Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/775190-cb94-4063-8c1a-ad147d915791/1/T4R35WnR19YPBGmnzIp_R0YDm7c.mft
File: T4R35WnR19YPBGmnzIp_R0YDm7c.mft (raw, json)
Hash identifier: fglIiZJedX8YyZd046a3jVFCO6zDJZo9esvCiugoGC8=
Subject key identifier: 97:72:38:A3:0C:06:3D:95:A5:75:99:99:6E:85:63:E8:98:46:8F:F2
Authority key identifier: 4F:84:77:E5:69:D1:D7:D6:0F:04:69:A7:CC:8A:7F:47:46:03:9B:B7
Certificate issuer: /CN=4f8477e569d1d7d60f0469a7cc8a7f4746039bb7
Certificate serial: 019D269600EB2F026DCC9AD535E078966DA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T4R35WnR19YPBGmnzIp_R0YDm7c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/775190-cb94-4063-8c1a-ad147d915791/1/T4R35WnR19YPBGmnzIp_R0YDm7c.mft
Manifest number: 14EA
Signing time: Wed 25 Mar 2026 20:00:58 +0000
Manifest this update: Wed 25 Mar 2026 20:00:58 +0000
Manifest next update: Thu 26 Mar 2026 20:00:58 +0000
Files and hashes: 1: DnWfHELWv6ZXmwtakQ_6GSkBnMs.roa (hash: sD3OKMp3tJ9sJrkja6bcQY3bU7GkERVJF54ua1KO+ik=)
2: T4R35WnR19YPBGmnzIp_R0YDm7c.crl (hash: p+D2H00Ag913LH5rPQOfmQTBzpdLFVXFBA9S1fDsG74=)
3: yIPdIGKPSnnWaFjIROBzg5HRQN4.roa (hash: mQmVzMDOZ6m+DVFs/cWi/nLMKKEFrfsoFqYmCDlkyPg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/775190-cb94-4063-8c1a-ad147d915791/1/T4R35WnR19YPBGmnzIp_R0YDm7c.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/775190-cb94-4063-8c1a-ad147d915791/1/T4R35WnR19YPBGmnzIp_R0YDm7c.mft
rsync://rpki.ripe.net/repository/DEFAULT/T4R35WnR19YPBGmnzIp_R0YDm7c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:96:00:eb:2f:02:6d:cc:9a:d5:35:e0:78:96:6d:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f8477e569d1d7d60f0469a7cc8a7f4746039bb7
Validity
Not Before: Mar 25 20:00:58 2026 GMT
Not After : Mar 26 20:00:58 2026 GMT
Subject: CN=977238a30c063d95a57599996e8563e898468ff2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:2f:06:e4:34:7b:d8:51:15:a6:fc:f1:62:59:
72:46:8c:d8:5a:f0:7b:33:e8:5e:2c:1c:e9:5a:f5:
c7:1c:1e:50:42:d6:d0:41:bc:5d:fd:0d:00:6c:78:
02:d3:b7:cf:de:f1:d6:b4:15:81:49:8b:98:74:48:
02:42:05:1a:86:10:ef:3a:3b:30:8f:48:f8:ec:18:
dd:f4:58:6a:c0:d0:4a:e1:6b:a6:91:4a:51:e1:fb:
b0:75:68:41:49:8c:bc:0f:ba:81:83:b0:88:f7:db:
b9:3a:19:ff:a0:a8:1a:7e:81:5b:d6:e8:6a:fd:96:
1b:eb:f0:db:c6:58:4f:6b:a2:8e:1c:9a:b1:99:e7:
d4:57:20:c2:82:54:fe:24:eb:23:41:16:ab:b6:22:
f1:e1:42:4d:6f:dc:47:89:75:7b:55:b7:92:48:cb:
ce:cb:2e:7b:00:6e:38:fa:d7:e8:d8:54:b7:93:45:
b1:f6:cb:14:0b:1d:ac:2b:74:fe:ee:be:f9:d0:a6:
2d:c8:22:76:19:27:e2:71:dd:57:e3:72:d3:b3:bd:
a9:2c:dc:40:c7:68:ac:af:21:b7:1c:d0:db:92:d4:
19:f9:2c:33:33:6e:52:63:38:32:d6:df:2d:28:77:
46:40:18:cf:3a:e4:ad:90:d0:35:57:d2:1d:05:6a:
98:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:72:38:A3:0C:06:3D:95:A5:75:99:99:6E:85:63:E8:98:46:8F:F2
X509v3 Authority Key Identifier:
keyid:4F:84:77:E5:69:D1:D7:D6:0F:04:69:A7:CC:8A:7F:47:46:03:9B:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T4R35WnR19YPBGmnzIp_R0YDm7c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/775190-cb94-4063-8c1a-ad147d915791/1/T4R35WnR19YPBGmnzIp_R0YDm7c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/775190-cb94-4063-8c1a-ad147d915791/1/T4R35WnR19YPBGmnzIp_R0YDm7c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:97:02:ca:6b:fb:36:73:c1:a9:17:fd:ec:75:ce:8a:f2:ec:
2a:da:e3:52:2e:89:2d:8c:5e:cc:46:35:bb:32:61:dc:9b:bd:
0b:c4:07:a5:c3:5d:25:73:d6:40:de:48:93:e8:45:1e:e8:a3:
ad:e0:94:cc:8a:26:6c:55:e0:5c:d7:39:f1:6a:7a:0b:70:39:
d2:1b:7d:fb:71:f2:8e:12:b5:ea:b0:69:60:3a:e3:b0:dd:09:
02:4e:b7:01:ad:9a:a0:7a:1c:80:2a:b3:c3:26:1c:8e:f3:71:
a1:71:78:dd:3d:85:b8:d0:a9:7b:cf:b9:38:0d:4e:92:5d:df:
f3:07:f2:74:54:c6:67:20:94:d0:cd:08:3b:df:b2:b7:22:92:
4d:55:49:f8:d2:7a:c9:8c:cc:04:1c:8c:0c:0b:1d:0a:40:f3:
3e:37:0a:0d:5a:17:27:1a:41:12:de:40:f6:ce:15:43:03:c9:
d8:4c:e2:a7:6b:bf:b3:48:b6:eb:37:3a:e2:32:73:19:9c:a9:
64:d8:98:a6:6c:8d:7f:b5:5c:91:77:a8:5e:b3:62:b9:ee:f2:
40:1f:bd:b9:83:b5:00:70:2e:5b:83:31:5f:20:4b:5c:bc:f9:
aa:cc:43:19:8f:20:b8:85:d1:4b:75:ac:39:a6:67:da:0b:6f:
f2:e7:b5:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:21:36 2026 by rpki-client