Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/3328da-aa4e-445b-9da9-d053745c2acc/1/T4lf8Omad8AX6KODKSy1xvgmESA.mft
File: T4lf8Omad8AX6KODKSy1xvgmESA.mft (raw, json)
Hash identifier: muWRHdFb41jt25OuhqC/tdnLsYJKzVAheuMFPHTmSOs=
Subject key identifier: 38:00:03:69:84:1D:55:03:BD:72:27:88:66:7A:BA:EB:1A:72:85:E9
Authority key identifier: 4F:89:5F:F0:E9:9A:77:C0:17:E8:A3:83:29:2C:B5:C6:F8:26:11:20
Certificate issuer: /CN=4f895ff0e99a77c017e8a383292cb5c6f8261120
Certificate serial: 019F90C7817565B7F30F350D6B249D709758
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T4lf8Omad8AX6KODKSy1xvgmESA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/3328da-aa4e-445b-9da9-d053745c2acc/1/T4lf8Omad8AX6KODKSy1xvgmESA.mft
Manifest number: 0F1B
Signing time: Thu 23 Jul 2026 21:00:21 +0000
Manifest this update: Thu 23 Jul 2026 21:00:21 +0000
Manifest next update: Fri 24 Jul 2026 21:00:21 +0000
Files and hashes: 1: 1tI6G_uipCGYM7G28gO9zYS_vd0.roa (hash: jQHm0OXPGE8VAsUUw4pohYSxJ7gjNdv50GcJUwt6Vgs=)
2: 6dxV01X9vg2jPotO5hv9PQEuxwo.roa (hash: +esdA25t1mMRXF/ctuGaJFSpgAhjXcMWg4MEVFS8LMo=)
3: IXCeJ_byCNVELvp9jRcWKh_bBvc.roa (hash: HLRQyauNlxqkbbZVe7bwHpiiXRRzErR+W+RnPz3utM0=)
4: T4lf8Omad8AX6KODKSy1xvgmESA.crl (hash: UgtulHvqXLnfJa/ea6MZMIalt0fXqWhXM+ehmgdZkHk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/3328da-aa4e-445b-9da9-d053745c2acc/1/T4lf8Omad8AX6KODKSy1xvgmESA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/3328da-aa4e-445b-9da9-d053745c2acc/1/T4lf8Omad8AX6KODKSy1xvgmESA.mft
rsync://rpki.ripe.net/repository/DEFAULT/T4lf8Omad8AX6KODKSy1xvgmESA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:c7:81:75:65:b7:f3:0f:35:0d:6b:24:9d:70:97:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f895ff0e99a77c017e8a383292cb5c6f8261120
Validity
Not Before: Jul 23 21:00:21 2026 GMT
Not After : Jul 24 21:00:21 2026 GMT
Subject: CN=38000369841d5503bd722788667abaeb1a7285e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:36:1e:b8:eb:c4:44:b3:4e:68:80:1d:72:2f:
c8:11:54:32:68:e1:bd:b1:94:6b:37:e0:a9:57:b3:
19:af:f0:c9:37:14:d1:34:aa:df:22:32:b4:85:ff:
9f:9d:c2:d0:ae:a3:2a:95:f3:85:5a:89:9c:9e:4c:
96:79:6b:f5:d6:5f:ac:08:90:05:44:93:48:15:d4:
c8:7f:61:a1:cd:3d:22:d1:f4:05:6c:b0:c0:6a:42:
ba:41:4d:eb:35:52:35:7d:37:7c:2d:02:cf:38:5f:
7d:3f:a8:8e:38:56:f1:69:fc:c4:cc:50:3c:91:a9:
25:79:1a:90:cc:43:2b:ad:41:3c:a6:4e:23:9f:00:
62:ea:33:7d:d7:f9:3c:c2:07:50:bb:53:8f:a1:eb:
02:23:f8:a0:24:3c:db:1a:8e:d8:0f:b2:a2:bd:4f:
38:b1:08:79:12:69:02:2a:ef:5c:3e:23:5b:65:23:
ea:57:1b:58:2f:96:93:e6:b6:d2:fe:93:59:d2:b2:
00:01:99:79:cf:90:6f:95:04:98:8a:88:ba:56:9e:
12:86:05:66:87:0f:ee:8e:8b:c1:2f:b6:bf:d0:91:
4d:1b:dc:a6:da:59:60:4c:64:f2:af:e1:b2:06:79:
90:af:18:cd:c5:7b:e1:08:f1:13:5f:fe:59:63:70:
d0:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:00:03:69:84:1D:55:03:BD:72:27:88:66:7A:BA:EB:1A:72:85:E9
X509v3 Authority Key Identifier:
keyid:4F:89:5F:F0:E9:9A:77:C0:17:E8:A3:83:29:2C:B5:C6:F8:26:11:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T4lf8Omad8AX6KODKSy1xvgmESA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/3328da-aa4e-445b-9da9-d053745c2acc/1/T4lf8Omad8AX6KODKSy1xvgmESA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/3328da-aa4e-445b-9da9-d053745c2acc/1/T4lf8Omad8AX6KODKSy1xvgmESA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:6e:4c:ec:59:c2:c2:5f:93:a6:05:9d:f5:92:32:a2:04:74:
ca:5e:3f:4e:ab:32:eb:c1:f5:ed:7c:13:82:29:83:7e:0f:53:
b3:69:c2:8b:cf:0f:eb:bd:2c:1b:87:03:65:5b:db:af:2e:3d:
d8:1a:e0:c0:8d:b3:da:68:23:31:4a:7a:d4:8f:0c:12:43:f7:
4e:75:7f:ba:9f:08:a4:5f:56:b4:1d:af:9f:c3:87:91:81:61:
ae:43:73:29:a7:0f:d7:43:84:39:2a:8a:a7:21:3b:34:8b:92:
3d:c6:75:ff:83:82:36:ea:2f:b4:b6:85:65:6f:3e:9d:db:52:
b1:34:21:ae:54:ac:fa:37:67:e3:33:77:05:42:d8:63:41:49:
72:7d:05:54:90:ac:10:60:bc:e3:e3:76:03:96:60:4d:23:8a:
87:58:43:5c:e1:a3:1c:94:90:d1:65:27:6b:28:0c:57:25:a9:
04:c7:f2:7f:0a:73:94:22:c3:0a:99:69:c9:9b:09:63:d2:1f:
ca:2c:99:2b:76:5c:a4:00:b0:15:47:5e:7c:54:ea:72:e8:c1:
32:f0:70:27:bc:6b:b1:9f:7f:90:4c:0b:c5:4b:54:b8:7b:d7:
d8:b4:2c:e3:a5:00:35:3b:28:d4:63:0d:e0:07:b3:38:97:69:
41:41:b6:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:42:26 2026 by rpki-client