Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/6ef23e-99ba-4c69-92e3-6bb7080409b4/1/T7OopKDYxa4BqWlbBB7SxtApap4.mft
File: T7OopKDYxa4BqWlbBB7SxtApap4.mft (raw, json)
Hash identifier: 5GbF94CBCh6BYZWGrx69hwntmZ7v9UUCpWOjc7uMvQ4=
Subject key identifier: 64:FE:0E:27:21:C5:A7:26:8D:AF:8F:CB:0B:FA:48:26:E5:55:0D:A7
Authority key identifier: 4F:B3:A8:A4:A0:D8:C5:AE:01:A9:69:5B:04:1E:D2:C6:D0:29:6A:9E
Certificate issuer: /CN=4fb3a8a4a0d8c5ae01a9695b041ed2c6d0296a9e
Certificate serial: 019D265FC54393B928F627DED3D0DB951D38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T7OopKDYxa4BqWlbBB7SxtApap4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/6ef23e-99ba-4c69-92e3-6bb7080409b4/1/T7OopKDYxa4BqWlbBB7SxtApap4.mft
Manifest number: 0F7C
Signing time: Wed 25 Mar 2026 19:01:43 +0000
Manifest this update: Wed 25 Mar 2026 19:01:43 +0000
Manifest next update: Thu 26 Mar 2026 19:01:43 +0000
Files and hashes: 1: 2yNvnD1lmLbPPKFlQkp9-VHyRE0.roa (hash: zlpNQG2pRqEeG9wmnXhIHFiAawnx6f7m+aNjLjl7SQw=)
2: T7OopKDYxa4BqWlbBB7SxtApap4.crl (hash: jIWJRPOPGu2EPT/kK4YdDKnqtYUh6R3R+RlEXPyJLcA=)
3: jPtnMh6W4G2WuaIjEWGJ9cYgDew.roa (hash: /8F9d1Hzc1eMJK3xcWh9iLgYlz/NTYIkw82sKvGLhwM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/6ef23e-99ba-4c69-92e3-6bb7080409b4/1/T7OopKDYxa4BqWlbBB7SxtApap4.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/6ef23e-99ba-4c69-92e3-6bb7080409b4/1/T7OopKDYxa4BqWlbBB7SxtApap4.mft
rsync://rpki.ripe.net/repository/DEFAULT/T7OopKDYxa4BqWlbBB7SxtApap4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:c5:43:93:b9:28:f6:27:de:d3:d0:db:95:1d:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fb3a8a4a0d8c5ae01a9695b041ed2c6d0296a9e
Validity
Not Before: Mar 25 19:01:43 2026 GMT
Not After : Mar 26 19:01:43 2026 GMT
Subject: CN=64fe0e2721c5a7268daf8fcb0bfa4826e5550da7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:68:f8:62:5a:47:47:09:0a:0e:b4:77:e1:08:
6c:59:ba:20:6c:53:c7:ac:00:9c:3a:57:a9:ca:04:
b7:64:26:de:5f:ab:b6:36:0f:fb:d2:94:78:1a:d1:
ef:ea:83:10:c0:1c:c5:02:db:50:69:e6:5c:df:01:
c2:be:be:b6:28:73:da:07:fb:e5:5d:46:7a:8c:cd:
0a:c2:5c:6a:0e:b1:93:8c:9f:59:89:d1:17:96:1f:
54:fc:d0:8f:28:78:74:8d:eb:d1:98:f6:c7:31:e9:
b8:24:6c:f8:61:07:29:90:8d:62:13:19:b1:09:1f:
06:a3:3b:4b:1b:dc:be:d8:bf:df:1e:65:c7:83:34:
0c:f9:62:bf:30:ae:3b:d4:11:07:e9:95:61:16:4c:
f4:84:e9:a2:8e:44:80:01:19:59:fc:d9:8b:32:c2:
3f:25:da:cf:db:8a:43:36:34:b8:2b:73:02:86:03:
8f:ab:52:84:cb:2d:66:ca:18:cb:f4:b7:63:7c:33:
46:0b:69:89:26:ec:85:29:b2:42:47:31:27:54:3f:
9a:7c:45:9d:97:52:33:85:b3:2c:40:53:dc:49:1d:
c5:3f:5e:9f:66:92:4a:9e:f8:95:b7:08:05:8f:07:
df:85:1d:38:2c:30:c0:d6:74:6c:c8:e5:0f:63:a8:
a4:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:FE:0E:27:21:C5:A7:26:8D:AF:8F:CB:0B:FA:48:26:E5:55:0D:A7
X509v3 Authority Key Identifier:
keyid:4F:B3:A8:A4:A0:D8:C5:AE:01:A9:69:5B:04:1E:D2:C6:D0:29:6A:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T7OopKDYxa4BqWlbBB7SxtApap4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/6ef23e-99ba-4c69-92e3-6bb7080409b4/1/T7OopKDYxa4BqWlbBB7SxtApap4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/6ef23e-99ba-4c69-92e3-6bb7080409b4/1/T7OopKDYxa4BqWlbBB7SxtApap4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:a0:5a:ba:39:19:a6:46:a6:91:d3:3d:97:5e:7d:ed:1a:e5:
39:a4:17:ad:fd:bb:c9:f3:4e:23:d9:22:d9:43:f4:d4:0f:93:
4a:9a:ba:a8:87:ce:c7:d7:33:5a:24:83:15:00:88:ea:96:4f:
4d:fb:4d:70:d5:53:2d:36:79:11:06:93:60:97:1b:89:3c:0f:
48:57:40:41:4e:72:f5:d7:87:b5:d6:0e:12:f2:35:ae:25:e5:
a5:9d:3e:c1:f4:24:37:f0:78:8d:e5:9d:d9:be:6a:02:20:69:
9f:7e:26:ff:fe:f8:00:47:2e:cc:c2:6a:4b:b8:fb:25:7e:3d:
04:e0:d6:a6:a4:04:0e:98:fa:67:06:20:e7:ae:dd:b1:95:a2:
54:63:6c:7b:02:85:2f:77:55:f5:f0:8f:6a:2c:dd:6b:d6:a1:
b3:f3:70:f0:77:bc:b6:c6:2b:d3:1a:77:5d:00:6a:c9:36:7d:
46:b2:12:dc:e6:5c:e6:78:67:2d:8c:39:37:ec:56:76:fc:a7:
93:29:b0:84:14:47:d0:63:03:52:23:f0:f0:6b:e0:f3:a6:5f:
c5:46:49:8d:42:ed:d6:cb:1e:a4:0a:28:c7:2b:f5:d3:b3:b1:
23:76:f4:a6:eb:b8:37:c7:30:b3:45:11:75:f9:4e:38:89:2c:
da:e2:1f:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:52:06 2026 by rpki-client