Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fc/4445d7-ad2d-4445-8dde-2ebd6457ef1e/1/T8muTFD6CwOCrdpfPH30GPeSWGQ.mft
File: T8muTFD6CwOCrdpfPH30GPeSWGQ.mft (raw, json)
Hash identifier: NaSP4AxJjyekgn5t6SEleCIG4A8Af5Y22BknXJ2/Clg=
Subject key identifier: B3:96:53:55:88:4A:E8:56:AF:90:07:51:A5:0B:8B:06:67:35:B8:B9
Authority key identifier: 4F:C9:AE:4C:50:FA:0B:03:82:AD:DA:5F:3C:7D:F4:18:F7:92:58:64
Certificate issuer: /CN=4fc9ae4c50fa0b0382adda5f3c7df418f7925864
Certificate serial: 01A0D26E843DF312F1DA968891A75A42F7FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8muTFD6CwOCrdpfPH30GPeSWGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/4445d7-ad2d-4445-8dde-2ebd6457ef1e/1/T8muTFD6CwOCrdpfPH30GPeSWGQ.mft
Manifest number: 03F9
Signing time: Thu 24 Sep 2026 08:00:53 +0000
Manifest this update: Thu 24 Sep 2026 08:00:53 +0000
Manifest next update: Fri 25 Sep 2026 08:00:53 +0000
Files and hashes: 1: KQelvFl-0S2BnhTjmwfeewzy0K0.roa (hash: eHfnP6Dgwq60SUqBjtwY/17CbS0N6nRtKkrY1JJPGsI=)
2: T8muTFD6CwOCrdpfPH30GPeSWGQ.crl (hash: SoCt7KSkP1AMECwSfG6j3HZIgotA8h/S09ppYeTJ+k4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/4445d7-ad2d-4445-8dde-2ebd6457ef1e/1/T8muTFD6CwOCrdpfPH30GPeSWGQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/4445d7-ad2d-4445-8dde-2ebd6457ef1e/1/T8muTFD6CwOCrdpfPH30GPeSWGQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8muTFD6CwOCrdpfPH30GPeSWGQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 08:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:6e:84:3d:f3:12:f1:da:96:88:91:a7:5a:42:f7:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc9ae4c50fa0b0382adda5f3c7df418f7925864
Validity
Not Before: Sep 24 08:00:53 2026 GMT
Not After : Sep 25 08:00:53 2026 GMT
Subject: CN=b3965355884ae856af900751a50b8b066735b8b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:1f:9d:b3:aa:3f:d8:d6:3b:87:03:0f:e7:8c:
3d:bb:61:37:7a:df:d1:0c:97:b9:0d:00:e4:d6:43:
3c:7f:96:7d:9f:8a:58:a2:75:3a:8e:4a:0a:b8:68:
a0:d8:48:09:d2:97:4e:50:67:ab:a1:df:0b:cf:03:
f7:b6:a8:59:f2:b0:53:11:fc:a9:ed:ba:ce:28:9a:
47:9b:ea:d9:87:c5:ef:ec:20:47:6e:0d:2d:a5:ca:
7c:85:0d:90:cc:7a:b4:7e:f2:92:ff:b3:ba:33:46:
0e:63:b9:14:c1:94:0e:23:ac:14:4f:fc:57:a6:5e:
aa:91:51:bc:76:31:0e:f5:84:71:f8:01:41:c0:10:
40:ab:c6:4b:6c:b7:ae:0a:90:71:41:d7:13:b8:0e:
27:62:71:89:bd:6c:53:00:1c:44:3b:f7:63:86:4e:
34:f4:0f:39:69:10:bc:06:ee:10:cb:84:76:34:cd:
59:1b:24:bd:e5:e8:10:a4:b4:45:00:a8:ce:41:db:
e6:4e:65:4b:7a:a4:60:c6:2a:aa:ee:99:d3:4e:18:
6b:02:d8:1f:92:23:c2:16:eb:fe:ba:3f:a2:0a:4c:
3d:70:51:9f:c5:5b:f5:8b:5a:3c:cc:69:37:d4:20:
d9:10:07:eb:62:34:9f:73:9c:91:2a:f6:da:2e:d0:
d5:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:96:53:55:88:4A:E8:56:AF:90:07:51:A5:0B:8B:06:67:35:B8:B9
X509v3 Authority Key Identifier:
keyid:4F:C9:AE:4C:50:FA:0B:03:82:AD:DA:5F:3C:7D:F4:18:F7:92:58:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8muTFD6CwOCrdpfPH30GPeSWGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/4445d7-ad2d-4445-8dde-2ebd6457ef1e/1/T8muTFD6CwOCrdpfPH30GPeSWGQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/4445d7-ad2d-4445-8dde-2ebd6457ef1e/1/T8muTFD6CwOCrdpfPH30GPeSWGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:86:3e:4d:b1:49:cd:9f:61:d4:49:61:15:0a:61:0a:03:50:
5a:46:26:0e:20:e3:77:dc:e2:95:d3:e0:30:e1:09:d8:9c:33:
78:a3:b3:84:47:0a:75:61:af:c6:0d:13:31:6a:8d:dd:8d:ea:
7d:d7:48:cd:b9:4b:07:bd:63:88:39:1a:51:2d:e6:07:e2:22:
76:17:b6:e2:76:61:7b:fe:db:ca:15:9c:fa:9a:65:ea:b3:02:
b2:5d:3e:53:22:18:d5:e8:4f:ff:75:2b:e3:ca:77:cb:70:ad:
24:26:26:3c:12:5b:83:8c:fa:75:9d:d5:a1:a3:25:45:1b:db:
95:e4:f4:ef:af:6a:fd:c8:ab:66:ab:f8:80:e5:de:c2:7a:6c:
7b:8a:aa:a9:f6:4c:cb:8f:2a:6a:7d:89:04:63:a2:96:58:bc:
c3:4a:58:bc:36:3e:0a:1d:1a:50:f2:56:11:6a:d7:16:65:e7:
39:ff:20:55:cc:4c:4f:91:80:05:88:4e:cd:d2:62:69:6a:bc:
b1:66:7a:12:26:e5:d6:a8:4c:fc:76:dd:fd:1a:5d:3c:fe:32:
1b:37:98:3b:f7:b6:9b:17:31:4d:ad:e9:c4:8b:23:44:43:03:
08:f2:de:dc:16:f1:22:36:d2:8e:e4:87:d8:1a:3a:e0:f6:68:
a6:93:7e:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 16:56:12 2026 by rpki-client