Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/89ee94-5010-44ad-9e17-436ab4ade0a7/1/T7EQS7paPx3dLe67o0gZGfT5YaQ.mft
File: T7EQS7paPx3dLe67o0gZGfT5YaQ.mft (raw, json)
Hash identifier: ur38qfZnSKbeMO8wP7Io6WChm7TubwNfp08h6hgbPPE=
Subject key identifier: 1C:F6:92:48:C1:B4:56:20:21:ED:E6:DC:BA:BC:89:3B:DF:C3:53:0C
Authority key identifier: 4F:B1:10:4B:BA:5A:3F:1D:DD:2D:EE:BB:A3:48:19:19:F4:F9:61:A4
Certificate issuer: /CN=4fb1104bba5a3f1ddd2deebba3481919f4f961a4
Certificate serial: 019CAD5A4815AA9DA6926381ED2DBADFD484
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T7EQS7paPx3dLe67o0gZGfT5YaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/89ee94-5010-44ad-9e17-436ab4ade0a7/1/T7EQS7paPx3dLe67o0gZGfT5YaQ.mft
Manifest number: 1242
Signing time: Mon 02 Mar 2026 07:01:40 +0000
Manifest this update: Mon 02 Mar 2026 07:01:40 +0000
Manifest next update: Tue 03 Mar 2026 07:01:40 +0000
Files and hashes: 1: QXk8W4rb7xC84yICsxZR9VqLPac.roa (hash: d5XV4cDn9Fni7vqIA1er8ivsyYtrUO1CqIbq1cH3BPY=)
2: T7EQS7paPx3dLe67o0gZGfT5YaQ.crl (hash: VrC2QqvuV9c0p1f4o6bBo87bYgJhTkwwsZlZkbQ4AcM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/89ee94-5010-44ad-9e17-436ab4ade0a7/1/T7EQS7paPx3dLe67o0gZGfT5YaQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/89ee94-5010-44ad-9e17-436ab4ade0a7/1/T7EQS7paPx3dLe67o0gZGfT5YaQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/T7EQS7paPx3dLe67o0gZGfT5YaQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:5a:48:15:aa:9d:a6:92:63:81:ed:2d:ba:df:d4:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fb1104bba5a3f1ddd2deebba3481919f4f961a4
Validity
Not Before: Mar 2 07:01:40 2026 GMT
Not After : Mar 3 07:01:40 2026 GMT
Subject: CN=1cf69248c1b4562021ede6dcbabc893bdfc3530c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:84:b6:b0:69:07:a2:10:0f:89:0b:54:59:3a:
62:53:71:1a:0c:da:72:24:8c:4d:b0:5b:70:ff:77:
05:13:70:e6:74:3c:b6:3f:7a:54:ab:ac:9b:06:c2:
c3:53:13:b8:c7:42:aa:a6:31:28:f1:ba:0e:9c:1b:
43:12:8b:5a:30:80:d4:7f:2a:a4:9a:b4:1e:94:38:
b5:dc:00:4f:33:26:50:78:e0:cb:93:9d:ba:57:84:
8b:0f:05:aa:6f:d8:29:72:0e:94:b4:a0:d9:7d:4e:
49:1e:e8:34:78:bd:69:78:ec:78:e1:c5:85:e3:b3:
a5:4c:64:e8:d0:24:41:30:64:f8:78:62:e9:d8:98:
6a:a1:7b:02:21:90:fb:f9:b8:71:7d:66:e8:c0:17:
3c:d7:37:56:f5:58:15:7e:67:08:a9:59:8a:b7:40:
17:ea:73:3f:43:95:ee:eb:02:1c:ad:a0:80:af:37:
d7:d0:47:8e:0a:d1:5b:b6:a1:6e:eb:47:aa:ea:3b:
99:87:90:bc:61:d5:ce:2b:66:68:f9:1c:c9:76:b8:
cc:46:54:19:df:8e:a0:e3:14:9e:d5:e1:5a:13:1e:
19:ec:e8:08:43:70:3c:df:c7:9f:53:c6:96:8f:8a:
c7:69:36:65:4c:3d:15:38:b7:ce:46:46:96:db:9c:
53:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:F6:92:48:C1:B4:56:20:21:ED:E6:DC:BA:BC:89:3B:DF:C3:53:0C
X509v3 Authority Key Identifier:
keyid:4F:B1:10:4B:BA:5A:3F:1D:DD:2D:EE:BB:A3:48:19:19:F4:F9:61:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T7EQS7paPx3dLe67o0gZGfT5YaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/89ee94-5010-44ad-9e17-436ab4ade0a7/1/T7EQS7paPx3dLe67o0gZGfT5YaQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/89ee94-5010-44ad-9e17-436ab4ade0a7/1/T7EQS7paPx3dLe67o0gZGfT5YaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:c0:75:42:01:65:47:ba:0f:8f:7f:0a:24:be:8c:3a:2b:e6:
bd:10:55:1c:d6:e8:56:89:46:4c:67:cc:a2:1a:22:a1:77:99:
64:53:5e:53:6b:dd:40:bd:85:f9:70:94:f0:1e:f8:05:21:05:
5f:7d:2b:53:78:24:67:84:67:3e:04:53:28:42:e7:fe:0b:f8:
b3:2a:a6:93:39:81:1d:50:e1:4f:4a:29:cb:ad:20:d5:9c:e1:
e9:8a:38:56:89:32:66:1b:ff:4f:10:c2:34:49:48:fd:1a:29:
66:92:63:aa:13:aa:e8:7c:40:d9:f6:40:05:28:a4:33:f9:19:
0d:56:b5:f8:c1:fd:72:e4:41:ef:21:b8:0a:a4:fe:f9:9a:f7:
2b:22:88:51:9f:ed:34:00:a3:33:24:d6:34:97:4f:9d:02:db:
1d:26:92:45:07:31:b2:ab:e9:a8:80:dc:af:67:51:55:be:43:
f1:85:ed:06:c0:90:72:51:97:26:8a:1d:8e:50:13:0f:31:67:
4a:e1:b0:f5:c9:25:f2:4d:20:3e:25:3c:e0:13:17:3f:c0:14:
87:17:37:54:bd:83:86:ee:e9:b0:4c:26:ba:e7:91:f5:96:e3:
50:3a:77:78:5f:35:8c:78:e1:b1:3a:ca:ad:11:75:5f:26:35:
fd:7f:aa:60
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZytWkgVqp2mkmOB7S2639SEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmYjExMDRiYmE1YTNmMWRkZDJkZWViYmEzNDgxOTE5ZjRm
OTYxYTQwHhcNMjYwMzAyMDcwMTQwWhcNMjYwMzAzMDcwMTQwWjAzMTEwLwYDVQQD
EygxY2Y2OTI0OGMxYjQ1NjIwMjFlZGU2ZGNiYWJjODkzYmRmYzM1MzBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7IS2sGkHohAPiQtUWTpiU3EaDNpy
JIxNsFtw/3cFE3DmdDy2P3pUq6ybBsLDUxO4x0KqpjEo8boOnBtDEotaMIDUfyqk
mrQelDi13ABPMyZQeODLk526V4SLDwWqb9gpcg6UtKDZfU5JHug0eL1peOx44cWF
47OlTGTo0CRBMGT4eGLp2JhqoXsCIZD7+bhxfWbowBc81zdW9VgVfmcIqVmKt0AX
6nM/Q5Xu6wIcraCArzfX0EeOCtFbtqFu60eq6juZh5C8YdXOK2Zo+RzJdrjMRlQZ
346g4xSe1eFaEx4Z7OgIQ3A838efU8aWj4rHaTZlTD0VOLfORkaW25xTAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBz2kkjBtFYgIe3m3Lq8iTvfw1MMMB8GA1UdIwQY
MBaAFE+xEEu6Wj8d3S3uu6NIGRn0+WGkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDdFUVM3cGFQeDNkTGU2N28wZ1pHZlQ1WWFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny84OWVlOTQtNTAxMC00NGFkLTllMTct
NDM2YWI0YWRlMGE3LzEvVDdFUVM3cGFQeDNkTGU2N28wZ1pHZlQ1WWFRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny84OWVlOTQtNTAxMC00NGFkLTllMTctNDM2YWI0YWRlMGE3
LzEvVDdFUVM3cGFQeDNkTGU2N28wZ1pHZlQ1WWFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT8B1QgFl
R7oPj38KJL6MOivmvRBVHNboVolGTGfMohoioXeZZFNeU2vdQL2F+XCU8B74BSEF
X30rU3gkZ4RnPgRTKELn/gv4syqmkzmBHVDhT0opy60g1Zzh6Yo4VokyZhv/TxDC
NElI/RopZpJjqhOq6HxA2fZABSikM/kZDVa1+MH9cuRB7yG4CqT++Zr3KyKIUZ/t
NACjMyTWNJdPnQLbHSaSRQcxsqvpqIDcr2dRVb5D8YXtBsCQclGXJoodjlATDzFn
SuGw9ckl8k0gPiU84BMXP8AUhxc3VL2Dhu7psEwmuueR9ZbjUDp3eF81jHjhsTrK
rRF1XyY1/X+qYA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 08:52:29 2026 by rpki-client