Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/3328da-aa4e-445b-9da9-d053745c2acc/1/T4lf8Omad8AX6KODKSy1xvgmESA.mft
File: T4lf8Omad8AX6KODKSy1xvgmESA.mft (raw, json)
Hash identifier: 7g/YbWqOXarvOzOE/JEdDeaQrkIs9JHe7s+/4TKro+0=
Subject key identifier: F5:8F:77:B4:23:CB:9F:98:AA:90:90:60:5F:0D:5F:09:FB:DE:7F:0E
Authority key identifier: 4F:89:5F:F0:E9:9A:77:C0:17:E8:A3:83:29:2C:B5:C6:F8:26:11:20
Certificate issuer: /CN=4f895ff0e99a77c017e8a383292cb5c6f8261120
Certificate serial: 019D2816880FFC7A5D8B5CE7DD9E4AA7D504
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T4lf8Omad8AX6KODKSy1xvgmESA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/3328da-aa4e-445b-9da9-d053745c2acc/1/T4lf8Omad8AX6KODKSy1xvgmESA.mft
Manifest number: 0DDB
Signing time: Thu 26 Mar 2026 03:00:58 +0000
Manifest this update: Thu 26 Mar 2026 03:00:58 +0000
Manifest next update: Fri 27 Mar 2026 03:00:58 +0000
Files and hashes: 1: 6dxV01X9vg2jPotO5hv9PQEuxwo.roa (hash: +esdA25t1mMRXF/ctuGaJFSpgAhjXcMWg4MEVFS8LMo=)
2: G2_PiUJpUwNaL9OFJdICG-GBzaI.roa (hash: lDduugUTdXOP9UBT5qryDM5SzsJ+d6xRkObDWeT06oc=)
3: IXCeJ_byCNVELvp9jRcWKh_bBvc.roa (hash: HLRQyauNlxqkbbZVe7bwHpiiXRRzErR+W+RnPz3utM0=)
4: T4lf8Omad8AX6KODKSy1xvgmESA.crl (hash: mZeBPgzsHO31U1ENmsjEv4V0k5DXxK94Ykcb11iAfk0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/3328da-aa4e-445b-9da9-d053745c2acc/1/T4lf8Omad8AX6KODKSy1xvgmESA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/3328da-aa4e-445b-9da9-d053745c2acc/1/T4lf8Omad8AX6KODKSy1xvgmESA.mft
rsync://rpki.ripe.net/repository/DEFAULT/T4lf8Omad8AX6KODKSy1xvgmESA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:88:0f:fc:7a:5d:8b:5c:e7:dd:9e:4a:a7:d5:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f895ff0e99a77c017e8a383292cb5c6f8261120
Validity
Not Before: Mar 26 03:00:58 2026 GMT
Not After : Mar 27 03:00:58 2026 GMT
Subject: CN=f58f77b423cb9f98aa9090605f0d5f09fbde7f0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:f4:d9:ef:c3:a3:6f:10:34:35:04:7c:cd:96:
bc:0a:0e:b2:b8:b6:11:0b:3a:24:fb:4a:26:8c:bf:
da:b9:12:03:56:c6:aa:7a:15:7e:4a:f3:b2:83:ff:
e2:65:52:f4:f6:ee:05:38:6c:74:12:33:97:7b:97:
15:71:4e:8f:ee:af:87:99:b2:82:69:ce:b6:26:1c:
08:22:4e:64:8a:b6:bb:b9:78:63:27:68:56:eb:db:
fd:70:3d:e8:93:e0:1d:c3:15:70:69:e1:19:2b:0c:
bd:29:af:92:67:94:15:50:b7:e4:22:d4:0d:3f:61:
bb:24:2b:06:36:e8:49:da:9c:ae:e9:43:f1:10:02:
91:0e:f2:5a:44:c5:93:ab:96:e2:63:bd:d3:54:5c:
ac:05:83:95:24:e4:99:87:84:02:06:58:dc:50:3f:
a1:06:c1:69:9e:be:2f:17:89:2b:23:6e:82:29:5c:
9b:4a:65:e3:75:5c:fa:41:2f:65:31:62:f8:f3:79:
bf:ca:ba:82:0f:bf:b6:a4:43:1d:da:48:0a:81:8a:
d5:0e:23:7a:1f:97:0b:79:03:ef:ec:af:b0:37:55:
eb:40:6a:4e:34:47:91:1c:3e:11:94:f8:29:21:9a:
8f:97:1f:2f:18:b6:29:dc:7c:0b:3d:d1:84:12:18:
d3:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:8F:77:B4:23:CB:9F:98:AA:90:90:60:5F:0D:5F:09:FB:DE:7F:0E
X509v3 Authority Key Identifier:
keyid:4F:89:5F:F0:E9:9A:77:C0:17:E8:A3:83:29:2C:B5:C6:F8:26:11:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T4lf8Omad8AX6KODKSy1xvgmESA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/3328da-aa4e-445b-9da9-d053745c2acc/1/T4lf8Omad8AX6KODKSy1xvgmESA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/3328da-aa4e-445b-9da9-d053745c2acc/1/T4lf8Omad8AX6KODKSy1xvgmESA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:39:96:90:ea:f5:50:73:62:32:c4:42:0b:13:92:f9:15:51:
53:59:6a:ca:69:7a:0f:42:16:80:65:01:45:06:f7:b0:a6:72:
51:4c:98:45:ff:9c:7f:cc:d9:9d:1a:53:51:52:47:94:f8:d2:
6c:b4:0a:1b:72:d0:59:9b:fa:7f:70:ec:89:ee:a5:12:dd:b5:
00:9a:be:c7:f7:0b:7f:ed:f2:9d:0a:6d:92:05:d8:6f:b4:94:
13:b9:b1:1b:c5:83:3c:7d:85:8f:d9:cc:5b:e2:46:e1:f8:76:
0a:5f:58:81:fe:68:0b:85:53:04:ed:dd:d0:a4:2f:27:e0:12:
49:7f:7b:48:a5:9d:5d:5e:45:88:98:83:b2:b7:30:2e:e0:7c:
1a:ed:dd:30:0d:6b:0b:af:7c:2a:50:80:54:f0:41:df:10:e8:
46:ee:11:37:de:b9:08:95:cc:83:76:d0:b7:f7:0a:fd:3d:ab:
3c:64:f0:4f:1c:2d:50:90:62:d2:46:c8:2e:89:da:ef:4f:25:
57:70:f8:ff:9d:32:42:97:07:88:08:ed:71:d3:30:c1:11:69:
cf:c2:76:e0:90:60:c3:17:32:e2:6b:fc:5f:f6:49:04:7f:99:
65:41:9a:20:61:64:14:76:00:35:32:aa:51:ea:10:20:98:ce:
82:0a:3d:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:03:04 2026 by rpki-client