Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/89ee94-5010-44ad-9e17-436ab4ade0a7/1/T7EQS7paPx3dLe67o0gZGfT5YaQ.mft
File: T7EQS7paPx3dLe67o0gZGfT5YaQ.mft (raw, json)
Hash identifier: /QKgTDI8/G1byBiKc4svfzPvaBOkTFzCqoGmxvPBImA=
Subject key identifier: 6E:81:5B:A6:27:B4:48:E6:A0:4C:D6:AE:05:89:D1:E5:ED:83:40:2C
Authority key identifier: 4F:B1:10:4B:BA:5A:3F:1D:DD:2D:EE:BB:A3:48:19:19:F4:F9:61:A4
Certificate issuer: /CN=4fb1104bba5a3f1ddd2deebba3481919f4f961a4
Certificate serial: 019D9AE3B1C8457717A825DC86ADFD1B6779
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T7EQS7paPx3dLe67o0gZGfT5YaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/89ee94-5010-44ad-9e17-436ab4ade0a7/1/T7EQS7paPx3dLe67o0gZGfT5YaQ.mft
Manifest number: 12BD
Signing time: Fri 17 Apr 2026 10:01:46 +0000
Manifest this update: Fri 17 Apr 2026 10:01:46 +0000
Manifest next update: Sat 18 Apr 2026 10:01:46 +0000
Files and hashes: 1: QXk8W4rb7xC84yICsxZR9VqLPac.roa (hash: d5XV4cDn9Fni7vqIA1er8ivsyYtrUO1CqIbq1cH3BPY=)
2: T7EQS7paPx3dLe67o0gZGfT5YaQ.crl (hash: CuEJvJedOB+au9/4TJapFGu3oekeAa3ppiX1znCaTiA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/89ee94-5010-44ad-9e17-436ab4ade0a7/1/T7EQS7paPx3dLe67o0gZGfT5YaQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/89ee94-5010-44ad-9e17-436ab4ade0a7/1/T7EQS7paPx3dLe67o0gZGfT5YaQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/T7EQS7paPx3dLe67o0gZGfT5YaQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e3:b1:c8:45:77:17:a8:25:dc:86:ad:fd:1b:67:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fb1104bba5a3f1ddd2deebba3481919f4f961a4
Validity
Not Before: Apr 17 10:01:46 2026 GMT
Not After : Apr 18 10:01:46 2026 GMT
Subject: CN=6e815ba627b448e6a04cd6ae0589d1e5ed83402c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:5e:e4:74:fb:02:0a:10:42:ce:0e:3d:45:8f:
1e:71:72:0f:1e:71:e2:f1:78:07:79:3d:c7:6f:5c:
a3:11:e6:8a:c7:45:d2:dc:3f:b8:67:38:e0:d3:4b:
0f:cc:aa:bf:5c:ff:22:2b:ad:fc:10:24:44:7c:6a:
df:e6:dd:af:69:4f:7c:6b:78:b9:a2:e9:f7:24:05:
22:f6:c9:28:c9:ac:b5:86:b6:7d:66:67:63:c5:5f:
09:47:2d:5e:af:2a:e6:8e:18:b0:19:36:8c:61:45:
98:c2:40:cf:b2:96:c0:65:28:6b:77:56:40:a4:ef:
89:20:97:ea:56:79:d5:d0:ea:1a:f6:a2:89:57:43:
dc:60:25:77:56:a7:13:96:b3:7d:59:25:17:4d:fd:
23:e6:29:41:82:c0:46:9e:6f:80:40:32:f1:76:c7:
b0:b2:ba:69:bd:5d:05:d4:7f:bb:e5:c8:f8:01:8b:
54:04:0a:36:49:6c:93:01:91:c3:46:5f:2f:bd:6f:
e9:0b:23:ac:28:39:d8:2a:f7:b4:81:fc:0f:2c:10:
4c:b1:8d:c5:f0:ff:57:b1:b4:9f:fd:5c:ab:24:27:
f8:24:bf:54:85:dc:ac:94:04:57:58:6a:08:9a:3f:
ab:39:b0:cd:b4:18:af:30:3c:eb:64:33:43:11:aa:
2a:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:81:5B:A6:27:B4:48:E6:A0:4C:D6:AE:05:89:D1:E5:ED:83:40:2C
X509v3 Authority Key Identifier:
keyid:4F:B1:10:4B:BA:5A:3F:1D:DD:2D:EE:BB:A3:48:19:19:F4:F9:61:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T7EQS7paPx3dLe67o0gZGfT5YaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/89ee94-5010-44ad-9e17-436ab4ade0a7/1/T7EQS7paPx3dLe67o0gZGfT5YaQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/89ee94-5010-44ad-9e17-436ab4ade0a7/1/T7EQS7paPx3dLe67o0gZGfT5YaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d3:c0:8a:b7:8c:b6:00:75:94:a1:6a:fa:2c:68:d7:a7:53:af:
75:59:21:91:01:0c:ec:82:6c:73:c3:79:94:80:81:8b:22:8e:
d7:da:54:cd:ed:7d:40:6f:70:b5:d8:f8:f6:a6:bf:21:65:bf:
7d:af:95:c1:a7:cd:7b:73:f2:8a:2b:75:b6:23:5d:92:5a:b0:
64:a2:54:5c:41:d4:1b:4e:c7:fb:80:ba:f8:be:98:50:ab:0a:
a3:c7:34:43:e6:30:8e:d6:57:3a:d9:77:9a:66:58:80:96:db:
5e:d8:f6:1d:0f:d9:d1:af:77:6f:67:be:af:0c:e7:0a:db:8e:
e6:d4:39:c8:df:79:3c:f9:f8:0c:a0:d4:ac:ea:e8:9a:aa:4d:
b6:63:fa:66:80:9f:8a:a2:a9:d5:d2:f8:6d:77:cc:bf:da:72:
0a:a3:57:dd:16:a6:a9:96:dd:41:91:ad:37:b8:e8:35:3e:d8:
17:ea:7c:c0:fd:0f:5a:cc:5a:b2:1e:89:4a:b6:3f:19:33:31:
90:33:f4:87:f0:b6:e3:09:56:5d:bc:c1:2c:9a:1f:d9:1e:1c:
3b:09:4c:d4:d9:4d:48:cc:b5:17:73:84:98:a6:82:42:12:b5:
63:83:2a:9f:78:36:7e:72:dc:bf:37:d1:26:a9:67:6e:ee:5f:
52:95:29:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:01:08 2026 by rpki-client