Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4a/30b8e9-e7d4-40cc-ad5f-3c741220ea00/1/t4zdv8dr2iagKeqAyJh3mHRfHwI.mft
File: t4zdv8dr2iagKeqAyJh3mHRfHwI.mft (raw, json)
Hash identifier: 483iNDahPzcqSMsYBC4F3i3jeH0fjHsl2/aK+jC6pe8=
Subject key identifier: BF:0D:0A:DF:7E:87:7D:01:6B:4A:67:5D:F6:43:2E:42:00:87:A9:CD
Authority key identifier: B7:8C:DD:BF:C7:6B:DA:26:A0:29:EA:80:C8:98:77:98:74:5F:1F:02
Certificate issuer: /CN=b78cddbfc76bda26a029ea80c8987798745f1f02
Certificate serial: 01A0C2C478A804E6EEDD7718F9EC37A3885A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t4zdv8dr2iagKeqAyJh3mHRfHwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/30b8e9-e7d4-40cc-ad5f-3c741220ea00/1/t4zdv8dr2iagKeqAyJh3mHRfHwI.mft
Manifest number: 1719
Signing time: Mon 21 Sep 2026 07:00:50 +0000
Manifest this update: Mon 21 Sep 2026 07:00:50 +0000
Manifest next update: Tue 22 Sep 2026 07:00:50 +0000
Files and hashes: 1: 2cs6BtaFV3H5PXU6nZOA8Uu_NwQ.roa (hash: VpwFMCxf02N3s6qbKcrB7OwUNutAGhYjp7y72GSVaW4=)
2: fZqDSJnUbHG62IvLERx4tiEWKgg.roa (hash: GDZnevYXZ2UVLkiVPlwZRqNZ2Bo/evXbLjj481Slbr4=)
3: t4zdv8dr2iagKeqAyJh3mHRfHwI.crl (hash: 41sktELo8KjO0bpPQTrKnCTkV24XpEKv2mvaDpf2AhU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/30b8e9-e7d4-40cc-ad5f-3c741220ea00/1/t4zdv8dr2iagKeqAyJh3mHRfHwI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/30b8e9-e7d4-40cc-ad5f-3c741220ea00/1/t4zdv8dr2iagKeqAyJh3mHRfHwI.mft
rsync://rpki.ripe.net/repository/DEFAULT/t4zdv8dr2iagKeqAyJh3mHRfHwI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 07:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:c4:78:a8:04:e6:ee:dd:77:18:f9:ec:37:a3:88:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b78cddbfc76bda26a029ea80c8987798745f1f02
Validity
Not Before: Sep 21 07:00:50 2026 GMT
Not After : Sep 22 07:00:50 2026 GMT
Subject: CN=bf0d0adf7e877d016b4a675df6432e420087a9cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:89:4f:19:8a:14:93:13:7c:d6:98:49:59:96:
f1:e3:a5:ce:18:f1:6a:54:88:ad:46:4b:99:e7:49:
ba:a7:4d:ce:f1:71:b2:f6:ad:ce:67:33:0f:ab:ac:
3a:0d:65:bc:ea:bc:7b:cb:d4:90:42:5a:8a:f2:1a:
66:22:18:6e:12:47:b3:90:3c:6f:7c:cd:bb:af:4a:
e5:55:7c:81:f6:29:bc:89:4e:c2:17:66:e1:93:96:
a6:7e:1c:d5:b8:51:86:6d:0e:81:0d:3d:b0:2a:8d:
00:ca:1d:b4:ae:18:19:5c:0b:cf:1d:41:fe:66:1e:
2a:b8:f7:a0:8c:90:49:e6:2b:90:5a:1e:a8:c5:99:
8d:93:89:5b:2b:1f:8e:e7:29:94:d9:ec:85:4b:c0:
ad:ef:67:c4:dc:f5:b1:0f:d4:ab:17:07:ee:96:67:
04:de:ab:e0:83:bc:d5:ed:72:a8:e7:91:e9:5f:2d:
70:03:0d:bc:37:d1:a6:5e:45:77:19:d5:c3:8e:6b:
60:0c:ba:e5:4a:bc:b4:0c:7f:b8:24:42:73:ee:be:
90:ff:0d:64:11:6b:71:94:67:80:a8:11:41:dc:dd:
31:b4:85:89:ce:a3:80:2a:07:22:a3:19:b0:00:86:
63:42:ed:d9:e3:b3:f1:ec:46:ef:23:c5:97:a6:93:
ad:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:0D:0A:DF:7E:87:7D:01:6B:4A:67:5D:F6:43:2E:42:00:87:A9:CD
X509v3 Authority Key Identifier:
keyid:B7:8C:DD:BF:C7:6B:DA:26:A0:29:EA:80:C8:98:77:98:74:5F:1F:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t4zdv8dr2iagKeqAyJh3mHRfHwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/30b8e9-e7d4-40cc-ad5f-3c741220ea00/1/t4zdv8dr2iagKeqAyJh3mHRfHwI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/30b8e9-e7d4-40cc-ad5f-3c741220ea00/1/t4zdv8dr2iagKeqAyJh3mHRfHwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:a0:90:4a:ca:79:28:e8:f9:ba:ab:5d:df:6b:6f:53:25:b5:
ff:f5:fa:af:c3:d7:5c:73:02:3d:a5:56:71:0d:32:b5:ce:02:
a5:26:9f:70:47:59:2a:1b:92:b8:2c:7c:1a:b7:29:dc:7c:68:
95:85:93:bc:31:82:cf:2b:53:02:bc:10:21:7e:59:e7:2f:6f:
eb:da:b9:12:18:4b:9b:d2:64:b1:1c:3c:db:15:79:0b:00:c9:
cf:4c:67:34:ad:fe:a7:bb:0a:a8:85:bd:37:c2:29:72:89:0a:
2d:39:2b:46:2c:a4:d8:75:a8:81:3c:30:df:26:2e:1b:1f:ff:
3f:b3:fd:cc:84:94:ad:66:7f:93:03:81:e4:e8:2c:f0:d1:5b:
cd:c4:0b:32:da:34:55:e9:14:5f:ad:b7:42:8b:c3:d8:ba:6b:
ca:22:c3:73:79:df:e9:36:a0:a5:c0:cc:73:9e:b5:36:1b:33:
17:ff:6b:64:7e:cd:ef:67:86:f1:ea:fb:35:af:9a:9b:f2:fa:
96:58:d5:59:1c:b6:92:43:38:c2:25:51:e8:25:c2:92:de:23:
1b:92:bb:6c:6b:8e:80:62:1c:04:96:98:db:7f:3c:37:71:7c:
f7:c6:66:98:5b:d5:50:a5:ab:10:47:ad:53:6e:28:1e:42:a2:
77:17:2f:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 16:19:29 2026 by rpki-client