Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/66bd3a-5121-490d-8c92-6ea94a961d4c/1/T02gn7vpD7efDwiyB_g18PDaKf4.mft
File: T02gn7vpD7efDwiyB_g18PDaKf4.mft (raw, json)
Hash identifier: I8KoRlHcGpU1N2JZdGjaGRcGM2wNTk+utiFmFcc/vXg=
Subject key identifier: 27:9C:CC:69:34:59:E7:0C:0D:4A:7B:34:62:86:BC:0A:D2:16:27:FC
Authority key identifier: 4F:4D:A0:9F:BB:E9:0F:B7:9F:0F:08:B2:07:F8:35:F0:F0:DA:29:FE
Certificate issuer: /CN=4f4da09fbbe90fb79f0f08b207f835f0f0da29fe
Certificate serial: 019D26CCCA62B422407F452D8F8BCF4021F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T02gn7vpD7efDwiyB_g18PDaKf4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/66bd3a-5121-490d-8c92-6ea94a961d4c/1/T02gn7vpD7efDwiyB_g18PDaKf4.mft
Manifest number: 188A
Signing time: Wed 25 Mar 2026 21:00:48 +0000
Manifest this update: Wed 25 Mar 2026 21:00:48 +0000
Manifest next update: Thu 26 Mar 2026 21:00:48 +0000
Files and hashes: 1: J-GnCjEevLnsSylTNN_DRQKgLxU.roa (hash: Ih+rPEkL3JjpnefkXhpQxgVK3VfQEJZ/zybpvC3KpeM=)
2: T02gn7vpD7efDwiyB_g18PDaKf4.crl (hash: p+0M+O9NdcM6kOyQ1nF+znNq9RFlPfPFboliX1MKVyA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/66bd3a-5121-490d-8c92-6ea94a961d4c/1/T02gn7vpD7efDwiyB_g18PDaKf4.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/66bd3a-5121-490d-8c92-6ea94a961d4c/1/T02gn7vpD7efDwiyB_g18PDaKf4.mft
rsync://rpki.ripe.net/repository/DEFAULT/T02gn7vpD7efDwiyB_g18PDaKf4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cc:ca:62:b4:22:40:7f:45:2d:8f:8b:cf:40:21:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f4da09fbbe90fb79f0f08b207f835f0f0da29fe
Validity
Not Before: Mar 25 21:00:48 2026 GMT
Not After : Mar 26 21:00:48 2026 GMT
Subject: CN=279ccc693459e70c0d4a7b346286bc0ad21627fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:2d:42:05:9e:1f:27:9e:4b:0b:db:1d:4f:ed:
1e:25:d3:0a:4d:4a:0f:16:5a:c2:fd:cf:85:e2:75:
53:1b:c9:f6:6c:33:b6:2b:08:ec:60:16:bb:ba:0e:
43:21:99:f9:14:00:e4:ba:9d:60:f8:c6:59:7b:a0:
91:14:bb:d4:26:7e:83:9f:db:8f:74:3f:fd:80:20:
98:e4:c3:6c:06:70:40:ef:ac:98:b2:f7:af:b6:2d:
77:49:6f:37:ec:c4:83:73:c8:3d:36:3b:ec:08:a0:
68:e6:3e:44:81:f7:ad:10:37:8e:07:f6:34:18:a5:
86:6e:11:74:83:91:28:5e:45:22:b0:19:53:c9:de:
2d:e6:08:c6:cb:17:96:20:dc:75:95:85:55:0d:53:
47:70:d9:60:86:13:e5:26:85:a9:ea:86:0f:b0:c0:
cb:75:0b:94:c0:97:c5:ee:dd:e5:de:e3:78:a5:dc:
47:76:c0:be:13:ae:cf:c9:d1:b6:46:86:9a:8e:a0:
4e:3d:85:b7:26:ed:a3:de:83:ef:38:66:47:db:e1:
c0:a1:17:d1:26:f8:bc:6f:28:99:cc:e2:61:e9:38:
dd:ba:98:3f:53:3c:14:8a:c2:90:15:96:4a:85:48:
ff:80:07:7b:8f:de:54:77:73:d4:1f:fb:fd:cd:d4:
a5:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:9C:CC:69:34:59:E7:0C:0D:4A:7B:34:62:86:BC:0A:D2:16:27:FC
X509v3 Authority Key Identifier:
keyid:4F:4D:A0:9F:BB:E9:0F:B7:9F:0F:08:B2:07:F8:35:F0:F0:DA:29:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T02gn7vpD7efDwiyB_g18PDaKf4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/66bd3a-5121-490d-8c92-6ea94a961d4c/1/T02gn7vpD7efDwiyB_g18PDaKf4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/66bd3a-5121-490d-8c92-6ea94a961d4c/1/T02gn7vpD7efDwiyB_g18PDaKf4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:00:f5:40:8d:16:4f:bc:33:8b:23:b2:9f:f9:6a:61:dd:82:
a9:85:d2:79:99:1f:a2:a0:c6:28:c2:d5:92:03:81:4d:03:43:
8f:5f:f9:87:e5:f3:26:ef:b4:4b:61:92:6e:b6:f5:11:16:a8:
c1:2e:c5:07:bb:05:d8:05:26:99:91:78:73:c9:f4:dc:01:d7:
50:d6:a4:e4:6d:e0:c7:f5:90:ba:b8:18:52:15:34:c5:6b:c7:
9a:f5:9c:31:6c:e7:24:8e:66:b3:c0:9d:79:9d:11:c0:f1:3c:
2f:ff:df:2e:c0:08:22:60:67:91:fb:08:e4:c6:de:d7:76:e4:
1b:ac:2c:93:9b:37:89:43:da:c3:26:c1:b6:37:52:4f:c7:5f:
e7:20:01:f9:9a:d9:f0:1c:bc:88:fe:2a:7e:9e:02:f5:75:ef:
c1:22:e2:84:a5:94:39:e5:6f:e9:2d:5d:67:e8:f7:5b:63:a4:
85:bd:72:5f:bc:c3:53:b2:55:0f:fd:cb:91:7d:41:85:a2:a1:
a2:45:e3:64:48:8c:88:6f:dd:25:63:03:7d:66:fd:b8:f7:7d:
d2:bb:b7:1a:46:bc:79:63:a7:27:9f:44:5e:5a:8f:38:82:e0:
13:b6:44:45:d9:ab:c6:35:af:31:0f:f7:f9:a5:4b:a6:7c:75:
81:b6:61:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:32:20 2026 by rpki-client