Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/836431-b90d-4a98-be2c-955f5cb09893/1/t4cfKQ__DgQmDGdT44fJ77db4pY.mft
File: t4cfKQ__DgQmDGdT44fJ77db4pY.mft (raw, json)
Hash identifier: NyocUhdit65htmaqFivTqP0hk2vZMW5lClyHbjluyMg=
Subject key identifier: 69:D2:D0:A8:79:7A:65:4E:93:32:B3:C5:BF:91:A4:84:C0:2F:1B:27
Authority key identifier: B7:87:1F:29:0F:FF:0E:04:26:0C:67:53:E3:87:C9:EF:B7:5B:E2:96
Certificate issuer: /CN=b7871f290fff0e04260c6753e387c9efb75be296
Certificate serial: 019D27DF5B5B0419A5BBF69376C4BCF98720
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t4cfKQ__DgQmDGdT44fJ77db4pY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/836431-b90d-4a98-be2c-955f5cb09893/1/t4cfKQ__DgQmDGdT44fJ77db4pY.mft
Manifest number: 0132
Signing time: Thu 26 Mar 2026 02:00:42 +0000
Manifest this update: Thu 26 Mar 2026 02:00:42 +0000
Manifest next update: Fri 27 Mar 2026 02:00:42 +0000
Files and hashes: 1: Erb818ffjnKFyiFLXrdFbiFYOSI.roa (hash: Olz1fwb3G3mD1eaDlk7aaaY6S5htT2DXXobUdGYkCz4=)
2: t4cfKQ__DgQmDGdT44fJ77db4pY.crl (hash: Lsmn15M5QEzFp5lM/U1yeuh2fEUhS3/wb5vkgoTj9ZA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/836431-b90d-4a98-be2c-955f5cb09893/1/t4cfKQ__DgQmDGdT44fJ77db4pY.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/836431-b90d-4a98-be2c-955f5cb09893/1/t4cfKQ__DgQmDGdT44fJ77db4pY.mft
rsync://rpki.ripe.net/repository/DEFAULT/t4cfKQ__DgQmDGdT44fJ77db4pY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 02:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:5b:5b:04:19:a5:bb:f6:93:76:c4:bc:f9:87:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7871f290fff0e04260c6753e387c9efb75be296
Validity
Not Before: Mar 26 02:00:42 2026 GMT
Not After : Mar 27 02:00:42 2026 GMT
Subject: CN=69d2d0a8797a654e9332b3c5bf91a484c02f1b27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:af:33:01:1c:6a:3d:16:e1:3f:12:b6:14:6f:
e3:a4:f2:56:e4:ba:e8:88:f4:b4:88:ac:f6:cb:5a:
f8:d7:01:fb:9c:bd:25:a4:9b:43:8e:26:bd:e7:f5:
6d:d1:5a:80:e5:a3:29:9e:23:c8:30:5a:eb:55:4e:
9e:3d:c9:83:12:86:54:84:a1:05:e3:23:99:52:3a:
03:e6:5a:2d:92:bf:b4:79:06:87:31:78:c9:9f:2a:
98:94:80:6c:97:01:32:6f:b8:96:ed:6a:3f:83:ea:
07:69:2d:27:1c:25:c4:72:e4:e3:62:b5:86:1b:bc:
81:60:fb:a1:59:e6:c6:a7:89:16:b9:d9:33:96:bb:
45:a8:51:d1:24:a1:85:4b:66:01:af:bb:fe:e4:68:
26:3d:d7:48:cc:85:58:63:53:c1:e4:28:20:cc:a4:
95:a8:b9:54:e7:00:8e:b3:2c:b0:34:0b:9b:49:f7:
d9:85:5f:e2:61:d2:05:79:c7:1e:63:91:3b:a1:8c:
d0:be:67:eb:2b:4d:b6:37:99:e4:b6:f2:01:a2:5c:
5c:fa:07:b9:8c:cd:17:49:6a:cc:ea:17:9e:d4:1d:
81:88:bf:54:9b:86:4c:63:4c:d9:5c:40:b4:12:63:
f7:ff:a2:52:39:96:6f:10:b7:11:cd:93:e5:5c:2a:
59:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:D2:D0:A8:79:7A:65:4E:93:32:B3:C5:BF:91:A4:84:C0:2F:1B:27
X509v3 Authority Key Identifier:
keyid:B7:87:1F:29:0F:FF:0E:04:26:0C:67:53:E3:87:C9:EF:B7:5B:E2:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t4cfKQ__DgQmDGdT44fJ77db4pY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/836431-b90d-4a98-be2c-955f5cb09893/1/t4cfKQ__DgQmDGdT44fJ77db4pY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/836431-b90d-4a98-be2c-955f5cb09893/1/t4cfKQ__DgQmDGdT44fJ77db4pY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:69:b2:93:b9:64:b8:e3:63:e3:00:e8:db:8e:cf:b1:c6:a2:
6a:04:4c:e8:7c:b8:5e:da:36:b1:4e:96:39:88:a7:88:a7:f5:
0e:c9:3a:b1:6f:fd:de:75:64:a0:33:4f:32:58:11:cb:14:f2:
6c:79:58:81:bf:87:6f:f6:0f:72:d1:53:1a:ee:76:25:28:1f:
a4:68:41:82:31:42:11:ef:0c:c8:78:4b:09:9d:fe:f0:a4:31:
5e:61:fb:3b:c9:77:fe:6e:10:ed:49:f5:4c:a4:e8:2c:ec:3f:
72:0e:c5:81:68:7a:0b:5c:95:9b:8c:46:f2:56:e4:2e:7f:e6:
b8:25:63:aa:5f:5f:a6:4b:65:80:32:c0:30:9a:3d:db:92:89:
4f:ba:c0:2f:73:d6:81:f0:76:52:1e:34:84:32:0b:83:0a:58:
25:53:0c:b0:da:84:84:b8:08:4f:ca:11:7f:91:7d:0b:7b:30:
53:20:a0:ad:64:a7:14:52:c3:ce:72:25:e6:3f:c8:1e:1e:15:
6b:7b:18:aa:ed:cd:2c:63:49:d4:98:60:92:9b:d8:dc:45:84:
14:6d:87:5e:c9:a3:c6:81:80:df:f6:26:83:fd:9e:2c:ed:b6:
62:84:f3:fa:e2:dd:bd:9c:66:58:ae:b3:e1:db:ee:50:6c:2a:
93:82:c7:51
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0n31tbBBmlu/aTdsS8+YcgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3ODcxZjI5MGZmZjBlMDQyNjBjNjc1M2UzODdjOWVmYjc1
YmUyOTYwHhcNMjYwMzI2MDIwMDQyWhcNMjYwMzI3MDIwMDQyWjAzMTEwLwYDVQQD
Eyg2OWQyZDBhODc5N2E2NTRlOTMzMmIzYzViZjkxYTQ4NGMwMmYxYjI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0q8zARxqPRbhPxK2FG/jpPJW5Lro
iPS0iKz2y1r41wH7nL0lpJtDjia95/Vt0VqA5aMpniPIMFrrVU6ePcmDEoZUhKEF
4yOZUjoD5lotkr+0eQaHMXjJnyqYlIBslwEyb7iW7Wo/g+oHaS0nHCXEcuTjYrWG
G7yBYPuhWebGp4kWudkzlrtFqFHRJKGFS2YBr7v+5GgmPddIzIVYY1PB5CggzKSV
qLlU5wCOsyywNAubSffZhV/iYdIFecceY5E7oYzQvmfrK022N5nktvIBolxc+ge5
jM0XSWrM6hee1B2BiL9Um4ZMY0zZXEC0EmP3/6JSOZZvELcRzZPlXCpZ0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGnS0Kh5emVOkzKzxb+RpITALxsnMB8GA1UdIwQY
MBaAFLeHHykP/w4EJgxnU+OHye+3W+KWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdDRjZktRX19EZ1FtREdkVDQ0Zko3N2RiNHBZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My84MzY0MzEtYjkwZC00YTk4LWJlMmMt
OTU1ZjVjYjA5ODkzLzEvdDRjZktRX19EZ1FtREdkVDQ0Zko3N2RiNHBZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80My84MzY0MzEtYjkwZC00YTk4LWJlMmMtOTU1ZjVjYjA5ODkz
LzEvdDRjZktRX19EZ1FtREdkVDQ0Zko3N2RiNHBZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZWmyk7lk
uONj4wDo247PscaiagRM6Hy4Xto2sU6WOYiniKf1Dsk6sW/93nVkoDNPMlgRyxTy
bHlYgb+Hb/YPctFTGu52JSgfpGhBgjFCEe8MyHhLCZ3+8KQxXmH7O8l3/m4Q7Un1
TKToLOw/cg7FgWh6C1yVm4xG8lbkLn/muCVjql9fpktlgDLAMJo925KJT7rAL3PW
gfB2Uh40hDILgwpYJVMMsNqEhLgIT8oRf5F9C3swUyCgrWSnFFLDznIl5j/IHh4V
a3sYqu3NLGNJ1JhgkpvY3EWEFG2HXsmjxoGA3/Ymg/2eLO22YoTz+uLdvZxmWK6z
4dvuUGwqk4LHUQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 13:52:04 2026 by rpki-client