
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/a135b2-791e-41da-afd7-da1c4175802b/1/T2FIll96_-tYYJYV5q1OPuqM68o.mft
File: T2FIll96_-tYYJYV5q1OPuqM68o.mft (raw, json)
Hash identifier: vx66ay8pNHqx3c2pwioniYhYWJcA6uFX2Vg8j6/fJkw=
Subject key identifier: F8:8C:CE:26:A8:B4:79:7A:0E:23:20:91:6E:AD:78:A9:69:E4:09:53
Authority key identifier: 4F:61:48:96:5F:7A:FF:EB:58:60:96:15:E6:AD:4E:3E:EA:8C:EB:CA
Certificate issuer: /CN=4f6148965f7affeb58609615e6ad4e3eea8cebca
Certificate serial: 019D31F4E5CFD7D5DA91FCB408BED9B89467
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T2FIll96_-tYYJYV5q1OPuqM68o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/a135b2-791e-41da-afd7-da1c4175802b/1/T2FIll96_-tYYJYV5q1OPuqM68o.mft
Manifest number: 07EB
Signing time: Sat 28 Mar 2026 01:00:26 +0000
Manifest this update: Sat 28 Mar 2026 01:00:26 +0000
Manifest next update: Sun 29 Mar 2026 01:00:26 +0000
Files and hashes: 1: FnvzJCAhZfFhKL1R_8YXVpN6rnI.roa (hash: fIXqKQV4smUBrQJwtOsi9Ki2aBooFyPzEsAKfwU/tzA=)
2: T2FIll96_-tYYJYV5q1OPuqM68o.crl (hash: Ei2unC+qrkIr0cjpIUBA1e2I8MIKRtQChe/hbZbLwZ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/a135b2-791e-41da-afd7-da1c4175802b/1/T2FIll96_-tYYJYV5q1OPuqM68o.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/a135b2-791e-41da-afd7-da1c4175802b/1/T2FIll96_-tYYJYV5q1OPuqM68o.mft
rsync://rpki.ripe.net/repository/DEFAULT/T2FIll96_-tYYJYV5q1OPuqM68o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:31:f4:e5:cf:d7:d5:da:91:fc:b4:08:be:d9:b8:94:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f6148965f7affeb58609615e6ad4e3eea8cebca
Validity
Not Before: Mar 28 01:00:26 2026 GMT
Not After : Mar 29 01:00:26 2026 GMT
Subject: CN=f88cce26a8b4797a0e2320916ead78a969e40953
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:81:44:59:31:81:5a:65:8d:51:29:5c:92:d9:
53:19:ca:ca:2a:53:21:95:6c:96:01:9a:77:e5:4e:
12:54:1d:ef:9c:bc:ae:6b:fb:a1:78:34:76:a0:cd:
54:7b:d5:b2:9b:60:73:a1:2a:38:a5:37:9e:8e:8e:
e2:6d:07:88:6e:6d:f6:96:bd:84:a2:6b:66:65:fa:
fc:98:ad:56:a8:2e:71:c1:06:65:df:27:d7:0e:26:
87:50:5e:99:f3:c6:1b:31:9e:1c:15:e2:a1:32:49:
0c:29:44:20:48:64:8c:e6:b9:9d:39:83:0f:5a:57:
24:9f:44:5e:e1:36:e5:49:88:36:b5:87:2a:3d:88:
19:ef:3f:0e:07:61:a2:5c:78:96:7f:26:8a:6d:1a:
32:73:c3:07:b3:4f:39:bf:a6:56:5e:ce:b0:12:63:
7f:8f:32:3e:8b:88:af:8a:5e:02:3b:13:46:4a:ee:
22:fc:9b:6b:51:e9:ad:66:64:bf:6a:da:55:fe:da:
1f:91:61:e7:83:a9:18:fe:47:6b:c3:64:a4:23:c5:
4d:9b:0e:55:d8:65:f8:e5:3a:2f:83:20:bb:36:90:
1f:bf:ce:4c:91:71:3a:9c:99:77:99:b9:ce:a5:dd:
36:1e:98:13:d7:e2:39:69:d6:7e:35:7a:d4:9a:a7:
3f:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:8C:CE:26:A8:B4:79:7A:0E:23:20:91:6E:AD:78:A9:69:E4:09:53
X509v3 Authority Key Identifier:
keyid:4F:61:48:96:5F:7A:FF:EB:58:60:96:15:E6:AD:4E:3E:EA:8C:EB:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T2FIll96_-tYYJYV5q1OPuqM68o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/a135b2-791e-41da-afd7-da1c4175802b/1/T2FIll96_-tYYJYV5q1OPuqM68o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/a135b2-791e-41da-afd7-da1c4175802b/1/T2FIll96_-tYYJYV5q1OPuqM68o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:5a:a8:f4:de:b2:97:b5:5b:d7:04:34:a1:7f:53:38:d9:4c:
a0:cb:a5:e6:4c:de:97:08:2a:fe:1e:be:db:6c:d4:31:1c:dc:
1c:2f:bc:8f:86:39:d6:11:5c:75:fa:71:44:4d:18:63:0b:fc:
79:08:16:92:56:ad:65:86:5f:fe:49:12:96:6e:c1:15:6f:f5:
c3:b6:53:25:c7:d3:1d:1e:54:62:fe:13:5a:17:8e:e1:24:74:
90:9b:ed:2f:ba:1d:ea:0d:f4:45:60:67:3f:c3:e2:90:e6:bc:
9f:de:6d:10:ab:19:12:b0:10:79:f3:d2:66:76:29:ae:e1:d4:
c5:86:d2:d4:b8:63:ee:99:28:fb:b2:ba:84:fe:ef:52:53:a6:
78:36:42:7a:e5:8a:e7:ab:77:87:09:7c:d9:7d:27:bd:09:57:
f8:6c:bc:59:ef:5e:62:c6:f4:90:d7:34:22:8f:2b:8c:76:d3:
87:02:18:79:3e:e0:e3:29:39:13:46:a0:7c:7e:db:25:a0:73:
37:65:78:91:cf:f1:01:f5:a6:81:4b:09:70:e1:41:08:1c:96:
48:b2:79:ab:4e:5e:01:db:0b:dc:8e:0e:ec:cd:d3:6d:07:b9:
d8:e7:ea:8d:c0:b8:31:86:4c:a0:87:db:fc:1d:32:9c:b5:23:
67:01:62:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 09:11:57 2026 by rpki-client