Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/501ebf-5ffd-4cda-a66d-062d70e3aa23/1/T7ZXbs2iUkbfcNenLhz_-tiI6js.mft
File: T7ZXbs2iUkbfcNenLhz_-tiI6js.mft (raw, json)
Hash identifier: kC5nHvJnwGjSdbiYzvz74wf7nSA/6R9j4hg/0SEeoWo=
Subject key identifier: A2:15:D1:74:D3:38:B2:77:99:22:66:4F:A7:E6:37:05:07:FC:29:FB
Authority key identifier: 4F:B6:57:6E:CD:A2:52:46:DF:70:D7:A7:2E:1C:FF:FA:D8:88:EA:3B
Certificate issuer: /CN=4fb6576ecda25246df70d7a72e1cfffad888ea3b
Certificate serial: 019D262837C871AC4B1432014BDFCA5B99B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T7ZXbs2iUkbfcNenLhz_-tiI6js.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/501ebf-5ffd-4cda-a66d-062d70e3aa23/1/T7ZXbs2iUkbfcNenLhz_-tiI6js.mft
Manifest number: 0829
Signing time: Wed 25 Mar 2026 18:01:03 +0000
Manifest this update: Wed 25 Mar 2026 18:01:03 +0000
Manifest next update: Thu 26 Mar 2026 18:01:03 +0000
Files and hashes: 1: MOJaIJywd4otTZyKbZejB0v6ay4.roa (hash: rNI1pa9edpkFYBr17tGN9Tys1Z0tTlj1MmWq7ZO4iao=)
2: T7ZXbs2iUkbfcNenLhz_-tiI6js.crl (hash: Enyxz4iZiQ15Fq7He2zuATLYktouRgAm9g/BPjQENRs=)
3: mfXbQXByPJPp7zX33-P_nEyA7pw.asa (hash: vbrHO7MLkLBiT3RBDfJV+Hh6ozoURTvz1tPkV6hsSa4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/501ebf-5ffd-4cda-a66d-062d70e3aa23/1/T7ZXbs2iUkbfcNenLhz_-tiI6js.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/501ebf-5ffd-4cda-a66d-062d70e3aa23/1/T7ZXbs2iUkbfcNenLhz_-tiI6js.mft
rsync://rpki.ripe.net/repository/DEFAULT/T7ZXbs2iUkbfcNenLhz_-tiI6js.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:28:37:c8:71:ac:4b:14:32:01:4b:df:ca:5b:99:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fb6576ecda25246df70d7a72e1cfffad888ea3b
Validity
Not Before: Mar 25 18:01:03 2026 GMT
Not After : Mar 26 18:01:03 2026 GMT
Subject: CN=a215d174d338b2779922664fa7e6370507fc29fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:a6:42:34:d9:ad:59:01:d4:30:34:8c:73:3a:
a0:7c:75:6d:10:08:cd:14:c0:35:e5:54:18:e8:75:
1a:e3:3b:58:a4:53:b2:53:92:44:ce:bd:e4:6f:6f:
e2:8e:58:76:39:b3:54:59:1d:17:6d:52:a8:fb:60:
ad:b7:fc:9b:74:55:98:35:ac:18:db:6a:c7:40:c9:
0b:6a:89:bd:88:eb:74:a7:65:f8:0d:da:39:9d:2a:
ca:3f:22:7c:ae:19:86:25:02:3b:4a:72:53:73:12:
6f:2e:55:e2:0f:b9:21:86:50:68:b2:a1:82:ac:f5:
eb:4a:37:0b:16:43:d4:8e:83:cf:a9:c8:d8:ec:f0:
71:32:ff:25:23:81:1b:df:bb:75:ca:00:fe:b1:12:
78:11:c9:0a:e8:c3:73:d4:09:db:d0:2c:57:c1:78:
52:13:dd:cc:36:01:8e:c2:01:f4:9a:f1:b2:ad:f8:
90:e2:b4:88:22:3d:43:1c:f4:c9:45:96:85:fd:cb:
1f:ac:e1:37:43:04:5e:cf:f2:24:6a:81:84:5f:af:
cd:17:3e:84:70:c7:db:2c:0d:e4:39:77:26:ba:7b:
d5:72:27:cd:b6:fa:71:b7:4e:42:c0:08:21:02:d8:
de:45:38:22:55:9a:38:49:dd:2e:7c:74:a6:38:76:
e6:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:15:D1:74:D3:38:B2:77:99:22:66:4F:A7:E6:37:05:07:FC:29:FB
X509v3 Authority Key Identifier:
keyid:4F:B6:57:6E:CD:A2:52:46:DF:70:D7:A7:2E:1C:FF:FA:D8:88:EA:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T7ZXbs2iUkbfcNenLhz_-tiI6js.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/501ebf-5ffd-4cda-a66d-062d70e3aa23/1/T7ZXbs2iUkbfcNenLhz_-tiI6js.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/501ebf-5ffd-4cda-a66d-062d70e3aa23/1/T7ZXbs2iUkbfcNenLhz_-tiI6js.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:f1:c2:96:90:a6:e9:65:da:f3:99:6b:b0:af:c1:c8:40:87:
64:91:79:1a:72:66:3f:17:55:02:c6:2e:d1:e9:ce:10:9e:8e:
e9:dc:cf:6c:3d:3b:62:fc:f4:67:34:4b:53:8d:48:f7:8d:99:
9c:81:8e:d7:f5:b0:44:b8:e5:1d:00:7f:4d:e2:b1:e3:49:37:
d9:1e:38:f0:76:40:48:22:c8:2a:f4:27:15:8a:dc:76:5c:40:
26:71:8f:1a:35:8b:c0:aa:0f:d7:43:54:6d:92:81:84:b5:24:
dd:d3:6b:2a:d0:fc:66:e0:64:f9:4d:75:a6:13:58:b8:33:43:
38:5a:bb:17:55:91:e7:6f:f7:4b:b7:f2:1b:94:a1:a7:be:21:
dd:b2:54:ef:a0:22:51:dd:22:20:ec:79:22:10:46:f9:0d:2f:
ff:e0:e4:6f:f7:ea:82:dd:4f:ed:38:ec:9e:b1:5a:41:0b:c6:
d8:78:17:98:d3:2f:f5:36:14:76:9c:e5:57:3e:21:6a:d6:91:
06:08:a0:1a:17:19:ca:e9:e5:10:a4:f2:c9:6c:29:df:7e:dd:
08:bc:cf:67:c1:ef:62:2a:c5:cd:9f:30:78:24:52:ad:fa:0e:
a9:de:fb:5b:79:64:d2:05:11:68:f4:4e:b1:ab:1b:c2:e2:61:
78:94:91:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 21:21:56 2026 by rpki-client