Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/dcf969-3859-4dca-acf4-e2fedab3cb09/1/T2wXG0x11lCorxdohtAjWjTlnfA.mft
File: T2wXG0x11lCorxdohtAjWjTlnfA.mft (raw, json)
Hash identifier: /iHNJmvjvH/m9fyufeakywiCA6OtM68rUAXdz+ZJYtE=
Subject key identifier: 89:41:E4:3F:08:FF:55:FC:E7:84:E1:98:87:E8:75:FE:01:3B:33:9E
Authority key identifier: 4F:6C:17:1B:4C:75:D6:50:A8:AF:17:68:86:D0:23:5A:34:E5:9D:F0
Certificate issuer: /CN=4f6c171b4c75d650a8af176886d0235a34e59df0
Certificate serial: 019D2583AE9D492D87F656C55867AD6AF50A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T2wXG0x11lCorxdohtAjWjTlnfA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/dcf969-3859-4dca-acf4-e2fedab3cb09/1/T2wXG0x11lCorxdohtAjWjTlnfA.mft
Manifest number: 012E
Signing time: Wed 25 Mar 2026 15:01:19 +0000
Manifest this update: Wed 25 Mar 2026 15:01:19 +0000
Manifest next update: Thu 26 Mar 2026 15:01:19 +0000
Files and hashes: 1: 3pzPfip2XT8VFVQRc6zhDFom7z4.asa (hash: KHMn3BeOnJHGQkWq9E9H+WYoE/KxiD16e8EHfT7Wrxo=)
2: T2wXG0x11lCorxdohtAjWjTlnfA.crl (hash: E7/5xoDY2PWJtreVNeSRu3bqPHJDtuwLb3lCNMdj7Hc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/dcf969-3859-4dca-acf4-e2fedab3cb09/1/T2wXG0x11lCorxdohtAjWjTlnfA.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/dcf969-3859-4dca-acf4-e2fedab3cb09/1/T2wXG0x11lCorxdohtAjWjTlnfA.mft
rsync://rpki.ripe.net/repository/DEFAULT/T2wXG0x11lCorxdohtAjWjTlnfA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:83:ae:9d:49:2d:87:f6:56:c5:58:67:ad:6a:f5:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f6c171b4c75d650a8af176886d0235a34e59df0
Validity
Not Before: Mar 25 15:01:19 2026 GMT
Not After : Mar 26 15:01:19 2026 GMT
Subject: CN=8941e43f08ff55fce784e19887e875fe013b339e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:b3:78:c8:2f:a2:25:64:1a:7f:d8:dc:4a:f7:
83:b8:9e:d9:95:0e:ed:c3:21:fa:47:0d:89:72:da:
91:5f:f8:f9:4b:c8:65:d8:fa:81:97:fd:67:f0:00:
b7:3f:a9:a1:4b:22:00:07:2d:c0:15:d2:91:e3:f1:
28:66:ad:ee:17:06:b6:1c:49:29:aa:61:16:1f:34:
b9:c9:25:7a:e9:b1:4b:5a:66:47:c5:0e:19:f5:93:
e7:43:35:d9:f5:a9:04:86:a3:7c:34:a6:4b:82:68:
7f:fa:6e:cc:b5:c8:ab:13:f1:b7:68:03:d7:b6:18:
eb:37:be:35:fa:17:ce:17:d7:26:dd:bf:00:be:39:
73:9b:d4:ec:85:a1:1f:7b:ad:74:d5:9a:2d:4e:18:
57:2e:ac:97:ab:54:ca:f0:35:cb:a9:c6:c7:65:0f:
95:db:9b:b8:92:20:ab:bb:d9:85:91:0e:d4:b9:a9:
eb:dd:64:82:35:89:8a:af:fb:98:d3:13:dc:db:be:
f5:c5:b3:f7:5b:02:96:85:97:4a:9b:56:8e:4d:d3:
b6:1a:b7:a8:60:ff:bc:7b:fd:e1:7a:ce:71:e9:db:
98:e2:b0:3f:d1:3b:7f:c9:36:2a:3b:35:4f:ac:f2:
97:53:19:2c:28:72:4a:39:db:d9:01:76:2a:7f:cb:
d0:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:41:E4:3F:08:FF:55:FC:E7:84:E1:98:87:E8:75:FE:01:3B:33:9E
X509v3 Authority Key Identifier:
keyid:4F:6C:17:1B:4C:75:D6:50:A8:AF:17:68:86:D0:23:5A:34:E5:9D:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T2wXG0x11lCorxdohtAjWjTlnfA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/dcf969-3859-4dca-acf4-e2fedab3cb09/1/T2wXG0x11lCorxdohtAjWjTlnfA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/dcf969-3859-4dca-acf4-e2fedab3cb09/1/T2wXG0x11lCorxdohtAjWjTlnfA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:7e:ef:5a:f3:ae:b5:90:6f:8e:30:63:d7:17:85:c1:af:9f:
8d:fc:c4:6a:4f:2b:0a:e4:f6:19:e7:fc:37:d3:10:ad:c4:34:
85:72:08:50:78:b3:05:eb:e2:fc:b4:4c:44:b2:1a:c2:66:da:
e2:c4:aa:96:9b:d8:c2:c7:2f:fc:bb:25:8a:6f:92:f4:c6:0e:
65:04:92:3b:63:6e:3c:04:a4:30:5c:5e:33:ce:d5:d9:d4:2d:
de:fb:ef:70:b4:0e:f5:56:6b:f6:b6:ed:33:88:73:d9:23:2f:
23:ac:fb:1d:16:e2:24:b3:61:f3:40:0f:7e:f1:84:d3:f0:64:
82:65:92:0b:ca:1e:99:64:4a:e4:e4:95:f6:9c:ea:d4:82:54:
f0:5f:45:61:77:e1:5b:50:d6:7f:2f:c2:c0:92:d2:80:bc:e2:
6c:b5:4e:44:f3:84:9e:59:54:d0:0b:ae:1f:34:40:da:e8:85:
ba:7a:84:c5:59:cb:be:df:8a:9f:ea:86:76:18:01:83:53:eb:
7e:3d:ee:22:60:d9:be:6a:90:78:e6:27:c7:cc:c1:37:b2:c0:
62:92:f9:27:a6:f7:8f:3c:b5:f3:fc:0e:9a:59:79:d0:5e:87:
ed:96:89:b1:2e:1b:87:94:41:32:d9:a7:65:30:0d:39:63:a7:
e8:53:79:b6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0lg66dSS2H9lbFWGetavUKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmNmMxNzFiNGM3NWQ2NTBhOGFmMTc2ODg2ZDAyMzVhMzRl
NTlkZjAwHhcNMjYwMzI1MTUwMTE5WhcNMjYwMzI2MTUwMTE5WjAzMTEwLwYDVQQD
Eyg4OTQxZTQzZjA4ZmY1NWZjZTc4NGUxOTg4N2U4NzVmZTAxM2IzMzllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr7N4yC+iJWQaf9jcSveDuJ7ZlQ7t
wyH6Rw2JctqRX/j5S8hl2PqBl/1n8AC3P6mhSyIABy3AFdKR4/EoZq3uFwa2HEkp
qmEWHzS5ySV66bFLWmZHxQ4Z9ZPnQzXZ9akEhqN8NKZLgmh/+m7MtcirE/G3aAPX
thjrN741+hfOF9cm3b8Avjlzm9TshaEfe6101ZotThhXLqyXq1TK8DXLqcbHZQ+V
25u4kiCru9mFkQ7Uuanr3WSCNYmKr/uY0xPc2771xbP3WwKWhZdKm1aOTdO2Greo
YP+8e/3hes5x6duY4rA/0Tt/yTYqOzVPrPKXUxksKHJKOdvZAXYqf8vQfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIlB5D8I/1X854ThmIfodf4BOzOeMB8GA1UdIwQY
MBaAFE9sFxtMddZQqK8XaIbQI1o05Z3wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDJ3WEcweDExbENvcnhkb2h0QWpXalRsbmZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS9kY2Y5NjktMzg1OS00ZGNhLWFjZjQt
ZTJmZWRhYjNjYjA5LzEvVDJ3WEcweDExbENvcnhkb2h0QWpXalRsbmZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OS9kY2Y5NjktMzg1OS00ZGNhLWFjZjQtZTJmZWRhYjNjYjA5
LzEvVDJ3WEcweDExbENvcnhkb2h0QWpXalRsbmZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUX7vWvOu
tZBvjjBj1xeFwa+fjfzEak8rCuT2Gef8N9MQrcQ0hXIIUHizBevi/LRMRLIawmba
4sSqlpvYwscv/Lslim+S9MYOZQSSO2NuPASkMFxeM87V2dQt3vvvcLQO9VZr9rbt
M4hz2SMvI6z7HRbiJLNh80APfvGE0/BkgmWSC8oemWRK5OSV9pzq1IJU8F9FYXfh
W1DWfy/CwJLSgLzibLVORPOEnllU0AuuHzRA2uiFunqExVnLvt+Kn+qGdhgBg1Pr
fj3uImDZvmqQeOYnx8zBN7LAYpL5J6b3jzy18/wOmll50F6H7ZaJsS4bh5RBMtmn
ZTANOWOn6FN5tg==
-----END CERTIFICATE-----
Generated at Wed Mar 25 21:25:58 2026 by rpki-client