Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/8a140b-0e51-4fc7-9c01-d67b9aca6417/1/T0HFbqBp7nscHfZoa9NuDhRSiiA.mft
File: T0HFbqBp7nscHfZoa9NuDhRSiiA.mft (raw, json)
Hash identifier: qrQdPbTFnLUl3529gU+uUEnruWUtgoiaGReXiOvkn8Y=
Subject key identifier: 84:3D:90:9A:0D:03:5F:38:86:DE:C7:0A:67:25:05:63:D4:64:8E:5F
Authority key identifier: 4F:41:C5:6E:A0:69:EE:7B:1C:1D:F6:68:6B:D3:6E:0E:14:52:8A:20
Certificate issuer: /CN=4f41c56ea069ee7b1c1df6686bd36e0e14528a20
Certificate serial: 019CAA8F6516ECD061090046C523FE84ED67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T0HFbqBp7nscHfZoa9NuDhRSiiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/8a140b-0e51-4fc7-9c01-d67b9aca6417/1/T0HFbqBp7nscHfZoa9NuDhRSiiA.mft
Manifest number: 0F6C
Signing time: Sun 01 Mar 2026 18:00:49 +0000
Manifest this update: Sun 01 Mar 2026 18:00:49 +0000
Manifest next update: Mon 02 Mar 2026 18:00:49 +0000
Files and hashes: 1: 8OKd3CQc6i0WS5lvDDNOUjLhw3g.roa (hash: 2r6wcq8Rpn3z2tzFav+stYWE1p2kymIXK4N4fPkqcPo=)
2: T0HFbqBp7nscHfZoa9NuDhRSiiA.crl (hash: I5LxZJeHvYzrnoZoXIQJeGJVL5444l0RLrYK9ngQvwo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/8a140b-0e51-4fc7-9c01-d67b9aca6417/1/T0HFbqBp7nscHfZoa9NuDhRSiiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/8a140b-0e51-4fc7-9c01-d67b9aca6417/1/T0HFbqBp7nscHfZoa9NuDhRSiiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/T0HFbqBp7nscHfZoa9NuDhRSiiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:8f:65:16:ec:d0:61:09:00:46:c5:23:fe:84:ed:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f41c56ea069ee7b1c1df6686bd36e0e14528a20
Validity
Not Before: Mar 1 18:00:49 2026 GMT
Not After : Mar 2 18:00:49 2026 GMT
Subject: CN=843d909a0d035f3886dec70a67250563d4648e5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:b3:62:cc:17:0b:5c:11:11:01:86:ef:9e:89:
ee:e1:5e:31:83:14:b9:41:d9:a7:6c:d8:4a:27:92:
30:47:44:33:25:5b:d8:9d:1f:07:c3:dd:81:1c:39:
d1:7a:e9:99:29:f8:39:f8:15:ea:61:81:1b:86:9b:
ba:cb:d2:8f:3d:0d:9e:7e:10:5b:60:ed:91:9d:67:
24:d0:bb:96:88:57:e4:54:78:e5:7b:f5:09:36:53:
2c:c9:af:e4:e9:87:ad:be:f7:a6:6f:d8:c5:ab:2b:
d5:fa:f9:69:52:f4:1f:59:a1:f2:66:3a:64:ef:72:
32:c9:04:de:d4:78:a3:8f:d2:98:46:3f:22:4a:c0:
05:e4:08:cc:20:71:84:02:b8:a4:8f:07:a2:97:7d:
6d:33:1f:d9:54:ea:e1:01:cc:23:4a:e8:86:3f:0b:
4b:83:3c:fb:70:9b:0a:b3:4c:db:8d:88:02:9c:8f:
56:8a:66:da:7f:df:cd:73:0e:fd:83:e0:af:18:00:
3f:aa:1e:9f:77:f1:47:9f:3f:3a:ee:1f:5b:7d:0c:
58:bd:93:42:d5:fb:a4:a3:2f:33:05:92:8c:ab:1a:
3e:44:79:b6:63:73:54:71:1e:86:58:5e:eb:76:7f:
80:15:ad:b5:22:88:21:9f:64:3a:26:f8:b6:fe:76:
de:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:3D:90:9A:0D:03:5F:38:86:DE:C7:0A:67:25:05:63:D4:64:8E:5F
X509v3 Authority Key Identifier:
keyid:4F:41:C5:6E:A0:69:EE:7B:1C:1D:F6:68:6B:D3:6E:0E:14:52:8A:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T0HFbqBp7nscHfZoa9NuDhRSiiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/8a140b-0e51-4fc7-9c01-d67b9aca6417/1/T0HFbqBp7nscHfZoa9NuDhRSiiA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/8a140b-0e51-4fc7-9c01-d67b9aca6417/1/T0HFbqBp7nscHfZoa9NuDhRSiiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:e3:6b:5c:db:83:e6:6f:14:4f:d9:94:c7:25:a0:7e:3d:ab:
3d:58:d4:53:39:e6:11:30:a4:07:31:81:b8:5a:79:26:46:b9:
da:8b:5a:ae:06:d9:00:89:61:81:f4:28:02:a7:f3:ea:3b:59:
16:e9:78:87:98:7c:00:d4:21:7c:37:62:cf:de:d2:26:9c:d2:
8d:c7:22:b5:57:88:a1:45:4b:82:ad:86:d4:ab:54:c1:ed:16:
d7:17:45:84:d2:55:fa:95:f1:1e:11:8e:75:51:62:ef:44:3a:
fc:25:81:3b:12:1e:a1:c3:24:b1:1a:30:de:e3:3f:bf:59:0e:
46:77:40:5d:cb:ca:60:43:03:a8:85:82:de:7e:31:d9:28:44:
63:ee:c0:55:34:4b:4b:c5:40:a1:20:8c:96:2a:01:44:b8:96:
be:bb:80:68:b7:9d:2d:d8:f3:e3:d2:8c:ea:20:6c:08:b8:04:
8f:6d:0c:a0:ab:d4:c6:63:90:ee:2e:0b:5f:a8:f0:e5:d3:84:
24:cb:33:e2:d1:af:93:9f:f9:b8:9f:57:1d:71:e0:55:37:38:
e3:80:a2:f0:3a:ce:88:53:ad:de:0e:79:f6:94:1d:0e:d4:d6:
dc:9b:18:b3:e8:84:6c:31:35:a8:04:c4:96:9e:18:05:0b:38:
a3:bb:8c:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:17:54 2026 by rpki-client