Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/f2a37c-a129-4c0b-9ed1-b18dac2d259b/1/T32IU5OzK17uOgv0M44Pqu88dTw.mft
File: T32IU5OzK17uOgv0M44Pqu88dTw.mft (raw, json)
Hash identifier: qYJDfnZO6HgwXVoL1bLQT3XMPiUsE5awgIQKFL++dgo=
Subject key identifier: 6E:13:4B:2F:15:79:AC:75:F2:FD:3C:B7:FE:71:AB:DF:FE:EC:CB:CF
Authority key identifier: 4F:7D:88:53:93:B3:2B:5E:EE:3A:0B:F4:33:8E:0F:AA:EF:3C:75:3C
Certificate issuer: /CN=4f7d885393b32b5eee3a0bf4338e0faaef3c753c
Certificate serial: 019CAA58FAB852F3951A294C92D72215B001
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T32IU5OzK17uOgv0M44Pqu88dTw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/f2a37c-a129-4c0b-9ed1-b18dac2d259b/1/T32IU5OzK17uOgv0M44Pqu88dTw.mft
Manifest number: 1614
Signing time: Sun 01 Mar 2026 17:01:23 +0000
Manifest this update: Sun 01 Mar 2026 17:01:23 +0000
Manifest next update: Mon 02 Mar 2026 17:01:23 +0000
Files and hashes: 1: NEc8aQqyyaN5WZ6pcMTuIn3QMww.roa (hash: Nlhcphc0V2UOaAJaYdUoZGpKtvarMlBWXD4y4ZO7raA=)
2: T32IU5OzK17uOgv0M44Pqu88dTw.crl (hash: ZfBWTDKLzPbJ5UrPH2L1MGb8eCA/4oDkCVqoMoLwtCY=)
3: h1mmEmquZ99o6cDHP1Sk61I_DC0.roa (hash: zGPSsDsxw4pForFMNU0mmMEvIvjun+XXzgIsgxxZKWw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/f2a37c-a129-4c0b-9ed1-b18dac2d259b/1/T32IU5OzK17uOgv0M44Pqu88dTw.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/f2a37c-a129-4c0b-9ed1-b18dac2d259b/1/T32IU5OzK17uOgv0M44Pqu88dTw.mft
rsync://rpki.ripe.net/repository/DEFAULT/T32IU5OzK17uOgv0M44Pqu88dTw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:fa:b8:52:f3:95:1a:29:4c:92:d7:22:15:b0:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f7d885393b32b5eee3a0bf4338e0faaef3c753c
Validity
Not Before: Mar 1 17:01:23 2026 GMT
Not After : Mar 2 17:01:23 2026 GMT
Subject: CN=6e134b2f1579ac75f2fd3cb7fe71abdffeeccbcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:6e:ee:c4:a1:82:dd:48:21:17:9b:68:4e:34:
23:6f:f9:cf:22:ec:bf:d0:18:72:12:a5:e8:59:16:
40:7b:2c:86:b9:f1:c0:ca:17:89:aa:cc:02:10:92:
bd:aa:00:f8:05:9d:55:9b:a1:44:fe:be:b4:d0:36:
1b:3e:18:c5:de:4d:72:30:a4:e7:67:7d:4d:c6:88:
b1:4c:36:bc:03:5e:92:fe:a5:4b:45:56:9e:dc:fb:
ef:f9:3c:d6:08:2e:7e:d1:07:3c:bd:eb:7a:94:91:
89:99:fc:ab:55:98:f2:10:cf:95:8d:eb:04:99:dd:
5f:5d:db:c8:41:51:23:73:05:d6:63:cc:1c:c3:04:
96:32:d5:05:01:ad:78:32:47:2c:51:6a:15:31:85:
e6:20:14:f5:19:f0:38:9a:a1:df:5a:5b:aa:a2:0e:
2d:59:e9:9c:5f:40:a8:e4:13:b5:e1:e6:27:0e:70:
c3:09:5e:a4:b9:84:a5:ac:14:60:f0:4a:c3:25:2e:
ce:b4:21:ed:23:57:71:2c:71:f0:7e:53:f0:5c:e0:
17:31:96:b2:0d:f4:8a:16:87:66:30:ab:0e:3c:35:
66:50:33:62:5b:b0:d3:2f:d0:f8:cc:47:94:83:aa:
ab:30:ba:b4:92:26:4a:2c:e0:3f:d1:58:57:a8:ac:
3f:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:13:4B:2F:15:79:AC:75:F2:FD:3C:B7:FE:71:AB:DF:FE:EC:CB:CF
X509v3 Authority Key Identifier:
keyid:4F:7D:88:53:93:B3:2B:5E:EE:3A:0B:F4:33:8E:0F:AA:EF:3C:75:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T32IU5OzK17uOgv0M44Pqu88dTw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f2a37c-a129-4c0b-9ed1-b18dac2d259b/1/T32IU5OzK17uOgv0M44Pqu88dTw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f2a37c-a129-4c0b-9ed1-b18dac2d259b/1/T32IU5OzK17uOgv0M44Pqu88dTw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:1f:d1:e6:31:48:ee:ae:91:bc:a4:53:27:80:5d:b5:b3:4d:
e4:32:bd:36:ac:94:06:26:5b:d4:37:0d:9a:b2:2e:a4:75:79:
1b:0d:bf:ae:e4:83:f6:f4:cd:42:72:ea:33:6c:76:2c:53:75:
0a:c6:fb:2c:db:c2:f5:df:24:1d:56:90:a1:22:be:de:7f:da:
7e:81:13:d8:5d:f9:1a:18:bc:db:c2:b9:9b:7c:fe:b1:84:b1:
57:77:d2:12:61:6f:e1:23:37:db:86:f6:44:ec:3a:06:69:db:
88:ed:7c:af:e1:68:f8:8f:da:69:f6:be:7c:81:ad:e2:6c:9f:
e8:51:95:99:57:23:bc:b2:5e:e4:64:da:9e:57:8b:37:18:9a:
13:70:79:d8:67:c2:5b:de:71:8e:1f:14:e7:85:b4:38:cf:c2:
e2:e3:82:2a:7c:c0:57:6a:37:1d:26:5b:b6:75:ea:01:ab:74:
15:1b:d2:f4:4b:83:5a:b3:33:15:80:7b:e9:1a:83:71:fa:66:
56:21:b6:01:46:d0:dd:31:c6:6c:f4:b9:35:d1:8c:62:27:a0:
90:13:20:7a:d6:46:6f:ce:82:61:d7:2c:6d:71:d2:61:1b:43:
49:a1:8b:54:a2:8c:9d:d1:cc:19:9c:a5:39:bc:40:6c:50:3e:
60:96:82:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:07:55 2026 by rpki-client