Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/836431-b90d-4a98-be2c-955f5cb09893/1/t4cfKQ__DgQmDGdT44fJ77db4pY.mft
File: t4cfKQ__DgQmDGdT44fJ77db4pY.mft (raw, json)
Hash identifier: CzgwCV9Snsc3xIyhNc2MjPqR2GRUBg7vRCCH/sddD64=
Subject key identifier: D8:09:DF:AC:9C:BD:68:11:F1:CF:1C:88:D0:FD:AF:E2:D3:5A:AD:89
Authority key identifier: B7:87:1F:29:0F:FF:0E:04:26:0C:67:53:E3:87:C9:EF:B7:5B:E2:96
Certificate issuer: /CN=b7871f290fff0e04260c6753e387c9efb75be296
Certificate serial: 019E1D225C147D0A7448C7A3B23DCB6FC2E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t4cfKQ__DgQmDGdT44fJ77db4pY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/836431-b90d-4a98-be2c-955f5cb09893/1/t4cfKQ__DgQmDGdT44fJ77db4pY.mft
Manifest number: 01B2
Signing time: Tue 12 May 2026 17:00:51 +0000
Manifest this update: Tue 12 May 2026 17:00:51 +0000
Manifest next update: Wed 13 May 2026 17:00:51 +0000
Files and hashes: 1: 3zIrc0aWYxX9dKMnCfOMwQPa5t8.asa (hash: cnCGcJrQuR05fmoh1KvgU/rA+KkWRXV4v1npDlI9OnU=)
2: Erb818ffjnKFyiFLXrdFbiFYOSI.roa (hash: Olz1fwb3G3mD1eaDlk7aaaY6S5htT2DXXobUdGYkCz4=)
3: t4cfKQ__DgQmDGdT44fJ77db4pY.crl (hash: Waw0EMw4bVMBr3nm4TFwJxOaNS3HHlzObncg8Z7ISEg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/836431-b90d-4a98-be2c-955f5cb09893/1/t4cfKQ__DgQmDGdT44fJ77db4pY.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/836431-b90d-4a98-be2c-955f5cb09893/1/t4cfKQ__DgQmDGdT44fJ77db4pY.mft
rsync://rpki.ripe.net/repository/DEFAULT/t4cfKQ__DgQmDGdT44fJ77db4pY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:22:5c:14:7d:0a:74:48:c7:a3:b2:3d:cb:6f:c2:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7871f290fff0e04260c6753e387c9efb75be296
Validity
Not Before: May 12 17:00:51 2026 GMT
Not After : May 13 17:00:51 2026 GMT
Subject: CN=d809dfac9cbd6811f1cf1c88d0fdafe2d35aad89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:79:c1:f6:02:aa:c2:e8:44:0e:14:b6:d6:13:
d7:75:3c:88:d8:43:8f:15:24:c9:da:a3:18:32:90:
8c:09:28:65:41:8e:a3:b3:f1:5e:e0:8d:fc:bd:23:
88:38:b8:d5:7b:b1:2a:ea:fd:c7:2a:7e:9e:74:c0:
23:65:9b:37:8e:25:dc:43:5e:8e:84:17:e6:a8:7d:
0c:74:79:9a:10:fc:44:46:0f:d7:a0:89:5a:f6:4f:
4a:6b:2c:38:e1:49:6a:5c:4c:23:f6:70:a6:d8:c8:
87:f1:08:a7:f2:83:34:17:cc:fd:e4:70:5f:33:f6:
83:6e:47:e5:64:c2:eb:f0:4d:48:cf:26:18:b8:70:
04:d5:4a:ba:37:dc:db:27:ca:c1:ed:8a:99:31:34:
0a:3e:2c:99:89:45:61:50:65:6a:96:4c:3e:20:c0:
fb:55:ef:c3:14:8f:76:e1:1d:63:94:98:64:69:17:
9d:93:81:31:eb:d3:cb:dc:7d:09:82:19:56:a9:f3:
dc:4c:ee:c2:12:92:0a:9b:1b:eb:2c:83:b1:e4:79:
32:dd:21:68:3a:95:12:d6:14:ec:85:0e:e1:24:3a:
20:92:0a:80:6f:1f:4f:a9:e1:cd:c9:fe:72:e6:65:
c1:21:d1:bc:36:26:b4:83:1f:12:f9:05:1d:5f:d7:
e4:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:09:DF:AC:9C:BD:68:11:F1:CF:1C:88:D0:FD:AF:E2:D3:5A:AD:89
X509v3 Authority Key Identifier:
keyid:B7:87:1F:29:0F:FF:0E:04:26:0C:67:53:E3:87:C9:EF:B7:5B:E2:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t4cfKQ__DgQmDGdT44fJ77db4pY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/836431-b90d-4a98-be2c-955f5cb09893/1/t4cfKQ__DgQmDGdT44fJ77db4pY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/836431-b90d-4a98-be2c-955f5cb09893/1/t4cfKQ__DgQmDGdT44fJ77db4pY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:18:32:cf:66:63:8d:b4:87:38:71:3e:c2:e4:cc:5b:f9:72:
44:d1:87:7e:82:b3:21:7d:7f:35:f2:88:e8:3b:1e:6c:4d:58:
02:dd:be:1c:83:dd:00:d9:7e:32:2b:9c:61:d1:08:72:69:6b:
ee:8c:29:5e:11:dc:7e:4c:5b:01:0a:f3:41:22:61:62:2d:47:
ab:84:cd:dc:34:19:ae:83:b5:80:ab:ac:20:db:9c:e6:50:bc:
61:f6:5c:26:f0:a4:80:7e:8e:ed:d0:b6:9c:33:b5:15:99:3d:
7c:65:02:68:85:5c:e4:1b:57:fe:02:47:62:fc:1f:8d:e4:e1:
56:3a:17:8a:11:b6:0b:6a:91:38:d0:43:e2:a2:ce:77:f4:16:
2f:da:c3:6f:4d:e7:ab:a1:7e:c7:bf:84:e8:5f:52:64:2f:1d:
7a:23:5f:4c:e8:2b:73:b8:e8:a7:5f:38:e7:52:f1:27:b3:ec:
1e:6e:6b:ed:48:8b:2f:28:5a:64:87:0c:b9:a4:89:57:18:b6:
97:96:3c:e0:56:b7:d9:2d:5a:f7:0e:fa:5f:b6:f0:6d:94:c4:
04:46:67:bc:a1:5b:a7:ec:ba:d6:50:13:51:9c:0e:28:e2:b9:
b1:b0:c7:5d:9e:f0:44:d2:16:d7:95:c3:23:9d:3c:98:c5:0f:
a7:a8:80:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:42:53 2026 by rpki-client