Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/30a2bf-b51e-4d72-b409-ca8b2758be15/1/T1Cg3MccQpI-QHARvSEq-lxi5Z0.mft
File: T1Cg3MccQpI-QHARvSEq-lxi5Z0.mft (raw, json)
Hash identifier: n+d+u6DDZ/KFrbyVuqPF8ColDvy6zdOux6+44t05tBM=
Subject key identifier: C8:D7:4B:FE:CA:E5:12:CF:36:10:B3:A4:EF:10:27:11:1C:AD:95:4C
Authority key identifier: 4F:50:A0:DC:C7:1C:42:92:3E:40:70:11:BD:21:2A:FA:5C:62:E5:9D
Certificate issuer: /CN=4f50a0dcc71c42923e407011bd212afa5c62e59d
Certificate serial: 019D9961F2B501546C5E1EA452858A491895
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T1Cg3MccQpI-QHARvSEq-lxi5Z0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/30a2bf-b51e-4d72-b409-ca8b2758be15/1/T1Cg3MccQpI-QHARvSEq-lxi5Z0.mft
Manifest number: 0A0B
Signing time: Fri 17 Apr 2026 03:00:26 +0000
Manifest this update: Fri 17 Apr 2026 03:00:26 +0000
Manifest next update: Sat 18 Apr 2026 03:00:26 +0000
Files and hashes: 1: T1Cg3MccQpI-QHARvSEq-lxi5Z0.crl (hash: 5+d/eX2JClqepu3JyzJ2BXOgmxsMzN/m8hGanFDKwqc=)
2: jqFl-7_gLpulPBCBNUBkTagrN3g.roa (hash: 7OT128HVnPG3xzUxRNuL4t2bFGILvHb7kyCtTCl4GV0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/30a2bf-b51e-4d72-b409-ca8b2758be15/1/T1Cg3MccQpI-QHARvSEq-lxi5Z0.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/30a2bf-b51e-4d72-b409-ca8b2758be15/1/T1Cg3MccQpI-QHARvSEq-lxi5Z0.mft
rsync://rpki.ripe.net/repository/DEFAULT/T1Cg3MccQpI-QHARvSEq-lxi5Z0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 03:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:61:f2:b5:01:54:6c:5e:1e:a4:52:85:8a:49:18:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f50a0dcc71c42923e407011bd212afa5c62e59d
Validity
Not Before: Apr 17 03:00:26 2026 GMT
Not After : Apr 18 03:00:26 2026 GMT
Subject: CN=c8d74bfecae512cf3610b3a4ef1027111cad954c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:61:65:8c:bc:d1:b4:fd:29:df:96:e7:d5:60:
9d:c0:06:62:a9:3a:df:5c:7c:c8:7d:26:07:dd:64:
70:7d:c4:8a:b0:a8:3a:15:60:f7:57:6d:b8:02:6b:
dd:b2:63:75:3d:9d:5e:26:49:86:b9:4c:24:89:53:
fc:7a:3b:2c:ec:7b:c6:07:d9:7e:03:c3:8a:43:48:
4b:b3:85:71:9c:eb:81:e0:29:2a:17:ee:7b:88:a2:
c8:b5:03:97:a7:1c:9d:69:31:01:ff:e0:51:8e:56:
1f:81:9a:9f:24:b4:33:9d:00:de:16:d3:fa:81:1d:
d5:10:07:b2:2a:2c:f0:d2:b1:e6:6d:ae:0f:30:ca:
cd:60:84:81:cd:c8:1e:84:b4:57:4a:67:85:3d:7b:
e6:dc:04:2e:81:0c:95:14:84:91:44:c4:22:19:8f:
8b:37:b1:85:b1:79:be:3a:bd:88:c2:65:22:cb:60:
7c:98:02:e9:a0:78:8e:6b:fe:d0:cd:4d:3b:4d:eb:
84:8a:6f:47:ec:a0:c8:96:4a:0e:b0:0c:d0:93:30:
ea:b7:41:65:de:d9:d1:df:2f:8d:d5:27:9b:74:95:
8d:c8:2a:08:46:d1:9b:87:39:56:88:ac:89:25:8a:
69:25:05:1f:9e:91:bc:84:cf:b6:68:2a:7b:d4:aa:
9a:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:D7:4B:FE:CA:E5:12:CF:36:10:B3:A4:EF:10:27:11:1C:AD:95:4C
X509v3 Authority Key Identifier:
keyid:4F:50:A0:DC:C7:1C:42:92:3E:40:70:11:BD:21:2A:FA:5C:62:E5:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T1Cg3MccQpI-QHARvSEq-lxi5Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/30a2bf-b51e-4d72-b409-ca8b2758be15/1/T1Cg3MccQpI-QHARvSEq-lxi5Z0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/30a2bf-b51e-4d72-b409-ca8b2758be15/1/T1Cg3MccQpI-QHARvSEq-lxi5Z0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:e4:de:86:09:41:bc:56:52:97:ad:1e:8a:56:33:a0:7a:c1:
ba:0e:5f:14:45:10:80:dc:e9:a7:c7:9f:ca:57:12:3b:ce:76:
17:a8:7e:0d:98:99:b6:dc:e8:14:d3:c8:4c:23:3d:91:07:36:
84:3c:60:72:21:bf:5b:84:e9:7f:d2:65:36:4b:1b:95:95:88:
7d:ac:98:5e:34:f4:72:37:df:9d:14:8b:9a:e6:cb:65:9b:31:
fe:b4:87:25:1d:78:c6:7e:80:10:6d:a8:c7:7c:5d:12:7a:74:
db:35:f7:ff:42:fc:11:61:87:d6:c1:10:cb:62:30:b6:06:a1:
27:e5:d8:25:c0:5f:ab:ce:e4:68:3d:e2:7d:dc:13:5b:df:98:
86:bc:70:b8:e2:a6:e3:b0:62:db:d8:7d:a3:f1:6d:03:4a:50:
64:65:8a:13:68:14:96:e1:43:89:2f:95:91:54:2e:93:d4:15:
11:9f:e7:4f:e7:c7:93:9c:e6:ef:0f:7e:16:11:d5:22:6f:15:
45:6b:1c:f2:e4:c6:16:34:ec:76:b4:d0:82:fb:fc:1e:73:04:
24:1c:00:ac:06:6b:8b:ef:55:2b:ee:ad:7b:35:fc:8e:77:39:
c2:70:92:6c:05:02:36:24:50:04:14:e2:3d:3b:33:5d:42:8a:
91:3f:66:cc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2ZYfK1AVRsXh6kUoWKSRiVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmNTBhMGRjYzcxYzQyOTIzZTQwNzAxMWJkMjEyYWZhNWM2
MmU1OWQwHhcNMjYwNDE3MDMwMDI2WhcNMjYwNDE4MDMwMDI2WjAzMTEwLwYDVQQD
EyhjOGQ3NGJmZWNhZTUxMmNmMzYxMGIzYTRlZjEwMjcxMTFjYWQ5NTRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsGFljLzRtP0p35bn1WCdwAZiqTrf
XHzIfSYH3WRwfcSKsKg6FWD3V224AmvdsmN1PZ1eJkmGuUwkiVP8ejss7HvGB9l+
A8OKQ0hLs4VxnOuB4CkqF+57iKLItQOXpxydaTEB/+BRjlYfgZqfJLQznQDeFtP6
gR3VEAeyKizw0rHmba4PMMrNYISBzcgehLRXSmeFPXvm3AQugQyVFISRRMQiGY+L
N7GFsXm+Or2IwmUiy2B8mALpoHiOa/7QzU07TeuEim9H7KDIlkoOsAzQkzDqt0Fl
3tnR3y+N1SebdJWNyCoIRtGbhzlWiKyJJYppJQUfnpG8hM+2aCp71KqaBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMjXS/7K5RLPNhCzpO8QJxEcrZVMMB8GA1UdIwQY
MBaAFE9QoNzHHEKSPkBwEb0hKvpcYuWdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDFDZzNNY2NRcEktUUhBUnZTRXEtbHhpNVowLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC8zMGEyYmYtYjUxZS00ZDcyLWI0MDkt
Y2E4YjI3NThiZTE1LzEvVDFDZzNNY2NRcEktUUhBUnZTRXEtbHhpNVowLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC8zMGEyYmYtYjUxZS00ZDcyLWI0MDktY2E4YjI3NThiZTE1
LzEvVDFDZzNNY2NRcEktUUhBUnZTRXEtbHhpNVowLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ+TehglB
vFZSl60eilYzoHrBug5fFEUQgNzpp8efylcSO852F6h+DZiZttzoFNPITCM9kQc2
hDxgciG/W4Tpf9JlNksblZWIfayYXjT0cjffnRSLmubLZZsx/rSHJR14xn6AEG2o
x3xdEnp02zX3/0L8EWGH1sEQy2IwtgahJ+XYJcBfq87kaD3ifdwTW9+YhrxwuOKm
47Bi29h9o/FtA0pQZGWKE2gUluFDiS+VkVQuk9QVEZ/nT+fHk5zm7w9+FhHVIm8V
RWsc8uTGFjTsdrTQgvv8HnMEJBwArAZri+9VK+6tezX8jnc5wnCSbAUCNiRQBBTi
PTszXUKKkT9mzA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 12:16:38 2026 by rpki-client