Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/ff31f0-7960-4df1-9885-d3146bfcddff/1/T9a30KYwNXvDweDN2gbcqIo0Y-w.mft
File: T9a30KYwNXvDweDN2gbcqIo0Y-w.mft (raw, json)
Hash identifier: Q6UoTdrjpeqC40OWUH0nz9ZKh5Siy8Im76f8eAgqPJY=
Subject key identifier: 26:50:66:A6:18:C3:6E:35:13:28:76:29:A2:3D:6B:0C:2F:FA:FD:3E
Authority key identifier: 4F:D6:B7:D0:A6:30:35:7B:C3:C1:E0:CD:DA:06:DC:A8:8A:34:63:EC
Certificate issuer: /CN=4fd6b7d0a630357bc3c1e0cdda06dca88a3463ec
Certificate serial: 019D99D0B400675F7199D6C1B71F18C2E388
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T9a30KYwNXvDweDN2gbcqIo0Y-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/ff31f0-7960-4df1-9885-d3146bfcddff/1/T9a30KYwNXvDweDN2gbcqIo0Y-w.mft
Manifest number: 07B0
Signing time: Fri 17 Apr 2026 05:01:24 +0000
Manifest this update: Fri 17 Apr 2026 05:01:24 +0000
Manifest next update: Sat 18 Apr 2026 05:01:24 +0000
Files and hashes: 1: T9a30KYwNXvDweDN2gbcqIo0Y-w.crl (hash: V/g4B19bvwHRWwZc7HnfRgEBWQnWxPQGA73PZu9mM9A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/ff31f0-7960-4df1-9885-d3146bfcddff/1/T9a30KYwNXvDweDN2gbcqIo0Y-w.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/ff31f0-7960-4df1-9885-d3146bfcddff/1/T9a30KYwNXvDweDN2gbcqIo0Y-w.mft
rsync://rpki.ripe.net/repository/DEFAULT/T9a30KYwNXvDweDN2gbcqIo0Y-w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:b4:00:67:5f:71:99:d6:c1:b7:1f:18:c2:e3:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fd6b7d0a630357bc3c1e0cdda06dca88a3463ec
Validity
Not Before: Apr 17 05:01:24 2026 GMT
Not After : Apr 18 05:01:24 2026 GMT
Subject: CN=265066a618c36e3513287629a23d6b0c2ffafd3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:67:db:17:e6:6b:f2:0e:81:83:a9:38:48:72:
de:9d:a4:26:a6:7a:9a:79:9f:5d:f5:2c:96:19:f9:
d3:87:7d:60:1c:4f:02:b9:c5:ce:9e:3a:89:59:6b:
e0:c5:e6:41:5b:be:95:cc:8a:b5:f3:7e:57:75:f5:
b7:5f:f0:05:24:77:03:d6:56:ec:cb:d0:c6:fb:d4:
47:3a:80:3c:85:1d:16:e3:ed:34:0b:c1:32:8f:cf:
45:f3:42:f9:e3:ac:c7:5c:99:fd:52:cd:e0:59:1b:
81:cf:51:a9:6a:8f:ce:ac:e0:ad:f7:8f:37:e0:db:
2e:b7:dd:a2:cb:44:df:f9:a0:26:be:99:5a:bd:f6:
33:86:7f:8c:2b:fa:fa:24:5d:63:44:ec:3e:5d:0e:
f0:ef:d8:b2:7c:70:ea:1e:b8:82:ae:ea:8e:94:4c:
63:47:94:96:b8:1f:3d:c9:34:50:31:be:e4:87:83:
08:1e:89:9f:1d:b2:2e:b8:9d:78:1f:8f:25:7a:51:
4a:ac:18:d0:32:88:ab:e5:0d:7f:57:ff:41:e1:df:
23:0d:f5:d5:3d:88:73:21:a0:ca:4d:e7:11:0e:9a:
03:42:63:81:93:e8:ea:2a:79:6e:a1:ea:75:2a:17:
2c:89:34:3c:a6:ae:af:40:8c:ce:0e:ad:8d:1c:90:
c2:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:50:66:A6:18:C3:6E:35:13:28:76:29:A2:3D:6B:0C:2F:FA:FD:3E
X509v3 Authority Key Identifier:
keyid:4F:D6:B7:D0:A6:30:35:7B:C3:C1:E0:CD:DA:06:DC:A8:8A:34:63:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T9a30KYwNXvDweDN2gbcqIo0Y-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/ff31f0-7960-4df1-9885-d3146bfcddff/1/T9a30KYwNXvDweDN2gbcqIo0Y-w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/ff31f0-7960-4df1-9885-d3146bfcddff/1/T9a30KYwNXvDweDN2gbcqIo0Y-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:38:7e:d1:45:e1:4e:34:db:de:a2:d8:b0:6e:bf:1f:57:fd:
dc:fb:51:d7:40:bb:f4:cb:ee:37:13:cd:a8:13:47:ff:e1:ee:
a2:2a:86:04:1c:3a:e2:51:57:97:41:cf:46:8a:6e:f5:92:3b:
ec:06:90:b7:65:75:78:37:71:e1:ab:39:02:a6:1f:68:cf:3b:
85:9c:90:fb:6b:e0:2d:3e:40:c8:8f:c8:2a:75:9b:26:c9:96:
14:d6:7d:53:27:81:18:27:e6:6c:c9:ed:fb:20:f2:35:e3:04:
77:8b:7f:16:e7:b5:7c:18:80:a8:7b:f7:2a:99:e4:ae:79:ae:
13:38:82:4a:87:16:ba:42:56:23:61:24:7a:1c:ee:ca:d2:2e:
9a:a2:11:a3:bc:b0:a8:f9:69:e0:d4:7a:a7:b8:21:cc:54:cf:
54:cb:f1:6b:29:94:d7:69:a1:e8:d3:7c:e0:a2:03:be:3b:68:
b5:72:9c:49:c5:af:bb:75:ab:8b:3e:5e:04:f0:3c:ec:86:2e:
97:a2:42:77:1e:21:16:65:cb:cf:03:5a:46:c0:18:4f:91:8f:
44:d7:8d:d1:66:c5:d1:82:4d:5b:f6:a0:2c:09:99:f8:d7:e8:
10:9b:38:7b:1f:d3:8a:47:6c:15:20:7d:6c:40:1f:ed:49:2f:
8c:34:92:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:23:50 2026 by rpki-client