Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/1b1272-83c1-4864-9cd3-027c7f7dc6d5/1/T2F9awPi_l-JEcvrX64tyjvWZ38.mft
File: T2F9awPi_l-JEcvrX64tyjvWZ38.mft (raw, json)
Hash identifier: H6nI/JCtFUQBKvhPGJoIrNCOaIavlFj6TnftMHpbKLw=
Subject key identifier: 25:B0:65:DC:77:76:E4:4A:FC:89:22:3B:4A:43:F1:ED:10:BA:09:A4
Authority key identifier: 4F:61:7D:6B:03:E2:FE:5F:89:11:CB:EB:5F:AE:2D:CA:3B:D6:67:7F
Certificate issuer: /CN=4f617d6b03e2fe5f8911cbeb5fae2dca3bd6677f
Certificate serial: 019CACB504AEEFC5DA5020BE342FC3BF989B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T2F9awPi_l-JEcvrX64tyjvWZ38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/1b1272-83c1-4864-9cd3-027c7f7dc6d5/1/T2F9awPi_l-JEcvrX64tyjvWZ38.mft
Manifest number: 1528
Signing time: Mon 02 Mar 2026 04:01:10 +0000
Manifest this update: Mon 02 Mar 2026 04:01:10 +0000
Manifest next update: Tue 03 Mar 2026 04:01:10 +0000
Files and hashes: 1: T2F9awPi_l-JEcvrX64tyjvWZ38.crl (hash: VO2Bsra5VR+RZf9pVhdoOpRVdH8W0doh1WJJKv2VYu0=)
2: xwOmHY94ffmWcpPf6KqXYjilQDE.roa (hash: XM6OGxdr30fmSiTDSkJNnhkS4Ouwvsq+nWxnRyN80J8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/1b1272-83c1-4864-9cd3-027c7f7dc6d5/1/T2F9awPi_l-JEcvrX64tyjvWZ38.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/1b1272-83c1-4864-9cd3-027c7f7dc6d5/1/T2F9awPi_l-JEcvrX64tyjvWZ38.mft
rsync://rpki.ripe.net/repository/DEFAULT/T2F9awPi_l-JEcvrX64tyjvWZ38.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b5:04:ae:ef:c5:da:50:20:be:34:2f:c3:bf:98:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f617d6b03e2fe5f8911cbeb5fae2dca3bd6677f
Validity
Not Before: Mar 2 04:01:10 2026 GMT
Not After : Mar 3 04:01:10 2026 GMT
Subject: CN=25b065dc7776e44afc89223b4a43f1ed10ba09a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:bf:db:ef:18:b3:a1:c6:08:20:c7:ba:ce:af:
f5:1b:a8:03:7c:e2:ec:0e:50:8a:bd:84:37:da:ac:
58:6c:91:1d:3e:c5:a2:2d:70:53:0d:5d:a8:82:44:
1d:b5:39:fd:9f:c5:2e:5e:f6:da:e5:51:14:61:b3:
10:7a:e6:27:0c:4a:9f:f6:c2:61:b2:84:13:a0:37:
95:a9:fb:59:34:99:38:54:6d:fa:56:f7:87:b1:53:
8d:fb:b3:b4:08:c0:ba:5b:37:0d:22:69:39:70:d1:
4b:fe:63:ba:e2:37:48:f7:17:1f:89:74:6e:37:4d:
84:e5:bf:b0:2e:fa:03:d5:7d:fc:bf:56:86:24:4a:
36:6c:12:8d:ac:e8:d7:a7:af:ca:42:63:cb:55:35:
d8:3d:fa:eb:a6:37:e6:45:b0:47:72:d5:6e:52:39:
32:35:88:0f:44:da:b1:d7:28:76:b3:66:7d:30:85:
d8:40:32:88:d8:72:d4:be:50:52:45:f6:09:7b:62:
95:e4:21:6a:34:89:29:19:52:9e:bb:4a:41:45:f9:
07:fd:5b:82:22:ef:4b:95:5f:35:3e:91:db:0b:1b:
8c:99:2f:05:a6:da:91:59:55:fa:97:2f:21:74:7f:
03:21:5b:1f:c8:75:1c:63:ed:ab:98:15:25:57:6c:
e6:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:B0:65:DC:77:76:E4:4A:FC:89:22:3B:4A:43:F1:ED:10:BA:09:A4
X509v3 Authority Key Identifier:
keyid:4F:61:7D:6B:03:E2:FE:5F:89:11:CB:EB:5F:AE:2D:CA:3B:D6:67:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T2F9awPi_l-JEcvrX64tyjvWZ38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/1b1272-83c1-4864-9cd3-027c7f7dc6d5/1/T2F9awPi_l-JEcvrX64tyjvWZ38.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/1b1272-83c1-4864-9cd3-027c7f7dc6d5/1/T2F9awPi_l-JEcvrX64tyjvWZ38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e6:cd:d7:89:b5:ab:08:52:bd:50:98:d5:a9:60:6e:26:67:bf:
c3:a1:9c:af:a3:2b:af:3c:b6:ff:dc:4a:ae:d3:bb:cc:6f:df:
50:5d:17:ab:fe:80:57:d3:c9:32:72:e6:6b:33:19:f7:22:38:
b6:32:a1:1d:95:4b:32:33:9a:5f:fc:3b:cf:3a:91:b7:2f:97:
ab:ee:ba:3c:bb:1b:b2:6d:81:45:e9:c7:f4:09:c6:8f:12:83:
11:d8:01:4d:ee:9b:1f:e1:4b:a9:c4:55:96:ac:1b:e9:50:b2:
a0:67:a0:03:d5:8b:86:01:8d:88:5d:48:ef:1c:07:46:5f:3e:
21:58:92:da:4e:e8:74:23:11:01:42:40:fc:00:24:2b:f0:12:
62:4d:e1:1f:e7:6a:ba:28:96:23:d5:c4:64:29:15:f0:93:af:
f0:f9:f1:bf:98:d6:03:25:ee:33:2b:c2:34:66:8f:c1:7b:13:
df:26:3e:31:eb:18:5e:8c:5a:40:93:5e:07:00:90:c9:e0:33:
07:ab:6a:c8:b8:ce:5b:8c:24:b7:f8:63:06:f5:83:8e:5b:35:
64:5c:64:41:12:55:ca:cc:78:fc:73:7d:f1:eb:91:7d:d8:4e:
9b:d5:c6:61:9e:3a:8c:47:a6:d3:2e:bf:08:78:82:bb:f7:eb:
a2:f1:6d:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:57:58 2026 by rpki-client