4a:d2:a5:10:c2:ef:a5:46:21:f3:f9:42:be:6c:f9:01:
83:0f:de:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 13:20:34 2026 by rpki-client