Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/0355f6-270c-42b8-b264-b0d7117d794f/1/T1VxCj6EBcGv2mxj6edzZu_GHnw.mft
File: T1VxCj6EBcGv2mxj6edzZu_GHnw.mft (raw, json)
Hash identifier: O1N+aeCdlhd3T0zHqeRFPxQaeTi8OkhJDsNjTX5mYYs=
Subject key identifier: A8:D3:8D:D9:B5:0F:FC:CA:64:60:62:77:C1:5D:95:45:0D:47:6F:75
Authority key identifier: 4F:55:71:0A:3E:84:05:C1:AF:DA:6C:63:E9:E7:73:66:EF:C6:1E:7C
Certificate issuer: /CN=4f55710a3e8405c1afda6c63e9e77366efc61e7c
Certificate serial: 019D28F271C224CDB22A9080D85D99250AC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T1VxCj6EBcGv2mxj6edzZu_GHnw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/0355f6-270c-42b8-b264-b0d7117d794f/1/T1VxCj6EBcGv2mxj6edzZu_GHnw.mft
Manifest number: 0489
Signing time: Thu 26 Mar 2026 07:01:10 +0000
Manifest this update: Thu 26 Mar 2026 07:01:10 +0000
Manifest next update: Fri 27 Mar 2026 07:01:10 +0000
Files and hashes: 1: RNKA09gmabj2JlF4I1bGm-LyfJ4.asa (hash: 9aXjOvMKdj2EmkaeYTua4+aJ6Mm8p/TnOqM6sJ1bQoY=)
2: T1VxCj6EBcGv2mxj6edzZu_GHnw.crl (hash: zzleU1mj7Oy49jzDtrAHKFrT9eN7ltRJb9lYKl/Tya4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/0355f6-270c-42b8-b264-b0d7117d794f/1/T1VxCj6EBcGv2mxj6edzZu_GHnw.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/0355f6-270c-42b8-b264-b0d7117d794f/1/T1VxCj6EBcGv2mxj6edzZu_GHnw.mft
rsync://rpki.ripe.net/repository/DEFAULT/T1VxCj6EBcGv2mxj6edzZu_GHnw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 07:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:71:c2:24:cd:b2:2a:90:80:d8:5d:99:25:0a:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f55710a3e8405c1afda6c63e9e77366efc61e7c
Validity
Not Before: Mar 26 07:01:10 2026 GMT
Not After : Mar 27 07:01:10 2026 GMT
Subject: CN=a8d38dd9b50ffcca64606277c15d95450d476f75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:6f:6a:1a:82:74:b6:a9:ae:47:ba:70:6c:b6:
aa:9c:9b:cc:f2:3a:11:c1:87:2f:49:d2:88:92:9a:
12:d9:da:f2:6e:b1:eb:fa:45:d3:c3:13:01:93:fc:
68:e5:bb:44:c3:27:51:80:23:88:97:18:3f:55:80:
bd:ea:b6:fb:c9:96:a1:f6:25:af:7d:3b:0c:38:ca:
ea:89:a8:7f:2d:7f:60:aa:d0:2f:a2:19:77:bd:2a:
92:05:1c:42:19:08:64:b1:92:a1:df:2f:16:c5:5c:
38:7b:12:6f:bb:91:34:e5:c7:00:eb:6a:1a:de:24:
49:cf:1a:27:48:12:81:71:4b:31:68:2e:6a:54:c6:
a5:38:78:db:5e:e4:2f:6f:27:67:72:84:92:6b:24:
ea:2f:2a:48:ea:5a:64:4b:35:1a:34:3f:a0:09:48:
e5:2a:c8:7c:10:88:f5:8f:f2:a3:69:06:35:19:bf:
6f:73:24:13:74:25:c4:7d:db:69:1c:d4:79:29:de:
80:8c:48:fb:d9:30:88:09:78:1b:e3:58:ee:12:d5:
4c:ed:54:cd:88:94:4e:f2:b2:9c:56:d5:8d:5f:21:
45:e6:9f:00:e0:7c:03:ab:0d:86:63:82:a3:d8:a0:
f9:52:71:1b:e9:d8:29:1f:5b:16:72:11:61:2a:7e:
6d:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:D3:8D:D9:B5:0F:FC:CA:64:60:62:77:C1:5D:95:45:0D:47:6F:75
X509v3 Authority Key Identifier:
keyid:4F:55:71:0A:3E:84:05:C1:AF:DA:6C:63:E9:E7:73:66:EF:C6:1E:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T1VxCj6EBcGv2mxj6edzZu_GHnw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/0355f6-270c-42b8-b264-b0d7117d794f/1/T1VxCj6EBcGv2mxj6edzZu_GHnw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/0355f6-270c-42b8-b264-b0d7117d794f/1/T1VxCj6EBcGv2mxj6edzZu_GHnw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:fe:33:fd:9e:8a:e2:0b:4e:ec:04:b2:af:39:ff:f0:1c:d6:
7d:2a:b9:63:08:31:f6:e5:3f:0c:0d:ce:7a:13:29:2d:5a:cf:
0f:0d:34:a9:48:2d:d6:cb:57:a3:8a:09:ea:c5:3c:88:14:c9:
4c:fe:72:de:f7:ce:fe:9f:d5:12:65:dc:a3:39:4a:f1:af:46:
ca:0f:41:61:b8:3e:b4:11:ac:8e:bf:aa:81:ba:3e:5d:cf:e1:
13:ce:3e:d3:84:b6:e9:8c:a1:db:8a:d6:45:4d:52:18:a1:27:
62:e2:ab:7b:a4:b5:eb:39:00:be:bf:39:9c:ba:0d:88:9a:cf:
66:66:55:46:89:3e:51:49:87:e1:74:b0:c4:59:aa:bf:41:74:
ef:88:a5:5d:fc:d5:0d:43:60:24:f8:80:22:a4:fd:01:0a:45:
63:d0:48:68:2d:01:26:0a:43:bf:dc:2a:aa:a0:f3:aa:6d:c1:
c6:ff:78:02:10:f8:93:e4:2e:4e:b8:51:22:d4:8f:d0:f2:87:
8f:a2:5a:d4:2d:6f:d5:49:a2:24:0e:01:4f:01:57:45:52:42:
7e:e4:0d:39:17:5a:10:80:90:38:37:34:67:03:f1:fc:4e:71:
a7:7a:af:15:25:26:b0:4e:62:60:40:da:b2:85:5e:ff:7e:11:
db:69:dd:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:43:16 2026 by rpki-client