Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e9/3328da-aa4e-445b-9da9-d053745c2acc/1/T4lf8Omad8AX6KODKSy1xvgmESA.mft
File: T4lf8Omad8AX6KODKSy1xvgmESA.mft (raw, json)
Hash identifier: zdEw7Nl/rWAK3iN2FjI0CgN0aBD+Us+24Lh7BUWq/6Y=
Subject key identifier: 65:0E:B3:37:5E:80:62:F9:ED:DC:C1:00:8D:F5:85:0A:1E:35:A7:BD
Authority key identifier: 4F:89:5F:F0:E9:9A:77:C0:17:E8:A3:83:29:2C:B5:C6:F8:26:11:20
Certificate issuer: /CN=4f895ff0e99a77c017e8a383292cb5c6f8261120
Certificate serial: 01A0CB909A6F3CB1C65E45B74811F2357CA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T4lf8Omad8AX6KODKSy1xvgmESA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/3328da-aa4e-445b-9da9-d053745c2acc/1/T4lf8Omad8AX6KODKSy1xvgmESA.mft
Manifest number: 0FBE
Signing time: Wed 23 Sep 2026 00:00:46 +0000
Manifest this update: Wed 23 Sep 2026 00:00:46 +0000
Manifest next update: Thu 24 Sep 2026 00:00:46 +0000
Files and hashes: 1: 1tI6G_uipCGYM7G28gO9zYS_vd0.roa (hash: jQHm0OXPGE8VAsUUw4pohYSxJ7gjNdv50GcJUwt6Vgs=)
2: 6dxV01X9vg2jPotO5hv9PQEuxwo.roa (hash: +esdA25t1mMRXF/ctuGaJFSpgAhjXcMWg4MEVFS8LMo=)
3: IXCeJ_byCNVELvp9jRcWKh_bBvc.roa (hash: HLRQyauNlxqkbbZVe7bwHpiiXRRzErR+W+RnPz3utM0=)
4: T4lf8Omad8AX6KODKSy1xvgmESA.crl (hash: J1y/KxMlcx8i6lCd0EEM0G9PUqlDUIQnv5PwJ/ll7C8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/3328da-aa4e-445b-9da9-d053745c2acc/1/T4lf8Omad8AX6KODKSy1xvgmESA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/3328da-aa4e-445b-9da9-d053745c2acc/1/T4lf8Omad8AX6KODKSy1xvgmESA.mft
rsync://rpki.ripe.net/repository/DEFAULT/T4lf8Omad8AX6KODKSy1xvgmESA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 22:31:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cb:90:9a:6f:3c:b1:c6:5e:45:b7:48:11:f2:35:7c:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f895ff0e99a77c017e8a383292cb5c6f8261120
Validity
Not Before: Sep 23 00:00:46 2026 GMT
Not After : Sep 24 00:00:46 2026 GMT
Subject: CN=650eb3375e8062f9eddcc1008df5850a1e35a7bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:c8:3e:47:f9:41:e1:84:42:40:7d:1f:21:57:
84:47:1d:4d:da:6a:48:39:88:72:76:09:fb:1f:09:
04:fe:6d:d3:17:be:c1:2c:3a:95:f7:cb:4c:f1:8f:
2a:77:19:d9:a8:83:35:a8:f6:86:da:17:25:e6:ea:
f0:bb:eb:ef:4f:16:ed:ac:2e:8a:db:bc:34:1e:8f:
e9:fb:33:29:a1:23:a2:54:88:2c:02:5a:b6:c4:87:
ef:67:8e:f1:bc:4b:7d:21:16:6b:5a:58:3b:14:8f:
8b:40:63:57:5f:93:77:17:bd:21:6e:f7:1b:17:17:
e1:63:4a:c3:cc:f7:bc:f4:5b:df:78:57:08:df:cf:
11:65:d4:ea:85:b9:0a:a2:4f:3d:b6:bf:2d:a9:f0:
21:b0:5e:ec:8c:6c:ad:12:bd:04:d2:9f:7e:00:8d:
e7:3e:65:71:74:7d:1f:72:f2:f3:fa:6c:f8:4c:78:
ae:83:7d:4b:76:0c:fc:5b:0c:ee:cd:06:4f:17:07:
77:30:f3:08:2d:1e:39:26:7f:ab:fd:15:e3:ac:b5:
84:80:3d:61:97:fa:e8:6d:de:60:ea:91:c3:8f:97:
3a:9c:bf:7a:21:e3:30:c7:0f:7d:1b:40:0f:48:c7:
07:43:f7:27:52:d5:16:f6:c7:ee:72:9e:a8:21:3a:
0f:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:0E:B3:37:5E:80:62:F9:ED:DC:C1:00:8D:F5:85:0A:1E:35:A7:BD
X509v3 Authority Key Identifier:
keyid:4F:89:5F:F0:E9:9A:77:C0:17:E8:A3:83:29:2C:B5:C6:F8:26:11:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T4lf8Omad8AX6KODKSy1xvgmESA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/3328da-aa4e-445b-9da9-d053745c2acc/1/T4lf8Omad8AX6KODKSy1xvgmESA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/3328da-aa4e-445b-9da9-d053745c2acc/1/T4lf8Omad8AX6KODKSy1xvgmESA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:7b:4a:1f:b8:37:db:38:93:9a:f2:d5:00:8f:90:9b:a4:6c:
51:a2:a9:30:5f:0c:f6:0f:fa:e1:db:6f:e0:0b:31:cf:af:86:
7b:dd:fe:64:29:4c:20:a3:85:c7:3b:be:1c:eb:c0:60:f7:ba:
f6:aa:26:6a:3d:a9:47:e2:75:f9:63:2b:86:6e:77:cf:5a:d7:
4d:2a:12:62:af:7d:eb:c3:86:46:c5:d1:07:38:61:01:38:0b:
30:df:41:0e:e0:ab:ce:06:16:8a:73:9b:eb:12:6e:ca:d6:1d:
9c:0d:d4:01:af:f8:ae:67:ea:9f:6f:58:f0:21:12:c1:44:98:
fc:69:7e:37:6e:5e:14:e6:39:45:be:05:f0:2e:05:dc:be:c1:
62:24:60:15:00:c5:95:b9:37:3b:b7:7d:5d:3b:ef:83:34:90:
3f:d4:e0:14:f3:40:f6:62:69:f0:47:c1:a4:ef:f1:0f:e9:2e:
82:73:a7:62:3d:f2:64:fe:07:fb:fb:7d:e3:c3:fd:47:a5:f5:
94:ed:8c:38:8a:b9:29:d7:25:10:c0:fa:c4:75:a6:54:a7:ab:
8c:f9:4b:b3:65:03:16:ab:9b:ea:74:78:77:3f:9c:1e:2c:65:
5c:85:3b:5f:81:60:98:1d:ec:ca:1e:8d:f1:d0:3e:c4:ab:dd:
7b:30:41:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 09:08:54 2026 by rpki-client