Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8a/944896-3c41-4710-86d2-005a929ac124/1/T3zlnkdBgWbSD1FkhW-HkzmRidA.mft
File: T3zlnkdBgWbSD1FkhW-HkzmRidA.mft (raw, json)
Hash identifier: p+4lguTblZu5SPVse3z8WldYND+0FsyHZIRVIimWZpg=
Subject key identifier: E9:49:3E:A4:7A:A6:A4:89:06:73:CA:DD:E5:A4:77:FF:47:E0:37:10
Authority key identifier: 4F:7C:E5:9E:47:41:81:66:D2:0F:51:64:85:6F:87:93:39:91:89:D0
Certificate issuer: /CN=4f7ce59e47418166d20f5164856f8793399189d0
Certificate serial: 01A0F2D6D23AAD39CACE38F300A79C249BAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T3zlnkdBgWbSD1FkhW-HkzmRidA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/944896-3c41-4710-86d2-005a929ac124/1/T3zlnkdBgWbSD1FkhW-HkzmRidA.mft
Manifest number: F7
Signing time: Wed 30 Sep 2026 15:02:39 +0000
Manifest this update: Wed 30 Sep 2026 15:02:39 +0000
Manifest next update: Thu 01 Oct 2026 15:02:39 +0000
Files and hashes: 1: T3zlnkdBgWbSD1FkhW-HkzmRidA.crl (hash: /MeL5mO6MT+DSYg+sF9jWn8bo0qyWdo7nXUiGVjhdrA=)
2: hzeHFDX7-fXakvbRNzVIimetgT0.roa (hash: TTVPslSxsu3A4z0fsBCY/2+kt2uSPjNyxRVnr/wiATk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/944896-3c41-4710-86d2-005a929ac124/1/T3zlnkdBgWbSD1FkhW-HkzmRidA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/944896-3c41-4710-86d2-005a929ac124/1/T3zlnkdBgWbSD1FkhW-HkzmRidA.mft
rsync://rpki.ripe.net/repository/DEFAULT/T3zlnkdBgWbSD1FkhW-HkzmRidA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 Oct 2026 15:02:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f2:d6:d2:3a:ad:39:ca:ce:38:f3:00:a7:9c:24:9b:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f7ce59e47418166d20f5164856f8793399189d0
Validity
Not Before: Sep 30 15:02:39 2026 GMT
Not After : Oct 1 15:02:39 2026 GMT
Subject: CN=e9493ea47aa6a4890673cadde5a477ff47e03710
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:ff:3c:5a:e0:21:a2:65:33:1c:f2:f8:94:b9:
aa:2e:f3:d0:39:64:10:7c:ed:4e:6b:04:12:75:05:
1a:c9:ec:cd:84:0d:c6:a0:fb:7a:b0:dc:3c:b8:fb:
e9:ec:2c:90:20:62:eb:e4:6a:a6:d7:f4:04:dd:f2:
ec:3c:07:54:5b:b8:f8:1f:3b:fe:73:0e:c5:47:8f:
f1:01:a9:73:77:a3:36:13:86:67:d1:67:8f:c5:b3:
52:7d:fb:ad:eb:ec:12:ef:98:c4:e3:1a:2d:ca:85:
55:e0:94:e1:7a:d0:83:0b:7c:79:4e:e9:0a:e3:39:
36:84:47:3f:38:12:a4:a5:b3:46:03:65:67:9f:6f:
ae:2f:4a:4b:a6:02:d7:a2:3b:5b:48:58:f7:63:e1:
14:ce:79:fc:a2:f6:3d:c5:2d:d6:3c:09:b9:e6:cf:
43:a3:cf:ac:f9:6e:f8:3c:0e:3b:52:46:71:fc:5f:
78:74:e2:33:80:e4:54:66:cf:b5:b4:c7:78:03:27:
57:9c:bf:2c:95:dd:c4:65:de:d2:d9:08:6d:40:b6:
39:45:5b:b8:45:b3:c5:d0:a6:a0:4e:ee:f7:fd:e7:
8d:04:f0:ac:73:be:ac:30:f6:f7:f9:4a:35:e3:0d:
97:f8:85:d8:e5:28:86:f6:29:b5:a1:bb:dc:cc:a5:
c7:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:49:3E:A4:7A:A6:A4:89:06:73:CA:DD:E5:A4:77:FF:47:E0:37:10
X509v3 Authority Key Identifier:
keyid:4F:7C:E5:9E:47:41:81:66:D2:0F:51:64:85:6F:87:93:39:91:89:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T3zlnkdBgWbSD1FkhW-HkzmRidA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/944896-3c41-4710-86d2-005a929ac124/1/T3zlnkdBgWbSD1FkhW-HkzmRidA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/944896-3c41-4710-86d2-005a929ac124/1/T3zlnkdBgWbSD1FkhW-HkzmRidA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:22:25:ee:72:0a:eb:69:cb:97:73:71:b9:b0:bc:45:01:10:
9a:68:bc:87:03:6b:3c:62:f0:dc:db:9d:88:1a:5a:6e:30:e6:
65:7d:8a:2f:f2:d7:af:1e:7c:bb:be:46:cf:fa:7e:ab:3e:34:
d4:f0:4d:8b:14:a1:a4:44:cc:be:e9:0c:6d:9e:51:d9:e9:e1:
49:a5:69:e7:b2:a5:79:ba:b8:f3:fb:d0:3d:fc:62:c2:b0:92:
f1:3e:ac:8a:24:b2:60:d5:84:ea:99:54:b8:dc:59:a3:54:b9:
e6:9f:56:a8:9e:24:43:57:ec:f1:f0:65:8c:c6:4d:82:9d:4d:
26:60:43:b2:1e:f3:8e:3d:60:1a:40:6e:be:04:a6:db:d5:31:
7e:77:cd:9a:35:45:7e:40:68:2e:01:f6:7c:cd:0a:c2:0e:0d:
5e:3d:a6:f0:5b:c4:60:89:2b:c3:5e:e0:fa:42:27:d3:8c:18:
48:86:a5:a4:69:50:09:04:58:73:44:ea:51:63:1f:d9:32:12:
c4:40:de:a5:79:68:f7:0c:4d:80:2b:ff:86:93:e8:47:bb:80:
df:9b:0c:3a:ba:de:92:41:c2:46:40:8a:b4:c0:a2:ee:c6:3c:
99:4a:f3:17:66:81:26:05:b1:a4:b0:ee:45:de:cc:9b:12:28:
47:61:c8:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 1 10:15:09 2026 by rpki-client