Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/d0305f-2b0d-4480-8d92-c0d973ca25d8/1/t4skH3ysfR5SHigxR-xhdjxCKqc.mft
File: t4skH3ysfR5SHigxR-xhdjxCKqc.mft (raw, json)
Hash identifier: /PZC2V4Vu13TxYIFu0f8PK+82ppycUIPGEWf5P7qruA=
Subject key identifier: 92:E8:AC:73:7F:58:90:52:E9:D6:F2:CD:FE:5E:FE:BD:3A:5C:45:8E
Authority key identifier: B7:8B:24:1F:7C:AC:7D:1E:52:1E:28:31:47:EC:61:76:3C:42:2A:A7
Certificate issuer: /CN=b78b241f7cac7d1e521e283147ec61763c422aa7
Certificate serial: 019CAAC6A0CC22D5339CF3BF2CEF0BF6CEF4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t4skH3ysfR5SHigxR-xhdjxCKqc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/d0305f-2b0d-4480-8d92-c0d973ca25d8/1/t4skH3ysfR5SHigxR-xhdjxCKqc.mft
Manifest number: 08E1
Signing time: Sun 01 Mar 2026 19:01:09 +0000
Manifest this update: Sun 01 Mar 2026 19:01:09 +0000
Manifest next update: Mon 02 Mar 2026 19:01:09 +0000
Files and hashes: 1: t4skH3ysfR5SHigxR-xhdjxCKqc.crl (hash: Dd8V4Zs8zgvoeSbDTTw8UhATCrrdX/mq6YmflMZmvbE=)
2: uN4DAu7bK-c8JvVTn8OEeV-CJp4.roa (hash: jyCJgBnbF1uD+bUHsVKg/2HvPpHhs/dR1060/6K0LU0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/d0305f-2b0d-4480-8d92-c0d973ca25d8/1/t4skH3ysfR5SHigxR-xhdjxCKqc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/d0305f-2b0d-4480-8d92-c0d973ca25d8/1/t4skH3ysfR5SHigxR-xhdjxCKqc.mft
rsync://rpki.ripe.net/repository/DEFAULT/t4skH3ysfR5SHigxR-xhdjxCKqc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:a0:cc:22:d5:33:9c:f3:bf:2c:ef:0b:f6:ce:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b78b241f7cac7d1e521e283147ec61763c422aa7
Validity
Not Before: Mar 1 19:01:09 2026 GMT
Not After : Mar 2 19:01:09 2026 GMT
Subject: CN=92e8ac737f589052e9d6f2cdfe5efebd3a5c458e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:11:6c:3e:ec:87:c3:89:d9:42:4d:07:9b:10:
b4:01:02:88:3a:9e:1e:5f:e9:56:0d:9f:3b:49:03:
fd:9a:8d:c3:e2:17:22:12:d8:47:ed:08:5f:64:01:
db:76:90:2c:ec:b9:00:88:72:48:cf:b3:18:d9:1d:
f8:fb:f4:51:59:ab:f8:55:8a:3b:da:8a:6a:f5:cc:
32:5d:9c:9d:88:d2:db:23:54:d4:3b:a8:16:83:82:
44:02:ad:43:ab:fb:05:ca:a5:11:94:2c:91:e6:15:
0b:8f:00:06:7d:e9:ea:fb:3d:d5:25:fd:33:59:8a:
3a:a2:55:7f:7a:c9:89:32:ab:17:71:37:fb:41:04:
c2:f7:9b:e3:e2:3e:32:a8:40:57:af:a2:82:d4:a1:
34:31:c5:7c:d3:cd:97:09:7d:38:19:82:d4:cd:2a:
0a:51:3f:a9:ae:41:0d:23:bd:c5:6f:b5:11:7e:6c:
07:31:01:52:43:72:cb:aa:cb:d3:67:5f:a7:21:6a:
ba:5b:b9:87:13:13:71:1a:72:df:a8:e7:81:54:6d:
fb:ae:2c:30:6a:a4:7b:c2:18:c5:e6:cf:6f:7d:cd:
b8:53:7e:b2:64:aa:cc:c7:83:7a:22:59:9b:de:09:
67:31:24:80:63:2d:5e:d0:e2:ea:ae:ef:2c:96:dd:
62:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:E8:AC:73:7F:58:90:52:E9:D6:F2:CD:FE:5E:FE:BD:3A:5C:45:8E
X509v3 Authority Key Identifier:
keyid:B7:8B:24:1F:7C:AC:7D:1E:52:1E:28:31:47:EC:61:76:3C:42:2A:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t4skH3ysfR5SHigxR-xhdjxCKqc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/d0305f-2b0d-4480-8d92-c0d973ca25d8/1/t4skH3ysfR5SHigxR-xhdjxCKqc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/d0305f-2b0d-4480-8d92-c0d973ca25d8/1/t4skH3ysfR5SHigxR-xhdjxCKqc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:34:b9:85:6d:0a:4a:75:a2:26:58:90:4d:2a:4a:99:88:8c:
85:c0:35:22:6c:c0:41:91:7f:f1:cf:12:6c:33:27:3b:98:b5:
60:42:c7:99:ce:79:74:b9:b2:91:a8:a2:7f:6d:6e:4d:73:05:
2c:28:e8:77:f2:72:72:59:32:41:7b:e1:b5:9d:3e:75:3a:a9:
d0:72:17:93:c0:fd:ce:cc:2b:a0:21:5d:10:d0:22:3c:b6:6d:
3e:29:a2:ce:06:62:d4:57:50:df:c1:41:5f:48:e9:6f:9d:33:
31:c1:3e:85:ac:0a:ba:92:8e:e4:97:5b:65:14:ed:49:d7:5e:
8c:f1:29:a3:9a:51:7a:e7:24:75:fd:98:ad:3e:a5:c7:19:64:
9f:3f:93:79:72:16:43:c1:a9:a0:49:8e:66:4c:ab:e0:52:a9:
81:c5:04:cf:3c:37:59:9e:76:78:bc:05:69:00:b0:35:37:6b:
99:30:a8:92:25:e6:43:74:16:c3:ca:e6:86:ed:57:58:84:36:
dc:c9:1d:62:59:b0:f9:5b:68:34:ac:7c:5e:7a:cd:3b:71:dd:
52:36:98:54:44:e7:10:50:fa:34:d8:ad:b9:a1:14:d8:b9:1d:
0c:b7:2c:e9:4e:98:4a:83:e2:c5:b4:8e:ab:6d:c5:15:ed:71:
41:4a:31:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:18:09 2026 by rpki-client