Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fc/4445d7-ad2d-4445-8dde-2ebd6457ef1e/1/T8muTFD6CwOCrdpfPH30GPeSWGQ.mft
File: T8muTFD6CwOCrdpfPH30GPeSWGQ.mft (raw, json)
Hash identifier: +rhawTiBZlMxkCe/6CGbxhFuGYdrp4eDsrlwBkFbW5E=
Subject key identifier: BF:C3:D8:21:93:CF:6D:F5:7A:AA:9B:F7:57:95:58:A7:8E:A3:0C:16
Authority key identifier: 4F:C9:AE:4C:50:FA:0B:03:82:AD:DA:5F:3C:7D:F4:18:F7:92:58:64
Certificate issuer: /CN=4fc9ae4c50fa0b0382adda5f3c7df418f7925864
Certificate serial: 01A0D0801AE0748EEBD98A1BDE2A458440F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8muTFD6CwOCrdpfPH30GPeSWGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/4445d7-ad2d-4445-8dde-2ebd6457ef1e/1/T8muTFD6CwOCrdpfPH30GPeSWGQ.mft
Manifest number: 03F8
Signing time: Wed 23 Sep 2026 23:00:51 +0000
Manifest this update: Wed 23 Sep 2026 23:00:51 +0000
Manifest next update: Thu 24 Sep 2026 23:00:51 +0000
Files and hashes: 1: KQelvFl-0S2BnhTjmwfeewzy0K0.roa (hash: eHfnP6Dgwq60SUqBjtwY/17CbS0N6nRtKkrY1JJPGsI=)
2: T8muTFD6CwOCrdpfPH30GPeSWGQ.crl (hash: OCOJ+yn7Wi7KwDI6pZ5U3T2HsoRibzqCMaHd6Cjln5E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/4445d7-ad2d-4445-8dde-2ebd6457ef1e/1/T8muTFD6CwOCrdpfPH30GPeSWGQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/4445d7-ad2d-4445-8dde-2ebd6457ef1e/1/T8muTFD6CwOCrdpfPH30GPeSWGQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8muTFD6CwOCrdpfPH30GPeSWGQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 18:27:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:80:1a:e0:74:8e:eb:d9:8a:1b:de:2a:45:84:40:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc9ae4c50fa0b0382adda5f3c7df418f7925864
Validity
Not Before: Sep 23 23:00:51 2026 GMT
Not After : Sep 24 23:00:51 2026 GMT
Subject: CN=bfc3d82193cf6df57aaa9bf7579558a78ea30c16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:e4:d3:bb:58:34:8a:80:41:1b:02:e1:af:c1:
a3:23:14:97:15:b6:f7:12:d7:f9:f6:57:6b:d3:58:
0e:db:36:63:04:99:d8:00:14:e8:72:a7:be:b6:b3:
be:05:89:fc:3c:4e:55:80:a3:d7:2d:91:09:dc:c8:
72:11:b1:d7:7f:46:61:ec:3b:e6:e3:4f:36:46:93:
aa:2f:68:f6:11:e8:20:e7:e9:f2:c8:35:23:e4:c6:
d6:cd:ca:35:25:ee:3f:df:47:6c:3a:98:8b:b0:cb:
36:c4:dc:e2:9a:b9:61:e5:d9:31:e2:46:36:10:5c:
3f:7b:07:ae:18:ef:1c:57:3b:19:0d:80:19:6b:fe:
6f:9b:91:75:b6:18:a5:6c:25:c5:e2:7f:4b:74:c8:
25:bd:6b:9f:44:21:33:5a:b1:ee:f7:ab:c8:02:4d:
67:1f:74:48:77:55:a8:bb:eb:dd:b2:5d:a0:0b:d8:
f5:61:e4:88:04:d9:a3:02:d3:8d:19:c3:4c:4e:53:
35:d2:05:3f:86:93:81:80:96:3a:0c:44:42:24:4f:
73:1d:2b:79:23:b1:4a:86:16:f9:72:42:4b:b7:a9:
3e:92:28:20:d3:f8:82:ad:f5:ae:f5:1b:2b:aa:8b:
2a:c6:98:e8:fb:91:78:c9:93:b4:ab:87:2d:6d:30:
9d:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:C3:D8:21:93:CF:6D:F5:7A:AA:9B:F7:57:95:58:A7:8E:A3:0C:16
X509v3 Authority Key Identifier:
keyid:4F:C9:AE:4C:50:FA:0B:03:82:AD:DA:5F:3C:7D:F4:18:F7:92:58:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8muTFD6CwOCrdpfPH30GPeSWGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/4445d7-ad2d-4445-8dde-2ebd6457ef1e/1/T8muTFD6CwOCrdpfPH30GPeSWGQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/4445d7-ad2d-4445-8dde-2ebd6457ef1e/1/T8muTFD6CwOCrdpfPH30GPeSWGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:5e:17:9b:2f:4e:93:07:2c:fa:ba:92:17:7b:b2:7e:50:dc:
9d:d2:8a:4d:45:94:e2:ea:a6:33:e8:fb:9e:5b:6d:96:d5:1e:
23:3b:04:af:a6:9f:90:fa:e9:32:6f:c6:1b:2a:78:0c:cd:d2:
87:3f:b3:64:e5:e9:ad:4c:bf:ed:af:3b:cd:47:68:ab:44:72:
39:56:86:7f:c3:d3:f5:3c:ab:1c:e8:b2:48:7f:fe:4e:e8:df:
5d:08:73:63:0a:0e:a7:6e:d6:3e:b3:d4:94:41:24:30:c9:95:
d4:2a:fa:5e:54:64:41:3a:9e:4c:a9:e0:6d:ca:46:bb:07:04:
c6:b5:74:53:3b:e6:58:50:99:2b:17:11:53:42:28:25:a7:c2:
8a:0e:df:2e:26:27:5b:d6:53:e0:7b:58:1a:88:72:2b:eb:57:
63:56:3d:a5:15:f0:0a:72:f7:4d:61:a4:3b:ed:ce:6c:bf:9a:
04:a2:19:eb:53:76:41:b1:49:06:93:9b:a0:bc:23:d8:89:49:
c2:c2:b9:13:76:93:01:0c:61:2d:7e:09:38:4b:2c:ac:30:7c:
4b:8d:9a:7b:5f:2d:97:6d:d8:d7:4f:ce:fc:09:7e:23:66:41:
af:47:14:0d:27:66:6a:cc:04:73:ac:6b:50:a2:19:75:34:25:
c3:e3:5b:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 03:39:20 2026 by rpki-client