Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/24/9c4fb0-c475-4204-9987-0a91cadbee66/1/T2qURK2qUjxXaOn2vhQGUYOsIKg.mft
File: T2qURK2qUjxXaOn2vhQGUYOsIKg.mft (raw, json)
Hash identifier: VBvBTA2lrSMovhrB3lEebjwI+Ov5/rqRyBd0SMTMM9k=
Subject key identifier: 5D:35:A7:B8:34:70:BB:7C:08:C4:67:56:F9:EB:3B:82:C3:D0:ED:24
Authority key identifier: 4F:6A:94:44:AD:AA:52:3C:57:68:E9:F6:BE:14:06:51:83:AC:20:A8
Certificate issuer: /CN=4f6a9444adaa523c5768e9f6be14065183ac20a8
Certificate serial: 01A1291F37EE9D195A9A58EFA5CABBDFF531
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T2qURK2qUjxXaOn2vhQGUYOsIKg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/9c4fb0-c475-4204-9987-0a91cadbee66/1/T2qURK2qUjxXaOn2vhQGUYOsIKg.mft
Manifest number: 1A99
Signing time: Sun 11 Oct 2026 04:01:14 +0000
Manifest this update: Sun 11 Oct 2026 04:01:14 +0000
Manifest next update: Mon 12 Oct 2026 04:01:14 +0000
Files and hashes: 1: T2qURK2qUjxXaOn2vhQGUYOsIKg.crl (hash: tHh3aCZxySSmqsd64+g5U9HpGY3QHXAQNyWrbjJPySw=)
2: o8tO8stgvhxVUDIUNSKHy-JW2fo.roa (hash: Z08VgX0ivNPtY5zzCzl8jQ6u6U/EFae5aPOCebjGd+I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/9c4fb0-c475-4204-9987-0a91cadbee66/1/T2qURK2qUjxXaOn2vhQGUYOsIKg.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/9c4fb0-c475-4204-9987-0a91cadbee66/1/T2qURK2qUjxXaOn2vhQGUYOsIKg.mft
rsync://rpki.ripe.net/repository/DEFAULT/T2qURK2qUjxXaOn2vhQGUYOsIKg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 04:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:29:1f:37:ee:9d:19:5a:9a:58:ef:a5:ca:bb:df:f5:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f6a9444adaa523c5768e9f6be14065183ac20a8
Validity
Not Before: Oct 11 04:01:14 2026 GMT
Not After : Oct 12 04:01:14 2026 GMT
Subject: CN=5d35a7b83470bb7c08c46756f9eb3b82c3d0ed24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:92:25:43:2e:67:95:a5:71:8d:c3:af:07:c3:
99:f6:f3:d5:79:55:21:46:92:95:6b:f3:b3:4e:5d:
a7:73:c7:eb:fa:12:8c:31:76:5d:f4:ac:c4:69:30:
6c:b0:fb:62:81:f2:51:a2:5e:77:3d:8f:f8:93:70:
24:de:26:06:7a:a5:9e:20:8b:b3:42:b2:01:28:6b:
6e:c4:63:72:26:a1:b4:17:50:d7:a7:d7:1e:fe:95:
ed:f6:85:50:4a:93:6f:ef:8d:bb:9f:12:73:10:59:
7e:c7:2b:c8:69:ab:39:df:45:14:4e:ff:f8:4a:5c:
72:9d:31:fa:f0:9d:57:d8:eb:56:63:1d:c6:8e:7f:
26:3b:f4:2d:8e:0d:da:ad:3c:8b:e8:78:f9:54:bf:
40:0c:0c:9f:2d:fb:81:7d:65:55:39:92:91:6d:2e:
59:b3:ad:d7:27:b3:16:2c:2a:66:ac:7d:d0:90:10:
98:16:8d:8f:a0:e2:01:46:13:5d:f9:62:94:c7:19:
db:dd:7d:80:1a:d4:2b:68:aa:c6:05:7a:b2:9a:0f:
28:38:d4:0d:e9:d5:fc:e2:20:44:6b:ef:f1:5f:c7:
2e:94:48:a8:b7:b6:3a:fe:c8:04:92:9b:73:e0:50:
c7:92:62:8b:3b:a1:3c:e4:63:bc:63:72:32:62:05:
4d:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:35:A7:B8:34:70:BB:7C:08:C4:67:56:F9:EB:3B:82:C3:D0:ED:24
X509v3 Authority Key Identifier:
keyid:4F:6A:94:44:AD:AA:52:3C:57:68:E9:F6:BE:14:06:51:83:AC:20:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T2qURK2qUjxXaOn2vhQGUYOsIKg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9c4fb0-c475-4204-9987-0a91cadbee66/1/T2qURK2qUjxXaOn2vhQGUYOsIKg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9c4fb0-c475-4204-9987-0a91cadbee66/1/T2qURK2qUjxXaOn2vhQGUYOsIKg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:c2:e8:43:f2:55:f8:9f:ed:2c:23:58:76:79:90:73:0c:17:
da:14:40:76:74:0f:99:42:4b:e3:a3:fe:4f:57:fb:94:d0:78:
11:69:75:56:cc:5b:21:84:bd:61:18:84:69:a2:fc:cb:24:48:
6e:2d:11:eb:ee:73:fd:8c:a9:0a:d5:37:08:8a:b2:2b:fb:c7:
d3:48:3e:c2:e7:af:de:86:28:c9:7c:34:a9:fa:3b:47:81:a1:
47:ad:81:2b:7b:40:39:28:d9:39:57:83:9c:06:73:99:03:21:
5f:59:2a:85:d5:32:6f:1f:df:22:34:62:a4:c7:c4:19:6a:6e:
60:0d:f9:a9:32:22:7f:1c:86:b7:59:ad:89:39:66:0e:da:ce:
ba:bb:f8:64:22:85:72:d5:7e:f5:b1:40:b2:a1:cf:b3:5a:e6:
59:98:81:e7:ae:53:d2:4d:6f:b3:a7:32:77:59:55:c4:ca:a4:
03:6a:94:6c:5f:dd:9d:6e:bc:dc:9a:e5:10:9d:18:09:1d:8d:
a0:26:d7:17:33:45:bc:4d:72:38:0a:e9:b8:a2:ed:05:69:92:
82:d8:cf:ee:53:82:a7:c5:e0:0c:5f:d9:e7:ad:e7:ed:a0:21:
f3:91:e1:9a:cf:d6:a7:8d:46:c2:1e:c0:84:bc:41:ed:a6:63:
88:cb:fe:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 08:52:00 2026 by rpki-client