Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/cd0a81-64b9-4cec-bad8-8ec1bf9fda2b/1/T0d31JE06rdaecERgyrX7OcmcUU.mft
File: T0d31JE06rdaecERgyrX7OcmcUU.mft (raw, json)
Hash identifier: O3TdYoiY7HyccbiKL2qIrrg9BoiTf3qUqSU5ifyRcIw=
Subject key identifier: EE:E0:FC:FC:2E:0E:83:10:21:E3:2A:63:82:D6:7E:35:34:AA:FF:9A
Authority key identifier: 4F:47:77:D4:91:34:EA:B7:5A:79:C1:11:83:2A:D7:EC:E7:26:71:45
Certificate issuer: /CN=4f4777d49134eab75a79c111832ad7ece7267145
Certificate serial: 019D277262058E0A5C051BD447B20A65342D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T0d31JE06rdaecERgyrX7OcmcUU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/cd0a81-64b9-4cec-bad8-8ec1bf9fda2b/1/T0d31JE06rdaecERgyrX7OcmcUU.mft
Manifest number: 07F3
Signing time: Thu 26 Mar 2026 00:01:40 +0000
Manifest this update: Thu 26 Mar 2026 00:01:40 +0000
Manifest next update: Fri 27 Mar 2026 00:01:40 +0000
Files and hashes: 1: RnxHD11Uhdt01kVBb1Rpc2SkWqI.roa (hash: EZi5XsUOzo8BaayU9rrJ+Q6qQj+QhPGNjhAuWPOc7h8=)
2: T0d31JE06rdaecERgyrX7OcmcUU.crl (hash: IVSKWQrExbUVgmAUES8szR3ScIMSSQfhJJlpgwgpVzc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/cd0a81-64b9-4cec-bad8-8ec1bf9fda2b/1/T0d31JE06rdaecERgyrX7OcmcUU.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/cd0a81-64b9-4cec-bad8-8ec1bf9fda2b/1/T0d31JE06rdaecERgyrX7OcmcUU.mft
rsync://rpki.ripe.net/repository/DEFAULT/T0d31JE06rdaecERgyrX7OcmcUU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:62:05:8e:0a:5c:05:1b:d4:47:b2:0a:65:34:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f4777d49134eab75a79c111832ad7ece7267145
Validity
Not Before: Mar 26 00:01:40 2026 GMT
Not After : Mar 27 00:01:40 2026 GMT
Subject: CN=eee0fcfc2e0e831021e32a6382d67e3534aaff9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:ab:a8:db:a7:b9:4e:e2:ad:76:73:f3:72:c8:
ef:c6:99:b9:d5:e8:e9:5c:fa:44:e0:97:0e:ec:dd:
a1:ae:76:5d:a7:ed:90:41:83:ca:bb:fa:3a:07:1b:
4c:f7:19:62:4e:0a:df:6f:1b:a0:84:27:19:d2:7a:
1b:6d:26:5f:31:cd:3c:e8:bb:4c:3f:cf:fb:e6:21:
8a:7f:78:7f:4b:ac:a8:9c:24:cb:7d:e7:df:47:7c:
e2:f0:24:a1:d7:a4:ac:da:38:52:12:27:58:07:0c:
71:5e:04:d2:2e:95:e4:7b:a2:bc:17:63:e8:02:4e:
f4:6e:ae:c0:ba:dd:72:7e:8a:28:5a:59:7e:de:07:
c1:65:11:18:89:b2:e3:ae:92:b2:69:a9:54:af:ae:
65:06:cc:a5:36:59:34:3a:59:e6:1a:80:38:de:8b:
0c:d6:6d:a4:0e:0d:23:b2:98:31:60:51:c9:af:92:
e9:24:8e:ec:21:db:e5:30:5e:67:b0:7a:ab:bc:1d:
d3:16:44:9d:76:a6:d0:fb:43:9b:f6:6c:5c:8d:e5:
d1:62:fa:a8:a9:7e:f4:b4:d9:91:cf:a7:44:84:38:
41:43:5b:41:ae:86:d5:93:f7:10:55:a3:f9:17:f0:
bb:81:1d:a1:48:8a:48:6d:16:ce:46:fc:8a:36:4b:
4d:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:E0:FC:FC:2E:0E:83:10:21:E3:2A:63:82:D6:7E:35:34:AA:FF:9A
X509v3 Authority Key Identifier:
keyid:4F:47:77:D4:91:34:EA:B7:5A:79:C1:11:83:2A:D7:EC:E7:26:71:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T0d31JE06rdaecERgyrX7OcmcUU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cd0a81-64b9-4cec-bad8-8ec1bf9fda2b/1/T0d31JE06rdaecERgyrX7OcmcUU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cd0a81-64b9-4cec-bad8-8ec1bf9fda2b/1/T0d31JE06rdaecERgyrX7OcmcUU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:91:2e:d3:c4:46:8b:1f:57:bf:75:e0:b0:73:84:58:51:ff:
b2:76:d1:81:d1:42:4f:23:88:c4:2b:bb:bd:ea:8d:9b:81:db:
8b:13:44:f2:59:a5:bc:ea:62:de:d1:76:e2:95:08:24:96:0d:
08:a2:2a:b0:5d:8b:0f:92:86:d8:ec:fb:5b:be:9d:77:0e:9b:
06:7b:66:09:9d:ff:92:30:e3:6f:36:de:3d:a4:c7:0d:af:f2:
03:00:59:aa:30:4c:eb:15:ba:9d:d3:97:35:d8:9e:e6:e1:46:
24:40:4c:22:82:0d:e8:a2:1a:35:0a:a0:c4:85:1e:d6:18:c9:
24:41:a2:c3:88:ce:5c:b3:2a:2e:85:95:ad:4b:f6:69:7f:0f:
64:47:85:f5:5c:ae:90:2e:e1:4e:db:b0:fa:06:ed:04:18:bb:
28:23:1f:7e:03:48:b1:8f:5b:3e:26:14:09:79:57:95:2d:b3:
f5:15:1d:83:d3:e7:83:09:ed:7d:e8:b7:69:42:35:a8:9a:4e:
1c:ee:34:65:b8:f8:e5:e9:75:2a:19:14:72:ea:ce:cd:28:f0:
11:d4:46:70:18:c8:33:40:56:9c:f8:3f:1b:8d:46:6b:7d:9f:
f9:d2:32:d5:83:14:7a:55:5b:a6:98:58:84:e5:59:d7:20:16:
9f:15:e8:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:56:03 2026 by rpki-client