Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/cd0a81-64b9-4cec-bad8-8ec1bf9fda2b/1/T0d31JE06rdaecERgyrX7OcmcUU.mft
File: T0d31JE06rdaecERgyrX7OcmcUU.mft (raw, json)
Hash identifier: FWp1pDwEt9nwfistDuPBqqL1POmI0NySn/OeuWh3RLo=
Subject key identifier: F5:BE:DC:8D:DB:96:AC:AB:4B:69:FD:3F:92:89:DD:C7:89:64:C9:5C
Authority key identifier: 4F:47:77:D4:91:34:EA:B7:5A:79:C1:11:83:2A:D7:EC:E7:26:71:45
Certificate issuer: /CN=4f4777d49134eab75a79c111832ad7ece7267145
Certificate serial: 019DA30B0B8B835FD72BFC4D16B043F96934
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T0d31JE06rdaecERgyrX7OcmcUU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/cd0a81-64b9-4cec-bad8-8ec1bf9fda2b/1/T0d31JE06rdaecERgyrX7OcmcUU.mft
Manifest number: 0833
Signing time: Sun 19 Apr 2026 00:01:43 +0000
Manifest this update: Sun 19 Apr 2026 00:01:43 +0000
Manifest next update: Mon 20 Apr 2026 00:01:43 +0000
Files and hashes: 1: RnxHD11Uhdt01kVBb1Rpc2SkWqI.roa (hash: EZi5XsUOzo8BaayU9rrJ+Q6qQj+QhPGNjhAuWPOc7h8=)
2: T0d31JE06rdaecERgyrX7OcmcUU.crl (hash: TcSR7T7A0MpHANqWW6qirICCUvEKNtm+gkxztzrloXQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/cd0a81-64b9-4cec-bad8-8ec1bf9fda2b/1/T0d31JE06rdaecERgyrX7OcmcUU.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/cd0a81-64b9-4cec-bad8-8ec1bf9fda2b/1/T0d31JE06rdaecERgyrX7OcmcUU.mft
rsync://rpki.ripe.net/repository/DEFAULT/T0d31JE06rdaecERgyrX7OcmcUU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 00:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:0b:0b:8b:83:5f:d7:2b:fc:4d:16:b0:43:f9:69:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f4777d49134eab75a79c111832ad7ece7267145
Validity
Not Before: Apr 19 00:01:43 2026 GMT
Not After : Apr 20 00:01:43 2026 GMT
Subject: CN=f5bedc8ddb96acab4b69fd3f9289ddc78964c95c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:33:91:1f:7d:63:74:c7:ab:2b:59:af:b0:2d:
4d:40:5e:fc:69:41:6c:00:21:98:57:56:87:fa:1d:
ac:be:a7:dc:0b:32:06:a7:5b:ea:35:93:9a:b5:83:
1b:b9:56:e2:37:04:df:55:17:74:94:9c:b2:cf:e4:
6a:75:88:42:8e:d9:34:bc:f5:e3:ad:5c:25:74:bf:
4e:33:90:91:55:96:7f:fb:55:dd:fd:68:d7:ba:b6:
35:2f:f8:12:f1:6d:4b:4b:cf:26:a2:11:17:00:88:
8c:ad:93:fb:ea:0c:31:b6:f1:76:1d:d7:6b:f2:b9:
d0:a6:8a:ca:77:8b:9f:65:b2:b3:56:e7:79:51:7f:
a2:be:da:d0:45:f0:21:84:f7:5d:b0:9c:43:d0:e2:
38:77:b6:36:17:6f:f1:d9:bb:f5:1a:56:c5:7b:b6:
2d:f1:ff:b2:d3:56:85:78:fd:91:31:85:7e:e2:7b:
93:75:7e:c4:4a:57:91:89:a5:c9:78:cf:48:12:f7:
70:16:67:77:4a:2f:dc:c6:c4:7b:ab:ce:23:4f:92:
a1:c7:a3:43:39:dd:7a:ed:f9:2a:e8:34:9f:9e:71:
52:be:2f:fd:9f:e5:d0:aa:47:b3:9d:1e:a0:15:81:
4b:bd:02:4e:ed:6a:87:c9:9a:5b:c0:22:4f:80:75:
45:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:BE:DC:8D:DB:96:AC:AB:4B:69:FD:3F:92:89:DD:C7:89:64:C9:5C
X509v3 Authority Key Identifier:
keyid:4F:47:77:D4:91:34:EA:B7:5A:79:C1:11:83:2A:D7:EC:E7:26:71:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T0d31JE06rdaecERgyrX7OcmcUU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cd0a81-64b9-4cec-bad8-8ec1bf9fda2b/1/T0d31JE06rdaecERgyrX7OcmcUU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cd0a81-64b9-4cec-bad8-8ec1bf9fda2b/1/T0d31JE06rdaecERgyrX7OcmcUU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:fc:30:53:0c:2b:f0:18:26:77:34:45:c7:b5:9f:46:42:98:
17:5f:36:ae:a3:53:16:dd:97:ce:da:60:57:70:1d:ac:b6:57:
5e:3c:a2:f1:95:49:63:0a:d5:a3:76:d9:33:af:75:9b:e9:9b:
49:0c:a9:15:85:73:ea:8b:44:be:06:bd:2a:6a:c4:02:a9:63:
14:4f:16:92:64:45:43:24:18:b4:bc:d3:a8:5a:04:df:cc:29:
0b:bb:0e:44:08:8e:9e:8f:a8:64:a2:8d:f0:df:48:f6:1a:3e:
02:9d:98:15:38:7f:10:e8:ae:68:42:26:c2:ca:fd:a3:54:56:
ca:75:a1:06:ee:e7:3e:e2:03:fc:03:c6:71:05:f1:52:e3:0f:
60:52:b4:13:92:45:b3:a7:e8:56:ec:17:b0:4c:d0:bb:fc:86:
2b:08:a2:20:b5:9f:d8:0a:4a:85:97:81:fb:03:be:2f:7a:7c:
2a:64:ea:c8:8a:32:dd:42:d7:10:a5:19:f2:ea:c9:f0:a5:e1:
d3:06:96:c0:ee:2d:52:37:d8:47:16:6b:f8:43:ce:40:ae:3b:
76:6a:00:62:4c:4b:bc:38:a4:2f:40:9b:86:bd:87:8b:e8:71:
43:84:3e:b5:ff:f4:47:3e:bc:e4:47:39:5f:0e:e8:bc:1b:a0:
bc:78:8f:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:29:41 2026 by rpki-client