Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/9c4fb0-c475-4204-9987-0a91cadbee66/1/T2qURK2qUjxXaOn2vhQGUYOsIKg.mft
File: T2qURK2qUjxXaOn2vhQGUYOsIKg.mft (raw, json)
Hash identifier: VF4SV3fkwyX2MI5E4/7331K569ulc0hqxkaJLtnmTPc=
Subject key identifier: 6B:E6:1A:DE:47:1C:CA:2E:F1:5C:E0:CA:4C:33:32:EC:88:40:3E:F4
Authority key identifier: 4F:6A:94:44:AD:AA:52:3C:57:68:E9:F6:BE:14:06:51:83:AC:20:A8
Certificate issuer: /CN=4f6a9444adaa523c5768e9f6be14065183ac20a8
Certificate serial: 019D9B88384F85CD733FB48D61D829A1B46E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T2qURK2qUjxXaOn2vhQGUYOsIKg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/9c4fb0-c475-4204-9987-0a91cadbee66/1/T2qURK2qUjxXaOn2vhQGUYOsIKg.mft
Manifest number: 18C2
Signing time: Fri 17 Apr 2026 13:01:28 +0000
Manifest this update: Fri 17 Apr 2026 13:01:28 +0000
Manifest next update: Sat 18 Apr 2026 13:01:28 +0000
Files and hashes: 1: T2qURK2qUjxXaOn2vhQGUYOsIKg.crl (hash: Zr6d+s+Yj9Ulags3qvfZiVzLH5o9eujg7LZ4INFOJLA=)
2: o8tO8stgvhxVUDIUNSKHy-JW2fo.roa (hash: Z08VgX0ivNPtY5zzCzl8jQ6u6U/EFae5aPOCebjGd+I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/9c4fb0-c475-4204-9987-0a91cadbee66/1/T2qURK2qUjxXaOn2vhQGUYOsIKg.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/9c4fb0-c475-4204-9987-0a91cadbee66/1/T2qURK2qUjxXaOn2vhQGUYOsIKg.mft
rsync://rpki.ripe.net/repository/DEFAULT/T2qURK2qUjxXaOn2vhQGUYOsIKg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 13:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:88:38:4f:85:cd:73:3f:b4:8d:61:d8:29:a1:b4:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f6a9444adaa523c5768e9f6be14065183ac20a8
Validity
Not Before: Apr 17 13:01:28 2026 GMT
Not After : Apr 18 13:01:28 2026 GMT
Subject: CN=6be61ade471cca2ef15ce0ca4c3332ec88403ef4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:5a:2a:4c:d2:b0:44:3f:90:e9:f7:b9:03:60:
69:e3:e3:d1:97:03:36:0f:f3:6a:9a:d8:14:39:74:
4c:d0:47:00:e5:b2:1d:a7:ef:e2:99:98:68:15:fc:
c5:5c:ad:07:45:7e:df:da:cd:95:e0:30:3b:95:34:
65:c9:53:01:ad:70:e0:c6:38:bc:89:bc:6d:43:77:
91:a8:5c:d1:42:5f:05:6b:78:10:a4:d7:52:32:6c:
8d:21:16:81:fd:e6:49:a7:03:ef:ea:f0:ee:1d:da:
1a:39:5e:74:fb:e2:2c:25:05:f7:75:84:e6:c8:06:
33:d3:0f:7d:c7:74:24:85:f2:9c:fb:68:2c:9a:21:
f3:fc:77:f9:08:56:8a:81:84:f8:a8:71:bc:44:c3:
2d:b4:83:ef:1b:2d:d9:d6:9a:59:77:a4:66:75:e8:
38:58:79:0f:5a:02:be:cd:09:56:50:94:dc:dd:44:
0f:90:a2:8a:53:d1:ca:2b:6b:23:9b:47:97:7d:4a:
dd:f3:63:12:12:42:4a:5b:06:b7:13:e4:50:8e:bd:
ca:3d:1c:32:9e:d3:08:58:1f:15:62:c5:77:61:25:
3e:44:f1:97:28:87:08:b8:f2:af:f4:df:68:13:52:
a7:80:53:85:ab:50:ed:d4:5a:c4:2d:d1:b1:04:e6:
a3:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:E6:1A:DE:47:1C:CA:2E:F1:5C:E0:CA:4C:33:32:EC:88:40:3E:F4
X509v3 Authority Key Identifier:
keyid:4F:6A:94:44:AD:AA:52:3C:57:68:E9:F6:BE:14:06:51:83:AC:20:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T2qURK2qUjxXaOn2vhQGUYOsIKg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9c4fb0-c475-4204-9987-0a91cadbee66/1/T2qURK2qUjxXaOn2vhQGUYOsIKg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9c4fb0-c475-4204-9987-0a91cadbee66/1/T2qURK2qUjxXaOn2vhQGUYOsIKg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:e5:54:df:bf:eb:8a:43:06:39:79:b0:d9:aa:b3:21:34:24:
f2:dc:41:bc:86:2e:d6:11:a9:31:cf:2f:a7:a2:86:a3:83:c4:
56:4b:f8:a7:90:02:ea:70:f9:84:fd:95:c3:1e:ce:45:5d:31:
68:46:7a:b2:13:81:7b:bd:16:10:fd:3f:1f:ac:7f:e8:5e:6d:
f9:69:39:fb:b8:3d:7d:38:1c:6b:78:01:81:fd:c8:f7:60:d4:
53:19:42:27:94:22:0e:6b:cd:26:85:09:86:72:4a:7a:f9:67:
75:3e:d0:12:3d:e3:c5:93:4a:45:28:99:e1:7c:80:b1:f1:32:
e1:ee:55:81:d4:54:86:a6:ba:df:10:fc:25:02:df:1b:d0:8c:
4c:1a:c0:e3:f7:d9:78:cc:43:11:1a:b3:9a:b2:c5:b4:26:2e:
42:5d:55:59:2a:77:8c:42:ad:4a:9f:0d:7f:b3:9f:d7:8e:53:
a9:d7:73:c9:26:45:20:b1:77:80:29:06:ca:0e:6a:03:8c:48:
b2:2a:53:9f:14:95:e9:36:8e:91:cf:37:8c:1b:84:c2:f9:33:
86:9b:55:9f:5b:1b:6d:88:08:07:37:ac:c5:a9:cd:a0:eb:4b:
8b:77:52:3e:e7:b2:81:18:86:eb:7e:99:94:27:8b:72:0c:e7:
d1:23:4d:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:30:48 2026 by rpki-client