Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/9c4fb0-c475-4204-9987-0a91cadbee66/1/T2qURK2qUjxXaOn2vhQGUYOsIKg.mft
File: T2qURK2qUjxXaOn2vhQGUYOsIKg.mft (raw, json)
Hash identifier: +LrJBUl4xDkYGakR8E6RZOB2J7AcAY2vtmMVzqFuPvQ=
Subject key identifier: 1B:FD:2A:9A:09:47:A9:74:3A:48:5E:2D:47:E3:21:19:2C:BE:25:11
Authority key identifier: 4F:6A:94:44:AD:AA:52:3C:57:68:E9:F6:BE:14:06:51:83:AC:20:A8
Certificate issuer: /CN=4f6a9444adaa523c5768e9f6be14065183ac20a8
Certificate serial: 019FACACF27DA74889CA5589B0B57B66D762
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T2qURK2qUjxXaOn2vhQGUYOsIKg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/9c4fb0-c475-4204-9987-0a91cadbee66/1/T2qURK2qUjxXaOn2vhQGUYOsIKg.mft
Manifest number: 19D4
Signing time: Wed 29 Jul 2026 07:00:43 +0000
Manifest this update: Wed 29 Jul 2026 07:00:43 +0000
Manifest next update: Thu 30 Jul 2026 07:00:43 +0000
Files and hashes: 1: T2qURK2qUjxXaOn2vhQGUYOsIKg.crl (hash: 7m2jpyLq39vQHCqnryIazMfzMF7JOk7dTlgcbdIxCcU=)
2: o8tO8stgvhxVUDIUNSKHy-JW2fo.roa (hash: Z08VgX0ivNPtY5zzCzl8jQ6u6U/EFae5aPOCebjGd+I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/9c4fb0-c475-4204-9987-0a91cadbee66/1/T2qURK2qUjxXaOn2vhQGUYOsIKg.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/9c4fb0-c475-4204-9987-0a91cadbee66/1/T2qURK2qUjxXaOn2vhQGUYOsIKg.mft
rsync://rpki.ripe.net/repository/DEFAULT/T2qURK2qUjxXaOn2vhQGUYOsIKg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:ac:f2:7d:a7:48:89:ca:55:89:b0:b5:7b:66:d7:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f6a9444adaa523c5768e9f6be14065183ac20a8
Validity
Not Before: Jul 29 07:00:43 2026 GMT
Not After : Jul 30 07:00:43 2026 GMT
Subject: CN=1bfd2a9a0947a9743a485e2d47e321192cbe2511
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:95:d6:8b:4e:96:c9:bc:7b:c9:14:4c:ad:4b:
58:65:43:b1:45:be:ae:30:5f:95:22:42:30:a6:c3:
11:84:71:8d:0d:2d:97:5b:d2:3e:94:2a:6a:22:43:
41:c9:61:b9:4e:ad:20:06:1a:f2:cc:32:a6:61:b3:
ca:b6:8f:81:b9:09:55:f4:72:b3:23:c2:43:a4:f1:
b7:c9:91:27:9f:03:57:61:ef:8e:5a:69:8d:b2:80:
85:26:81:65:18:c0:79:e1:50:8a:c9:ae:27:bf:e7:
b9:10:d7:a4:fa:25:68:3c:b1:f2:62:76:26:a4:e4:
30:71:7b:94:b8:7d:b1:d0:cd:cd:8e:73:8c:d3:9d:
f6:d3:b8:bc:1b:63:b1:07:b0:8b:27:07:37:7a:57:
55:60:5a:e2:07:4c:73:0c:c2:37:40:c0:ab:93:62:
62:0b:93:3b:ca:8e:9e:d8:bd:f8:84:23:54:81:9e:
ff:52:75:90:1f:20:79:ae:a4:f7:04:71:60:90:be:
4e:7a:6c:28:0e:e5:11:cf:aa:e5:34:21:c9:45:11:
cc:7f:02:b3:30:48:88:fd:bf:28:a3:a7:5a:69:59:
4d:12:4c:8e:12:74:5f:ac:4b:64:4b:64:65:32:49:
4e:6d:4c:f3:08:6c:28:ce:6a:bc:af:ad:ff:84:91:
13:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:FD:2A:9A:09:47:A9:74:3A:48:5E:2D:47:E3:21:19:2C:BE:25:11
X509v3 Authority Key Identifier:
keyid:4F:6A:94:44:AD:AA:52:3C:57:68:E9:F6:BE:14:06:51:83:AC:20:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T2qURK2qUjxXaOn2vhQGUYOsIKg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9c4fb0-c475-4204-9987-0a91cadbee66/1/T2qURK2qUjxXaOn2vhQGUYOsIKg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9c4fb0-c475-4204-9987-0a91cadbee66/1/T2qURK2qUjxXaOn2vhQGUYOsIKg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:54:59:15:0a:3d:f3:2c:27:b5:4d:cd:8c:bc:f2:eb:24:07:
54:e6:f7:6f:b6:2f:ac:dc:ea:46:9d:2f:ec:b2:e8:c2:7c:94:
05:0c:4e:49:07:29:f8:ad:47:c2:46:48:07:1d:77:7e:ec:35:
79:cf:98:58:9b:b1:90:1e:f0:09:4c:32:a1:74:c2:67:39:67:
5d:6e:76:e1:07:b2:ff:fa:eb:05:a5:cf:21:26:7a:09:19:49:
d8:97:11:26:cc:bb:c2:02:99:72:2d:ea:f0:4c:b0:25:e3:e4:
81:cd:1b:e8:a2:f9:21:be:e5:a0:cf:97:0a:7c:d5:5e:3c:84:
0a:28:64:8e:3e:71:e0:99:4a:b8:54:5d:bd:fc:e2:f0:62:b2:
bf:41:7c:61:ec:8c:6a:20:a6:8f:e7:5f:85:9c:fb:9c:96:a6:
84:01:15:28:72:af:bf:90:f6:6f:bb:a3:08:04:3d:51:bc:0a:
e0:37:9d:5a:e0:ae:93:9b:6a:37:9f:79:55:78:08:87:57:ee:
6c:86:e8:38:24:06:4a:e2:11:12:1e:e1:de:42:3a:92:e3:2c:
ab:34:23:71:82:19:75:12:80:ec:d9:8c:b2:19:5a:72:f2:b2:
9f:cd:67:29:2a:53:dd:df:4d:b0:2d:23:7f:35:bd:b6:85:e1:
eb:5f:23:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:44:04 2026 by rpki-client