Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/4445d7-ad2d-4445-8dde-2ebd6457ef1e/1/T8muTFD6CwOCrdpfPH30GPeSWGQ.mft
File: T8muTFD6CwOCrdpfPH30GPeSWGQ.mft (raw, json)
Hash identifier: 44PGJL8lu+xrhGdQQGWCqXsW7oSJCzzTdsSEZY7WqqQ=
Subject key identifier: 86:5A:FD:0B:B9:2F:D9:69:13:DA:26:DF:D5:1B:A4:35:86:99:1A:A6
Authority key identifier: 4F:C9:AE:4C:50:FA:0B:03:82:AD:DA:5F:3C:7D:F4:18:F7:92:58:64
Certificate issuer: /CN=4fc9ae4c50fa0b0382adda5f3c7df418f7925864
Certificate serial: 019D2BBCD7898F0727BAF74F1910BB5732BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8muTFD6CwOCrdpfPH30GPeSWGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/4445d7-ad2d-4445-8dde-2ebd6457ef1e/1/T8muTFD6CwOCrdpfPH30GPeSWGQ.mft
Manifest number: 0215
Signing time: Thu 26 Mar 2026 20:01:29 +0000
Manifest this update: Thu 26 Mar 2026 20:01:29 +0000
Manifest next update: Fri 27 Mar 2026 20:01:29 +0000
Files and hashes: 1: KQelvFl-0S2BnhTjmwfeewzy0K0.roa (hash: eHfnP6Dgwq60SUqBjtwY/17CbS0N6nRtKkrY1JJPGsI=)
2: T8muTFD6CwOCrdpfPH30GPeSWGQ.crl (hash: ziIDcl9wXVvNUQrDuBa6Ws4/fuF53n3k86F5IGA/hKo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/4445d7-ad2d-4445-8dde-2ebd6457ef1e/1/T8muTFD6CwOCrdpfPH30GPeSWGQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/4445d7-ad2d-4445-8dde-2ebd6457ef1e/1/T8muTFD6CwOCrdpfPH30GPeSWGQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8muTFD6CwOCrdpfPH30GPeSWGQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:bc:d7:89:8f:07:27:ba:f7:4f:19:10:bb:57:32:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc9ae4c50fa0b0382adda5f3c7df418f7925864
Validity
Not Before: Mar 26 20:01:29 2026 GMT
Not After : Mar 27 20:01:29 2026 GMT
Subject: CN=865afd0bb92fd96913da26dfd51ba43586991aa6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:70:fc:41:ff:00:57:ff:c6:00:db:7f:a8:14:
ca:cd:f6:7b:56:b1:a0:05:d0:44:3f:b6:54:fd:38:
ec:33:50:1b:f3:bf:7b:75:34:f6:09:cb:dc:27:45:
71:2e:8b:d6:c8:67:3b:e0:de:63:16:3e:9a:e3:e1:
c9:3a:82:41:ca:33:3b:c6:fb:da:1c:29:e3:a0:26:
bd:24:4f:ce:98:bb:45:d3:45:f2:ef:f1:9c:64:41:
43:eb:35:6c:71:e1:6e:3a:50:46:28:f8:b9:62:b0:
e5:42:94:30:c5:29:bc:03:92:1f:6d:6d:53:60:6a:
07:e6:a1:b9:8b:df:aa:c2:46:1f:18:fa:eb:3c:95:
76:6e:59:29:da:02:48:55:c2:02:52:a8:e7:9b:88:
4c:6c:2d:f7:b7:d9:43:df:81:12:74:7b:fa:5b:ad:
a0:4c:67:54:20:79:e2:00:d3:28:35:f0:fd:a4:bd:
11:fe:52:53:59:bd:9a:3e:83:90:17:99:42:ba:23:
16:e7:c8:a4:36:04:66:eb:7f:c9:36:e8:30:0a:30:
02:e3:80:4e:a7:59:af:ff:02:10:89:c8:3b:93:4e:
07:f9:5a:ea:93:6e:52:e7:01:cd:57:8f:2f:d9:3c:
ed:3e:f1:86:cc:f0:fe:ca:29:ea:c1:64:f8:0d:74:
fd:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:5A:FD:0B:B9:2F:D9:69:13:DA:26:DF:D5:1B:A4:35:86:99:1A:A6
X509v3 Authority Key Identifier:
keyid:4F:C9:AE:4C:50:FA:0B:03:82:AD:DA:5F:3C:7D:F4:18:F7:92:58:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8muTFD6CwOCrdpfPH30GPeSWGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/4445d7-ad2d-4445-8dde-2ebd6457ef1e/1/T8muTFD6CwOCrdpfPH30GPeSWGQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/4445d7-ad2d-4445-8dde-2ebd6457ef1e/1/T8muTFD6CwOCrdpfPH30GPeSWGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:41:22:27:23:ee:aa:69:e4:4d:de:21:c9:b2:e1:78:1e:d4:
f3:e2:0e:ea:fb:13:54:8a:5d:2f:75:61:de:f0:9f:94:9a:62:
f8:ff:49:00:1e:89:0b:e9:10:fa:c8:77:a2:ba:d4:a5:27:0f:
fb:63:22:a6:f7:38:cb:be:c6:d0:0e:5f:08:5d:d0:4a:96:18:
19:20:61:c0:b7:1d:7c:26:c3:a1:c1:1c:0d:0e:f0:32:11:89:
8d:aa:32:a9:93:fb:4e:06:84:fb:34:47:73:49:8a:52:8e:c0:
f7:c0:a9:41:9e:eb:c7:35:c8:83:b7:19:d0:3e:35:a6:a9:7d:
08:54:f4:57:cd:f1:b4:79:95:d8:11:0b:d4:54:1e:13:6c:ad:
20:37:da:d9:a1:6c:f2:9c:47:23:84:1a:59:b3:64:06:d9:0f:
75:e6:de:1b:6a:cd:6a:25:45:97:13:6d:6c:6c:cf:c7:2b:c1:
41:f5:04:55:5e:db:40:1a:32:bc:97:b3:f2:a1:2b:75:6c:ef:
7f:76:32:81:29:4d:50:ef:ff:7f:30:cb:ea:35:3e:5b:be:27:
ca:a4:55:7a:e4:b6:5f:30:d6:30:e5:da:82:af:d6:53:59:ec:
48:be:0d:78:2f:3b:ac:1d:88:0c:d4:19:7d:36:77:2a:2c:43:
3f:ec:00:b3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0rvNeJjwcnuvdPGRC7VzK6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmYzlhZTRjNTBmYTBiMDM4MmFkZGE1ZjNjN2RmNDE4Zjc5
MjU4NjQwHhcNMjYwMzI2MjAwMTI5WhcNMjYwMzI3MjAwMTI5WjAzMTEwLwYDVQQD
Eyg4NjVhZmQwYmI5MmZkOTY5MTNkYTI2ZGZkNTFiYTQzNTg2OTkxYWE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwnD8Qf8AV//GANt/qBTKzfZ7VrGg
BdBEP7ZU/TjsM1Ab8797dTT2CcvcJ0VxLovWyGc74N5jFj6a4+HJOoJByjM7xvva
HCnjoCa9JE/OmLtF00Xy7/GcZEFD6zVsceFuOlBGKPi5YrDlQpQwxSm8A5IfbW1T
YGoH5qG5i9+qwkYfGPrrPJV2blkp2gJIVcICUqjnm4hMbC33t9lD34ESdHv6W62g
TGdUIHniANMoNfD9pL0R/lJTWb2aPoOQF5lCuiMW58ikNgRm63/JNugwCjAC44BO
p1mv/wIQicg7k04H+Vrqk25S5wHNV48v2TztPvGGzPD+yinqwWT4DXT9sQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIZa/Qu5L9lpE9om39UbpDWGmRqmMB8GA1UdIwQY
MBaAFE/JrkxQ+gsDgq3aXzx99Bj3klhkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDhtdVRGRDZDd09DcmRwZlBIMzBHUGVTV0dRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy80NDQ1ZDctYWQyZC00NDQ1LThkZGUt
MmViZDY0NTdlZjFlLzEvVDhtdVRGRDZDd09DcmRwZlBIMzBHUGVTV0dRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy80NDQ1ZDctYWQyZC00NDQ1LThkZGUtMmViZDY0NTdlZjFl
LzEvVDhtdVRGRDZDd09DcmRwZlBIMzBHUGVTV0dRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE0EiJyPu
qmnkTd4hybLheB7U8+IO6vsTVIpdL3Vh3vCflJpi+P9JAB6JC+kQ+sh3orrUpScP
+2Mipvc4y77G0A5fCF3QSpYYGSBhwLcdfCbDocEcDQ7wMhGJjaoyqZP7TgaE+zRH
c0mKUo7A98CpQZ7rxzXIg7cZ0D41pql9CFT0V83xtHmV2BEL1FQeE2ytIDfa2aFs
8pxHI4QaWbNkBtkPdebeG2rNaiVFlxNtbGzPxyvBQfUEVV7bQBoyvJez8qErdWzv
f3YygSlNUO//fzDL6jU+W74nyqRVeuS2XzDWMOXagq/WU1nsSL4NeC87rB2IDNQZ
fTZ3KixDP+wAsw==
-----END CERTIFICATE-----
Generated at Fri Mar 27 01:49:25 2026 by rpki-client