Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/fdff01-762f-43a9-a4be-7bb1844014d6/1/tT8fJDLiJL3km_qxn2dTYpq1cH8.mft
File: tT8fJDLiJL3km_qxn2dTYpq1cH8.mft (raw, json)
Hash identifier: ubpEACa4fWLsnAC5WeocS4WIIYGQjs80/h6+y3OtQ4c=
Subject key identifier: 02:A9:DC:34:D8:BB:71:54:79:E4:CE:59:5B:96:8F:57:D2:F0:F1:46
Authority key identifier: B5:3F:1F:24:32:E2:24:BD:E4:9B:FA:B1:9F:67:53:62:9A:B5:70:7F
Certificate issuer: /CN=b53f1f2432e224bde49bfab19f6753629ab5707f
Certificate serial: 019D98F52CEB642E43D91B6AB355FC15F46D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tT8fJDLiJL3km_qxn2dTYpq1cH8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/fdff01-762f-43a9-a4be-7bb1844014d6/1/tT8fJDLiJL3km_qxn2dTYpq1cH8.mft
Manifest number: 0F1E
Signing time: Fri 17 Apr 2026 01:01:37 +0000
Manifest this update: Fri 17 Apr 2026 01:01:37 +0000
Manifest next update: Sat 18 Apr 2026 01:01:37 +0000
Files and hashes: 1: tT8fJDLiJL3km_qxn2dTYpq1cH8.crl (hash: geDIF4J/oFWYumDhNLO/udpdEnMzlUk1/i+/NR7BDjQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/fdff01-762f-43a9-a4be-7bb1844014d6/1/tT8fJDLiJL3km_qxn2dTYpq1cH8.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/fdff01-762f-43a9-a4be-7bb1844014d6/1/tT8fJDLiJL3km_qxn2dTYpq1cH8.mft
rsync://rpki.ripe.net/repository/DEFAULT/tT8fJDLiJL3km_qxn2dTYpq1cH8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f5:2c:eb:64:2e:43:d9:1b:6a:b3:55:fc:15:f4:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b53f1f2432e224bde49bfab19f6753629ab5707f
Validity
Not Before: Apr 17 01:01:37 2026 GMT
Not After : Apr 18 01:01:37 2026 GMT
Subject: CN=02a9dc34d8bb715479e4ce595b968f57d2f0f146
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:86:0c:38:7a:ae:0b:ea:9f:86:73:db:2d:0e:
6e:48:1c:d7:a6:84:71:36:a7:ca:63:a1:d1:11:da:
00:40:09:cb:b1:a2:be:74:67:4a:7f:cd:3a:41:e1:
fc:60:67:41:6c:d8:ec:5a:0d:97:c4:df:ed:02:aa:
01:fc:b8:43:91:71:31:1e:ee:f5:7e:03:05:74:ef:
f0:26:04:c1:9d:f6:e5:7c:94:93:68:19:9f:c9:74:
52:aa:c8:2b:16:dd:29:f4:2d:4f:f6:52:a3:5f:b5:
6d:86:d3:c6:bb:43:1a:a1:28:bb:d2:4f:7d:96:f3:
f0:b8:c3:0f:e4:83:0b:8f:b0:8f:57:99:08:ee:6e:
27:52:b8:ed:a1:38:ff:c0:a8:26:e4:bb:cc:09:39:
e8:a6:5b:12:e7:14:78:41:12:ef:e2:57:a5:0e:e9:
ca:0f:46:e3:8d:0e:ae:7c:af:f1:45:2b:20:a7:e2:
54:58:0b:b5:65:59:ef:30:89:bb:ab:93:dd:d9:69:
09:90:88:b0:31:fd:0e:5d:a5:70:4b:97:5a:23:a6:
60:e8:9a:1f:02:a4:c6:fa:f7:db:86:7c:5c:9d:ae:
6c:e9:6f:95:6b:d9:1b:0c:f6:85:6b:87:ff:de:80:
5b:f9:b7:72:ef:7a:2f:22:ee:c8:61:c8:e6:e0:2a:
0d:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:A9:DC:34:D8:BB:71:54:79:E4:CE:59:5B:96:8F:57:D2:F0:F1:46
X509v3 Authority Key Identifier:
keyid:B5:3F:1F:24:32:E2:24:BD:E4:9B:FA:B1:9F:67:53:62:9A:B5:70:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tT8fJDLiJL3km_qxn2dTYpq1cH8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/fdff01-762f-43a9-a4be-7bb1844014d6/1/tT8fJDLiJL3km_qxn2dTYpq1cH8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/fdff01-762f-43a9-a4be-7bb1844014d6/1/tT8fJDLiJL3km_qxn2dTYpq1cH8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:c7:9d:03:cc:73:72:1f:bc:8a:5a:70:a3:ff:49:5f:f0:96:
df:58:fd:a6:4f:06:76:15:2e:44:34:8d:d2:b0:57:5d:23:bb:
cc:c9:d9:78:03:3a:10:1f:36:a7:55:22:c6:df:1e:66:62:b7:
46:dd:97:3b:5a:9f:3b:bf:f1:82:54:08:e4:02:26:12:61:99:
fa:31:da:9c:47:c6:57:01:0a:4e:2b:bd:cd:76:62:11:97:55:
57:e9:e2:c3:f6:0e:7f:74:e9:73:0b:03:1c:21:ec:8c:47:5d:
33:93:da:1c:b9:c4:d4:ea:9c:63:09:df:4c:6a:5b:20:38:0e:
7a:ef:9a:37:a5:d0:5f:9a:8f:0b:a2:8a:44:1e:4b:06:10:66:
83:91:1b:c4:b5:7c:b9:49:77:aa:80:37:21:36:b0:31:69:4f:
1e:82:42:5e:b7:48:ad:82:4a:d5:f6:25:31:62:11:53:7a:c0:
91:fa:96:e3:66:78:1e:32:80:f5:5b:12:0f:9c:d0:89:25:60:
56:d2:4f:ab:23:18:93:45:29:a5:3f:12:1a:98:85:c8:7e:07:
41:a9:c6:a9:44:c2:80:50:04:77:12:8a:b5:c1:29:7a:21:02:
8f:4b:06:c2:b6:52:43:96:e5:82:19:69:33:f8:a8:b5:37:8f:
3e:f4:7d:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:52:49 2026 by rpki-client