Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/c991ee-bd41-4ad1-b88d-6fc5fca09629/1/T_hs8z4V6kCJ2inip4gddG34Ju8.mft
File: T_hs8z4V6kCJ2inip4gddG34Ju8.mft (raw, json)
Hash identifier: i8wjySFYARej35M9JySr5XxBbArMWEEvjWYz7Kv+PPE=
Subject key identifier: 31:EF:4C:8B:EF:D3:BC:80:2E:7E:7A:82:47:FB:22:9B:DD:95:5B:DE
Authority key identifier: 4F:F8:6C:F3:3E:15:EA:40:89:DA:29:E2:A7:88:1D:74:6D:F8:26:EF
Certificate issuer: /CN=4ff86cf33e15ea4089da29e2a7881d746df826ef
Certificate serial: 019D284D2ED82B24AB9852E0E72DF49EA1AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T_hs8z4V6kCJ2inip4gddG34Ju8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/c991ee-bd41-4ad1-b88d-6fc5fca09629/1/T_hs8z4V6kCJ2inip4gddG34Ju8.mft
Manifest number: 11E9
Signing time: Thu 26 Mar 2026 04:00:40 +0000
Manifest this update: Thu 26 Mar 2026 04:00:40 +0000
Manifest next update: Fri 27 Mar 2026 04:00:40 +0000
Files and hashes: 1: 1v3IPl8M1eJPBhCAK7u4vq4rUaI.roa (hash: fKYCNJCehScelohhLM2BpKiOwF7K+yob2FjJd+Ycr6M=)
2: T_hs8z4V6kCJ2inip4gddG34Ju8.crl (hash: ggwKe8Db7Fu5wWfFiNOoaC/ltn7IlYmU7JgayZiekQM=)
3: pxD_Y88xrQvnAVjSRtOa0jsr7OQ.roa (hash: +SNLZHSRdVfvPSo1qQ3dQv0AK0ZdBnAQ1eRjccxs6zQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/c991ee-bd41-4ad1-b88d-6fc5fca09629/1/T_hs8z4V6kCJ2inip4gddG34Ju8.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/c991ee-bd41-4ad1-b88d-6fc5fca09629/1/T_hs8z4V6kCJ2inip4gddG34Ju8.mft
rsync://rpki.ripe.net/repository/DEFAULT/T_hs8z4V6kCJ2inip4gddG34Ju8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 04:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:2e:d8:2b:24:ab:98:52:e0:e7:2d:f4:9e:a1:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ff86cf33e15ea4089da29e2a7881d746df826ef
Validity
Not Before: Mar 26 04:00:40 2026 GMT
Not After : Mar 27 04:00:40 2026 GMT
Subject: CN=31ef4c8befd3bc802e7e7a8247fb229bdd955bde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:c9:e6:7d:08:60:cb:2b:fd:0b:3e:73:af:c9:
f8:98:bb:49:5e:43:af:0a:56:f9:93:bf:99:b8:25:
39:81:3e:41:d3:57:be:41:63:f5:ce:a8:54:85:e5:
b1:3f:a3:2b:db:79:5f:3c:d1:ba:50:b5:2b:cd:36:
11:9e:d6:db:73:b4:cd:d4:5c:06:97:ae:ba:7f:e5:
13:cf:e7:8b:71:11:c7:48:d2:ca:90:4f:bb:07:4a:
a9:f7:46:27:ba:61:de:0f:c7:62:53:20:de:aa:2e:
0a:b7:0f:de:d5:d9:8b:8f:6c:4d:02:a9:ab:50:17:
61:01:5f:33:88:e2:e4:46:3c:12:ef:97:63:c4:69:
b0:b5:07:d3:fc:22:5c:dc:46:ab:84:cb:e9:5f:ab:
8e:5a:4c:0f:2e:8f:52:45:fa:26:05:d8:4f:0f:4b:
a7:92:da:06:e8:b4:b4:c5:06:95:4f:03:ef:f3:12:
2b:dc:9b:a9:a6:d0:f9:2b:9a:a0:f3:10:4a:76:8b:
a4:6d:0f:b8:3f:2b:77:91:84:b1:69:81:16:3c:06:
3f:35:6e:62:8f:7f:45:e1:78:15:39:e8:ee:dc:ba:
55:12:f2:50:43:1b:7f:f8:fc:70:bc:4b:2b:7b:e2:
d4:b2:0c:31:2a:1b:32:bd:61:da:41:58:d2:44:21:
b9:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:EF:4C:8B:EF:D3:BC:80:2E:7E:7A:82:47:FB:22:9B:DD:95:5B:DE
X509v3 Authority Key Identifier:
keyid:4F:F8:6C:F3:3E:15:EA:40:89:DA:29:E2:A7:88:1D:74:6D:F8:26:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T_hs8z4V6kCJ2inip4gddG34Ju8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/c991ee-bd41-4ad1-b88d-6fc5fca09629/1/T_hs8z4V6kCJ2inip4gddG34Ju8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/c991ee-bd41-4ad1-b88d-6fc5fca09629/1/T_hs8z4V6kCJ2inip4gddG34Ju8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:b2:90:4c:b1:a4:76:d0:1a:15:be:b4:24:24:c5:dd:f2:b4:
40:be:eb:46:be:69:de:6a:b6:e9:9a:ad:03:ef:62:aa:43:9e:
0b:08:1c:e7:e3:57:a0:c2:91:1a:f9:0f:30:b2:b7:1d:9b:23:
f4:78:03:5b:8b:a8:78:dc:9a:c3:93:1d:bd:e6:62:87:02:9b:
4a:c4:1d:ed:7c:5c:f3:58:63:e2:57:16:2b:85:bf:39:df:ea:
9e:4d:61:24:2e:5d:1b:d1:24:20:51:65:5e:b8:32:48:4b:d6:
b5:81:3e:e8:03:08:e5:53:a1:1a:0a:6a:0f:2a:5a:4b:cb:dc:
cd:17:82:f0:64:51:46:f5:c5:37:93:cd:b1:1d:d3:a8:6a:14:
00:ff:a6:14:67:77:cd:db:e2:c5:cb:03:66:07:0a:90:21:44:
3e:9f:05:af:3b:b7:3d:fd:8d:0d:1f:ad:27:b3:ca:8a:f4:df:
df:ac:c0:c8:98:63:7c:c9:ce:98:72:f8:ac:08:55:dc:f7:a4:
9b:e9:8f:75:9a:7c:31:c2:d6:20:10:98:a1:1c:d2:41:42:d4:
7a:3a:93:97:c2:47:0b:fb:6b:c6:d7:42:cb:f0:0b:74:44:5b:
bd:bc:44:8d:7e:03:f3:16:e3:e9:73:6d:fa:eb:f4:19:18:9b:
5b:d1:a4:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:55:56 2026 by rpki-client