Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/5855da-1cb4-4325-903c-7e021e92ba38/1/T6SrVjZVqRUiJNqbgzr2Nq36DL4.mft
File: T6SrVjZVqRUiJNqbgzr2Nq36DL4.mft (raw, json)
Hash identifier: dhBSGiN9UwSqMCGEO5arjiVCJwfU2nuOPkqFL5vGeSA=
Subject key identifier: 0D:FA:97:43:E8:A5:E2:44:33:5D:47:F9:FA:2E:F3:44:2F:C5:08:CD
Authority key identifier: 4F:A4:AB:56:36:55:A9:15:22:24:DA:9B:83:3A:F6:36:AD:FA:0C:BE
Certificate issuer: /CN=4fa4ab563655a9152224da9b833af636adfa0cbe
Certificate serial: 019D9C9A4145407ADEC31D183E12EDF165BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T6SrVjZVqRUiJNqbgzr2Nq36DL4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/5855da-1cb4-4325-903c-7e021e92ba38/1/T6SrVjZVqRUiJNqbgzr2Nq36DL4.mft
Manifest number: E2
Signing time: Fri 17 Apr 2026 18:00:48 +0000
Manifest this update: Fri 17 Apr 2026 18:00:48 +0000
Manifest next update: Sat 18 Apr 2026 18:00:48 +0000
Files and hashes: 1: 8xsBxJRzOoadcm0DdrJ3Vg3opRE.asa (hash: n9nxUGOX/1EnSOvWwvl5Nqo9r6LfqvrkZ6aWm3oj7S0=)
2: T6SrVjZVqRUiJNqbgzr2Nq36DL4.crl (hash: eLjOZElbZ+xT45vdzLKt8uHE552r23NM/u61cN4yDR0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/5855da-1cb4-4325-903c-7e021e92ba38/1/T6SrVjZVqRUiJNqbgzr2Nq36DL4.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/5855da-1cb4-4325-903c-7e021e92ba38/1/T6SrVjZVqRUiJNqbgzr2Nq36DL4.mft
rsync://rpki.ripe.net/repository/DEFAULT/T6SrVjZVqRUiJNqbgzr2Nq36DL4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:9a:41:45:40:7a:de:c3:1d:18:3e:12:ed:f1:65:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fa4ab563655a9152224da9b833af636adfa0cbe
Validity
Not Before: Apr 17 18:00:48 2026 GMT
Not After : Apr 18 18:00:48 2026 GMT
Subject: CN=0dfa9743e8a5e244335d47f9fa2ef3442fc508cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ad:ea:4f:3d:9c:07:81:12:d0:47:03:cf:4a:
0f:31:ab:cb:8f:94:19:c2:08:eb:72:d2:ba:5c:0f:
8c:95:ad:00:80:e6:4b:9c:11:a9:82:d1:93:bb:d8:
40:30:c6:8b:3c:67:b4:a8:6c:ed:84:9b:80:4a:bf:
3d:bd:80:52:cb:f9:84:38:70:16:8b:7b:a1:ee:26:
44:f3:a6:c2:e8:f9:1e:dd:98:06:02:13:0c:4e:b1:
9a:40:b9:31:d0:8b:15:1c:7f:a3:d5:7b:a6:11:4f:
98:89:b5:e5:c3:0b:01:15:8d:fb:6f:68:b1:22:fc:
d6:a0:86:8e:27:30:5a:66:52:6a:f4:05:0e:5a:35:
df:4d:c2:d5:e0:64:7e:5f:b8:c4:3d:1a:65:f2:20:
15:4a:50:50:dc:7a:42:6b:79:84:cd:1c:c9:fd:0b:
5a:12:d0:b0:3e:13:7a:4f:a8:76:9e:f8:d4:4a:91:
0d:3b:3f:c5:3c:62:99:68:84:f2:01:fd:7d:a9:31:
66:b2:6b:a0:3f:61:ad:e6:10:b8:c9:ec:a3:80:93:
2b:8b:28:23:e6:aa:e7:b3:d8:0f:17:eb:3f:5f:0b:
1a:b3:00:9c:fc:33:8f:5e:b2:4c:9d:c7:3a:cd:df:
1d:13:ee:af:01:7f:26:3d:c7:2a:8d:0f:b3:9a:02:
9a:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:FA:97:43:E8:A5:E2:44:33:5D:47:F9:FA:2E:F3:44:2F:C5:08:CD
X509v3 Authority Key Identifier:
keyid:4F:A4:AB:56:36:55:A9:15:22:24:DA:9B:83:3A:F6:36:AD:FA:0C:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T6SrVjZVqRUiJNqbgzr2Nq36DL4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/5855da-1cb4-4325-903c-7e021e92ba38/1/T6SrVjZVqRUiJNqbgzr2Nq36DL4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/5855da-1cb4-4325-903c-7e021e92ba38/1/T6SrVjZVqRUiJNqbgzr2Nq36DL4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:58:92:5b:4e:8f:9e:fb:09:38:53:43:e9:4b:85:57:57:84:
ea:44:6c:98:c3:24:e0:d9:13:10:85:16:12:8f:66:3c:7f:31:
0d:26:17:1a:13:77:a7:52:86:6f:98:be:f0:c2:ea:86:de:c3:
f7:b8:6f:41:50:33:11:a0:4b:e6:4d:7a:c2:6a:fb:5e:ae:aa:
5a:cf:d8:5e:77:58:50:6d:31:a2:35:67:98:51:5b:29:36:7f:
94:90:ca:87:d4:0b:05:41:54:cc:26:61:42:24:80:95:2d:71:
3e:29:2a:9a:d6:bb:b8:62:f8:12:3e:de:75:1c:62:81:15:d9:
15:bb:4d:8d:0f:b1:e7:23:52:9e:8c:18:62:60:09:06:68:d1:
af:70:22:b2:ea:5f:4f:63:74:9b:19:97:9c:59:c8:3e:a1:f5:
74:b9:fe:01:4f:33:14:99:e9:02:4e:1a:fa:0b:73:4d:1d:75:
de:d4:3d:26:70:4e:02:af:e6:69:51:41:ea:a2:42:15:57:0d:
3e:b8:e6:c8:59:72:73:0c:97:af:c2:1d:75:a2:cd:f3:8e:1d:
86:42:d0:7c:68:a4:02:ed:16:53:f9:01:8a:27:74:bd:67:c7:
cf:ed:74:50:92:93:04:cd:34:8a:bb:93:75:7b:5b:38:f9:d3:
64:4f:7b:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:21:14 2026 by rpki-client