Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/7d9e10-2c19-4dd8-a80f-40c8697bbde9/1/T4BFzPUJd-vDBmo87tj9MvHwI94.mft
File: T4BFzPUJd-vDBmo87tj9MvHwI94.mft (raw, json)
Hash identifier: gOhyJBiKedIdeYf3Sk6ZKmZ4dFJTj1KjH+WukuplltY=
Subject key identifier: 4B:67:D7:CB:58:C2:07:75:29:30:73:64:56:19:7B:7B:4A:1D:49:CA
Authority key identifier: 4F:80:45:CC:F5:09:77:EB:C3:06:6A:3C:EE:D8:FD:32:F1:F0:23:DE
Certificate issuer: /CN=4f8045ccf50977ebc3066a3ceed8fd32f1f023de
Certificate serial: 019D27A93B9A96D03F4B7EE3581E0AB25646
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T4BFzPUJd-vDBmo87tj9MvHwI94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/7d9e10-2c19-4dd8-a80f-40c8697bbde9/1/T4BFzPUJd-vDBmo87tj9MvHwI94.mft
Manifest number: 17C5
Signing time: Thu 26 Mar 2026 01:01:35 +0000
Manifest this update: Thu 26 Mar 2026 01:01:35 +0000
Manifest next update: Fri 27 Mar 2026 01:01:35 +0000
Files and hashes: 1: A6gi-so3kFc6wSPDrN7dSs0W0Xw.roa (hash: eMXdGzp0+E8BUJOejeN9hz+moObGIQrtjp1B5O+rfYQ=)
2: T4BFzPUJd-vDBmo87tj9MvHwI94.crl (hash: XitAju7a6rKSrT1tKac0ToUWs0wXMrfPp+tUpb1EgIg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/7d9e10-2c19-4dd8-a80f-40c8697bbde9/1/T4BFzPUJd-vDBmo87tj9MvHwI94.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/7d9e10-2c19-4dd8-a80f-40c8697bbde9/1/T4BFzPUJd-vDBmo87tj9MvHwI94.mft
rsync://rpki.ripe.net/repository/DEFAULT/T4BFzPUJd-vDBmo87tj9MvHwI94.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a9:3b:9a:96:d0:3f:4b:7e:e3:58:1e:0a:b2:56:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f8045ccf50977ebc3066a3ceed8fd32f1f023de
Validity
Not Before: Mar 26 01:01:35 2026 GMT
Not After : Mar 27 01:01:35 2026 GMT
Subject: CN=4b67d7cb58c207752930736456197b7b4a1d49ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:a3:c9:a9:c6:8f:38:87:a8:fb:13:f1:3f:12:
ef:b2:b3:a2:b2:61:b6:df:1f:3d:9f:9b:76:ba:27:
04:1d:eb:98:36:01:84:67:e0:ab:87:b5:68:90:b8:
74:0c:fc:a8:2d:16:3a:ae:76:f1:68:1f:52:46:a2:
03:0d:2d:6c:8b:0c:45:1d:46:96:b1:70:71:f6:43:
48:07:70:ed:4f:19:52:94:39:08:7d:68:51:c7:da:
5b:14:a3:8c:a1:93:60:36:89:19:ae:48:a8:be:1e:
f2:3e:b8:19:33:14:27:cc:75:11:f1:37:e2:e0:11:
bf:39:41:5c:17:04:b5:56:99:b5:c2:45:46:91:60:
92:22:33:6e:d9:6b:52:14:ab:33:14:8d:ec:94:22:
e5:94:0b:21:af:a4:98:5a:be:45:d2:bb:4f:a1:6e:
9f:d0:2f:83:b5:8d:b2:7d:e7:65:93:b4:3e:72:51:
d8:ed:95:c1:51:ca:e7:06:df:6c:78:8e:26:f7:74:
46:fd:6c:60:06:ea:ff:b0:73:38:34:86:1e:31:c0:
be:ac:1d:cc:99:8f:0f:ab:42:74:14:1d:97:70:7c:
9e:41:c5:c1:71:a8:c3:77:6f:d3:ab:20:31:fd:4d:
70:a6:5d:d8:52:2f:1d:66:09:d8:21:a5:d8:b1:3b:
16:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:67:D7:CB:58:C2:07:75:29:30:73:64:56:19:7B:7B:4A:1D:49:CA
X509v3 Authority Key Identifier:
keyid:4F:80:45:CC:F5:09:77:EB:C3:06:6A:3C:EE:D8:FD:32:F1:F0:23:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T4BFzPUJd-vDBmo87tj9MvHwI94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/7d9e10-2c19-4dd8-a80f-40c8697bbde9/1/T4BFzPUJd-vDBmo87tj9MvHwI94.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/7d9e10-2c19-4dd8-a80f-40c8697bbde9/1/T4BFzPUJd-vDBmo87tj9MvHwI94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:94:4c:01:34:d3:7b:6a:5c:50:2c:43:0f:18:e7:68:7d:24:
99:b5:b6:ba:6d:e9:2a:f7:63:50:6c:0c:88:a9:c3:cd:0d:75:
76:ce:42:81:b3:78:16:da:74:eb:f3:c2:c5:16:96:2b:fa:13:
ab:ce:b1:33:0d:ef:e1:af:2d:99:d4:b2:b7:02:56:75:65:67:
33:02:91:4e:54:f7:aa:b1:78:9a:55:66:29:67:b7:09:98:c8:
37:91:f6:ec:2a:6c:13:55:c5:0c:40:92:f5:4d:74:ba:8f:13:
aa:0f:ef:5c:ba:b4:76:cb:72:41:74:64:9b:40:59:05:4c:fe:
0b:31:91:aa:ba:18:e9:7c:20:4b:bd:47:ca:39:11:85:61:d0:
44:89:e5:0e:1c:1c:0f:72:86:27:bb:45:96:08:c1:ff:b4:42:
4c:3c:ed:c9:3a:8a:6d:54:b0:f3:51:04:64:4c:2a:4f:7a:af:
56:85:dd:18:60:c4:6e:7c:c5:80:2b:cd:5c:d7:be:16:68:9a:
ba:91:13:42:96:36:8d:25:b1:08:01:1e:55:63:ca:70:86:1f:
42:71:5e:4a:20:e4:0c:0e:c1:66:52:16:37:7a:3f:63:fc:99:
21:16:94:e2:a5:67:3c:ad:d9:ee:9b:ea:21:eb:53:e0:b6:4c:
46:0e:99:46
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nqTualtA/S37jWB4KslZGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmODA0NWNjZjUwOTc3ZWJjMzA2NmEzY2VlZDhmZDMyZjFm
MDIzZGUwHhcNMjYwMzI2MDEwMTM1WhcNMjYwMzI3MDEwMTM1WjAzMTEwLwYDVQQD
Eyg0YjY3ZDdjYjU4YzIwNzc1MjkzMDczNjQ1NjE5N2I3YjRhMWQ0OWNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1qPJqcaPOIeo+xPxPxLvsrOismG2
3x89n5t2uicEHeuYNgGEZ+Crh7VokLh0DPyoLRY6rnbxaB9SRqIDDS1siwxFHUaW
sXBx9kNIB3DtTxlSlDkIfWhRx9pbFKOMoZNgNokZrkiovh7yPrgZMxQnzHUR8Tfi
4BG/OUFcFwS1Vpm1wkVGkWCSIjNu2WtSFKszFI3slCLllAshr6SYWr5F0rtPoW6f
0C+DtY2yfedlk7Q+clHY7ZXBUcrnBt9seI4m93RG/WxgBur/sHM4NIYeMcC+rB3M
mY8Pq0J0FB2XcHyeQcXBcajDd2/TqyAx/U1wpl3YUi8dZgnYIaXYsTsWzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEtn18tYwgd1KTBzZFYZe3tKHUnKMB8GA1UdIwQY
MBaAFE+ARcz1CXfrwwZqPO7Y/TLx8CPeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDRCRnpQVUpkLXZEQm1vODd0ajlNdkh3STk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi83ZDllMTAtMmMxOS00ZGQ4LWE4MGYt
NDBjODY5N2JiZGU5LzEvVDRCRnpQVUpkLXZEQm1vODd0ajlNdkh3STk0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi83ZDllMTAtMmMxOS00ZGQ4LWE4MGYtNDBjODY5N2JiZGU5
LzEvVDRCRnpQVUpkLXZEQm1vODd0ajlNdkh3STk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGpRMATTT
e2pcUCxDDxjnaH0kmbW2um3pKvdjUGwMiKnDzQ11ds5CgbN4Ftp06/PCxRaWK/oT
q86xMw3v4a8tmdSytwJWdWVnMwKRTlT3qrF4mlVmKWe3CZjIN5H27CpsE1XFDECS
9U10uo8Tqg/vXLq0dstyQXRkm0BZBUz+CzGRqroY6XwgS71HyjkRhWHQRInlDhwc
D3KGJ7tFlgjB/7RCTDztyTqKbVSw81EEZEwqT3qvVoXdGGDEbnzFgCvNXNe+Fmia
upETQpY2jSWxCAEeVWPKcIYfQnFeSiDkDA7BZlIWN3o/Y/yZIRaU4qVnPK3Z7pvq
IetT4LZMRg6ZRg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 06:42:12 2026 by rpki-client