Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9d/775190-cb94-4063-8c1a-ad147d915791/1/T4R35WnR19YPBGmnzIp_R0YDm7c.mft
File: T4R35WnR19YPBGmnzIp_R0YDm7c.mft (raw, json)
Hash identifier: 2iHoa8jOhvjIYmR+S+faiyz/s4uZIKm1cjeEmDhfXEU=
Subject key identifier: 9C:AF:A3:05:AF:1F:7A:EC:94:87:71:67:49:3D:00:B0:96:2C:B5:4D
Authority key identifier: 4F:84:77:E5:69:D1:D7:D6:0F:04:69:A7:CC:8A:7F:47:46:03:9B:B7
Certificate issuer: /CN=4f8477e569d1d7d60f0469a7cc8a7f4746039bb7
Certificate serial: 01A1035BB7B2BB1413BE8E2E41F7A2D7C394
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T4R35WnR19YPBGmnzIp_R0YDm7c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/775190-cb94-4063-8c1a-ad147d915791/1/T4R35WnR19YPBGmnzIp_R0YDm7c.mft
Manifest number: 16EA
Signing time: Sat 03 Oct 2026 20:01:44 +0000
Manifest this update: Sat 03 Oct 2026 20:01:44 +0000
Manifest next update: Sun 04 Oct 2026 20:01:44 +0000
Files and hashes: 1: DnWfHELWv6ZXmwtakQ_6GSkBnMs.roa (hash: sD3OKMp3tJ9sJrkja6bcQY3bU7GkERVJF54ua1KO+ik=)
2: T4R35WnR19YPBGmnzIp_R0YDm7c.crl (hash: m4/tGTDqBEovrnd9Jw9C7O8bMACfgi4lrfRSbUuaahs=)
3: yIPdIGKPSnnWaFjIROBzg5HRQN4.roa (hash: mQmVzMDOZ6m+DVFs/cWi/nLMKKEFrfsoFqYmCDlkyPg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/775190-cb94-4063-8c1a-ad147d915791/1/T4R35WnR19YPBGmnzIp_R0YDm7c.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/775190-cb94-4063-8c1a-ad147d915791/1/T4R35WnR19YPBGmnzIp_R0YDm7c.mft
rsync://rpki.ripe.net/repository/DEFAULT/T4R35WnR19YPBGmnzIp_R0YDm7c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 20:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:03:5b:b7:b2:bb:14:13:be:8e:2e:41:f7:a2:d7:c3:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f8477e569d1d7d60f0469a7cc8a7f4746039bb7
Validity
Not Before: Oct 3 20:01:44 2026 GMT
Not After : Oct 4 20:01:44 2026 GMT
Subject: CN=9cafa305af1f7aec94877167493d00b0962cb54d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:09:db:45:4a:b6:6d:df:84:57:1a:8a:ec:79:
22:03:c5:b7:ef:b8:20:2b:7e:b2:fe:ec:84:02:a3:
95:b6:aa:2c:6f:d1:7b:71:d4:d9:bb:e3:f4:c5:1e:
d2:52:0a:65:58:7a:96:1b:ef:5a:a2:6e:b8:57:74:
2c:c7:fb:d0:3a:5d:d3:f4:7e:92:33:d9:db:b5:fe:
ee:44:ef:56:d7:26:85:8c:84:42:be:f5:5f:05:be:
88:3c:b5:78:eb:5e:3a:92:38:55:8c:8e:10:75:2f:
49:5d:55:5b:40:4d:fd:8a:34:63:62:5d:7d:b8:0e:
77:e0:7f:e3:fb:a6:da:24:6d:77:b7:bd:9b:39:78:
b6:e6:78:f5:33:05:a4:98:ea:d9:a4:c9:62:f6:e5:
1d:04:d8:ff:0d:e6:3b:73:27:30:c2:05:cd:62:c1:
04:26:fa:9f:9e:dc:9f:87:75:39:81:db:55:c6:23:
a1:4e:32:6a:a9:8e:f5:21:01:4d:f7:a4:87:fa:64:
0f:b3:78:c5:3c:c3:72:0f:5f:ea:aa:89:ee:80:e8:
0a:bb:5c:34:15:1f:ef:65:de:1a:02:60:74:21:1a:
91:7d:bf:89:04:32:72:61:56:dc:b2:fa:4e:df:29:
29:76:31:84:8f:4c:15:b9:fe:34:8f:b7:62:2a:1f:
07:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:AF:A3:05:AF:1F:7A:EC:94:87:71:67:49:3D:00:B0:96:2C:B5:4D
X509v3 Authority Key Identifier:
keyid:4F:84:77:E5:69:D1:D7:D6:0F:04:69:A7:CC:8A:7F:47:46:03:9B:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T4R35WnR19YPBGmnzIp_R0YDm7c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/775190-cb94-4063-8c1a-ad147d915791/1/T4R35WnR19YPBGmnzIp_R0YDm7c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/775190-cb94-4063-8c1a-ad147d915791/1/T4R35WnR19YPBGmnzIp_R0YDm7c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:07:a3:5a:2c:61:9b:e0:f6:67:05:c7:e5:a9:45:6c:b8:97:
50:c6:09:93:1c:32:e1:09:e3:73:47:b2:eb:4c:0a:16:2f:c7:
b2:58:ef:2f:a1:e2:b7:af:a0:7e:e7:6b:fd:25:62:bb:45:c4:
85:ea:42:f8:e6:f7:43:04:c8:51:1b:74:ab:5a:d0:ed:0a:36:
9e:b6:a0:5d:f7:03:17:ad:ac:5e:74:60:7e:63:5f:28:7c:b9:
aa:46:e2:48:76:5c:f4:8f:6a:32:a4:2c:f4:28:54:41:00:54:
94:d9:44:99:4f:0a:56:72:5e:86:61:3b:9a:1d:0c:65:fc:25:
f0:cb:31:f2:3b:43:75:25:6b:63:ba:91:e8:67:5c:d8:83:7a:
a0:68:e1:07:89:58:22:38:39:bd:9a:e9:96:6f:20:40:3f:d4:
9e:6b:95:57:18:74:cf:89:45:b5:e2:9b:d4:09:7e:8c:08:d3:
72:1e:9c:aa:7a:2a:86:ed:d0:52:dd:0e:da:12:02:cf:b8:0c:
1b:3c:cb:21:ef:57:a2:c2:ce:76:eb:89:e7:ae:af:b8:72:60:
5b:bd:35:fe:c3:11:9e:1d:f7:85:76:3f:12:fb:1d:d8:9f:e2:
1a:2d:a9:d3:7e:26:dd:b9:14:3f:23:0f:1c:fb:07:c1:d9:4e:
30:3c:50:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 08:39:57 2026 by rpki-client