Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/1b1272-83c1-4864-9cd3-027c7f7dc6d5/1/T2F9awPi_l-JEcvrX64tyjvWZ38.mft
File: T2F9awPi_l-JEcvrX64tyjvWZ38.mft (raw, json)
Hash identifier: p9ectVbZGH8rPN54vJP8dLSUQp0Zp2qitDZRZ84knuY=
Subject key identifier: 97:CE:2B:FD:14:E7:2C:9B:0A:32:E2:2E:A8:2F:18:49:49:5A:DE:98
Authority key identifier: 4F:61:7D:6B:03:E2:FE:5F:89:11:CB:EB:5F:AE:2D:CA:3B:D6:67:7F
Certificate issuer: /CN=4f617d6b03e2fe5f8911cbeb5fae2dca3bd6677f
Certificate serial: 019D284DCB34C23512419B06D894A92638B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T2F9awPi_l-JEcvrX64tyjvWZ38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/1b1272-83c1-4864-9cd3-027c7f7dc6d5/1/T2F9awPi_l-JEcvrX64tyjvWZ38.mft
Manifest number: 1568
Signing time: Thu 26 Mar 2026 04:01:19 +0000
Manifest this update: Thu 26 Mar 2026 04:01:19 +0000
Manifest next update: Fri 27 Mar 2026 04:01:19 +0000
Files and hashes: 1: T2F9awPi_l-JEcvrX64tyjvWZ38.crl (hash: KKnFaZt3flMrgduhh/fOKk/uH5ftJVxtzaZPoTBhxzw=)
2: xwOmHY94ffmWcpPf6KqXYjilQDE.roa (hash: XM6OGxdr30fmSiTDSkJNnhkS4Ouwvsq+nWxnRyN80J8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/1b1272-83c1-4864-9cd3-027c7f7dc6d5/1/T2F9awPi_l-JEcvrX64tyjvWZ38.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/1b1272-83c1-4864-9cd3-027c7f7dc6d5/1/T2F9awPi_l-JEcvrX64tyjvWZ38.mft
rsync://rpki.ripe.net/repository/DEFAULT/T2F9awPi_l-JEcvrX64tyjvWZ38.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:cb:34:c2:35:12:41:9b:06:d8:94:a9:26:38:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f617d6b03e2fe5f8911cbeb5fae2dca3bd6677f
Validity
Not Before: Mar 26 04:01:19 2026 GMT
Not After : Mar 27 04:01:19 2026 GMT
Subject: CN=97ce2bfd14e72c9b0a32e22ea82f1849495ade98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:56:83:86:2c:a4:77:57:af:91:4f:4c:3b:43:
09:34:f6:bd:c8:90:19:f1:5b:ad:77:ba:e9:97:16:
9d:f0:b3:f3:ca:48:22:a3:39:39:40:46:32:8f:c0:
03:e4:c4:45:2a:96:89:c6:fa:9d:d7:5b:cb:88:bd:
d4:7a:da:e6:6c:fd:4f:1a:2d:61:f8:8c:a1:fe:f6:
51:d0:51:55:42:c0:0f:35:0a:77:5d:07:4d:e2:16:
4c:fd:75:05:52:47:eb:8f:13:b4:22:71:21:0b:11:
35:5e:a3:c9:c9:ec:2d:c0:a6:52:7f:d7:47:6b:98:
d1:18:b0:ad:45:b1:84:2d:b7:7d:c6:96:17:1e:3a:
96:9c:d7:28:95:08:77:bb:ef:db:3c:91:68:46:a8:
95:bb:17:8d:e9:dc:21:0c:80:36:28:f5:ff:58:c2:
a5:f8:38:6c:6a:8d:43:3e:7f:83:54:32:4d:a7:7a:
79:24:9e:ac:0e:2c:e3:23:da:7e:c5:4b:7d:c2:60:
a9:65:88:b5:f8:e8:fb:f5:22:8e:97:83:c1:b1:44:
b9:41:d6:7a:52:8e:40:49:05:d5:53:a9:6a:8d:8d:
0a:12:4b:67:2a:53:6d:42:6d:10:03:6b:27:80:17:
60:fc:33:6e:4c:4b:32:9c:b7:ef:78:ed:da:1a:c7:
d4:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:CE:2B:FD:14:E7:2C:9B:0A:32:E2:2E:A8:2F:18:49:49:5A:DE:98
X509v3 Authority Key Identifier:
keyid:4F:61:7D:6B:03:E2:FE:5F:89:11:CB:EB:5F:AE:2D:CA:3B:D6:67:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T2F9awPi_l-JEcvrX64tyjvWZ38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/1b1272-83c1-4864-9cd3-027c7f7dc6d5/1/T2F9awPi_l-JEcvrX64tyjvWZ38.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/1b1272-83c1-4864-9cd3-027c7f7dc6d5/1/T2F9awPi_l-JEcvrX64tyjvWZ38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:a2:3b:01:4c:17:9c:93:57:1a:8a:ee:ec:ce:62:0e:ff:8c:
39:69:85:84:ff:00:fc:c4:bd:a1:7e:35:5d:e4:e8:35:5a:1f:
e8:e5:ca:07:00:71:6c:6e:40:91:fa:d7:19:0f:7c:7c:37:71:
46:a3:6c:a2:96:02:7d:5e:64:7e:b3:56:fc:94:40:93:a9:17:
f1:40:e1:f7:7f:b6:6d:a8:18:cb:cc:c6:1c:61:44:24:ce:e0:
64:2b:fb:91:51:b4:32:64:cd:32:37:7f:5f:b5:0c:7e:0c:d4:
fd:28:33:83:a6:bf:0c:1c:29:43:5b:ce:da:7e:2d:94:2b:b0:
df:54:f3:ef:16:fd:7c:a0:75:35:70:3d:5b:13:e1:01:b9:60:
7f:31:28:54:1b:a5:75:f9:52:87:8f:69:53:26:ca:e7:54:6d:
d1:3f:73:5a:23:28:fd:79:07:6d:5d:b6:45:61:6c:b9:4b:d8:
31:f3:6b:78:8f:67:39:ae:c0:48:1c:5a:ae:0d:3e:f9:6a:2d:
d6:ab:18:82:3a:9c:87:96:a4:89:ae:5d:ca:24:d8:ab:e1:0e:
e0:76:48:54:08:40:e3:1e:e1:b3:23:63:c3:8e:d4:50:03:d1:
e3:33:93:2c:8a:bb:2c:fb:8d:73:44:94:c3:b7:77:ff:ba:f8:
69:95:23:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:40:08 2026 by rpki-client