Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/33816b-145b-47f8-85fa-76a5385c515a/1/T9ZkbJPCl0eJ7O97REZW7mQWFyk.mft
File: T9ZkbJPCl0eJ7O97REZW7mQWFyk.mft (raw, json)
Hash identifier: xRcKbsGwBb463WU7wFubNHpmmjFvoFRL5nfdCV0C1Rs=
Subject key identifier: 56:C1:B4:90:C4:75:10:2C:AF:72:A2:D7:C2:77:7F:63:7E:10:DF:FE
Authority key identifier: 4F:D6:64:6C:93:C2:97:47:89:EC:EF:7B:44:46:56:EE:64:16:17:29
Certificate issuer: /CN=4fd6646c93c2974789ecef7b444656ee64161729
Certificate serial: 019D265FF61E3D27EAED760FE050EE26B4EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T9ZkbJPCl0eJ7O97REZW7mQWFyk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/33816b-145b-47f8-85fa-76a5385c515a/1/T9ZkbJPCl0eJ7O97REZW7mQWFyk.mft
Manifest number: 1886
Signing time: Wed 25 Mar 2026 19:01:56 +0000
Manifest this update: Wed 25 Mar 2026 19:01:56 +0000
Manifest next update: Thu 26 Mar 2026 19:01:56 +0000
Files and hashes: 1: T9ZkbJPCl0eJ7O97REZW7mQWFyk.crl (hash: y6SCmnXPSe+Lqym4BVW5/Sax9kkxd1NAcMgkcvYq29I=)
2: VCFuIr9pM3EPsu68pVpUibKxyQU.roa (hash: apjsLzO5pIx4dzE8WjhYaxZke8s33ArYirHyx0Ruf9w=)
3: XlTxg3kTbgQ4ffELpk85x3UUxbA.roa (hash: hgNyQsC5iaVhcyee4oBmWD68ihN6089j1kYflggiKFM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/33816b-145b-47f8-85fa-76a5385c515a/1/T9ZkbJPCl0eJ7O97REZW7mQWFyk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/33816b-145b-47f8-85fa-76a5385c515a/1/T9ZkbJPCl0eJ7O97REZW7mQWFyk.mft
rsync://rpki.ripe.net/repository/DEFAULT/T9ZkbJPCl0eJ7O97REZW7mQWFyk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:f6:1e:3d:27:ea:ed:76:0f:e0:50:ee:26:b4:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fd6646c93c2974789ecef7b444656ee64161729
Validity
Not Before: Mar 25 19:01:56 2026 GMT
Not After : Mar 26 19:01:56 2026 GMT
Subject: CN=56c1b490c475102caf72a2d7c2777f637e10dffe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:60:a1:d2:1b:5e:18:c1:f0:82:86:93:66:06:
df:8d:65:b3:6f:ff:9c:4d:2f:d5:c9:1e:fd:46:25:
25:0b:2d:cb:0b:e5:88:63:4c:2f:9d:8b:b3:a0:a7:
5a:b8:68:3f:a7:31:f0:d4:a2:49:fb:c0:98:7b:53:
ae:0d:69:0e:5f:81:28:de:fd:0c:12:52:2e:c7:49:
7c:b4:e0:70:21:c3:09:70:69:cf:56:e6:8b:29:a7:
c6:87:60:3e:8d:ca:37:06:d4:79:d4:2e:6c:2f:dd:
3e:68:d4:f9:50:2e:80:ce:c9:f8:02:e9:73:f0:86:
2e:89:94:22:cf:42:06:4e:99:35:60:3d:a7:fe:70:
07:18:d8:4b:75:d1:3b:f1:36:be:db:87:79:30:84:
72:a4:2a:aa:c6:e0:dc:47:5a:b1:01:94:b4:d4:92:
a5:8f:98:84:cd:ff:4d:f6:5c:fe:85:dd:37:b1:bf:
77:73:50:8b:dc:54:ec:82:8b:54:c0:3f:8a:90:6d:
8a:43:4d:be:f8:36:c2:ab:15:f6:b3:e6:d2:23:be:
67:1d:30:58:cb:bd:d5:0e:8c:2c:2f:13:0c:41:00:
2e:35:ed:d0:40:bc:b6:00:6f:ba:a0:45:3f:ec:9d:
49:a5:2b:cc:98:a7:d6:6a:03:16:fb:08:64:03:2c:
51:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:C1:B4:90:C4:75:10:2C:AF:72:A2:D7:C2:77:7F:63:7E:10:DF:FE
X509v3 Authority Key Identifier:
keyid:4F:D6:64:6C:93:C2:97:47:89:EC:EF:7B:44:46:56:EE:64:16:17:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T9ZkbJPCl0eJ7O97REZW7mQWFyk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/33816b-145b-47f8-85fa-76a5385c515a/1/T9ZkbJPCl0eJ7O97REZW7mQWFyk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/33816b-145b-47f8-85fa-76a5385c515a/1/T9ZkbJPCl0eJ7O97REZW7mQWFyk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:cf:cf:16:0b:32:24:63:22:4c:27:65:07:6d:6a:e6:5c:b4:
2a:10:c2:81:50:b8:e3:63:7c:d1:78:ee:9e:fb:c1:c9:6f:0a:
08:76:eb:d7:be:40:a6:32:11:c1:06:52:f6:64:49:4b:d5:22:
b5:8d:b1:d5:0f:1d:b3:5e:6e:cc:a4:72:14:42:44:fc:9b:32:
2b:67:91:ad:c0:f2:b8:7a:5e:a4:87:68:44:46:cb:05:d1:ea:
e8:a6:b4:fc:a0:83:1c:3d:92:0d:a7:aa:0d:d2:cd:7b:0e:91:
bf:4c:af:ca:d6:77:ab:11:7e:e3:96:95:a9:82:23:d7:55:a4:
ce:31:82:c9:53:e3:3c:2e:ff:b4:61:10:f7:f6:89:d6:06:14:
5d:22:3a:e2:2f:e6:ab:3e:cc:ea:14:45:a5:5a:1d:7a:22:f1:
d4:f4:25:01:c3:a2:0d:50:4e:f5:ad:33:db:e9:ce:4c:b0:c0:
b1:d0:4f:42:f8:f1:a8:34:ed:34:08:4a:dd:71:7c:98:ff:01:
7a:f0:ac:71:30:c9:51:8f:47:f9:22:ba:ce:cc:83:89:a0:26:
92:14:fa:73:00:24:ce:50:4a:6a:6b:97:5b:eb:d1:f1:4a:77:
57:8d:96:22:c3:1a:05:51:ab:a8:0d:94:d4:6f:18:6b:73:d5:
85:1e:48:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:22:33 2026 by rpki-client