Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/43/836431-b90d-4a98-be2c-955f5cb09893/1/t4cfKQ__DgQmDGdT44fJ77db4pY.mft
File: t4cfKQ__DgQmDGdT44fJ77db4pY.mft (raw, json)
Hash identifier: JzGv0zHD2J1flC/dZeuC4FoVjN+ets8NuNBXBfaKYcM=
Subject key identifier: 30:81:89:AB:3B:19:44:A2:6F:69:5F:F0:9D:6F:EC:AF:E4:D9:2E:24
Authority key identifier: B7:87:1F:29:0F:FF:0E:04:26:0C:67:53:E3:87:C9:EF:B7:5B:E2:96
Certificate issuer: /CN=b7871f290fff0e04260c6753e387c9efb75be296
Certificate serial: 01A0C3D73DD2A96F7312546F11F5311CEE4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t4cfKQ__DgQmDGdT44fJ77db4pY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/836431-b90d-4a98-be2c-955f5cb09893/1/t4cfKQ__DgQmDGdT44fJ77db4pY.mft
Manifest number: 0314
Signing time: Mon 21 Sep 2026 12:00:58 +0000
Manifest this update: Mon 21 Sep 2026 12:00:58 +0000
Manifest next update: Tue 22 Sep 2026 12:00:58 +0000
Files and hashes: 1: 3zIrc0aWYxX9dKMnCfOMwQPa5t8.asa (hash: cnCGcJrQuR05fmoh1KvgU/rA+KkWRXV4v1npDlI9OnU=)
2: Zs7v1NDx63hWaP0rqC9JgN4viuQ.roa (hash: hVIg73QWwWuqnjCLMmbKJMff3qM/nFL/BxoYDSJaxBw=)
3: t4cfKQ__DgQmDGdT44fJ77db4pY.crl (hash: fIo4veKP2gBPJlOjvjSPsj4mcn7WTBaXHheW2WNozxY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/836431-b90d-4a98-be2c-955f5cb09893/1/t4cfKQ__DgQmDGdT44fJ77db4pY.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/836431-b90d-4a98-be2c-955f5cb09893/1/t4cfKQ__DgQmDGdT44fJ77db4pY.mft
rsync://rpki.ripe.net/repository/DEFAULT/t4cfKQ__DgQmDGdT44fJ77db4pY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 12:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c3:d7:3d:d2:a9:6f:73:12:54:6f:11:f5:31:1c:ee:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7871f290fff0e04260c6753e387c9efb75be296
Validity
Not Before: Sep 21 12:00:58 2026 GMT
Not After : Sep 22 12:00:58 2026 GMT
Subject: CN=308189ab3b1944a26f695ff09d6fecafe4d92e24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:3e:56:44:16:3e:70:b7:c3:82:3e:8f:3f:2e:
ae:19:c6:bf:50:90:82:28:8f:d0:3b:dc:52:bd:15:
6e:e6:3c:76:f1:c2:ad:e9:ee:ae:79:94:58:68:17:
56:3f:b7:97:11:7a:8d:60:52:f6:2d:0e:cc:92:5b:
65:d7:76:32:ab:76:0f:82:e3:ad:24:64:b3:1a:37:
d1:5a:9e:a3:81:74:7e:bd:9f:82:1a:ce:65:8e:3d:
8b:fb:08:78:cf:fa:f7:33:4f:1d:41:a0:53:7b:e3:
8b:e0:42:2d:2f:f7:9f:da:83:c5:c6:c6:1c:e1:2f:
54:ce:d2:f2:31:64:f4:85:03:87:f5:f1:c5:90:80:
28:c0:b2:d1:e7:20:3f:98:67:71:72:bc:c9:33:9c:
e5:72:fc:f8:f3:83:fd:53:cb:d4:e7:b9:c1:fd:1a:
25:28:01:0f:72:e5:2e:7d:9c:f7:3e:3a:1e:b4:51:
ec:2b:6b:87:72:56:87:6a:da:78:1a:1e:a3:08:db:
75:21:f4:1c:4e:58:e5:07:e1:59:b5:ae:b5:bf:7d:
01:47:7d:de:59:38:53:a4:99:42:2a:62:ce:f3:99:
66:c2:88:06:1c:10:48:93:ec:be:72:2c:77:b3:6e:
d4:c5:90:25:a8:b8:36:b9:ed:0f:83:88:cb:a0:97:
69:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:81:89:AB:3B:19:44:A2:6F:69:5F:F0:9D:6F:EC:AF:E4:D9:2E:24
X509v3 Authority Key Identifier:
keyid:B7:87:1F:29:0F:FF:0E:04:26:0C:67:53:E3:87:C9:EF:B7:5B:E2:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t4cfKQ__DgQmDGdT44fJ77db4pY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/836431-b90d-4a98-be2c-955f5cb09893/1/t4cfKQ__DgQmDGdT44fJ77db4pY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/836431-b90d-4a98-be2c-955f5cb09893/1/t4cfKQ__DgQmDGdT44fJ77db4pY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:a8:39:fa:e6:ce:ad:38:be:68:7f:c1:62:fa:92:12:90:57:
66:55:47:8f:5d:7b:9d:bf:d1:88:c8:c6:f8:8a:28:9d:9a:04:
0e:98:6c:ad:81:2d:c3:da:3a:5b:fe:b5:a5:5f:b6:d3:27:12:
63:d4:b9:df:40:b8:5a:c0:ca:6c:4a:fa:c4:e5:bd:99:01:bc:
4d:d2:e2:d3:b3:f1:bc:85:74:98:3c:58:0e:57:16:2c:8d:06:
f5:4a:4b:98:b0:08:a7:ec:b0:ea:99:c4:7b:b4:f3:26:58:b2:
4c:e8:51:51:7a:30:80:6d:e9:84:ba:fa:5f:2a:48:ad:48:33:
01:fb:43:04:e8:48:dc:b9:34:59:65:cb:75:d1:3a:2e:3a:30:
c9:45:d6:b5:ff:6e:f9:1f:8f:2a:63:05:a3:23:a6:3b:47:12:
73:bc:f4:28:a8:c5:bf:02:be:43:76:2e:5f:89:00:97:d2:ee:
79:9c:dd:db:ef:bc:87:23:17:42:b6:09:1b:50:34:6a:8c:c7:
02:53:d5:b6:6a:41:73:67:90:ae:70:92:42:f7:ce:a8:20:df:
34:8a:ef:65:a9:d5:d1:c2:2c:32:f6:a3:e7:4f:a6:d2:b8:8a:
e2:11:43:47:b4:f8:40:6a:34:6a:42:cf:78:c0:04:b3:36:1c:
9f:7d:63:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 16:37:33 2026 by rpki-client