Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/4445d7-ad2d-4445-8dde-2ebd6457ef1e/1/T8muTFD6CwOCrdpfPH30GPeSWGQ.mft
File: T8muTFD6CwOCrdpfPH30GPeSWGQ.mft (raw, json)
Hash identifier: Y+0poHyGbK7qsntYmLLyCZUN9ogXeIdX/Y3q3yj5e8o=
Subject key identifier: 07:4D:33:95:83:C3:E2:81:58:BA:B7:CF:DD:96:0E:A1:06:43:C8:83
Authority key identifier: 4F:C9:AE:4C:50:FA:0B:03:82:AD:DA:5F:3C:7D:F4:18:F7:92:58:64
Certificate issuer: /CN=4fc9ae4c50fa0b0382adda5f3c7df418f7925864
Certificate serial: 019D29CED3B45907AB97C80A1C688F4913CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8muTFD6CwOCrdpfPH30GPeSWGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/4445d7-ad2d-4445-8dde-2ebd6457ef1e/1/T8muTFD6CwOCrdpfPH30GPeSWGQ.mft
Manifest number: 0214
Signing time: Thu 26 Mar 2026 11:01:53 +0000
Manifest this update: Thu 26 Mar 2026 11:01:53 +0000
Manifest next update: Fri 27 Mar 2026 11:01:53 +0000
Files and hashes: 1: KQelvFl-0S2BnhTjmwfeewzy0K0.roa (hash: eHfnP6Dgwq60SUqBjtwY/17CbS0N6nRtKkrY1JJPGsI=)
2: T8muTFD6CwOCrdpfPH30GPeSWGQ.crl (hash: QyXd5FWk0+KNmY75BF5i3qW251gikp/cAqPn09ciDEw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/4445d7-ad2d-4445-8dde-2ebd6457ef1e/1/T8muTFD6CwOCrdpfPH30GPeSWGQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/4445d7-ad2d-4445-8dde-2ebd6457ef1e/1/T8muTFD6CwOCrdpfPH30GPeSWGQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8muTFD6CwOCrdpfPH30GPeSWGQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 11:01:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:ce:d3:b4:59:07:ab:97:c8:0a:1c:68:8f:49:13:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc9ae4c50fa0b0382adda5f3c7df418f7925864
Validity
Not Before: Mar 26 11:01:53 2026 GMT
Not After : Mar 27 11:01:53 2026 GMT
Subject: CN=074d339583c3e28158bab7cfdd960ea10643c883
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:9a:8c:bc:d0:fe:c9:58:a5:ec:93:fd:94:d7:
5a:42:be:36:19:60:e6:1c:e8:a5:2c:50:52:46:86:
b5:98:75:80:51:f4:2c:40:d6:93:02:a2:7a:df:87:
e8:32:61:75:02:df:6a:26:2a:e0:10:d4:6a:72:c5:
60:69:89:13:01:b0:e4:a5:d4:42:83:ce:84:b1:fd:
c1:bb:73:f2:d3:22:f9:c6:0a:30:80:1c:83:d7:d0:
f8:44:da:8b:d4:ad:34:d7:8c:9d:b3:26:14:ae:5f:
1f:27:f8:f0:5a:d0:51:14:be:24:4e:be:77:a2:ca:
1a:b6:bf:ee:42:04:41:bb:00:ba:ff:ca:7b:98:e4:
0b:f9:11:ec:d5:45:80:17:b6:aa:41:90:87:fa:6e:
f2:24:0b:2f:3d:6e:29:93:94:a0:6d:ab:f5:39:a2:
54:a7:ba:e5:56:bb:a0:d6:c7:56:dc:8c:7f:6e:5d:
46:e6:2a:45:14:f2:98:48:21:bd:7c:f7:f8:97:cb:
26:51:3a:18:f2:05:a2:93:70:b8:01:9f:22:f6:39:
e7:06:56:4f:1a:98:2d:fb:8b:c2:9a:f4:d5:a9:d7:
d7:22:bd:78:c6:a6:3f:ba:65:99:b0:cc:66:16:21:
4a:15:f2:cb:0a:7f:c9:7c:d9:7c:5f:1f:2f:e5:ef:
94:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:4D:33:95:83:C3:E2:81:58:BA:B7:CF:DD:96:0E:A1:06:43:C8:83
X509v3 Authority Key Identifier:
keyid:4F:C9:AE:4C:50:FA:0B:03:82:AD:DA:5F:3C:7D:F4:18:F7:92:58:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8muTFD6CwOCrdpfPH30GPeSWGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/4445d7-ad2d-4445-8dde-2ebd6457ef1e/1/T8muTFD6CwOCrdpfPH30GPeSWGQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/4445d7-ad2d-4445-8dde-2ebd6457ef1e/1/T8muTFD6CwOCrdpfPH30GPeSWGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:da:b2:8d:2f:81:0a:18:0c:9c:cc:43:03:35:a8:57:40:da:
e0:50:8c:8e:1d:1e:72:98:17:71:9e:5d:7a:ac:ef:bf:ab:d7:
43:fd:69:21:6c:98:4e:0d:0b:0f:68:85:e5:37:17:49:31:84:
64:a5:96:6c:f6:d7:cf:a9:c3:45:5a:68:c9:fb:f3:a1:ec:2b:
74:bf:22:a6:58:bc:9a:10:e1:17:c7:4c:89:39:ec:01:ff:1f:
1c:71:0e:99:d7:c1:bf:2a:c4:b3:b2:ef:e6:86:a5:7b:35:39:
ff:9f:44:dc:d0:d5:d1:1c:4a:7b:b6:d7:34:39:72:e8:79:71:
99:8c:74:2a:92:53:83:6d:75:d5:93:0e:a3:88:ac:e7:23:69:
75:c6:d7:34:84:6b:2e:0f:f5:5d:e4:ac:3e:c4:4d:20:86:4b:
26:b3:e6:c9:f7:24:fa:67:a8:76:2c:87:b4:f6:93:82:2b:eb:
4f:d6:6b:26:b1:4b:dd:cb:7d:63:0c:f7:69:cf:ab:dc:f6:6e:
fe:59:a9:89:c7:dc:aa:44:f3:b6:31:30:fc:4c:02:18:50:cb:
3f:37:63:44:43:a5:5a:8c:d0:ce:3c:4f:ff:6a:e4:6f:d9:40:
b3:e2:fc:12:58:1e:f9:ec:5f:6d:77:3b:ed:7c:d6:dc:87:61:
3e:09:d8:ae
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0pztO0WQerl8gKHGiPSRPPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmYzlhZTRjNTBmYTBiMDM4MmFkZGE1ZjNjN2RmNDE4Zjc5
MjU4NjQwHhcNMjYwMzI2MTEwMTUzWhcNMjYwMzI3MTEwMTUzWjAzMTEwLwYDVQQD
EygwNzRkMzM5NTgzYzNlMjgxNThiYWI3Y2ZkZDk2MGVhMTA2NDNjODgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA45qMvND+yVil7JP9lNdaQr42GWDm
HOilLFBSRoa1mHWAUfQsQNaTAqJ634foMmF1At9qJirgENRqcsVgaYkTAbDkpdRC
g86Esf3Bu3Py0yL5xgowgByD19D4RNqL1K0014ydsyYUrl8fJ/jwWtBRFL4kTr53
osoatr/uQgRBuwC6/8p7mOQL+RHs1UWAF7aqQZCH+m7yJAsvPW4pk5Sgbav1OaJU
p7rlVrug1sdW3Ix/bl1G5ipFFPKYSCG9fPf4l8smUToY8gWik3C4AZ8i9jnnBlZP
Gpgt+4vCmvTVqdfXIr14xqY/umWZsMxmFiFKFfLLCn/JfNl8Xx8v5e+UnwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAdNM5WDw+KBWLq3z92WDqEGQ8iDMB8GA1UdIwQY
MBaAFE/JrkxQ+gsDgq3aXzx99Bj3klhkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDhtdVRGRDZDd09DcmRwZlBIMzBHUGVTV0dRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy80NDQ1ZDctYWQyZC00NDQ1LThkZGUt
MmViZDY0NTdlZjFlLzEvVDhtdVRGRDZDd09DcmRwZlBIMzBHUGVTV0dRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy80NDQ1ZDctYWQyZC00NDQ1LThkZGUtMmViZDY0NTdlZjFl
LzEvVDhtdVRGRDZDd09DcmRwZlBIMzBHUGVTV0dRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAdqyjS+B
ChgMnMxDAzWoV0Da4FCMjh0ecpgXcZ5deqzvv6vXQ/1pIWyYTg0LD2iF5TcXSTGE
ZKWWbPbXz6nDRVpoyfvzoewrdL8ipli8mhDhF8dMiTnsAf8fHHEOmdfBvyrEs7Lv
5oalezU5/59E3NDV0RxKe7bXNDly6HlxmYx0KpJTg2111ZMOo4is5yNpdcbXNIRr
Lg/1XeSsPsRNIIZLJrPmyfck+meodiyHtPaTgivrT9ZrJrFL3ct9Ywz3ac+r3PZu
/lmpicfcqkTztjEw/EwCGFDLPzdjREOlWozQzjxP/2rkb9lAs+L8Elge+exfbXc7
7XzW3IdhPgnYrg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 22:00:45 2026 by rpki-client