Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/4d77d9-b0a3-48ad-aa2a-1c6ee5bbeb66/1/T5CKbYaKuem9sQRy--wxyWbpQnQ.mft
File: T5CKbYaKuem9sQRy--wxyWbpQnQ.mft (raw, json)
Hash identifier: lVU9Pflhqyegl2tbBFhKcIcp10+66iizKOSA5N+xHg4=
Subject key identifier: 4B:29:D3:70:8F:3F:D6:40:64:F1:88:F8:E9:B0:D3:A8:5D:0B:AC:06
Authority key identifier: 4F:90:8A:6D:86:8A:B9:E9:BD:B1:04:72:FB:EC:31:C9:66:E9:42:74
Certificate issuer: /CN=4f908a6d868ab9e9bdb10472fbec31c966e94274
Certificate serial: 019CAAC6BCA53C16A96731BC770C909F2523
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T5CKbYaKuem9sQRy--wxyWbpQnQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/4d77d9-b0a3-48ad-aa2a-1c6ee5bbeb66/1/T5CKbYaKuem9sQRy--wxyWbpQnQ.mft
Manifest number: 1848
Signing time: Sun 01 Mar 2026 19:01:16 +0000
Manifest this update: Sun 01 Mar 2026 19:01:16 +0000
Manifest next update: Mon 02 Mar 2026 19:01:16 +0000
Files and hashes: 1: T5CKbYaKuem9sQRy--wxyWbpQnQ.crl (hash: sYTSBBAuaYLamLPEgW2trQGaCWAc0d0cHlykzOFWxRs=)
2: X206-RRIU-SViIIBDaDjImGa3dY.roa (hash: 4tlHju7QfGBzo1uVLYUwcT6W8w+LZeglWr2bK3XYBCs=)
3: kWFBLyUBTvbzusgV_UpooCs9BmI.roa (hash: C7RWuvHqnRmXJ+YGjt/KFK6eJ1YPoddfOOX7abEUYvs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/4d77d9-b0a3-48ad-aa2a-1c6ee5bbeb66/1/T5CKbYaKuem9sQRy--wxyWbpQnQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/4d77d9-b0a3-48ad-aa2a-1c6ee5bbeb66/1/T5CKbYaKuem9sQRy--wxyWbpQnQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/T5CKbYaKuem9sQRy--wxyWbpQnQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:bc:a5:3c:16:a9:67:31:bc:77:0c:90:9f:25:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f908a6d868ab9e9bdb10472fbec31c966e94274
Validity
Not Before: Mar 1 19:01:16 2026 GMT
Not After : Mar 2 19:01:16 2026 GMT
Subject: CN=4b29d3708f3fd64064f188f8e9b0d3a85d0bac06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:b6:70:38:48:95:02:e5:0c:ae:ba:9c:a6:8c:
31:ef:6d:32:bb:51:83:9d:b5:47:12:fe:fb:23:38:
26:35:ce:77:25:b9:21:43:22:92:31:2a:b5:56:42:
f3:a4:fe:c3:3d:92:8a:19:bf:33:c8:6e:8d:eb:1e:
25:00:7e:a9:28:4b:b6:4a:f6:2f:bd:a5:f9:81:6c:
e3:cf:38:fd:36:e8:13:8b:00:19:ab:a7:dc:ae:13:
d0:d7:40:e6:ed:82:4d:bf:09:93:4c:33:0f:f2:92:
f6:e4:1f:da:a4:15:91:51:e2:d6:82:27:dc:5c:79:
b0:3b:9a:88:b7:65:b3:5d:d2:3f:4c:05:dc:1b:4f:
da:c4:9a:28:98:7c:55:70:3e:d8:e4:30:a5:72:4f:
df:11:ae:c2:fb:1f:f7:19:ff:4d:d5:32:af:7a:3a:
cc:98:b0:45:9d:7f:99:ea:de:3b:24:9a:3a:de:0a:
3d:78:4b:c0:cd:6a:53:a0:b7:3e:73:f4:0e:22:b4:
76:29:63:33:97:92:34:2e:47:ad:00:51:c4:48:9b:
8a:47:6b:89:8f:ea:cf:d3:aa:ad:be:88:f9:2a:5e:
d3:c6:37:22:02:b5:c0:e0:24:f1:74:b5:b3:2b:79:
a2:1b:22:d0:cf:f5:08:79:14:45:ea:4c:5e:41:6a:
27:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:29:D3:70:8F:3F:D6:40:64:F1:88:F8:E9:B0:D3:A8:5D:0B:AC:06
X509v3 Authority Key Identifier:
keyid:4F:90:8A:6D:86:8A:B9:E9:BD:B1:04:72:FB:EC:31:C9:66:E9:42:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5CKbYaKuem9sQRy--wxyWbpQnQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/4d77d9-b0a3-48ad-aa2a-1c6ee5bbeb66/1/T5CKbYaKuem9sQRy--wxyWbpQnQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/4d77d9-b0a3-48ad-aa2a-1c6ee5bbeb66/1/T5CKbYaKuem9sQRy--wxyWbpQnQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:7e:71:45:d2:b3:de:a0:2d:29:7b:6f:8f:df:3b:78:5f:db:
c4:9a:dd:9b:19:8d:45:1a:dc:8f:09:dd:ea:5b:8a:c2:7a:b3:
c3:8d:57:20:5a:18:8f:ba:e4:d9:59:d9:a9:0c:86:9f:f3:36:
dc:cd:03:7a:44:85:b4:5a:da:1a:c4:00:c1:76:67:90:57:4c:
48:af:8e:02:91:33:76:13:0c:d5:62:7f:aa:9b:c4:c5:c4:b0:
30:00:e1:cf:43:ce:b7:9b:96:90:5a:11:09:8f:8b:93:7d:61:
74:de:e4:1b:4e:24:35:7b:7d:5d:7c:5b:27:ce:6d:f0:9c:38:
73:dd:80:36:fd:29:52:46:d2:16:5a:48:21:b0:e8:78:c2:9c:
dd:ab:4c:8f:b0:56:af:82:2b:b6:e3:0c:f8:cd:00:14:fe:32:
c3:ad:a9:0e:4a:a7:3f:d6:64:ec:1f:8d:a5:13:82:61:99:d8:
6f:8f:75:eb:c2:05:2d:03:e3:6f:0c:57:32:0a:63:21:0f:91:
8f:c2:44:78:21:54:c7:0e:ae:b9:aa:aa:62:5f:4f:7c:0a:a5:
a6:39:42:33:01:4b:d5:8e:cb:fd:04:8d:74:74:d4:5a:ca:3a:
62:1c:8a:4f:4f:fd:1b:7a:37:48:22:a5:ae:b0:80:39:b7:4b:
56:60:4b:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:59:57 2026 by rpki-client