Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/43/836431-b90d-4a98-be2c-955f5cb09893/1/t4cfKQ__DgQmDGdT44fJ77db4pY.mft
File: t4cfKQ__DgQmDGdT44fJ77db4pY.mft (raw, json)
Hash identifier: 6Iv4SfB73/b0GFU+KAJUfA49W+GVdgNdplglGWBm0xY=
Subject key identifier: F2:D1:71:4F:22:33:E4:5B:FA:6D:DC:3D:E7:63:5C:00:86:39:55:28
Authority key identifier: B7:87:1F:29:0F:FF:0E:04:26:0C:67:53:E3:87:C9:EF:B7:5B:E2:96
Certificate issuer: /CN=b7871f290fff0e04260c6753e387c9efb75be296
Certificate serial: 01A0CFDB43442E080A515DE3E9314F8EEEB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t4cfKQ__DgQmDGdT44fJ77db4pY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/836431-b90d-4a98-be2c-955f5cb09893/1/t4cfKQ__DgQmDGdT44fJ77db4pY.mft
Manifest number: 031B
Signing time: Wed 23 Sep 2026 20:00:48 +0000
Manifest this update: Wed 23 Sep 2026 20:00:48 +0000
Manifest next update: Thu 24 Sep 2026 20:00:48 +0000
Files and hashes: 1: WESCbQ3vetqiTu5o3qQFVAH2GuY.asa (hash: 1aiCAFq0XN0g2XFeCxMyN7VVcKHWH+2jHOUYyChhHCQ=)
2: Zs7v1NDx63hWaP0rqC9JgN4viuQ.roa (hash: hVIg73QWwWuqnjCLMmbKJMff3qM/nFL/BxoYDSJaxBw=)
3: t4cfKQ__DgQmDGdT44fJ77db4pY.crl (hash: 5XcABHq+i054b43ABdUfJkS2X2B7102M8UXYgxKD8bo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/836431-b90d-4a98-be2c-955f5cb09893/1/t4cfKQ__DgQmDGdT44fJ77db4pY.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/836431-b90d-4a98-be2c-955f5cb09893/1/t4cfKQ__DgQmDGdT44fJ77db4pY.mft
rsync://rpki.ripe.net/repository/DEFAULT/t4cfKQ__DgQmDGdT44fJ77db4pY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 18:27:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cf:db:43:44:2e:08:0a:51:5d:e3:e9:31:4f:8e:ee:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7871f290fff0e04260c6753e387c9efb75be296
Validity
Not Before: Sep 23 20:00:48 2026 GMT
Not After : Sep 24 20:00:48 2026 GMT
Subject: CN=f2d1714f2233e45bfa6ddc3de7635c0086395528
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:ad:78:4f:67:06:9c:bd:41:f0:93:b9:b5:b6:
ba:d3:bb:74:53:fe:7f:e6:43:68:2e:5b:68:c2:62:
c4:fb:84:ee:d1:0c:09:a8:b0:f0:9d:cf:91:52:25:
14:42:1d:7b:59:52:eb:c1:19:04:fa:7b:9f:05:6a:
f0:75:f3:29:13:36:99:11:0d:17:b5:21:e0:87:f3:
65:e4:13:ab:d1:73:39:02:99:d0:dc:1e:e0:5a:af:
3f:3a:57:a5:79:91:40:be:c5:ae:c0:ed:20:9e:9d:
1f:52:30:2d:40:6b:c3:b2:31:5b:1b:78:5d:b9:77:
79:76:23:98:f0:20:e0:57:7e:46:c8:7d:b3:fd:34:
34:a5:7d:a3:b9:21:7b:b6:1f:84:1b:18:1c:66:ec:
94:5c:2e:6a:15:1b:b4:ee:e3:f0:ca:ab:76:f9:f2:
3b:5b:78:16:bf:7c:87:6e:2b:e5:2b:0f:73:41:a8:
c9:0a:b4:42:12:c1:35:75:c5:e2:50:b9:20:35:30:
9b:23:e5:f2:bd:f5:d3:d3:54:e2:6d:86:39:0c:08:
b1:16:ff:c3:8a:0c:30:f9:59:d3:78:98:6e:82:f9:
81:3f:84:55:4b:5e:b8:f2:22:7e:c3:cd:5c:db:09:
8f:fe:b6:53:5e:95:06:9e:ab:1e:35:8b:9b:69:5a:
1c:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:D1:71:4F:22:33:E4:5B:FA:6D:DC:3D:E7:63:5C:00:86:39:55:28
X509v3 Authority Key Identifier:
keyid:B7:87:1F:29:0F:FF:0E:04:26:0C:67:53:E3:87:C9:EF:B7:5B:E2:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t4cfKQ__DgQmDGdT44fJ77db4pY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/836431-b90d-4a98-be2c-955f5cb09893/1/t4cfKQ__DgQmDGdT44fJ77db4pY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/836431-b90d-4a98-be2c-955f5cb09893/1/t4cfKQ__DgQmDGdT44fJ77db4pY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:4c:77:6b:3c:78:02:bd:77:03:e6:43:48:18:4f:0a:44:b8:
6f:16:c8:e0:42:01:44:d1:47:dd:fe:c2:d5:db:f6:15:5e:72:
9f:d8:7a:8f:38:63:63:cb:d7:5c:62:c1:d0:d0:2b:b4:ac:91:
f5:f6:a9:ec:1d:4d:ce:a6:50:68:ec:d6:08:ef:ae:55:27:7d:
00:d2:e7:71:c9:0d:60:6d:df:02:a2:ca:2c:01:e8:a3:f9:53:
d4:74:74:e2:67:2c:72:94:4c:00:29:ab:7b:a5:b4:e7:54:57:
1e:d1:7d:2c:9c:06:99:7b:a5:39:f5:9e:b6:90:10:0f:28:36:
f2:47:44:2e:84:0f:a6:f8:fb:29:05:a8:70:be:2f:42:e4:6b:
8e:57:f1:35:31:e1:ed:23:69:f8:c8:2d:c4:56:c1:2d:f5:04:
e5:89:d1:2e:f3:cb:55:96:ca:c0:0a:42:5d:4c:de:89:77:8a:
f7:1f:60:a8:24:21:5c:20:52:f3:9e:13:9f:2c:60:10:5a:15:
30:d1:7c:e5:30:b8:fa:cd:b5:72:69:6b:07:22:34:b6:5b:c4:
c7:82:33:0f:7d:8a:2c:5e:70:3a:75:26:cd:29:39:63:d0:07:
4e:45:d7:73:4a:8d:80:e8:90:50:5e:a3:46:1b:7d:c8:39:47:
c8:3a:6a:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 04:27:38 2026 by rpki-client