Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/9c4fb0-c475-4204-9987-0a91cadbee66/1/T2qURK2qUjxXaOn2vhQGUYOsIKg.mft
File: T2qURK2qUjxXaOn2vhQGUYOsIKg.mft (raw, json)
Hash identifier: ZOAUWH1eFl+iJEqnAV7+VMw5vDeLpVuJQFOGoIy0UMA=
Subject key identifier: B4:F9:54:6F:D2:C8:67:0B:03:F8:3B:0B:6F:48:41:2C:6C:5D:57:15
Authority key identifier: 4F:6A:94:44:AD:AA:52:3C:57:68:E9:F6:BE:14:06:51:83:AC:20:A8
Certificate issuer: /CN=4f6a9444adaa523c5768e9f6be14065183ac20a8
Certificate serial: 019D2B85719B4190AB93CAB698D14299B3FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T2qURK2qUjxXaOn2vhQGUYOsIKg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/9c4fb0-c475-4204-9987-0a91cadbee66/1/T2qURK2qUjxXaOn2vhQGUYOsIKg.mft
Manifest number: 1888
Signing time: Thu 26 Mar 2026 19:00:58 +0000
Manifest this update: Thu 26 Mar 2026 19:00:58 +0000
Manifest next update: Fri 27 Mar 2026 19:00:58 +0000
Files and hashes: 1: T2qURK2qUjxXaOn2vhQGUYOsIKg.crl (hash: r/ZBScWmx6q1VwPgbZnbjig9VU6fOD558s1+0AP55rg=)
2: o8tO8stgvhxVUDIUNSKHy-JW2fo.roa (hash: Z08VgX0ivNPtY5zzCzl8jQ6u6U/EFae5aPOCebjGd+I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/9c4fb0-c475-4204-9987-0a91cadbee66/1/T2qURK2qUjxXaOn2vhQGUYOsIKg.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/9c4fb0-c475-4204-9987-0a91cadbee66/1/T2qURK2qUjxXaOn2vhQGUYOsIKg.mft
rsync://rpki.ripe.net/repository/DEFAULT/T2qURK2qUjxXaOn2vhQGUYOsIKg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:85:71:9b:41:90:ab:93:ca:b6:98:d1:42:99:b3:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f6a9444adaa523c5768e9f6be14065183ac20a8
Validity
Not Before: Mar 26 19:00:58 2026 GMT
Not After : Mar 27 19:00:58 2026 GMT
Subject: CN=b4f9546fd2c8670b03f83b0b6f48412c6c5d5715
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:b1:ec:eb:39:09:93:03:2b:d8:54:7e:5a:0f:
3e:f4:b0:0f:c0:cb:08:db:a3:0e:04:bc:8d:f9:7c:
f7:8b:fd:1b:e1:00:3f:e3:73:0e:8f:ea:72:3b:11:
24:c5:c8:8b:38:2a:c3:18:f3:90:1d:1c:2d:00:36:
dc:d2:1d:36:eb:27:21:39:cc:61:55:e1:79:19:1f:
88:16:82:dd:6c:64:ec:57:4b:10:c2:32:33:b4:1c:
d5:06:26:06:55:63:73:b7:51:80:2f:1f:54:db:8d:
eb:69:02:4c:62:69:ae:86:05:d4:6a:8c:e8:3e:3a:
13:37:8e:50:23:ad:f3:54:c3:34:5b:00:d2:82:a2:
5c:e8:8e:1f:db:0c:ae:7d:fa:34:df:4f:fb:0a:db:
d3:e6:09:1e:0c:87:34:a8:d3:c5:0d:d2:a2:f9:f3:
d1:a7:53:85:db:3c:1b:37:c8:3a:57:e6:af:77:42:
70:b2:f8:47:c3:c8:bf:05:51:b3:98:12:a1:a1:28:
f9:38:d3:04:ed:21:ad:73:57:a5:55:5d:7e:92:7a:
a4:08:27:e2:a4:12:84:ae:8a:90:22:c6:7c:f2:3a:
4a:76:e8:4d:3b:76:f7:64:9e:d4:d6:8f:9b:56:18:
ff:60:07:83:c1:52:94:93:32:b4:f1:a9:dc:a7:25:
32:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:F9:54:6F:D2:C8:67:0B:03:F8:3B:0B:6F:48:41:2C:6C:5D:57:15
X509v3 Authority Key Identifier:
keyid:4F:6A:94:44:AD:AA:52:3C:57:68:E9:F6:BE:14:06:51:83:AC:20:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T2qURK2qUjxXaOn2vhQGUYOsIKg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9c4fb0-c475-4204-9987-0a91cadbee66/1/T2qURK2qUjxXaOn2vhQGUYOsIKg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9c4fb0-c475-4204-9987-0a91cadbee66/1/T2qURK2qUjxXaOn2vhQGUYOsIKg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:6c:aa:ca:63:c5:96:eb:6a:a4:01:e8:26:a2:55:ce:64:f9:
2f:23:2f:11:ad:2e:76:b7:08:4e:4c:e4:f2:00:76:65:f3:b4:
5b:cc:4e:4d:f6:54:72:21:b0:71:95:01:94:5f:dd:2f:f4:1a:
36:fd:28:bc:3a:27:f4:f0:e1:68:49:54:3c:83:9f:76:76:4b:
bc:10:59:28:9c:10:0b:90:5b:08:3a:42:3d:03:a3:89:ec:54:
e1:e4:71:61:32:ae:41:f6:aa:b2:3c:46:23:81:d4:54:b0:5a:
e7:f9:ef:ee:99:e2:27:3b:3d:a4:fd:53:20:46:6c:89:29:54:
73:80:87:90:39:a4:8a:9e:e9:49:e9:03:e4:8a:91:3a:58:56:
1c:ec:02:cf:38:be:84:1d:e6:f1:74:17:0e:ec:da:fc:28:31:
97:1f:b2:44:60:df:04:f2:8d:39:d1:02:08:e2:17:43:5d:af:
40:84:c0:70:7e:38:7d:bf:c7:ad:65:61:f2:2c:36:e9:d9:fd:
11:27:88:62:1f:08:5e:4a:3c:e2:71:80:e1:a6:95:31:0c:c2:
8b:04:fe:32:7f:78:8c:96:7b:20:be:fb:d0:21:42:63:c7:97:
bc:6f:b2:35:b4:31:12:7a:41:a8:ef:f8:76:67:21:3f:3f:d9:
4a:b8:35:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 23:47:20 2026 by rpki-client