Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/f4b609-ce5d-49f0-9136-2eca76bc7fca/1/T4zW4dX8wEW55lmcDK6hfUdoX5U.mft
File: T4zW4dX8wEW55lmcDK6hfUdoX5U.mft (raw, json)
Hash identifier: TMa5jhIwvFTxw10TmYJrJ0st4bbhLLurnKSAHCQKJGA=
Subject key identifier: A9:BE:8D:CD:3C:02:B7:73:C5:33:84:8A:6D:72:2E:A0:B7:DC:CB:03
Authority key identifier: 4F:8C:D6:E1:D5:FC:C0:45:B9:E6:59:9C:0C:AE:A1:7D:47:68:5F:95
Certificate issuer: /CN=4f8cd6e1d5fcc045b9e6599c0caea17d47685f95
Certificate serial: 019D28F30B4DA5C704BDD310008514527048
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T4zW4dX8wEW55lmcDK6hfUdoX5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/f4b609-ce5d-49f0-9136-2eca76bc7fca/1/T4zW4dX8wEW55lmcDK6hfUdoX5U.mft
Manifest number: 13C8
Signing time: Thu 26 Mar 2026 07:01:49 +0000
Manifest this update: Thu 26 Mar 2026 07:01:49 +0000
Manifest next update: Fri 27 Mar 2026 07:01:49 +0000
Files and hashes: 1: T4zW4dX8wEW55lmcDK6hfUdoX5U.crl (hash: 1Fp/czD1dIrTFpCQBF9XruwJwBAahYeg+dCxKxk1vo0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/f4b609-ce5d-49f0-9136-2eca76bc7fca/1/T4zW4dX8wEW55lmcDK6hfUdoX5U.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/f4b609-ce5d-49f0-9136-2eca76bc7fca/1/T4zW4dX8wEW55lmcDK6hfUdoX5U.mft
rsync://rpki.ripe.net/repository/DEFAULT/T4zW4dX8wEW55lmcDK6hfUdoX5U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f3:0b:4d:a5:c7:04:bd:d3:10:00:85:14:52:70:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f8cd6e1d5fcc045b9e6599c0caea17d47685f95
Validity
Not Before: Mar 26 07:01:49 2026 GMT
Not After : Mar 27 07:01:49 2026 GMT
Subject: CN=a9be8dcd3c02b773c533848a6d722ea0b7dccb03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:38:3a:db:23:81:d7:87:e9:6d:55:7f:7e:7a:
db:76:f5:bf:d9:ef:61:54:6c:aa:72:cd:d4:5e:25:
5f:b5:9c:55:bc:8e:33:e8:80:4a:12:c7:0a:0a:ec:
c2:6e:63:2b:6e:a4:df:e0:f0:e3:b9:c0:94:c0:1e:
7c:d4:77:e5:fb:b2:82:a2:84:db:a0:95:46:6a:2a:
31:37:e1:9a:d2:de:1c:01:4b:38:cd:a5:7f:50:75:
27:61:ab:ae:b7:a6:6c:25:aa:b4:d6:fa:e8:41:d3:
48:e1:ca:d3:b0:e0:37:2c:68:d3:4c:bc:2c:4a:3f:
e2:d4:d4:ab:1f:0e:5d:10:45:e7:74:ef:a4:d7:11:
62:fe:ba:cb:2d:fc:59:27:73:f8:c6:f8:33:bd:b5:
16:20:aa:69:42:fa:8d:72:b4:47:90:57:50:0d:ba:
f0:30:17:bb:df:9c:1e:be:a8:88:3f:37:79:91:ff:
42:4a:b8:b5:18:0a:5b:6c:03:f6:5d:ae:a4:bd:84:
7c:89:30:da:3a:78:22:9f:19:52:5f:47:14:f9:d4:
ca:9c:3a:84:24:13:7e:5e:ac:57:fc:0d:f1:b8:db:
40:dd:eb:34:18:f8:46:11:2d:14:69:fe:7a:9b:3d:
fc:4e:7c:48:0a:8f:f8:49:a3:e3:00:46:d9:f3:b1:
8d:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:BE:8D:CD:3C:02:B7:73:C5:33:84:8A:6D:72:2E:A0:B7:DC:CB:03
X509v3 Authority Key Identifier:
keyid:4F:8C:D6:E1:D5:FC:C0:45:B9:E6:59:9C:0C:AE:A1:7D:47:68:5F:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T4zW4dX8wEW55lmcDK6hfUdoX5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/f4b609-ce5d-49f0-9136-2eca76bc7fca/1/T4zW4dX8wEW55lmcDK6hfUdoX5U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/f4b609-ce5d-49f0-9136-2eca76bc7fca/1/T4zW4dX8wEW55lmcDK6hfUdoX5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:cf:41:51:98:02:30:22:53:52:d8:a3:d7:fc:7b:1c:e7:40:
4d:30:5b:c5:98:45:52:1e:36:c7:de:96:f4:fb:39:3c:c0:c4:
67:7a:b1:30:ba:e8:b9:7e:7c:45:d2:79:c1:23:92:b0:2a:52:
e3:5e:7c:4d:40:57:1a:be:2a:24:1c:de:87:e6:ca:6c:5a:2a:
fe:80:dd:46:4a:fd:5b:80:ec:d9:b6:36:a5:75:b5:fa:c9:dc:
f6:15:ed:11:cf:7e:3f:9c:19:fa:f4:21:ec:a8:18:5f:42:11:
78:c4:56:83:fc:5a:7d:e0:51:82:61:4b:b1:e1:56:2c:b1:7b:
82:d7:7f:ac:7e:5e:f4:48:21:41:5e:e8:41:97:4b:ae:a8:f0:
f3:5e:a0:8d:02:70:67:c5:6f:c7:e8:0a:e7:ad:f6:95:63:fc:
bc:d5:49:3d:be:30:27:29:6a:47:1c:23:d0:93:c3:6c:39:91:
7b:b0:ec:76:62:5e:a7:20:5b:8d:38:bf:8c:56:75:4b:e6:5d:
89:76:28:80:ff:06:3e:73:b2:4e:5c:bd:31:8b:81:c7:2e:99:
a3:63:e1:e5:54:fb:ef:ad:d4:7f:7b:90:94:3c:15:12:2c:a1:
55:29:c1:07:2a:23:92:5d:39:f3:f8:67:69:c4:27:2f:2a:8d:
68:d4:ea:53
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0o8wtNpccEvdMQAIUUUnBIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmOGNkNmUxZDVmY2MwNDViOWU2NTk5YzBjYWVhMTdkNDc2
ODVmOTUwHhcNMjYwMzI2MDcwMTQ5WhcNMjYwMzI3MDcwMTQ5WjAzMTEwLwYDVQQD
EyhhOWJlOGRjZDNjMDJiNzczYzUzMzg0OGE2ZDcyMmVhMGI3ZGNjYjAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxDg62yOB14fpbVV/fnrbdvW/2e9h
VGyqcs3UXiVftZxVvI4z6IBKEscKCuzCbmMrbqTf4PDjucCUwB581Hfl+7KCooTb
oJVGaioxN+Ga0t4cAUs4zaV/UHUnYauut6ZsJaq01vroQdNI4crTsOA3LGjTTLws
Sj/i1NSrHw5dEEXndO+k1xFi/rrLLfxZJ3P4xvgzvbUWIKppQvqNcrRHkFdQDbrw
MBe735wevqiIPzd5kf9CSri1GApbbAP2Xa6kvYR8iTDaOnginxlSX0cU+dTKnDqE
JBN+XqxX/A3xuNtA3es0GPhGES0Uaf56mz38TnxICo/4SaPjAEbZ87GN/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKm+jc08ArdzxTOEim1yLqC33MsDMB8GA1UdIwQY
MBaAFE+M1uHV/MBFueZZnAyuoX1HaF+VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDR6VzRkWDh3RVc1NWxtY0RLNmhmVWRvWDVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS9mNGI2MDktY2U1ZC00OWYwLTkxMzYt
MmVjYTc2YmM3ZmNhLzEvVDR6VzRkWDh3RVc1NWxtY0RLNmhmVWRvWDVVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOS9mNGI2MDktY2U1ZC00OWYwLTkxMzYtMmVjYTc2YmM3ZmNh
LzEvVDR6VzRkWDh3RVc1NWxtY0RLNmhmVWRvWDVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbM9BUZgC
MCJTUtij1/x7HOdATTBbxZhFUh42x96W9Ps5PMDEZ3qxMLrouX58RdJ5wSOSsCpS
4158TUBXGr4qJBzeh+bKbFoq/oDdRkr9W4Ds2bY2pXW1+snc9hXtEc9+P5wZ+vQh
7KgYX0IReMRWg/xafeBRgmFLseFWLLF7gtd/rH5e9EghQV7oQZdLrqjw816gjQJw
Z8Vvx+gK5632lWP8vNVJPb4wJylqRxwj0JPDbDmRe7DsdmJepyBbjTi/jFZ1S+Zd
iXYogP8GPnOyTly9MYuBxy6Zo2Ph5VT7763Uf3uQlDwVEiyhVSnBByojkl058/hn
acQnLyqNaNTqUw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 11:11:54 2026 by rpki-client