Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/84bbe3-4c61-4033-b9af-9320fe13e5fe/1/TDn4uP66ttIJokmB45n9YEMuHMk.mft
File: TDn4uP66ttIJokmB45n9YEMuHMk.mft (raw, json)
Hash identifier: /B+lyrQElSWMDGls6TiEcVwGsjUp+IXQ/N2wMICgDtE=
Subject key identifier: 4D:0F:5A:63:B6:81:5A:83:AF:E8:EF:13:85:1E:DD:04:16:3C:48:B0
Authority key identifier: 4C:39:F8:B8:FE:BA:B6:D2:09:A2:49:81:E3:99:FD:60:43:2E:1C:C9
Certificate issuer: /CN=4c39f8b8febab6d209a24981e399fd60432e1cc9
Certificate serial: 019E1F113D007FF4274145E96D25F4B7ACF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TDn4uP66ttIJokmB45n9YEMuHMk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/84bbe3-4c61-4033-b9af-9320fe13e5fe/1/TDn4uP66ttIJokmB45n9YEMuHMk.mft
Manifest number: 0D73
Signing time: Wed 13 May 2026 02:01:23 +0000
Manifest this update: Wed 13 May 2026 02:01:23 +0000
Manifest next update: Thu 14 May 2026 02:01:23 +0000
Files and hashes: 1: Oz2JTTFEUToA4rcARVfBKfZ-bNM.roa (hash: fQeMDFsyE9NlA+JYKajgKZ3XxSRtkUJy780HUIKIiOE=)
2: TDn4uP66ttIJokmB45n9YEMuHMk.crl (hash: SNLEA/lT4hhWzJDedGbbhwJ3ZnZXMANCFvyg1JPHR4Q=)
3: p2AFdxK-ZHTv-IUkNOyxXK_-F34.roa (hash: XMvgQ2GpOxolBIvE+NkJU3WDfGq3UMdrz3BN6w9ftF0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/84bbe3-4c61-4033-b9af-9320fe13e5fe/1/TDn4uP66ttIJokmB45n9YEMuHMk.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/84bbe3-4c61-4033-b9af-9320fe13e5fe/1/TDn4uP66ttIJokmB45n9YEMuHMk.mft
rsync://rpki.ripe.net/repository/DEFAULT/TDn4uP66ttIJokmB45n9YEMuHMk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 02:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:11:3d:00:7f:f4:27:41:45:e9:6d:25:f4:b7:ac:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c39f8b8febab6d209a24981e399fd60432e1cc9
Validity
Not Before: May 13 02:01:23 2026 GMT
Not After : May 14 02:01:23 2026 GMT
Subject: CN=4d0f5a63b6815a83afe8ef13851edd04163c48b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:96:0f:14:a4:74:0a:58:cb:19:a2:c4:06:6a:
34:e5:07:ea:a4:92:5e:c7:dc:0d:8c:f2:3a:0b:1f:
b8:f4:93:e5:96:fd:54:ee:a8:84:3e:38:e2:39:6c:
81:80:2d:01:1f:9e:0c:ce:7e:a4:7a:75:ce:35:ab:
44:9f:93:a2:08:63:46:51:08:d0:69:2e:2e:f2:6b:
ef:67:3c:0a:ec:3d:9d:26:5e:42:29:4b:cf:81:bd:
bd:d7:38:56:c2:fa:d2:c5:83:cd:97:2e:4d:9a:43:
2b:d3:b6:39:6e:ac:e7:d3:e4:80:40:6f:ce:a2:53:
23:22:c1:69:30:51:d3:c3:41:76:b7:65:d7:07:57:
51:8f:ff:ee:d4:88:67:8f:c2:21:13:72:ed:75:5c:
21:5a:04:6d:2e:f5:f8:1e:e7:a1:bb:1b:52:46:46:
63:99:3d:1b:8c:6b:17:8a:41:c7:0a:10:87:02:22:
be:a3:31:53:10:88:a2:e0:1d:58:bd:13:50:51:98:
73:5d:a5:52:3b:8e:46:7f:f8:19:51:d1:8b:38:e7:
7f:bd:02:14:f3:8a:b4:4d:18:9c:ed:b8:03:00:e7:
79:4d:0d:01:88:00:60:50:e0:bb:c3:b7:f0:72:d9:
23:f6:c6:23:7b:94:e7:0d:99:02:a2:11:19:e3:e2:
64:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:0F:5A:63:B6:81:5A:83:AF:E8:EF:13:85:1E:DD:04:16:3C:48:B0
X509v3 Authority Key Identifier:
keyid:4C:39:F8:B8:FE:BA:B6:D2:09:A2:49:81:E3:99:FD:60:43:2E:1C:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TDn4uP66ttIJokmB45n9YEMuHMk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/84bbe3-4c61-4033-b9af-9320fe13e5fe/1/TDn4uP66ttIJokmB45n9YEMuHMk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/84bbe3-4c61-4033-b9af-9320fe13e5fe/1/TDn4uP66ttIJokmB45n9YEMuHMk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
dc:fd:bb:ee:54:30:9d:74:bc:77:4a:b2:61:0b:48:40:77:54:
4b:3a:6f:5c:d7:ed:55:5a:cb:f1:c9:eb:97:23:e8:ad:60:24:
df:be:9b:1b:a3:88:3e:b8:9d:c6:e4:f8:fd:6b:16:48:4e:88:
a5:04:51:03:e4:2d:0f:aa:24:8e:72:be:0e:b1:b5:d2:84:3b:
86:67:46:4e:a6:e1:92:b8:fc:58:a9:f2:d8:7b:dc:ad:1c:18:
85:c3:4a:ab:88:17:e8:0d:1b:b7:c9:0f:fa:25:b8:19:30:0a:
a2:5e:62:77:da:12:c8:dc:7d:06:92:ac:73:13:bd:dd:73:77:
53:89:a5:ca:69:da:87:ed:a1:93:6b:f7:f1:fe:6c:68:81:75:
8c:f7:ba:d2:fc:13:6c:4f:70:69:33:26:77:b7:5e:dc:c6:a0:
24:44:ec:cd:57:7a:fe:19:cd:3a:bd:a1:cc:4d:39:6e:6d:bf:
53:81:eb:0d:d0:20:81:f6:97:d0:45:58:49:5e:a8:c3:86:41:
64:83:1b:17:4d:45:1c:33:dc:70:00:cc:cb:99:90:14:1b:10:
d5:6c:bc:ae:2b:61:68:fa:ae:c0:00:95:f0:2f:26:e8:8e:70:
26:df:25:64:83:10:c4:4e:86:45:0c:ea:f7:fc:d2:f7:39:be:
d8:31:3d:42
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4fET0Af/QnQUXpbSX0t6zyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjMzlmOGI4ZmViYWI2ZDIwOWEyNDk4MWUzOTlmZDYwNDMy
ZTFjYzkwHhcNMjYwNTEzMDIwMTIzWhcNMjYwNTE0MDIwMTIzWjAzMTEwLwYDVQQD
Eyg0ZDBmNWE2M2I2ODE1YTgzYWZlOGVmMTM4NTFlZGQwNDE2M2M0OGIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnJYPFKR0CljLGaLEBmo05QfqpJJe
x9wNjPI6Cx+49JPllv1U7qiEPjjiOWyBgC0BH54Mzn6kenXONatEn5OiCGNGUQjQ
aS4u8mvvZzwK7D2dJl5CKUvPgb291zhWwvrSxYPNly5NmkMr07Y5bqzn0+SAQG/O
olMjIsFpMFHTw0F2t2XXB1dRj//u1Ihnj8IhE3LtdVwhWgRtLvX4HuehuxtSRkZj
mT0bjGsXikHHChCHAiK+ozFTEIii4B1YvRNQUZhzXaVSO45Gf/gZUdGLOOd/vQIU
84q0TRic7bgDAOd5TQ0BiABgUOC7w7fwctkj9sYje5TnDZkCohEZ4+JkBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE0PWmO2gVqDr+jvE4Ue3QQWPEiwMB8GA1UdIwQY
MBaAFEw5+Lj+urbSCaJJgeOZ/WBDLhzJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVERuNHVQNjZ0dElKb2ttQjQ1bjlZRU11SE1rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi84NGJiZTMtNGM2MS00MDMzLWI5YWYt
OTMyMGZlMTNlNWZlLzEvVERuNHVQNjZ0dElKb2ttQjQ1bjlZRU11SE1rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZi84NGJiZTMtNGM2MS00MDMzLWI5YWYtOTMyMGZlMTNlNWZl
LzEvVERuNHVQNjZ0dElKb2ttQjQ1bjlZRU11SE1rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA3P277lQw
nXS8d0qyYQtIQHdUSzpvXNftVVrL8cnrlyPorWAk376bG6OIPridxuT4/WsWSE6I
pQRRA+QtD6okjnK+DrG10oQ7hmdGTqbhkrj8WKny2HvcrRwYhcNKq4gX6A0bt8kP
+iW4GTAKol5id9oSyNx9BpKscxO93XN3U4mlymnah+2hk2v38f5saIF1jPe60vwT
bE9waTMmd7de3MagJETszVd6/hnNOr2hzE05bm2/U4HrDdAggfaX0EVYSV6ow4ZB
ZIMbF01FHDPccADMy5mQFBsQ1Wy8rithaPquwACV8C8m6I5wJt8lZIMQxE6GRQzq
9/zS9zm+2DE9Qg==
-----END CERTIFICATE-----
Generated at Wed May 13 10:47:27 2026 by rpki-client