Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/20/c991ee-bd41-4ad1-b88d-6fc5fca09629/1/T_hs8z4V6kCJ2inip4gddG34Ju8.mft
File: T_hs8z4V6kCJ2inip4gddG34Ju8.mft (raw, json)
Hash identifier: +4ZSk97U4vHivdq+z8lvJ4cldweJwoWWK/YTmoFHY08=
Subject key identifier: 24:7C:D2:D1:97:C8:3D:2F:2B:C7:1E:07:10:D3:FA:2F:10:52:B2:02
Authority key identifier: 4F:F8:6C:F3:3E:15:EA:40:89:DA:29:E2:A7:88:1D:74:6D:F8:26:EF
Certificate issuer: /CN=4ff86cf33e15ea4089da29e2a7881d746df826ef
Certificate serial: 01A0E0619D3FF6FAD34B54CD286EA78CCB84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T_hs8z4V6kCJ2inip4gddG34Ju8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/c991ee-bd41-4ad1-b88d-6fc5fca09629/1/T_hs8z4V6kCJ2inip4gddG34Ju8.mft
Manifest number: 13D6
Signing time: Sun 27 Sep 2026 01:01:28 +0000
Manifest this update: Sun 27 Sep 2026 01:01:28 +0000
Manifest next update: Mon 28 Sep 2026 01:01:28 +0000
Files and hashes: 1: 1v3IPl8M1eJPBhCAK7u4vq4rUaI.roa (hash: fKYCNJCehScelohhLM2BpKiOwF7K+yob2FjJd+Ycr6M=)
2: T_hs8z4V6kCJ2inip4gddG34Ju8.crl (hash: OY/WfzT4XfUtR/Mo4PzGZLK8DB+oIM1Nl5PBPDU1+S8=)
3: pxD_Y88xrQvnAVjSRtOa0jsr7OQ.roa (hash: +SNLZHSRdVfvPSo1qQ3dQv0AK0ZdBnAQ1eRjccxs6zQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/c991ee-bd41-4ad1-b88d-6fc5fca09629/1/T_hs8z4V6kCJ2inip4gddG34Ju8.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/c991ee-bd41-4ad1-b88d-6fc5fca09629/1/T_hs8z4V6kCJ2inip4gddG34Ju8.mft
rsync://rpki.ripe.net/repository/DEFAULT/T_hs8z4V6kCJ2inip4gddG34Ju8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 20:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e0:61:9d:3f:f6:fa:d3:4b:54:cd:28:6e:a7:8c:cb:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ff86cf33e15ea4089da29e2a7881d746df826ef
Validity
Not Before: Sep 27 01:01:28 2026 GMT
Not After : Sep 28 01:01:28 2026 GMT
Subject: CN=247cd2d197c83d2f2bc71e0710d3fa2f1052b202
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:1e:84:f7:12:dd:67:da:0e:b7:b4:2e:75:cb:
7e:aa:ff:60:f7:01:24:a2:58:c0:3e:c5:5f:e3:c0:
3d:c2:40:ed:ca:13:8a:dd:81:2e:a5:fd:08:4d:fe:
f6:9c:42:d3:21:cc:4c:02:2a:ab:a5:40:a4:38:a2:
ad:7d:1d:9f:74:db:7d:a4:82:17:6b:b9:dd:53:3f:
39:8f:1f:c4:94:1e:d1:c9:7a:8c:9e:ab:c0:21:c4:
48:6c:ca:24:0a:71:0d:a0:1d:e5:fa:aa:33:a4:3c:
70:ba:24:ef:44:43:c2:ad:34:eb:e7:77:c6:da:4e:
56:2d:6d:d3:64:12:13:7c:6e:39:5a:6a:b9:7a:d7:
3b:7e:f6:9c:7f:d5:ad:e9:2e:a6:e0:68:6b:62:95:
2c:b5:a2:0d:69:df:7a:ce:5b:11:1b:6e:2f:ed:6f:
ab:2d:fc:43:75:8e:53:9a:98:18:32:6f:13:6c:55:
8e:ae:6f:72:66:c7:c2:43:b7:69:93:35:52:d8:c0:
9d:2f:b7:77:bb:39:0a:f2:38:c7:c3:14:cb:26:dc:
61:16:ba:08:47:13:35:2d:c2:9b:db:fc:42:30:f7:
7d:e5:6f:e4:e7:61:dc:d8:68:f9:26:85:0e:46:6a:
53:63:16:2a:04:62:20:47:1c:ee:a7:d9:25:a4:59:
08:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:7C:D2:D1:97:C8:3D:2F:2B:C7:1E:07:10:D3:FA:2F:10:52:B2:02
X509v3 Authority Key Identifier:
keyid:4F:F8:6C:F3:3E:15:EA:40:89:DA:29:E2:A7:88:1D:74:6D:F8:26:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T_hs8z4V6kCJ2inip4gddG34Ju8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/c991ee-bd41-4ad1-b88d-6fc5fca09629/1/T_hs8z4V6kCJ2inip4gddG34Ju8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/c991ee-bd41-4ad1-b88d-6fc5fca09629/1/T_hs8z4V6kCJ2inip4gddG34Ju8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:26:2a:4a:a4:08:58:6c:f8:5f:d9:66:e7:17:8e:88:df:2d:
ec:e5:7f:c6:e2:e9:73:44:ee:3a:85:e9:df:f1:47:89:ea:c1:
78:fe:39:3f:52:b1:44:34:07:10:b0:6a:4c:21:40:05:17:bf:
27:66:2a:a4:69:b2:78:2a:0c:ca:4c:84:8d:14:6d:41:c3:85:
ef:9c:3d:8e:ab:c6:34:1f:bc:f2:2d:42:67:d0:27:70:fb:e2:
ee:62:7b:31:84:9b:e7:75:b1:e1:5c:ef:b3:38:d0:61:fc:4b:
ab:dc:9c:2e:b5:89:eb:a8:3d:3f:6c:13:4d:1d:77:d1:a3:a6:
3d:49:2a:3e:e9:5a:8c:8d:cf:36:99:7d:02:aa:11:2b:8a:e7:
a8:38:e7:ea:80:a3:6c:18:5f:24:7e:25:5d:c8:29:35:2d:bd:
6e:7d:c8:01:ae:77:25:05:4b:3e:15:7b:38:d5:3b:cf:e0:ec:
97:8c:ec:4e:70:77:11:4e:b8:23:94:c7:b0:0d:05:f3:f9:56:
67:e2:1d:35:b3:88:92:6b:71:3c:4b:d7:c5:de:b9:8e:25:1f:
7f:03:e7:f8:53:1c:91:2a:cc:b5:ff:5f:e3:d9:33:5b:08:b4:
d7:db:af:d9:4a:11:6f:af:e2:84:46:64:0b:ce:ee:90:4f:29:
3a:c0:cb:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 06:35:38 2026 by rpki-client