Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/35c0b9-2855-4b20-8c80-7e280752da21/1/T2ctOZKXMa7Z4BvFqebWgPRlmgs.mft
File: T2ctOZKXMa7Z4BvFqebWgPRlmgs.mft (raw, json)
Hash identifier: zCuLmoI3TT+I7CI0YxMAPIlG49Fi4G946PH5akafXws=
Subject key identifier: 32:25:F7:D5:1B:B2:2F:C7:34:3C:32:15:A5:6D:0B:6D:29:5C:4F:91
Authority key identifier: 4F:67:2D:39:92:97:31:AE:D9:E0:1B:C5:A9:E6:D6:80:F4:65:9A:0B
Certificate issuer: /CN=4f672d39929731aed9e01bc5a9e6d680f4659a0b
Certificate serial: 019D25BAA81E3ECF4EAE634896B206AB2130
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T2ctOZKXMa7Z4BvFqebWgPRlmgs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/35c0b9-2855-4b20-8c80-7e280752da21/1/T2ctOZKXMa7Z4BvFqebWgPRlmgs.mft
Manifest number: 13DD
Signing time: Wed 25 Mar 2026 16:01:22 +0000
Manifest this update: Wed 25 Mar 2026 16:01:22 +0000
Manifest next update: Thu 26 Mar 2026 16:01:22 +0000
Files and hashes: 1: 6Zx9YtDEJ49JC-4b71_fvWtzw8s.roa (hash: o/A6dnRcU90/Ns+dOzz+UmVUTf5+OMsC+rgsisi5p8Q=)
2: NIU7fZeJ73Kx7vUBqR7rizpf67w.roa (hash: 2ugysi5XrPkBHFUed+88NeImX7rSdwmGmQYl2PxW7sE=)
3: T2ctOZKXMa7Z4BvFqebWgPRlmgs.crl (hash: NGqodna0uuqeXyjlIQbrlFFT2UeKmQRoYV7FqXaJawE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/35c0b9-2855-4b20-8c80-7e280752da21/1/T2ctOZKXMa7Z4BvFqebWgPRlmgs.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/35c0b9-2855-4b20-8c80-7e280752da21/1/T2ctOZKXMa7Z4BvFqebWgPRlmgs.mft
rsync://rpki.ripe.net/repository/DEFAULT/T2ctOZKXMa7Z4BvFqebWgPRlmgs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:ba:a8:1e:3e:cf:4e:ae:63:48:96:b2:06:ab:21:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f672d39929731aed9e01bc5a9e6d680f4659a0b
Validity
Not Before: Mar 25 16:01:22 2026 GMT
Not After : Mar 26 16:01:22 2026 GMT
Subject: CN=3225f7d51bb22fc7343c3215a56d0b6d295c4f91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:1f:c6:25:9f:6c:d8:ff:fe:c5:ac:f0:01:2b:
3d:e6:8b:77:c6:3c:42:ca:af:8c:c2:df:31:28:6d:
7c:db:f1:50:66:2d:7f:db:23:70:eb:c4:7b:70:d1:
0a:b1:89:5d:dd:1b:57:d9:c4:bc:b9:c2:c3:cb:5e:
90:d0:ae:04:60:ac:e2:d7:09:d2:e9:b9:08:f9:11:
42:f2:c5:ab:5a:cd:b3:c2:5e:2a:b9:3c:8e:8f:0a:
3a:4b:de:d3:a7:9c:92:9c:64:c4:ef:6d:78:b2:ea:
66:0d:53:f0:d7:68:0c:e7:70:e1:80:2f:51:2a:ae:
cb:7e:f3:e9:89:a9:ad:b2:f2:9e:85:c7:1c:9b:22:
45:a7:89:b6:9a:f7:71:ec:bb:2a:63:9a:7e:9b:fb:
ea:0d:5d:4d:91:56:95:b6:41:59:a3:dd:a7:5c:1d:
7b:8b:3b:7b:dc:81:70:93:7b:30:7e:ed:b4:86:97:
e9:75:08:7c:c8:b0:3b:24:51:ff:b5:d0:3a:65:58:
cc:1d:1b:75:75:9a:bd:c1:da:e8:e7:54:73:7d:21:
b6:bd:3b:a9:e2:31:41:e7:e2:a3:18:09:c2:5b:f3:
4a:10:6e:fc:82:9b:69:3c:28:ab:06:da:12:bb:45:
9c:f9:11:5d:78:4f:e5:da:9c:d6:a1:38:e4:18:17:
a0:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:25:F7:D5:1B:B2:2F:C7:34:3C:32:15:A5:6D:0B:6D:29:5C:4F:91
X509v3 Authority Key Identifier:
keyid:4F:67:2D:39:92:97:31:AE:D9:E0:1B:C5:A9:E6:D6:80:F4:65:9A:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T2ctOZKXMa7Z4BvFqebWgPRlmgs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/35c0b9-2855-4b20-8c80-7e280752da21/1/T2ctOZKXMa7Z4BvFqebWgPRlmgs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/35c0b9-2855-4b20-8c80-7e280752da21/1/T2ctOZKXMa7Z4BvFqebWgPRlmgs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:44:45:e1:aa:dc:7e:70:37:95:6b:7c:3f:42:16:c7:91:17:
c6:d1:14:6f:8b:b6:56:74:8e:96:b7:f6:e9:c2:2d:4f:16:10:
21:38:58:6a:2c:3e:6c:8c:d0:0e:0a:0d:86:2a:1d:ba:e1:79:
9b:a1:3c:94:4d:8f:fa:99:47:5e:6f:01:4e:2b:fa:97:83:ef:
d4:1a:c4:65:e1:78:46:9d:55:0b:71:79:82:ad:d2:c1:92:db:
f1:d1:e2:3b:e5:59:a2:72:18:50:3f:7d:f3:8b:a3:48:4e:d2:
8e:0c:66:d9:00:6e:01:97:50:71:b2:ee:02:2f:a7:ac:c4:b5:
d3:6b:59:89:d6:34:ab:dc:c9:c7:82:95:d3:a7:0d:50:5a:7d:
60:ef:da:43:2a:5f:c3:ba:97:8d:2a:22:ce:1e:4b:c2:70:13:
a3:0d:76:70:9c:b0:c6:f9:01:64:f4:90:81:69:6e:09:64:b4:
8e:63:4c:1e:69:11:23:72:d0:76:65:d5:1f:12:48:d1:aa:b9:
6d:4d:35:ca:79:42:bc:5f:e9:71:27:5d:e2:27:37:5d:bc:bc:
43:ad:2b:0d:ad:a2:fe:4d:42:21:da:4d:2d:91:80:a5:e4:12:
20:0e:ea:bf:e7:30:9e:9a:66:27:5d:43:db:c3:6d:c3:9c:b0:
e5:9a:b6:bc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0luqgePs9OrmNIlrIGqyEwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmNjcyZDM5OTI5NzMxYWVkOWUwMWJjNWE5ZTZkNjgwZjQ2
NTlhMGIwHhcNMjYwMzI1MTYwMTIyWhcNMjYwMzI2MTYwMTIyWjAzMTEwLwYDVQQD
EygzMjI1ZjdkNTFiYjIyZmM3MzQzYzMyMTVhNTZkMGI2ZDI5NWM0ZjkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqh/GJZ9s2P/+xazwASs95ot3xjxC
yq+Mwt8xKG182/FQZi1/2yNw68R7cNEKsYld3RtX2cS8ucLDy16Q0K4EYKzi1wnS
6bkI+RFC8sWrWs2zwl4quTyOjwo6S97Tp5ySnGTE7214supmDVPw12gM53DhgC9R
Kq7LfvPpiamtsvKehcccmyJFp4m2mvdx7LsqY5p+m/vqDV1NkVaVtkFZo92nXB17
izt73IFwk3swfu20hpfpdQh8yLA7JFH/tdA6ZVjMHRt1dZq9wdro51RzfSG2vTup
4jFB5+KjGAnCW/NKEG78gptpPCirBtoSu0Wc+RFdeE/l2pzWoTjkGBeg5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDIl99Ubsi/HNDwyFaVtC20pXE+RMB8GA1UdIwQY
MBaAFE9nLTmSlzGu2eAbxanm1oD0ZZoLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDJjdE9aS1hNYTdaNEJ2RnFlYldnUFJsbWdzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC8zNWMwYjktMjg1NS00YjIwLThjODAt
N2UyODA3NTJkYTIxLzEvVDJjdE9aS1hNYTdaNEJ2RnFlYldnUFJsbWdzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC8zNWMwYjktMjg1NS00YjIwLThjODAtN2UyODA3NTJkYTIx
LzEvVDJjdE9aS1hNYTdaNEJ2RnFlYldnUFJsbWdzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfERF4arc
fnA3lWt8P0IWx5EXxtEUb4u2VnSOlrf26cItTxYQIThYaiw+bIzQDgoNhioduuF5
m6E8lE2P+plHXm8BTiv6l4Pv1BrEZeF4Rp1VC3F5gq3SwZLb8dHiO+VZonIYUD99
84ujSE7Sjgxm2QBuAZdQcbLuAi+nrMS102tZidY0q9zJx4KV06cNUFp9YO/aQypf
w7qXjSoizh5LwnATow12cJywxvkBZPSQgWluCWS0jmNMHmkRI3LQdmXVHxJI0aq5
bU01ynlCvF/pcSdd4ic3Xby8Q60rDa2i/k1CIdpNLZGApeQSIA7qv+cwnppmJ11D
28Ntw5yw5Zq2vA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:23:56 2026 by rpki-client