Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/4445d7-ad2d-4445-8dde-2ebd6457ef1e/1/T8muTFD6CwOCrdpfPH30GPeSWGQ.mft
File: T8muTFD6CwOCrdpfPH30GPeSWGQ.mft (raw, json)
Hash identifier: UvuQxIzCbfkAJg/m/UfKL6JHS8Ecn7Uhhl+rMA7L2Y8=
Subject key identifier: CB:94:F2:10:98:9F:89:AE:FB:B1:73:ED:E9:09:6E:D1:82:38:26:CF
Authority key identifier: 4F:C9:AE:4C:50:FA:0B:03:82:AD:DA:5F:3C:7D:F4:18:F7:92:58:64
Certificate issuer: /CN=4fc9ae4c50fa0b0382adda5f3c7df418f7925864
Certificate serial: 019E1D224D4363F196DEFCC304B0E911BDE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8muTFD6CwOCrdpfPH30GPeSWGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/4445d7-ad2d-4445-8dde-2ebd6457ef1e/1/T8muTFD6CwOCrdpfPH30GPeSWGQ.mft
Manifest number: 0292
Signing time: Tue 12 May 2026 17:00:47 +0000
Manifest this update: Tue 12 May 2026 17:00:47 +0000
Manifest next update: Wed 13 May 2026 17:00:47 +0000
Files and hashes: 1: KQelvFl-0S2BnhTjmwfeewzy0K0.roa (hash: eHfnP6Dgwq60SUqBjtwY/17CbS0N6nRtKkrY1JJPGsI=)
2: T8muTFD6CwOCrdpfPH30GPeSWGQ.crl (hash: CyUzs2oAhdMJcHKjeHINFVrkQdHP2gH3ulNeBuV0FDQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/4445d7-ad2d-4445-8dde-2ebd6457ef1e/1/T8muTFD6CwOCrdpfPH30GPeSWGQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/4445d7-ad2d-4445-8dde-2ebd6457ef1e/1/T8muTFD6CwOCrdpfPH30GPeSWGQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8muTFD6CwOCrdpfPH30GPeSWGQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:22:4d:43:63:f1:96:de:fc:c3:04:b0:e9:11:bd:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc9ae4c50fa0b0382adda5f3c7df418f7925864
Validity
Not Before: May 12 17:00:47 2026 GMT
Not After : May 13 17:00:47 2026 GMT
Subject: CN=cb94f210989f89aefbb173ede9096ed1823826cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:d3:54:7d:26:1f:5f:7c:cb:fa:a3:94:93:46:
f8:5e:00:f5:8f:5d:c5:e1:9f:69:ab:8b:f4:8d:9b:
94:dd:c9:e2:56:a1:7c:86:b9:ee:b7:f9:e8:60:55:
4f:bb:29:45:3b:03:69:0c:47:ed:54:06:c8:6d:00:
55:42:f1:71:92:f6:3d:cb:55:3e:30:9c:00:67:93:
e9:83:a0:45:4f:03:b7:1b:10:69:7d:59:1f:4d:16:
03:07:7f:3e:30:47:0e:83:d8:5b:b8:43:eb:ec:f1:
32:89:86:ca:1e:09:ba:a2:2b:76:db:d3:8a:ea:34:
df:13:af:70:c0:6e:c7:c7:c5:1c:90:86:e5:b8:de:
b5:40:8f:5f:21:44:04:33:d8:b0:93:f4:fd:cd:62:
a7:77:d0:3c:0d:a0:c9:7c:98:50:d8:81:d1:31:03:
3f:57:4d:b5:35:23:d9:f0:e9:e7:5e:d1:a5:6a:ea:
2b:75:05:7f:87:ae:90:70:8a:66:fb:aa:08:76:fd:
bf:e7:2a:2e:f1:4d:3f:aa:89:a1:2a:41:2c:c1:89:
92:65:69:6f:cd:45:4a:89:d5:95:7a:70:e7:c3:b9:
eb:f3:3e:82:01:35:ec:2b:5a:a0:16:0e:f7:22:b3:
c2:84:cb:a3:48:38:05:ab:29:b5:d8:64:49:61:61:
c1:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:94:F2:10:98:9F:89:AE:FB:B1:73:ED:E9:09:6E:D1:82:38:26:CF
X509v3 Authority Key Identifier:
keyid:4F:C9:AE:4C:50:FA:0B:03:82:AD:DA:5F:3C:7D:F4:18:F7:92:58:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8muTFD6CwOCrdpfPH30GPeSWGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/4445d7-ad2d-4445-8dde-2ebd6457ef1e/1/T8muTFD6CwOCrdpfPH30GPeSWGQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/4445d7-ad2d-4445-8dde-2ebd6457ef1e/1/T8muTFD6CwOCrdpfPH30GPeSWGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:47:bc:0e:2f:a2:eb:1f:1a:4a:ff:c2:e8:e9:d6:2b:87:c9:
17:99:7e:93:68:79:46:2e:9f:9c:9f:32:f5:26:4e:89:5d:75:
9b:25:07:d1:8c:34:13:14:e6:01:3c:74:20:b8:d0:ae:e9:ff:
b9:24:ef:29:95:3b:ef:08:91:1a:63:15:b2:96:22:06:08:90:
a7:ae:38:d0:0d:be:51:86:85:dd:ce:a4:e8:17:bc:d0:4f:af:
ac:4a:3c:ab:73:f5:5a:ae:36:79:15:14:8d:3a:ca:3d:16:86:
b5:80:ec:81:c5:0a:86:33:00:a4:e0:e8:83:e4:93:94:cf:4b:
31:0e:59:07:dc:6f:66:12:6b:5e:b6:00:58:b7:0f:2d:50:b0:
bc:be:1e:cd:43:ba:d5:74:24:70:73:1e:a2:2b:1b:18:af:40:
30:37:0a:6e:27:37:74:77:7e:1f:72:0a:33:50:af:1b:82:c3:
b5:5a:16:00:f0:c8:d9:a3:c7:45:24:2a:2b:ec:ef:57:18:03:
6d:3f:1d:53:7b:1c:97:9f:9e:88:77:5a:97:89:dd:57:cf:e9:
cc:1d:cd:04:b0:81:18:08:21:9e:f3:ed:09:cd:2c:70:43:ed:
70:ad:5e:81:49:62:46:ec:3c:5b:04:f4:8b:ae:27:1f:5e:f4:
38:18:17:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:32:38 2026 by rpki-client