Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/35c0b9-2855-4b20-8c80-7e280752da21/1/T2ctOZKXMa7Z4BvFqebWgPRlmgs.mft
File: T2ctOZKXMa7Z4BvFqebWgPRlmgs.mft (raw, json)
Hash identifier: e4JKDRLAy/9LK4pYoOJ4fc4OjlgSeVNi/VZW+X+w/so=
Subject key identifier: 4A:D2:00:F9:6A:45:AB:02:57:AD:61:1A:D3:1B:35:8A:3D:2E:CC:C9
Authority key identifier: 4F:67:2D:39:92:97:31:AE:D9:E0:1B:C5:A9:E6:D6:80:F4:65:9A:0B
Certificate issuer: /CN=4f672d39929731aed9e01bc5a9e6d680f4659a0b
Certificate serial: 019E1ED9EC616366FE113D1C5E88F772EC93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T2ctOZKXMa7Z4BvFqebWgPRlmgs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/35c0b9-2855-4b20-8c80-7e280752da21/1/T2ctOZKXMa7Z4BvFqebWgPRlmgs.mft
Manifest number: 145E
Signing time: Wed 13 May 2026 01:00:58 +0000
Manifest this update: Wed 13 May 2026 01:00:58 +0000
Manifest next update: Thu 14 May 2026 01:00:58 +0000
Files and hashes: 1: 6Zx9YtDEJ49JC-4b71_fvWtzw8s.roa (hash: o/A6dnRcU90/Ns+dOzz+UmVUTf5+OMsC+rgsisi5p8Q=)
2: NIU7fZeJ73Kx7vUBqR7rizpf67w.roa (hash: 2ugysi5XrPkBHFUed+88NeImX7rSdwmGmQYl2PxW7sE=)
3: T2ctOZKXMa7Z4BvFqebWgPRlmgs.crl (hash: 7+7hb9D6EguWyrSYKfmoogJFg0Zb/pCGSo93xkwzwjE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/35c0b9-2855-4b20-8c80-7e280752da21/1/T2ctOZKXMa7Z4BvFqebWgPRlmgs.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/35c0b9-2855-4b20-8c80-7e280752da21/1/T2ctOZKXMa7Z4BvFqebWgPRlmgs.mft
rsync://rpki.ripe.net/repository/DEFAULT/T2ctOZKXMa7Z4BvFqebWgPRlmgs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:d9:ec:61:63:66:fe:11:3d:1c:5e:88:f7:72:ec:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f672d39929731aed9e01bc5a9e6d680f4659a0b
Validity
Not Before: May 13 01:00:58 2026 GMT
Not After : May 14 01:00:58 2026 GMT
Subject: CN=4ad200f96a45ab0257ad611ad31b358a3d2eccc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:cc:4e:ee:be:47:3b:1d:21:a0:12:c9:02:4f:
99:fd:a6:2b:ca:cf:88:f2:b2:ad:fc:bd:a8:51:cf:
d4:9c:42:11:ca:b6:ff:d7:c2:8b:27:6d:86:04:3b:
5e:db:57:6a:e1:f5:6a:13:21:56:3e:99:44:72:e3:
6b:fe:96:98:b5:5a:71:98:12:a1:a5:1d:f4:1a:08:
a4:a3:a3:1a:c4:52:96:b2:b7:6e:97:06:2e:61:5c:
a7:68:23:e3:e9:3b:91:86:1e:b8:cc:f7:44:48:81:
b3:f7:a2:ab:42:9b:36:37:76:d9:a2:57:98:f5:e4:
7f:ed:6e:fa:e6:1b:2a:d5:82:48:1d:3f:10:eb:79:
2a:7a:4f:46:8f:59:f8:fe:2a:7c:84:4b:ab:ec:09:
be:8d:dc:66:b7:62:f3:ea:9e:2f:44:77:98:02:49:
15:7c:cc:2d:e6:ae:78:03:01:b5:ef:d2:09:3e:cd:
d1:9c:3f:ae:9d:7c:42:a8:2c:27:9d:4d:dc:eb:aa:
bf:44:81:53:ae:cd:7e:20:f0:28:c3:01:66:e1:ae:
a8:67:36:11:31:18:5a:37:ba:6e:2e:79:b3:47:63:
fa:c0:91:1a:85:dd:04:a0:66:19:fd:b5:1a:50:cb:
fd:d9:00:60:16:99:43:ac:fc:ea:1d:4b:59:db:37:
28:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:D2:00:F9:6A:45:AB:02:57:AD:61:1A:D3:1B:35:8A:3D:2E:CC:C9
X509v3 Authority Key Identifier:
keyid:4F:67:2D:39:92:97:31:AE:D9:E0:1B:C5:A9:E6:D6:80:F4:65:9A:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T2ctOZKXMa7Z4BvFqebWgPRlmgs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/35c0b9-2855-4b20-8c80-7e280752da21/1/T2ctOZKXMa7Z4BvFqebWgPRlmgs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/35c0b9-2855-4b20-8c80-7e280752da21/1/T2ctOZKXMa7Z4BvFqebWgPRlmgs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:48:cf:78:bf:eb:04:7b:81:ba:ee:71:ec:33:de:d8:47:4a:
2f:59:56:3a:fd:af:8a:ff:cc:6e:86:5c:b4:a2:ac:a7:06:9c:
1d:dc:54:fb:f0:d2:34:ad:ac:36:ad:62:d6:5b:1b:27:21:e3:
88:9d:22:d4:7a:87:b1:f3:d1:70:5e:6e:d3:f5:24:2b:84:f9:
06:db:1e:46:f4:b5:d0:99:5b:06:e5:d1:f9:db:8f:17:43:14:
d3:8a:72:eb:5d:61:46:36:9e:80:5e:b7:ab:78:25:43:1c:fc:
bd:e3:74:d9:0d:1d:91:f8:c6:11:4b:cc:4e:6e:4e:dd:ef:39:
97:43:8f:0a:94:7b:85:93:01:72:54:81:83:3e:08:72:aa:0b:
ae:7b:f2:a0:a3:ed:9e:f2:de:70:dc:22:7d:1b:53:0d:8a:fd:
63:9b:66:ae:79:0a:10:38:0c:ca:3a:08:fd:2e:be:73:c7:49:
7a:8d:12:b0:13:1c:a1:30:ad:b8:59:c4:6a:23:4c:19:51:9c:
e4:43:f0:44:ef:aa:28:aa:af:34:c5:0b:67:56:d6:49:7c:96:
dc:36:96:d4:b5:5b:4e:9a:3d:1c:e2:e1:73:5b:d1:39:ac:b5:
37:06:00:1d:cf:9f:ce:95:0c:2b:eb:53:e8:92:0c:bb:96:a4:
f6:6b:d2:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:33:30 2026 by rpki-client