Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/4445d7-ad2d-4445-8dde-2ebd6457ef1e/1/T8muTFD6CwOCrdpfPH30GPeSWGQ.mft
File: T8muTFD6CwOCrdpfPH30GPeSWGQ.mft (raw, json)
Hash identifier: oRlaM7Lh+mT8omLli28eI1SjISlATSJ+mzQu2yIJpJg=
Subject key identifier: F7:BE:A6:76:CA:41:3E:E7:D1:A5:92:CD:A0:70:39:4E:B4:B4:EE:89
Authority key identifier: 4F:C9:AE:4C:50:FA:0B:03:82:AD:DA:5F:3C:7D:F4:18:F7:92:58:64
Certificate issuer: /CN=4fc9ae4c50fa0b0382adda5f3c7df418f7925864
Certificate serial: 019F91DA5752ADACA81E507FA2B9ED372623
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8muTFD6CwOCrdpfPH30GPeSWGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/4445d7-ad2d-4445-8dde-2ebd6457ef1e/1/T8muTFD6CwOCrdpfPH30GPeSWGQ.mft
Manifest number: 0353
Signing time: Fri 24 Jul 2026 02:00:33 +0000
Manifest this update: Fri 24 Jul 2026 02:00:33 +0000
Manifest next update: Sat 25 Jul 2026 02:00:33 +0000
Files and hashes: 1: KQelvFl-0S2BnhTjmwfeewzy0K0.roa (hash: eHfnP6Dgwq60SUqBjtwY/17CbS0N6nRtKkrY1JJPGsI=)
2: T8muTFD6CwOCrdpfPH30GPeSWGQ.crl (hash: SglFw48yPxjpsVzTxAnnG4vU19ofoz4eVF1TLVCH9b8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/4445d7-ad2d-4445-8dde-2ebd6457ef1e/1/T8muTFD6CwOCrdpfPH30GPeSWGQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/4445d7-ad2d-4445-8dde-2ebd6457ef1e/1/T8muTFD6CwOCrdpfPH30GPeSWGQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8muTFD6CwOCrdpfPH30GPeSWGQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:da:57:52:ad:ac:a8:1e:50:7f:a2:b9:ed:37:26:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc9ae4c50fa0b0382adda5f3c7df418f7925864
Validity
Not Before: Jul 24 02:00:33 2026 GMT
Not After : Jul 25 02:00:33 2026 GMT
Subject: CN=f7bea676ca413ee7d1a592cda070394eb4b4ee89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:f3:44:3c:b1:c6:8e:ea:aa:f9:29:68:b7:f9:
40:25:2b:de:d6:82:6f:7e:4b:c5:80:fe:60:d1:01:
22:61:04:ec:20:c7:9b:d1:86:32:9e:74:3e:4c:a8:
49:15:9a:46:71:18:58:6b:4a:d3:e7:3c:59:af:2f:
90:eb:ae:2d:22:a1:48:35:98:38:b6:23:0c:78:e0:
3b:0e:50:69:ef:dd:6c:c6:89:d4:8c:e5:8c:71:3c:
c1:bd:3d:2b:9f:39:35:f5:f5:ad:b3:4e:48:16:1d:
ad:9e:ae:2e:c9:46:6f:f0:9f:ad:9d:aa:8d:c5:17:
82:34:7b:ec:6c:25:d0:ca:7e:89:ab:76:ee:78:de:
82:b8:83:21:9e:cb:61:22:cd:92:c4:9e:e1:78:93:
12:2d:60:90:eb:53:a4:65:12:8a:07:40:43:f4:a4:
0c:91:e3:76:6f:3d:bd:f7:a0:f5:66:5e:31:3f:4e:
4e:79:b4:50:60:6c:21:e6:6b:86:e6:83:c4:52:89:
1c:9a:84:09:62:d0:09:5f:3f:d3:33:e2:e2:0e:7b:
ad:b5:0d:c6:44:da:d2:3e:00:74:c9:28:4c:94:4d:
8b:46:18:cd:67:51:97:97:e2:a0:37:e1:14:5b:e0:
b1:86:67:4e:76:0f:53:0b:42:9d:c7:70:44:f4:c8:
0b:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:BE:A6:76:CA:41:3E:E7:D1:A5:92:CD:A0:70:39:4E:B4:B4:EE:89
X509v3 Authority Key Identifier:
keyid:4F:C9:AE:4C:50:FA:0B:03:82:AD:DA:5F:3C:7D:F4:18:F7:92:58:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8muTFD6CwOCrdpfPH30GPeSWGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/4445d7-ad2d-4445-8dde-2ebd6457ef1e/1/T8muTFD6CwOCrdpfPH30GPeSWGQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/4445d7-ad2d-4445-8dde-2ebd6457ef1e/1/T8muTFD6CwOCrdpfPH30GPeSWGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:ac:f0:de:bf:13:88:f5:1d:b8:0c:1d:82:2f:f5:8d:2f:ba:
ab:4b:a1:6a:be:05:8a:ef:e8:7d:f5:ff:34:5d:78:8c:39:96:
8e:9b:fe:4e:8d:a4:fd:95:7f:5d:b9:0d:8c:2c:d8:b7:67:3b:
1a:15:5e:a9:10:24:96:5c:e8:6d:f5:c4:1f:f9:39:f1:9e:53:
9a:ca:55:b9:44:7e:05:86:6d:24:ba:27:d3:27:dd:6f:ff:95:
11:c9:42:10:8f:86:a0:28:99:c6:f7:8f:78:e4:d7:91:7f:c8:
15:c2:63:d8:e9:66:4e:80:50:da:97:9f:1f:a1:18:9c:1d:08:
4c:2d:42:d5:fa:46:a3:a2:d4:a3:b5:df:2c:e9:a1:e7:05:35:
0c:e3:93:42:80:41:0b:b2:54:96:a8:5b:fc:c5:df:70:9b:e9:
78:ba:9d:4b:37:a1:65:56:c3:79:e5:8a:c7:28:5d:ce:2f:c2:
94:bf:4c:55:f7:6b:d6:13:b0:31:a6:97:a3:37:2a:e4:78:29:
54:c2:02:19:f9:ce:f7:f2:b1:14:a6:8c:77:0a:54:b1:e8:59:
67:78:5c:04:1d:a3:6d:6b:d4:ce:b6:9d:d2:f8:ae:bf:18:2c:
05:8a:fa:ba:c7:88:75:a9:fc:4d:54:c4:31:c1:f6:3f:ab:12:
24:da:e0:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:43:58 2026 by rpki-client