Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/8b5dbf-458d-4326-9302-5aaac2cb0df1/1/t4SM0jk8F4NlegV3erMV45jrsj8.mft
File: t4SM0jk8F4NlegV3erMV45jrsj8.mft (raw, json)
Hash identifier: NGuHBROEd/cETmLqI6rfKTtxDhPZv45Vp3LeaoiitM0=
Subject key identifier: 13:B6:8F:D6:9A:28:56:40:0A:82:F6:64:4E:82:EA:A3:2C:DB:99:18
Authority key identifier: B7:84:8C:D2:39:3C:17:83:65:7A:05:77:7A:B3:15:E3:98:EB:B2:3F
Certificate issuer: /CN=b7848cd2393c1783657a05777ab315e398ebb23f
Certificate serial: 019D28BBEFAF5E9D69FBBE88FF64C120601C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t4SM0jk8F4NlegV3erMV45jrsj8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/8b5dbf-458d-4326-9302-5aaac2cb0df1/1/t4SM0jk8F4NlegV3erMV45jrsj8.mft
Manifest number: 0967
Signing time: Thu 26 Mar 2026 06:01:38 +0000
Manifest this update: Thu 26 Mar 2026 06:01:38 +0000
Manifest next update: Fri 27 Mar 2026 06:01:38 +0000
Files and hashes: 1: K2XVYjuCC16kI2DcwZ23G4lWyWY.roa (hash: km9TZqs9IRWovA2npNy5FMThdKzihzT6NuN6LQAI69Q=)
2: t4SM0jk8F4NlegV3erMV45jrsj8.crl (hash: xWreR/lw6hI2lQAhI5YNjyfZRgAK8hrLZEYvJq1XPwc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/8b5dbf-458d-4326-9302-5aaac2cb0df1/1/t4SM0jk8F4NlegV3erMV45jrsj8.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/8b5dbf-458d-4326-9302-5aaac2cb0df1/1/t4SM0jk8F4NlegV3erMV45jrsj8.mft
rsync://rpki.ripe.net/repository/DEFAULT/t4SM0jk8F4NlegV3erMV45jrsj8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 06:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:ef:af:5e:9d:69:fb:be:88:ff:64:c1:20:60:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7848cd2393c1783657a05777ab315e398ebb23f
Validity
Not Before: Mar 26 06:01:38 2026 GMT
Not After : Mar 27 06:01:38 2026 GMT
Subject: CN=13b68fd69a2856400a82f6644e82eaa32cdb9918
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:21:db:90:79:22:e5:70:e6:36:0c:c5:07:69:
b9:ce:33:57:8d:57:ca:35:ad:b6:22:0a:68:2b:54:
a6:ff:29:8c:90:fa:74:f1:be:fb:52:b6:b1:da:c9:
f2:b1:7e:7b:c5:ca:b6:69:55:ea:47:72:c2:5d:45:
e5:f3:0d:90:ca:56:a4:a8:38:b8:94:f5:04:29:e5:
51:ff:7b:4b:17:df:2d:18:ca:4f:1a:ef:cc:26:bb:
1f:f4:f6:ec:c2:22:bc:d9:51:9b:da:c6:c4:39:ad:
55:9b:03:fc:c1:ce:c0:21:be:7e:7f:dc:93:93:66:
0c:67:40:ff:23:d9:e5:cd:84:b9:c2:cd:be:1e:4f:
1b:38:b2:64:62:0b:ef:6c:11:ac:bb:bc:6b:f3:1f:
a5:ae:c8:2c:e1:36:96:fb:4c:f8:50:6a:a4:67:79:
73:0b:d7:9c:18:27:09:44:04:51:3e:65:ef:c4:28:
8a:40:4d:2b:12:8c:ac:bc:14:2f:ce:b2:68:5c:50:
8e:14:30:35:de:92:be:3d:31:29:d0:d3:c6:48:fd:
6f:f0:8f:f4:15:87:94:b2:b2:c5:eb:cf:87:c0:13:
a2:0b:04:32:e4:e2:a2:38:85:4a:ef:22:2c:f4:73:
5e:f6:32:04:a0:7b:3a:eb:0c:87:f6:e2:b7:b8:9b:
c9:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:B6:8F:D6:9A:28:56:40:0A:82:F6:64:4E:82:EA:A3:2C:DB:99:18
X509v3 Authority Key Identifier:
keyid:B7:84:8C:D2:39:3C:17:83:65:7A:05:77:7A:B3:15:E3:98:EB:B2:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t4SM0jk8F4NlegV3erMV45jrsj8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/8b5dbf-458d-4326-9302-5aaac2cb0df1/1/t4SM0jk8F4NlegV3erMV45jrsj8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/8b5dbf-458d-4326-9302-5aaac2cb0df1/1/t4SM0jk8F4NlegV3erMV45jrsj8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:ab:f4:b3:f9:a8:1e:7d:96:87:2b:38:af:d7:31:a2:20:e9:
d7:74:88:af:26:fb:f3:e5:8e:c8:86:57:44:f4:f9:d4:27:66:
74:f2:9d:2d:bc:b4:45:2f:82:23:da:26:a6:cb:59:8d:8b:5f:
15:9d:9f:a4:6b:5b:24:b9:a1:d9:24:c0:f1:15:40:c8:44:08:
39:67:53:37:40:ab:93:3e:72:7e:2c:3c:14:61:08:ba:27:d9:
cc:39:31:4e:40:a9:48:4b:1e:ba:25:e6:31:24:19:56:d3:b1:
94:91:1f:ce:49:fb:e2:cd:77:42:85:35:ad:9d:a4:b6:64:9c:
08:46:1e:7a:ea:0c:0b:d6:47:67:64:9c:6e:70:1e:eb:62:10:
56:c1:20:5c:4a:88:a7:0f:bf:c7:7e:37:cc:af:9f:ec:97:ca:
53:8e:9c:8f:d1:f3:f9:0d:48:7c:8d:c8:bb:8d:58:65:79:87:
ff:8c:e1:9d:43:d2:1f:ca:de:30:a7:c4:66:65:2e:8a:bd:e4:
07:85:6d:0f:b3:24:29:b9:66:ef:3b:97:a8:58:fa:c0:3e:60:
e9:ce:38:78:1e:81:a5:19:49:3e:a8:61:21:2b:fd:a6:ea:ec:
86:e7:5f:ae:81:c0:c8:82:1e:65:8f:7d:bb:9f:ef:a5:48:0c:
26:c9:0f:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:19:42 2026 by rpki-client