Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/0c3b1f-dab8-4762-9d04-f941cc39a71e/1/T9ZCEC691_ImjBTCfj678mtMr-s.mft
File: T9ZCEC691_ImjBTCfj678mtMr-s.mft (raw, json)
Hash identifier: UWdiTvaKF+ZSKFeRpoGgzNJ4XAHeDZ65G5E/L7ySbdw=
Subject key identifier: 5F:A5:8F:6F:9E:25:E7:64:EF:04:7D:F0:D9:EF:69:30:A2:94:C8:5E
Authority key identifier: 4F:D6:42:10:2E:BD:D7:F2:26:8C:14:C2:7E:3E:BB:F2:6B:4C:AF:EB
Certificate issuer: /CN=4fd642102ebdd7f2268c14c27e3ebbf26b4cafeb
Certificate serial: 019D254C9E2696C736A3C083D4E73E75E5AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T9ZCEC691_ImjBTCfj678mtMr-s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/0c3b1f-dab8-4762-9d04-f941cc39a71e/1/T9ZCEC691_ImjBTCfj678mtMr-s.mft
Manifest number: A7
Signing time: Wed 25 Mar 2026 14:01:11 +0000
Manifest this update: Wed 25 Mar 2026 14:01:11 +0000
Manifest next update: Thu 26 Mar 2026 14:01:11 +0000
Files and hashes: 1: FXU6diYKcbRIsw4MmevlGTpvGb0.roa (hash: aFnvjS1XXi7qixi4xTsDLaU24Ku8jOZbxW9SYMuhSJc=)
2: T9ZCEC691_ImjBTCfj678mtMr-s.crl (hash: gsHoJmqQdh4vDGJ6rW8q4A6tevkntV7JZ3Ln2jb65Bk=)
3: ZTOkVo51zjkueJP-_jF8sE0dlwI.roa (hash: qWI1aXm7aJOa2gqUSo121mJhm0HQWb9xB4CjBEm9B2Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/0c3b1f-dab8-4762-9d04-f941cc39a71e/1/T9ZCEC691_ImjBTCfj678mtMr-s.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/0c3b1f-dab8-4762-9d04-f941cc39a71e/1/T9ZCEC691_ImjBTCfj678mtMr-s.mft
rsync://rpki.ripe.net/repository/DEFAULT/T9ZCEC691_ImjBTCfj678mtMr-s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 14:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:4c:9e:26:96:c7:36:a3:c0:83:d4:e7:3e:75:e5:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fd642102ebdd7f2268c14c27e3ebbf26b4cafeb
Validity
Not Before: Mar 25 14:01:11 2026 GMT
Not After : Mar 26 14:01:11 2026 GMT
Subject: CN=5fa58f6f9e25e764ef047df0d9ef6930a294c85e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:41:d9:92:af:b6:f3:53:16:7a:1e:71:28:27:
01:92:8f:b8:b7:32:cd:91:ad:6a:8a:e9:72:fb:5d:
c7:22:77:69:78:29:24:26:e7:39:4e:fb:e4:2d:9e:
3d:e1:d9:5d:3c:a0:00:8b:46:50:37:64:fa:d0:aa:
f9:7a:2d:f6:e3:72:a0:be:21:de:3e:c2:31:52:a3:
a9:b2:e0:bd:a7:73:96:a8:87:4a:0c:c9:a5:e1:7d:
f6:1c:b4:c2:96:19:dd:62:58:b7:ee:59:86:43:f5:
5e:32:a2:77:f1:32:93:43:bf:c7:9b:0b:67:c5:8d:
d8:61:a1:17:a6:07:bc:a6:d7:02:27:7c:04:f6:db:
89:99:05:a1:61:0b:17:01:26:98:9c:56:ce:cc:0b:
8d:7b:04:9d:4b:76:fe:4d:c7:b0:4a:ea:b7:df:a4:
30:7d:b5:4e:14:3a:68:1c:df:65:b2:3c:3d:ae:ab:
bd:9b:4f:2c:13:53:95:dc:4c:ee:a3:b2:3f:5e:43:
c4:24:74:4f:9f:74:6f:01:0f:3e:2b:44:be:30:a4:
62:84:4a:e6:e2:1d:89:66:d1:e4:79:1f:25:74:c5:
8f:1b:f9:7f:6c:5a:e7:ec:cd:91:49:f4:c5:41:de:
eb:42:6d:af:d6:d7:cb:95:f1:5b:28:6f:bc:ab:c5:
dc:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:A5:8F:6F:9E:25:E7:64:EF:04:7D:F0:D9:EF:69:30:A2:94:C8:5E
X509v3 Authority Key Identifier:
keyid:4F:D6:42:10:2E:BD:D7:F2:26:8C:14:C2:7E:3E:BB:F2:6B:4C:AF:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T9ZCEC691_ImjBTCfj678mtMr-s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/0c3b1f-dab8-4762-9d04-f941cc39a71e/1/T9ZCEC691_ImjBTCfj678mtMr-s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/0c3b1f-dab8-4762-9d04-f941cc39a71e/1/T9ZCEC691_ImjBTCfj678mtMr-s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:62:d1:d4:a4:43:aa:1a:0f:91:ec:bd:fd:ff:61:d6:c8:33:
3d:a9:aa:d9:7a:e9:af:0e:31:8c:7a:fe:16:02:a9:4e:85:89:
72:10:04:15:7d:6f:35:50:7e:a8:0a:f6:dd:a2:45:6e:0c:29:
8c:c8:40:ca:b2:d8:0c:2e:06:fe:cf:44:ea:60:53:9d:a6:cf:
fc:41:10:35:5a:fa:f2:dd:5c:29:ab:73:5b:b8:6e:3a:a2:a8:
fa:cb:bc:ea:56:52:cf:19:70:c2:1e:bf:47:b0:30:dd:0d:d6:
9e:6d:20:5c:ca:6b:2f:c3:11:b0:ce:db:1f:e5:29:ae:dd:cf:
fc:5f:2b:60:60:55:bf:c3:8d:6b:41:c6:fe:d3:40:bb:86:da:
4e:7c:bb:c1:32:b1:08:2e:26:f3:23:21:45:ab:f7:58:eb:9c:
26:e7:4e:39:e3:8a:1a:b4:11:c4:11:07:34:4b:86:9f:46:a0:
09:ac:92:a3:4e:f1:70:c2:43:9d:70:23:d1:5b:98:b1:59:f7:
eb:3b:4b:01:87:a0:52:98:5a:ce:a8:6a:df:ce:c8:af:3f:cc:
1c:90:18:65:66:56:65:39:31:50:0a:94:9d:77:66:8c:2f:77:
c5:ac:52:92:5e:92:a3:31:69:9b:72:a4:66:a5:0a:a0:40:56:
56:04:40:a1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0lTJ4mlsc2o8CD1Oc+deWrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmZDY0MjEwMmViZGQ3ZjIyNjhjMTRjMjdlM2ViYmYyNmI0
Y2FmZWIwHhcNMjYwMzI1MTQwMTExWhcNMjYwMzI2MTQwMTExWjAzMTEwLwYDVQQD
Eyg1ZmE1OGY2ZjllMjVlNzY0ZWYwNDdkZjBkOWVmNjkzMGEyOTRjODVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvUHZkq+281MWeh5xKCcBko+4tzLN
ka1qiuly+13HIndpeCkkJuc5TvvkLZ494dldPKAAi0ZQN2T60Kr5ei3243KgviHe
PsIxUqOpsuC9p3OWqIdKDMml4X32HLTClhndYli37lmGQ/VeMqJ38TKTQ7/Hmwtn
xY3YYaEXpge8ptcCJ3wE9tuJmQWhYQsXASaYnFbOzAuNewSdS3b+TcewSuq336Qw
fbVOFDpoHN9lsjw9rqu9m08sE1OV3Ezuo7I/XkPEJHRPn3RvAQ8+K0S+MKRihErm
4h2JZtHkeR8ldMWPG/l/bFrn7M2RSfTFQd7rQm2v1tfLlfFbKG+8q8XcIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF+lj2+eJedk7wR98NnvaTCilMheMB8GA1UdIwQY
MBaAFE/WQhAuvdfyJowUwn4+u/JrTK/rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDlaQ0VDNjkxX0ltakJUQ2ZqNjc4bXRNci1zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS8wYzNiMWYtZGFiOC00NzYyLTlkMDQt
Zjk0MWNjMzlhNzFlLzEvVDlaQ0VDNjkxX0ltakJUQ2ZqNjc4bXRNci1zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NS8wYzNiMWYtZGFiOC00NzYyLTlkMDQtZjk0MWNjMzlhNzFl
LzEvVDlaQ0VDNjkxX0ltakJUQ2ZqNjc4bXRNci1zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPWLR1KRD
qhoPkey9/f9h1sgzPamq2Xrprw4xjHr+FgKpToWJchAEFX1vNVB+qAr23aJFbgwp
jMhAyrLYDC4G/s9E6mBTnabP/EEQNVr68t1cKatzW7huOqKo+su86lZSzxlwwh6/
R7Aw3Q3Wnm0gXMprL8MRsM7bH+Uprt3P/F8rYGBVv8ONa0HG/tNAu4baTny7wTKx
CC4m8yMhRav3WOucJudOOeOKGrQRxBEHNEuGn0agCaySo07xcMJDnXAj0VuYsVn3
6ztLAYegUphazqhq387Irz/MHJAYZWZWZTkxUAqUnXdmjC93xaxSkl6SozFpm3Kk
ZqUKoEBWVgRAoQ==
-----END CERTIFICATE-----
Generated at Wed Mar 25 22:36:09 2026 by rpki-client