Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/84bbe3-4c61-4033-b9af-9320fe13e5fe/1/TDn4uP66ttIJokmB45n9YEMuHMk.mft
File: TDn4uP66ttIJokmB45n9YEMuHMk.mft (raw, json)
Hash identifier: Dy1wjZBog2cuzRpv8YkiATym1qwEc6d94itqWODQyio=
Subject key identifier: 86:61:18:49:01:22:53:09:9B:2E:5D:EA:B2:49:88:66:25:20:E1:F4
Authority key identifier: 4C:39:F8:B8:FE:BA:B6:D2:09:A2:49:81:E3:99:FD:60:43:2E:1C:C9
Certificate issuer: /CN=4c39f8b8febab6d209a24981e399fd60432e1cc9
Certificate serial: 019D25F1B5654B6F46AF82CAAB4EE277A9E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TDn4uP66ttIJokmB45n9YEMuHMk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/84bbe3-4c61-4033-b9af-9320fe13e5fe/1/TDn4uP66ttIJokmB45n9YEMuHMk.mft
Manifest number: 0CF2
Signing time: Wed 25 Mar 2026 17:01:30 +0000
Manifest this update: Wed 25 Mar 2026 17:01:30 +0000
Manifest next update: Thu 26 Mar 2026 17:01:30 +0000
Files and hashes: 1: Oz2JTTFEUToA4rcARVfBKfZ-bNM.roa (hash: fQeMDFsyE9NlA+JYKajgKZ3XxSRtkUJy780HUIKIiOE=)
2: TDn4uP66ttIJokmB45n9YEMuHMk.crl (hash: lUfGDqWtO/wNNLO3r3crK9GDAaXZqz5UqB8OcfLD36Q=)
3: p2AFdxK-ZHTv-IUkNOyxXK_-F34.roa (hash: XMvgQ2GpOxolBIvE+NkJU3WDfGq3UMdrz3BN6w9ftF0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/84bbe3-4c61-4033-b9af-9320fe13e5fe/1/TDn4uP66ttIJokmB45n9YEMuHMk.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/84bbe3-4c61-4033-b9af-9320fe13e5fe/1/TDn4uP66ttIJokmB45n9YEMuHMk.mft
rsync://rpki.ripe.net/repository/DEFAULT/TDn4uP66ttIJokmB45n9YEMuHMk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:b5:65:4b:6f:46:af:82:ca:ab:4e:e2:77:a9:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c39f8b8febab6d209a24981e399fd60432e1cc9
Validity
Not Before: Mar 25 17:01:30 2026 GMT
Not After : Mar 26 17:01:30 2026 GMT
Subject: CN=86611849012253099b2e5deab24988662520e1f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:ed:10:8b:ec:2d:4b:f9:2d:57:36:42:37:1e:
f8:ac:b1:59:70:5b:2f:b9:ac:a6:90:7e:0d:58:ba:
85:70:1b:ed:62:67:99:e5:f2:0e:f5:aa:6e:d4:e3:
d2:a3:dc:58:89:b8:97:56:78:5f:93:da:bb:ba:8a:
9c:20:8f:c2:ce:59:40:c9:1c:3a:4c:9d:b9:c9:b9:
10:dc:b5:c9:40:cf:e9:04:79:3f:7f:26:c9:20:f3:
07:33:e3:80:d1:34:ab:6d:af:48:68:4f:7b:d4:1b:
3d:b4:5f:44:04:80:26:90:e0:78:6e:91:b3:d6:25:
3b:9d:8b:5e:ea:d4:97:ca:53:51:37:d1:25:51:a7:
19:3a:02:e8:e7:d0:b0:74:eb:a5:54:90:8a:ce:f1:
00:5d:e3:28:f0:e9:71:a5:e6:4f:8f:76:5b:27:20:
38:ad:58:91:a9:d1:14:6f:d7:78:77:78:36:24:1a:
8d:94:f0:eb:2e:e2:a6:4f:dd:77:a7:a7:28:e0:18:
f3:33:61:03:85:f8:a5:5a:3e:66:eb:49:83:30:84:
65:72:3c:9f:09:92:22:f4:14:98:3a:cc:fe:d3:f6:
a7:ec:24:cc:b4:eb:93:86:70:75:f8:85:b2:b7:54:
a4:9b:bc:27:fa:b5:77:cf:28:70:3b:b5:a4:37:83:
78:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:61:18:49:01:22:53:09:9B:2E:5D:EA:B2:49:88:66:25:20:E1:F4
X509v3 Authority Key Identifier:
keyid:4C:39:F8:B8:FE:BA:B6:D2:09:A2:49:81:E3:99:FD:60:43:2E:1C:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TDn4uP66ttIJokmB45n9YEMuHMk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/84bbe3-4c61-4033-b9af-9320fe13e5fe/1/TDn4uP66ttIJokmB45n9YEMuHMk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/84bbe3-4c61-4033-b9af-9320fe13e5fe/1/TDn4uP66ttIJokmB45n9YEMuHMk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:d1:b6:44:b6:ae:db:50:0f:09:6c:f4:31:87:8c:fb:cf:04:
04:13:ed:45:b9:67:fe:41:31:92:91:67:62:40:b8:47:ac:a8:
7a:55:b1:dc:ed:f4:bb:4b:d5:88:d8:31:d3:e6:c2:a0:3b:98:
d8:1e:3d:5f:ca:68:94:9a:dd:51:7b:48:76:f1:52:14:3c:f9:
95:cb:58:8a:ab:67:47:a8:23:ac:5e:a8:b7:09:a6:40:23:9d:
4b:d8:1c:dc:c5:cd:60:9a:f6:c6:31:f9:bc:e5:09:87:14:6a:
68:61:5e:ea:c9:95:61:d7:ca:8b:c7:07:d7:ad:65:cb:50:eb:
ef:e1:b3:f8:ee:e0:78:c4:55:f5:0b:39:0e:48:be:cc:3b:c2:
93:78:51:ca:e5:90:12:57:ff:b1:b9:be:9e:d5:d5:2f:82:ad:
ef:08:a2:ad:4c:63:f7:d2:99:fa:68:d7:a9:9a:6d:87:78:90:
36:90:ac:83:d3:ab:37:ea:af:88:63:2e:04:24:2f:9b:d6:79:
21:62:60:a5:1c:6b:7e:4e:f2:cd:70:54:d0:dd:b3:3e:49:75:
5e:f8:3e:c7:90:0e:3d:da:11:88:0e:0b:1c:bc:c3:a6:72:37:
81:39:0f:5b:f9:52:83:4f:65:20:44:70:1f:2f:4c:1a:bc:d1:
6a:2d:cd:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:14:22 2026 by rpki-client