Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/42/b8f50e-475f-4b47-85c0-5f123555cfb1/1/T-uUV-xRnoI3hncQvMgvow6uZ8A.mft
File: T-uUV-xRnoI3hncQvMgvow6uZ8A.mft (raw, json)
Hash identifier: /uBRedjLK6BmOcaredaYAIZGvQAtZDSIaD/+1DJ2j3Y=
Subject key identifier: 50:91:85:0B:C5:94:55:5C:CF:70:E8:07:47:D1:00:03:24:63:57:E4
Authority key identifier: 4F:EB:94:57:EC:51:9E:82:37:86:77:10:BC:C8:2F:A3:0E:AE:67:C0
Certificate issuer: /CN=4feb9457ec519e8237867710bcc82fa30eae67c0
Certificate serial: 01A0EC665113BF5CBB0D17ED64ECB9A74C68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T-uUV-xRnoI3hncQvMgvow6uZ8A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/b8f50e-475f-4b47-85c0-5f123555cfb1/1/T-uUV-xRnoI3hncQvMgvow6uZ8A.mft
Manifest number: 1A7A
Signing time: Tue 29 Sep 2026 09:02:03 +0000
Manifest this update: Tue 29 Sep 2026 09:02:03 +0000
Manifest next update: Wed 30 Sep 2026 09:02:03 +0000
Files and hashes: 1: T-uUV-xRnoI3hncQvMgvow6uZ8A.crl (hash: rF+UaZ3L9Wc9oA9bZElPen7Q20LuMgJJoa9s16/39gE=)
2: YrHkJUDzzHYV4NSM8kuc3mWA3No.roa (hash: XN+H9pEw3/RHdNbn4FFCp9WEa3ViQ6Ir6r897iLElR0=)
3: eczTTw63Z89Bvx_PDTMEgnxlsuM.roa (hash: EGjQDsuLjtgXMDaJKqFFVXP8wORi9rfRbOBnhjq8cf8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/b8f50e-475f-4b47-85c0-5f123555cfb1/1/T-uUV-xRnoI3hncQvMgvow6uZ8A.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/b8f50e-475f-4b47-85c0-5f123555cfb1/1/T-uUV-xRnoI3hncQvMgvow6uZ8A.mft
rsync://rpki.ripe.net/repository/DEFAULT/T-uUV-xRnoI3hncQvMgvow6uZ8A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 08:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ec:66:51:13:bf:5c:bb:0d:17:ed:64:ec:b9:a7:4c:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4feb9457ec519e8237867710bcc82fa30eae67c0
Validity
Not Before: Sep 29 09:02:03 2026 GMT
Not After : Sep 30 09:02:03 2026 GMT
Subject: CN=5091850bc594555ccf70e80747d10003246357e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:83:2e:dc:6a:52:f7:68:1c:eb:18:9e:fb:54:
6e:9b:a7:aa:81:4b:2c:27:bf:75:72:cd:23:80:f2:
ec:c4:b2:1f:fd:ba:80:b6:cd:88:d6:a1:a0:9b:e7:
77:40:d9:12:21:10:04:a2:b4:bd:59:da:06:12:27:
0c:a2:e4:a1:03:03:4d:bf:ad:88:a6:96:a6:22:fa:
ba:1b:f3:a9:19:60:7d:16:a3:a1:93:05:44:07:86:
4b:4a:15:d2:e3:45:41:4c:08:50:40:e7:f1:f0:1b:
99:d3:73:ec:34:e9:bd:3f:90:30:c1:9f:53:0a:21:
79:a2:91:53:9d:72:81:91:02:b5:32:80:67:c2:21:
48:6e:bf:2f:bb:46:ea:a8:98:88:cf:c4:4c:1f:b7:
35:11:5a:0d:15:9b:94:6e:49:46:c9:3c:ec:1e:56:
b2:d3:e4:0e:45:a3:3e:0c:63:79:c0:ff:fb:32:2f:
d2:96:92:8c:1e:fe:6b:7a:9d:5c:ef:33:08:2f:33:
d6:a4:15:1e:95:74:08:a4:c3:2d:66:98:8f:3a:b1:
42:5c:a2:7a:2b:75:66:e4:74:fb:d7:f7:3b:20:38:
30:07:ce:c0:3e:1e:15:03:5e:30:b5:13:a9:8c:2a:
1e:f5:28:40:7d:04:07:48:86:27:14:39:9e:ae:9f:
00:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:91:85:0B:C5:94:55:5C:CF:70:E8:07:47:D1:00:03:24:63:57:E4
X509v3 Authority Key Identifier:
keyid:4F:EB:94:57:EC:51:9E:82:37:86:77:10:BC:C8:2F:A3:0E:AE:67:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T-uUV-xRnoI3hncQvMgvow6uZ8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/b8f50e-475f-4b47-85c0-5f123555cfb1/1/T-uUV-xRnoI3hncQvMgvow6uZ8A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/b8f50e-475f-4b47-85c0-5f123555cfb1/1/T-uUV-xRnoI3hncQvMgvow6uZ8A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:24:5d:e3:42:d1:64:90:63:26:af:9b:c4:f9:a9:78:89:8d:
21:5f:49:8a:4d:fc:e1:8e:1f:77:7b:86:8d:f5:35:7b:1b:5a:
e8:a6:f1:db:ba:00:ce:37:e4:0e:44:8a:ba:d1:04:fa:7a:b8:
88:4a:f0:50:2a:67:62:71:84:84:7b:e8:16:99:40:5a:94:76:
f7:0e:7f:f0:c0:72:1f:37:83:fe:0c:c6:8b:fd:36:00:23:46:
ac:4c:bc:44:22:5f:20:61:8d:28:96:d2:e5:a8:42:5a:24:c5:
3a:04:38:cd:80:5d:d9:85:fd:87:21:0b:33:c4:64:f4:a1:6e:
74:19:5e:fe:14:44:ca:0a:9e:70:5d:f8:94:94:8b:aa:50:2a:
78:f9:10:9a:13:26:72:b7:ed:7e:55:ef:e9:db:74:bb:6d:b3:
f9:20:85:45:13:c7:b8:da:6d:d2:62:3f:af:5c:9c:a1:86:5d:
58:bd:f1:73:75:91:3e:ea:b9:5f:af:08:a6:fe:6f:5e:58:30:
0e:af:7c:0f:40:4f:e8:49:c2:0c:15:33:2e:cf:c1:3c:3b:d6:
3e:e3:60:04:75:dd:4d:26:27:f1:95:a5:8a:92:5c:9b:5a:e7:
de:be:33:b4:1f:43:7a:b0:6f:f7:e9:cb:80:09:00:68:cc:38:
e6:f3:cd:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 12:22:15 2026 by rpki-client