Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4a/30b8e9-e7d4-40cc-ad5f-3c741220ea00/1/t4zdv8dr2iagKeqAyJh3mHRfHwI.mft
File: t4zdv8dr2iagKeqAyJh3mHRfHwI.mft (raw, json)
Hash identifier: BfjffRWio3G4oX08OjCWFaQSWIlqKThIRnUiv8DMiYU=
Subject key identifier: 7C:8B:52:DC:C7:6B:EA:43:9B:4F:D8:CF:7F:A7:F9:5A:E9:46:BD:06
Authority key identifier: B7:8C:DD:BF:C7:6B:DA:26:A0:29:EA:80:C8:98:77:98:74:5F:1F:02
Certificate issuer: /CN=b78cddbfc76bda26a029ea80c8987798745f1f02
Certificate serial: 01A0D048DDE64D37ABF288CA89F64A17A0DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t4zdv8dr2iagKeqAyJh3mHRfHwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/30b8e9-e7d4-40cc-ad5f-3c741220ea00/1/t4zdv8dr2iagKeqAyJh3mHRfHwI.mft
Manifest number: 1720
Signing time: Wed 23 Sep 2026 22:00:31 +0000
Manifest this update: Wed 23 Sep 2026 22:00:31 +0000
Manifest next update: Thu 24 Sep 2026 22:00:31 +0000
Files and hashes: 1: 2cs6BtaFV3H5PXU6nZOA8Uu_NwQ.roa (hash: VpwFMCxf02N3s6qbKcrB7OwUNutAGhYjp7y72GSVaW4=)
2: fZqDSJnUbHG62IvLERx4tiEWKgg.roa (hash: GDZnevYXZ2UVLkiVPlwZRqNZ2Bo/evXbLjj481Slbr4=)
3: t4zdv8dr2iagKeqAyJh3mHRfHwI.crl (hash: KO0gVcn+/r+G10ch8TPdIpGeajLEXrk9i7LFDQhCppw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/30b8e9-e7d4-40cc-ad5f-3c741220ea00/1/t4zdv8dr2iagKeqAyJh3mHRfHwI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/30b8e9-e7d4-40cc-ad5f-3c741220ea00/1/t4zdv8dr2iagKeqAyJh3mHRfHwI.mft
rsync://rpki.ripe.net/repository/DEFAULT/t4zdv8dr2iagKeqAyJh3mHRfHwI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 18:27:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:48:dd:e6:4d:37:ab:f2:88:ca:89:f6:4a:17:a0:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b78cddbfc76bda26a029ea80c8987798745f1f02
Validity
Not Before: Sep 23 22:00:31 2026 GMT
Not After : Sep 24 22:00:31 2026 GMT
Subject: CN=7c8b52dcc76bea439b4fd8cf7fa7f95ae946bd06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:a9:9d:1a:f0:d6:94:df:76:c0:9e:34:62:cf:
1c:67:77:16:83:49:1e:04:f7:33:bd:55:ee:5a:83:
de:07:bc:70:06:a6:8d:d1:2a:80:12:6c:dc:4f:8a:
3f:6c:09:06:57:e7:db:c6:0a:3e:b0:de:00:e4:8e:
a7:00:61:e2:d2:fd:48:55:5b:22:57:3f:a3:41:9a:
9a:1c:65:3c:4a:59:f0:23:f0:cf:1c:14:ae:dd:83:
e7:ae:2f:14:b8:4b:c8:c4:eb:66:b3:27:9f:5b:5e:
51:a2:44:05:79:2a:89:cf:ce:ba:be:a7:5f:96:8e:
73:a9:88:7c:ec:65:48:2a:54:5a:22:5d:08:26:e6:
06:d3:b1:37:6e:f9:ef:93:91:e3:2b:e2:c7:a7:ee:
96:e0:99:ac:97:b6:2a:d2:cc:7d:59:ff:d7:a5:18:
12:f4:68:37:ee:1e:ff:92:25:37:53:e6:9b:06:9d:
d1:26:60:03:15:a4:57:7b:c6:af:10:66:10:3b:e2:
3c:14:86:de:07:5a:26:5e:ff:03:0b:99:a5:b6:12:
a2:d7:22:e8:71:38:e1:c4:8c:ac:f2:18:b1:d9:61:
ee:49:02:8b:32:01:3e:5f:60:9e:ca:2d:e1:b1:8f:
d1:98:7b:ed:99:1f:d4:31:f4:99:b2:88:2d:f5:24:
a0:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:8B:52:DC:C7:6B:EA:43:9B:4F:D8:CF:7F:A7:F9:5A:E9:46:BD:06
X509v3 Authority Key Identifier:
keyid:B7:8C:DD:BF:C7:6B:DA:26:A0:29:EA:80:C8:98:77:98:74:5F:1F:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t4zdv8dr2iagKeqAyJh3mHRfHwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/30b8e9-e7d4-40cc-ad5f-3c741220ea00/1/t4zdv8dr2iagKeqAyJh3mHRfHwI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/30b8e9-e7d4-40cc-ad5f-3c741220ea00/1/t4zdv8dr2iagKeqAyJh3mHRfHwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:fa:e5:59:86:11:d4:08:a5:5f:19:e9:b5:84:6e:80:5c:61:
d0:13:8f:40:89:ba:70:5f:b3:ba:f8:be:07:63:7d:67:0a:2e:
0f:05:32:8b:f0:91:40:e4:f2:ee:96:4c:b7:24:65:a0:65:ae:
d1:d1:35:9a:34:ee:04:f4:6b:76:49:6c:da:09:3e:ed:fc:1a:
83:77:d2:bb:8a:02:f0:d3:31:5a:20:d3:dc:90:5f:cb:e0:8f:
4e:5e:3a:5c:f2:45:ae:a8:96:97:86:bf:a4:5b:1c:92:62:6f:
13:0a:50:63:5a:07:fd:0a:4a:39:26:a7:2f:cf:0a:b7:66:71:
47:13:cd:62:b7:08:c1:2c:db:b7:48:e4:a7:08:ca:e4:ce:9d:
a6:36:89:a1:14:86:64:91:93:f5:4c:a9:9c:85:38:14:0e:fe:
88:93:de:28:58:a9:63:e4:d9:52:77:57:99:87:7f:45:3a:df:
1c:da:10:1d:b3:99:6a:ed:c2:84:09:80:38:91:13:02:0f:57:
78:e2:52:f6:32:01:1c:5a:35:46:82:3c:2b:c7:40:da:11:c4:
eb:08:a1:8c:da:06:ae:a7:ef:d0:4a:91:60:16:81:17:b6:28:
46:bc:1f:d3:f0:03:ee:12:9d:4c:75:34:7c:53:d1:b3:25:f9:
fb:1f:64:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 03:46:26 2026 by rpki-client