Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/89ee94-5010-44ad-9e17-436ab4ade0a7/1/T7EQS7paPx3dLe67o0gZGfT5YaQ.mft
File: T7EQS7paPx3dLe67o0gZGfT5YaQ.mft (raw, json)
Hash identifier: RpNypPBDPrcIs74mtqP9Py8hkF4Rs+IotawqSgiyRLs=
Subject key identifier: CA:6E:1E:06:8E:BE:88:D7:66:9E:7B:C9:FF:8A:11:F5:C7:61:65:57
Authority key identifier: 4F:B1:10:4B:BA:5A:3F:1D:DD:2D:EE:BB:A3:48:19:19:F4:F9:61:A4
Certificate issuer: /CN=4fb1104bba5a3f1ddd2deebba3481919f4f961a4
Certificate serial: 019D2704C385B57726AF16C44EC88D813F8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T7EQS7paPx3dLe67o0gZGfT5YaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/89ee94-5010-44ad-9e17-436ab4ade0a7/1/T7EQS7paPx3dLe67o0gZGfT5YaQ.mft
Manifest number: 1281
Signing time: Wed 25 Mar 2026 22:01:56 +0000
Manifest this update: Wed 25 Mar 2026 22:01:56 +0000
Manifest next update: Thu 26 Mar 2026 22:01:56 +0000
Files and hashes: 1: QXk8W4rb7xC84yICsxZR9VqLPac.roa (hash: d5XV4cDn9Fni7vqIA1er8ivsyYtrUO1CqIbq1cH3BPY=)
2: T7EQS7paPx3dLe67o0gZGfT5YaQ.crl (hash: Sgp3K2D0y3G6OM92eDldGQYMwzRpmdYRr5ipshU+UqA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/89ee94-5010-44ad-9e17-436ab4ade0a7/1/T7EQS7paPx3dLe67o0gZGfT5YaQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/89ee94-5010-44ad-9e17-436ab4ade0a7/1/T7EQS7paPx3dLe67o0gZGfT5YaQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/T7EQS7paPx3dLe67o0gZGfT5YaQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:c3:85:b5:77:26:af:16:c4:4e:c8:8d:81:3f:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fb1104bba5a3f1ddd2deebba3481919f4f961a4
Validity
Not Before: Mar 25 22:01:56 2026 GMT
Not After : Mar 26 22:01:56 2026 GMT
Subject: CN=ca6e1e068ebe88d7669e7bc9ff8a11f5c7616557
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:3e:da:84:55:03:22:38:6b:e8:9b:ce:74:20:
5b:24:89:cf:2b:a5:c7:91:70:ea:72:cb:9d:8c:b9:
a5:64:1d:db:6a:ae:fd:07:22:07:65:ff:e6:53:4c:
fa:cd:8c:62:84:18:0c:25:a2:85:e9:14:7b:d8:0c:
02:44:5a:ca:bf:bb:09:6d:34:bd:b5:b9:6a:ad:2a:
c9:e0:0b:07:2e:b4:32:b2:2e:1c:d2:9d:5d:2e:17:
b1:ec:bd:cd:eb:fb:80:3c:66:06:ef:0c:32:c1:c9:
2b:44:a1:56:5c:e7:b2:00:60:0e:10:94:bb:10:0c:
4b:ef:64:20:eb:02:35:96:64:c6:63:82:7c:d8:35:
53:4a:86:69:d7:fe:5b:2f:25:b1:f2:7a:56:8f:9e:
3e:68:17:1e:b1:68:af:df:af:c0:16:1c:cd:03:06:
02:5b:8c:7f:8e:e7:e5:35:af:42:95:27:b7:ae:6d:
4d:a2:0a:ea:12:1d:9f:21:ea:d0:a6:68:d3:c5:b1:
aa:4a:83:8a:bc:08:ec:6d:c0:f3:a5:ea:6c:0a:6f:
b8:e2:d5:ed:60:f4:96:a3:f4:d4:1a:a3:d2:83:16:
8e:20:aa:8d:d1:00:f3:39:02:a8:24:1f:ba:de:54:
97:80:02:a1:21:90:e0:45:cb:6a:7d:c5:71:a4:ce:
35:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:6E:1E:06:8E:BE:88:D7:66:9E:7B:C9:FF:8A:11:F5:C7:61:65:57
X509v3 Authority Key Identifier:
keyid:4F:B1:10:4B:BA:5A:3F:1D:DD:2D:EE:BB:A3:48:19:19:F4:F9:61:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T7EQS7paPx3dLe67o0gZGfT5YaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/89ee94-5010-44ad-9e17-436ab4ade0a7/1/T7EQS7paPx3dLe67o0gZGfT5YaQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/89ee94-5010-44ad-9e17-436ab4ade0a7/1/T7EQS7paPx3dLe67o0gZGfT5YaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:58:d9:98:17:61:9a:60:88:7b:0f:a3:de:7d:04:d2:9a:56:
7b:de:a4:aa:f9:4c:a8:7e:84:4d:0a:65:fb:16:c5:d0:9e:bb:
82:f7:87:52:f0:9c:a8:75:a9:b6:9f:fc:ff:af:fa:33:2c:32:
8b:56:db:8c:a7:e9:64:80:da:cd:23:56:60:99:49:e6:a6:e9:
cc:6f:83:a2:2d:53:43:e1:f1:01:3e:5c:23:d3:4a:db:56:c7:
73:d0:9b:89:74:7e:90:80:3c:10:31:b7:2b:1f:2d:46:3d:2f:
d3:13:53:ab:b5:67:0e:a7:50:4f:25:13:31:49:90:f1:cb:ae:
7a:0b:04:7d:37:c8:62:0b:c4:05:45:6c:50:27:2f:41:c8:6a:
99:29:75:bc:41:c5:ef:05:4c:01:49:52:d0:85:64:e8:44:11:
5f:da:b5:6c:9f:6b:6e:46:f6:3f:ae:b3:ff:31:b9:41:0c:ce:
c0:d9:cc:da:7b:fe:4f:1d:f1:c0:0f:8a:30:c6:9a:db:4d:1e:
aa:5c:1f:c9:ba:2c:38:9f:e7:40:b6:1f:5d:d0:2a:57:fc:be:
e4:e0:a4:4c:37:a0:a7:95:5a:9a:e5:a6:e6:e6:b6:53:ee:f4:
66:40:06:47:88:15:78:e1:77:87:f8:db:33:68:67:24:7e:8d:
26:4d:6d:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:11:16 2026 by rpki-client