Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/9c4fb0-c475-4204-9987-0a91cadbee66/1/T2qURK2qUjxXaOn2vhQGUYOsIKg.mft
File: T2qURK2qUjxXaOn2vhQGUYOsIKg.mft (raw, json)
Hash identifier: gn2LrJviS4wQdRzka2GtWwOFlm83aTwQt3xpv6ULYX4=
Subject key identifier: 84:82:F0:7F:B8:47:80:2D:82:11:F7:71:14:24:DF:AD:4B:8C:96:29
Authority key identifier: 4F:6A:94:44:AD:AA:52:3C:57:68:E9:F6:BE:14:06:51:83:AC:20:A8
Certificate issuer: /CN=4f6a9444adaa523c5768e9f6be14065183ac20a8
Certificate serial: 019CADFE1636C6DD82EC229B9B3599539A7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T2qURK2qUjxXaOn2vhQGUYOsIKg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/9c4fb0-c475-4204-9987-0a91cadbee66/1/T2qURK2qUjxXaOn2vhQGUYOsIKg.mft
Manifest number: 1847
Signing time: Mon 02 Mar 2026 10:00:36 +0000
Manifest this update: Mon 02 Mar 2026 10:00:36 +0000
Manifest next update: Tue 03 Mar 2026 10:00:36 +0000
Files and hashes: 1: T2qURK2qUjxXaOn2vhQGUYOsIKg.crl (hash: ukruUD5i7g7VYa2mznPCqz0pg3X7sB9En/0itONydjA=)
2: o8tO8stgvhxVUDIUNSKHy-JW2fo.roa (hash: Z08VgX0ivNPtY5zzCzl8jQ6u6U/EFae5aPOCebjGd+I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/9c4fb0-c475-4204-9987-0a91cadbee66/1/T2qURK2qUjxXaOn2vhQGUYOsIKg.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/9c4fb0-c475-4204-9987-0a91cadbee66/1/T2qURK2qUjxXaOn2vhQGUYOsIKg.mft
rsync://rpki.ripe.net/repository/DEFAULT/T2qURK2qUjxXaOn2vhQGUYOsIKg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 10:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:fe:16:36:c6:dd:82:ec:22:9b:9b:35:99:53:9a:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f6a9444adaa523c5768e9f6be14065183ac20a8
Validity
Not Before: Mar 2 10:00:36 2026 GMT
Not After : Mar 3 10:00:36 2026 GMT
Subject: CN=8482f07fb847802d8211f7711424dfad4b8c9629
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:b7:9b:75:88:a5:d4:95:32:17:d9:ec:21:6b:
f2:3c:0d:e8:69:e8:e8:ce:12:46:1b:d7:46:6d:c6:
71:7e:7a:c8:45:ee:5a:15:79:6f:eb:cb:b7:93:48:
27:a9:af:af:a6:55:24:6b:bd:2a:25:58:3a:e8:09:
7f:7a:cf:54:ce:ce:93:16:0a:dc:35:6a:04:3a:37:
59:bf:4c:a6:5c:2e:dd:de:15:f9:f8:26:37:bc:03:
3c:59:63:1d:29:f7:74:3e:d4:09:be:06:e5:b9:ac:
39:29:03:67:f2:d1:19:22:9c:94:60:70:0c:29:61:
56:d3:2c:f3:d8:63:d4:b1:25:82:ff:75:c3:75:36:
fd:d0:a4:5d:c4:7e:64:7c:cc:d0:f7:81:a8:08:6e:
8e:1e:a5:32:1a:f6:66:b6:12:d5:16:e3:3c:8e:2d:
c0:96:e6:73:06:e6:e1:32:e8:85:78:30:a7:fc:08:
59:53:91:ee:59:7c:66:7b:8c:a8:8e:a0:3a:26:85:
18:ec:b5:dc:c6:50:06:79:4e:b9:c2:9f:71:ed:e1:
16:c4:8c:86:15:79:a9:16:e0:0c:9c:c5:5e:35:4e:
b2:b9:12:37:d6:60:e6:18:e7:58:60:ad:aa:b5:0e:
1a:3b:c1:c3:08:e5:14:99:bf:f2:1e:9a:9f:eb:8d:
cb:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:82:F0:7F:B8:47:80:2D:82:11:F7:71:14:24:DF:AD:4B:8C:96:29
X509v3 Authority Key Identifier:
keyid:4F:6A:94:44:AD:AA:52:3C:57:68:E9:F6:BE:14:06:51:83:AC:20:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T2qURK2qUjxXaOn2vhQGUYOsIKg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9c4fb0-c475-4204-9987-0a91cadbee66/1/T2qURK2qUjxXaOn2vhQGUYOsIKg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9c4fb0-c475-4204-9987-0a91cadbee66/1/T2qURK2qUjxXaOn2vhQGUYOsIKg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:16:60:eb:9b:51:06:67:7b:ab:d6:ed:2c:b1:64:3a:07:ce:
34:99:06:b6:22:ea:71:19:32:c0:11:22:4d:83:18:29:f8:3f:
07:ea:22:4a:1b:83:68:00:78:30:c0:52:2a:d6:2b:74:fd:2d:
ba:d0:87:6f:38:64:f4:41:01:35:f0:99:a9:eb:23:00:21:cf:
96:32:bc:37:44:d1:dd:05:dd:5e:8c:14:86:cf:93:75:93:86:
4b:6b:64:10:d0:78:d7:42:85:3b:fe:26:89:b2:53:01:8d:6a:
6b:e4:23:30:4f:49:da:ec:e8:a8:f9:a1:fe:af:ca:a8:dd:ec:
1e:5b:15:89:55:98:85:ba:c1:56:e2:ad:f3:28:97:ff:76:1d:
f2:71:4e:0c:e1:81:13:a6:24:3d:ad:33:1e:a7:e1:f0:6d:d4:
80:0c:75:2b:22:79:51:37:e8:25:47:19:72:c0:f3:79:48:29:
71:4a:31:2a:dd:86:0a:16:dd:1f:fe:cd:dc:7a:45:f9:d2:b2:
5c:11:17:e0:d6:64:d1:1b:70:5d:1f:52:33:5d:90:c3:11:10:
f7:6d:a3:62:82:71:5e:f1:70:12:86:3a:6e:cf:8b:5b:b0:e6:
98:d9:f7:cf:0f:ba:b1:ae:56:7d:31:61:0b:c4:e8:f6:19:35:
0c:3e:96:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:28:22 2026 by rpki-client