Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/2e6613-4332-4c19-addf-dedaf79356ce/1/t4OAtB43tXV9PU4u7N8G2TCnC50.mft
File: t4OAtB43tXV9PU4u7N8G2TCnC50.mft (raw, json)
Hash identifier: RXdLqsZxJNwgRrdTTTyqTDtIPPEP+7UHcCRiU/dyI3g=
Subject key identifier: 9D:21:74:E6:44:4F:17:3F:C8:6E:2B:94:4B:35:79:25:95:91:6E:99
Authority key identifier: B7:83:80:B4:1E:37:B5:75:7D:3D:4E:2E:EC:DF:06:D9:30:A7:0B:9D
Certificate issuer: /CN=b78380b41e37b5757d3d4e2eecdf06d930a70b9d
Certificate serial: 019D270434D116EFB3FA41B7A1F9C43F1F1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t4OAtB43tXV9PU4u7N8G2TCnC50.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/2e6613-4332-4c19-addf-dedaf79356ce/1/t4OAtB43tXV9PU4u7N8G2TCnC50.mft
Manifest number: 188D
Signing time: Wed 25 Mar 2026 22:01:20 +0000
Manifest this update: Wed 25 Mar 2026 22:01:20 +0000
Manifest next update: Thu 26 Mar 2026 22:01:20 +0000
Files and hashes: 1: 7AN2y--6BWBDlHsQXRo-Ms_T9_E.roa (hash: 5G/O/em7a1btfI5sEj4BLe5JKY4pGeRIT+C2NR1XoD4=)
2: t4OAtB43tXV9PU4u7N8G2TCnC50.crl (hash: JeBitOg2eV8pL0wSUILKLzRVmLkLv18oKYGx6KRGhG8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/2e6613-4332-4c19-addf-dedaf79356ce/1/t4OAtB43tXV9PU4u7N8G2TCnC50.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/2e6613-4332-4c19-addf-dedaf79356ce/1/t4OAtB43tXV9PU4u7N8G2TCnC50.mft
rsync://rpki.ripe.net/repository/DEFAULT/t4OAtB43tXV9PU4u7N8G2TCnC50.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:34:d1:16:ef:b3:fa:41:b7:a1:f9:c4:3f:1f:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b78380b41e37b5757d3d4e2eecdf06d930a70b9d
Validity
Not Before: Mar 25 22:01:20 2026 GMT
Not After : Mar 26 22:01:20 2026 GMT
Subject: CN=9d2174e6444f173fc86e2b944b35792595916e99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:83:8a:fa:10:a3:9a:a9:9b:d7:8e:62:a8:77:
4f:f0:15:5a:2e:bc:cd:b5:37:7d:26:04:ca:c6:d9:
ef:d5:02:0f:b8:46:88:ca:70:b2:61:05:05:ff:60:
92:32:fb:03:2c:49:10:93:6d:a0:b5:a6:b4:2a:b1:
7f:7f:ac:92:f6:3f:08:f3:b9:f8:c8:d4:64:2b:c5:
d1:63:2b:a7:b9:2b:e0:98:da:37:9b:65:bd:b3:06:
f8:76:f7:d2:7f:b6:cd:95:da:ed:7a:22:2a:5e:10:
91:dd:16:9c:13:e2:97:dd:67:84:fa:d0:f2:87:14:
6d:52:7e:5b:71:9a:48:7b:54:2a:7b:1b:b1:11:84:
d0:48:9e:41:44:85:d3:2a:74:ba:38:08:45:17:b9:
c4:0b:1c:f1:8f:26:14:8e:83:bf:8d:ef:20:a2:57:
cf:c7:95:12:93:9e:f5:05:7f:ba:c5:68:aa:0f:45:
42:80:72:3c:b1:d3:d9:dc:b4:65:24:6d:a7:70:51:
e1:f3:08:86:2d:62:77:ac:08:f8:0e:15:69:55:74:
39:16:56:83:f4:fb:2b:c2:c1:9e:55:32:a4:1e:32:
35:3b:f3:4d:2f:90:cc:84:ef:8c:26:59:51:01:c5:
03:c7:e7:5f:95:df:0d:27:1c:46:71:93:fc:54:b9:
72:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:21:74:E6:44:4F:17:3F:C8:6E:2B:94:4B:35:79:25:95:91:6E:99
X509v3 Authority Key Identifier:
keyid:B7:83:80:B4:1E:37:B5:75:7D:3D:4E:2E:EC:DF:06:D9:30:A7:0B:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t4OAtB43tXV9PU4u7N8G2TCnC50.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/2e6613-4332-4c19-addf-dedaf79356ce/1/t4OAtB43tXV9PU4u7N8G2TCnC50.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/2e6613-4332-4c19-addf-dedaf79356ce/1/t4OAtB43tXV9PU4u7N8G2TCnC50.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:95:cd:27:53:84:92:eb:37:02:a2:36:bb:7b:e1:9f:f3:ac:
43:67:df:15:59:8e:aa:0c:4d:84:f5:54:64:f8:bf:06:2a:ca:
b5:d0:20:01:1a:c8:66:80:1b:64:6c:04:3f:e7:45:9b:56:77:
8e:c9:62:6c:ac:0a:b9:a1:ee:ac:09:91:98:18:e8:98:a2:ce:
7c:38:34:a4:a5:83:10:dd:04:ae:e9:c3:cf:8b:ed:c5:71:c5:
da:e0:7e:7e:a8:81:1d:7b:45:8c:82:fc:2d:81:9c:18:77:10:
b0:e9:9b:30:0f:16:8d:52:3e:d0:1b:6c:2c:c3:80:ef:27:d7:
b0:c6:65:80:f4:8e:a3:d1:c5:97:dc:bb:31:ae:ee:96:1c:c1:
4f:bc:e3:38:e6:06:a7:b2:2f:00:9e:4a:9f:0e:1d:f2:f2:22:
26:f3:b9:d7:d6:c6:d5:3a:ea:05:9b:7b:9a:e1:04:c8:41:fd:
71:21:7d:0d:8b:fa:cc:53:7c:05:b1:49:e6:f5:d6:b2:03:78:
9a:13:4e:cb:0c:a0:4b:ef:cb:50:19:9c:27:c5:74:6e:1b:c6:
bb:ac:d3:9b:33:ec:9d:f6:32:07:99:c0:98:11:4f:15:50:08:
71:50:19:a4:bd:78:6d:25:88:c3:97:50:eb:9f:5a:fd:ce:dd:
89:6c:a0:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:59:17 2026 by rpki-client