Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/30b8e9-e7d4-40cc-ad5f-3c741220ea00/1/t4zdv8dr2iagKeqAyJh3mHRfHwI.mft
File: t4zdv8dr2iagKeqAyJh3mHRfHwI.mft (raw, json)
Hash identifier: h/W35UlcktUJ1cu3Pdu09JQCrdx9vheXHIfyaslMHNo=
Subject key identifier: 15:96:82:C8:F0:68:06:08:A3:AA:1A:47:46:34:48:E9:F1:77:B2:7F
Authority key identifier: B7:8C:DD:BF:C7:6B:DA:26:A0:29:EA:80:C8:98:77:98:74:5F:1F:02
Certificate issuer: /CN=b78cddbfc76bda26a029ea80c8987798745f1f02
Certificate serial: 019CAA21BF7B0384BB78BCDA1BF339DAF60E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t4zdv8dr2iagKeqAyJh3mHRfHwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/30b8e9-e7d4-40cc-ad5f-3c741220ea00/1/t4zdv8dr2iagKeqAyJh3mHRfHwI.mft
Manifest number: 14FA
Signing time: Sun 01 Mar 2026 16:01:04 +0000
Manifest this update: Sun 01 Mar 2026 16:01:04 +0000
Manifest next update: Mon 02 Mar 2026 16:01:04 +0000
Files and hashes: 1: 2cs6BtaFV3H5PXU6nZOA8Uu_NwQ.roa (hash: VpwFMCxf02N3s6qbKcrB7OwUNutAGhYjp7y72GSVaW4=)
2: fZqDSJnUbHG62IvLERx4tiEWKgg.roa (hash: GDZnevYXZ2UVLkiVPlwZRqNZ2Bo/evXbLjj481Slbr4=)
3: t4zdv8dr2iagKeqAyJh3mHRfHwI.crl (hash: aN4FHroRurRTimHJoaG/+6aKhKjezgqpErgfb+3hu+Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/30b8e9-e7d4-40cc-ad5f-3c741220ea00/1/t4zdv8dr2iagKeqAyJh3mHRfHwI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/30b8e9-e7d4-40cc-ad5f-3c741220ea00/1/t4zdv8dr2iagKeqAyJh3mHRfHwI.mft
rsync://rpki.ripe.net/repository/DEFAULT/t4zdv8dr2iagKeqAyJh3mHRfHwI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 16:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:21:bf:7b:03:84:bb:78:bc:da:1b:f3:39:da:f6:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b78cddbfc76bda26a029ea80c8987798745f1f02
Validity
Not Before: Mar 1 16:01:04 2026 GMT
Not After : Mar 2 16:01:04 2026 GMT
Subject: CN=159682c8f0680608a3aa1a47463448e9f177b27f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:da:12:25:0b:4a:36:7f:80:96:43:72:3c:1a:
c4:a9:c2:20:bc:26:b6:96:4b:fb:29:23:12:71:8f:
57:49:4d:66:82:f0:2c:f2:f7:b5:1d:d8:2c:1d:f3:
f7:b9:d6:bd:ce:a5:d8:85:3b:6a:e3:1d:a1:67:1f:
a2:a4:41:34:8d:97:44:76:3c:d8:b6:0f:e8:58:0c:
b6:b0:5d:24:33:cc:3a:4b:0a:74:df:f3:a2:9b:a0:
6c:89:16:7d:97:b0:26:f6:3e:2a:f6:a5:c2:7a:82:
4a:e3:58:96:1e:29:ba:83:82:6b:26:61:e4:bf:2b:
f5:af:db:c9:d7:9d:dc:51:3d:c2:2e:c4:49:75:33:
bd:b1:ee:d0:c7:24:77:4f:cd:02:9c:c2:00:5a:39:
c1:08:65:84:cf:43:63:3a:80:00:fe:fa:70:4e:23:
91:51:0b:55:5e:f0:26:5e:ae:8f:bb:99:56:8b:9d:
6b:0d:6b:9c:6e:cf:bc:05:fe:cd:3f:2e:53:06:1d:
78:7f:14:81:bb:b8:d0:09:25:fd:15:8a:6c:45:51:
f3:3c:6b:f3:a0:75:e9:f4:d0:70:5f:ac:b4:cc:af:
c0:06:e0:41:5e:bb:0a:50:81:62:a6:59:d1:e4:d3:
b2:3d:fb:48:40:d8:c5:6b:04:9f:d2:e3:26:e5:c6:
91:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:96:82:C8:F0:68:06:08:A3:AA:1A:47:46:34:48:E9:F1:77:B2:7F
X509v3 Authority Key Identifier:
keyid:B7:8C:DD:BF:C7:6B:DA:26:A0:29:EA:80:C8:98:77:98:74:5F:1F:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t4zdv8dr2iagKeqAyJh3mHRfHwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/30b8e9-e7d4-40cc-ad5f-3c741220ea00/1/t4zdv8dr2iagKeqAyJh3mHRfHwI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/30b8e9-e7d4-40cc-ad5f-3c741220ea00/1/t4zdv8dr2iagKeqAyJh3mHRfHwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:15:ca:7a:57:35:e0:87:bc:1c:94:de:84:da:50:99:f5:64:
b6:4b:42:a8:47:01:29:9f:32:0c:29:5a:1d:0b:0b:79:d0:20:
df:65:01:ce:b3:2e:74:f6:e7:11:9f:bb:7a:43:be:72:5b:9e:
ab:32:23:a7:1e:74:f8:6f:0a:c2:34:d6:15:7b:a0:94:9c:33:
b1:46:79:8b:6d:22:e3:5d:e6:71:5e:f6:5f:51:e6:be:74:5d:
10:c8:0c:0b:80:a6:b9:93:3d:f2:6c:d8:bd:97:fd:ff:0d:d5:
a9:56:b1:50:b6:c2:82:dc:3c:0e:1a:1d:32:3d:f1:28:df:6c:
78:60:e3:a2:50:a9:87:5a:6d:f1:df:fa:89:4b:4d:02:10:f5:
41:d9:77:f3:ff:17:88:4a:99:35:a6:c3:77:77:20:43:56:8c:
33:1d:6f:96:3d:83:5c:f7:3b:dc:32:7e:63:e1:b1:cb:1e:c6:
e9:21:64:0d:70:7c:78:c3:48:65:93:11:99:b1:4c:7a:03:8b:
be:e8:ee:a4:8e:e1:bd:9b:4b:7f:22:c7:0c:1f:39:a0:f4:cd:
66:bd:48:f9:4b:a6:e4:b0:1f:6f:76:a4:89:d1:2c:95:34:77:
e7:f7:3a:1d:d7:f0:99:6c:41:23:c4:5b:af:fe:12:b8:a1:2d:
8a:d2:a9:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:06:02 2026 by rpki-client