Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/7d9e10-2c19-4dd8-a80f-40c8697bbde9/1/T4BFzPUJd-vDBmo87tj9MvHwI94.mft
File: T4BFzPUJd-vDBmo87tj9MvHwI94.mft (raw, json)
Hash identifier: +CMFDLQKmnvS/CAY0KNvPeP6XHo3C5m8D5caLsA0c1g=
Subject key identifier: E5:C6:84:83:DF:69:D5:FC:DD:7B:58:EE:F3:7C:35:C0:B8:F9:EF:C4
Authority key identifier: 4F:80:45:CC:F5:09:77:EB:C3:06:6A:3C:EE:D8:FD:32:F1:F0:23:DE
Certificate issuer: /CN=4f8045ccf50977ebc3066a3ceed8fd32f1f023de
Certificate serial: 019CAA21F2B524F4BE07312EDEE66EF493AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T4BFzPUJd-vDBmo87tj9MvHwI94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/7d9e10-2c19-4dd8-a80f-40c8697bbde9/1/T4BFzPUJd-vDBmo87tj9MvHwI94.mft
Manifest number: 1784
Signing time: Sun 01 Mar 2026 16:01:17 +0000
Manifest this update: Sun 01 Mar 2026 16:01:17 +0000
Manifest next update: Mon 02 Mar 2026 16:01:17 +0000
Files and hashes: 1: A6gi-so3kFc6wSPDrN7dSs0W0Xw.roa (hash: eMXdGzp0+E8BUJOejeN9hz+moObGIQrtjp1B5O+rfYQ=)
2: T4BFzPUJd-vDBmo87tj9MvHwI94.crl (hash: NJHzrSA8vZ5nE/PXrg4qZjoMIzQ1Pywc61zPs697k4U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/7d9e10-2c19-4dd8-a80f-40c8697bbde9/1/T4BFzPUJd-vDBmo87tj9MvHwI94.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/7d9e10-2c19-4dd8-a80f-40c8697bbde9/1/T4BFzPUJd-vDBmo87tj9MvHwI94.mft
rsync://rpki.ripe.net/repository/DEFAULT/T4BFzPUJd-vDBmo87tj9MvHwI94.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:21:f2:b5:24:f4:be:07:31:2e:de:e6:6e:f4:93:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f8045ccf50977ebc3066a3ceed8fd32f1f023de
Validity
Not Before: Mar 1 16:01:17 2026 GMT
Not After : Mar 2 16:01:17 2026 GMT
Subject: CN=e5c68483df69d5fcdd7b58eef37c35c0b8f9efc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:7a:77:2c:71:e0:44:34:8c:69:e0:2e:93:06:
d7:91:ec:14:2a:da:30:26:e8:0f:ca:b1:14:8f:79:
1c:5f:38:d8:af:dc:e2:9e:7f:50:d7:fe:5c:1c:d1:
fb:9d:35:c6:82:cd:f6:15:ca:66:77:4e:93:ce:18:
f8:82:37:f2:e0:d1:68:37:28:3a:b9:18:d4:df:4b:
b6:4d:cf:ef:94:ee:b8:29:97:07:47:1b:52:59:e4:
79:85:98:70:00:6d:90:52:04:a0:5c:62:a4:77:0c:
23:2c:39:db:d7:d0:18:6a:15:0c:15:8c:00:9e:6b:
ef:06:93:5e:5e:4b:8b:8f:66:24:59:af:46:80:7b:
28:51:e5:28:c1:7b:42:4f:bb:fe:8e:be:c3:36:df:
d1:c7:41:ab:02:6f:b3:b3:bb:b5:fb:b0:ad:e9:ee:
be:c7:fa:0c:9e:d9:ba:7b:53:53:bd:fa:d0:b4:c1:
b2:f6:c7:ee:09:85:dd:39:9e:09:46:ff:12:9c:96:
bf:df:13:5e:87:45:e4:89:75:32:97:ed:35:2f:88:
8a:53:e6:62:9b:f8:83:a6:63:6e:d6:e3:82:a8:28:
06:60:54:21:ee:0f:e9:4e:b3:49:4c:03:fd:43:c3:
82:3d:fd:f1:1a:2d:e1:8a:98:61:de:15:b9:0c:a6:
c8:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:C6:84:83:DF:69:D5:FC:DD:7B:58:EE:F3:7C:35:C0:B8:F9:EF:C4
X509v3 Authority Key Identifier:
keyid:4F:80:45:CC:F5:09:77:EB:C3:06:6A:3C:EE:D8:FD:32:F1:F0:23:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T4BFzPUJd-vDBmo87tj9MvHwI94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/7d9e10-2c19-4dd8-a80f-40c8697bbde9/1/T4BFzPUJd-vDBmo87tj9MvHwI94.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/7d9e10-2c19-4dd8-a80f-40c8697bbde9/1/T4BFzPUJd-vDBmo87tj9MvHwI94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:2d:8d:5b:33:b5:9a:95:88:cc:f8:6d:cd:e8:71:10:50:6c:
a4:e0:74:f7:a4:55:d6:bb:42:d3:f0:ed:a0:0f:92:31:00:2a:
56:92:62:e6:b9:62:96:aa:94:38:c9:76:28:2f:cb:26:5d:12:
3f:23:19:a3:c5:f9:da:9a:96:1a:23:91:05:f4:8b:62:2a:2b:
58:b1:72:3c:87:16:d7:33:ca:2c:8f:7b:86:64:d6:c3:c2:8b:
21:a6:81:9b:d9:bd:32:b9:da:d0:97:a5:de:31:2e:57:ca:3c:
5b:82:9b:ca:2e:2a:61:b1:69:35:e9:5f:ca:c6:96:27:cf:70:
9e:78:f0:43:19:83:ca:f4:ce:a7:db:f4:2c:98:2f:b2:a8:35:
9c:48:31:a5:86:62:6b:3e:73:5a:f4:9e:97:de:4e:ce:33:8c:
80:69:97:5d:dd:0b:cc:f3:01:07:2b:93:4c:36:21:29:d0:43:
7a:67:17:b8:b4:1b:72:34:76:3b:60:4e:ea:a4:11:82:0d:30:
89:75:2a:1b:43:db:31:dd:9c:92:aa:fd:01:2f:76:dd:66:95:
76:7b:b8:41:d3:32:e6:8c:19:7b:a1:50:8f:25:80:63:24:71:
8a:91:53:94:15:5f:2d:a5:b5:99:2f:28:73:1b:12:aa:51:a1:
c4:d5:f0:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:41:50 2026 by rpki-client