Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/30a2bf-b51e-4d72-b409-ca8b2758be15/1/T1Cg3MccQpI-QHARvSEq-lxi5Z0.mft
File: T1Cg3MccQpI-QHARvSEq-lxi5Z0.mft (raw, json)
Hash identifier: FAs07t3/MG6HGVcu23Gs33elO0VOf636IPG/tgxRrYM=
Subject key identifier: 6A:45:80:EB:06:FB:A1:F7:0D:F3:D8:23:20:88:E6:BD:03:CB:1A:05
Authority key identifier: 4F:50:A0:DC:C7:1C:42:92:3E:40:70:11:BD:21:2A:FA:5C:62:E5:9D
Certificate issuer: /CN=4f50a0dcc71c42923e407011bd212afa5c62e59d
Certificate serial: 019CABD939B2E19256616A81EB40B0AA5238
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T1Cg3MccQpI-QHARvSEq-lxi5Z0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/30a2bf-b51e-4d72-b409-ca8b2758be15/1/T1Cg3MccQpI-QHARvSEq-lxi5Z0.mft
Manifest number: 0990
Signing time: Mon 02 Mar 2026 00:01:05 +0000
Manifest this update: Mon 02 Mar 2026 00:01:05 +0000
Manifest next update: Tue 03 Mar 2026 00:01:05 +0000
Files and hashes: 1: T1Cg3MccQpI-QHARvSEq-lxi5Z0.crl (hash: Prl02xlIIc8+QE6syyajyooUFFDZFsG1LAxDmBWtcUw=)
2: jqFl-7_gLpulPBCBNUBkTagrN3g.roa (hash: 7OT128HVnPG3xzUxRNuL4t2bFGILvHb7kyCtTCl4GV0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/30a2bf-b51e-4d72-b409-ca8b2758be15/1/T1Cg3MccQpI-QHARvSEq-lxi5Z0.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/30a2bf-b51e-4d72-b409-ca8b2758be15/1/T1Cg3MccQpI-QHARvSEq-lxi5Z0.mft
rsync://rpki.ripe.net/repository/DEFAULT/T1Cg3MccQpI-QHARvSEq-lxi5Z0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:39:b2:e1:92:56:61:6a:81:eb:40:b0:aa:52:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f50a0dcc71c42923e407011bd212afa5c62e59d
Validity
Not Before: Mar 2 00:01:05 2026 GMT
Not After : Mar 3 00:01:05 2026 GMT
Subject: CN=6a4580eb06fba1f70df3d8232088e6bd03cb1a05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:88:d5:4d:17:ba:06:2c:3b:51:f8:4b:1e:73:
c4:86:00:d0:77:e6:8c:0f:c9:bc:f4:13:0a:52:b6:
ca:35:da:3c:62:0f:54:b4:57:8c:70:b0:ed:fa:29:
72:85:cb:42:68:2a:4b:a7:e0:34:4b:59:67:af:7b:
63:a5:5a:18:df:84:5e:82:9a:04:82:c4:3b:d9:24:
94:3a:1b:5b:2d:5e:d8:a9:36:54:60:2a:c6:f6:6b:
30:32:50:b7:a6:60:ae:25:ef:8e:4c:3c:16:43:b3:
69:2c:de:f8:ae:5f:fc:09:09:de:e6:dd:51:e0:45:
c1:39:59:16:62:83:fd:d1:c3:ee:d0:6b:04:9e:9f:
f3:03:d0:55:f5:f6:3f:a5:1d:27:7f:04:c6:7e:c4:
95:8b:9f:94:d5:69:de:aa:44:64:f6:0b:92:65:4d:
5d:62:ba:8a:3f:11:51:60:ff:42:f8:02:cb:e0:fd:
8d:33:0a:8e:e7:1b:ac:6e:e0:83:8b:9d:1d:e0:2d:
ba:d3:aa:ed:d6:d2:0a:ff:3e:02:c3:b0:d1:98:ed:
c1:db:ea:b0:93:0f:87:76:c4:95:1d:73:f5:0f:93:
bc:ee:85:62:0c:d0:08:df:b1:5b:24:df:6c:a7:be:
9e:f4:9b:97:0e:ec:72:df:e9:d6:1c:97:39:94:60:
65:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:45:80:EB:06:FB:A1:F7:0D:F3:D8:23:20:88:E6:BD:03:CB:1A:05
X509v3 Authority Key Identifier:
keyid:4F:50:A0:DC:C7:1C:42:92:3E:40:70:11:BD:21:2A:FA:5C:62:E5:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T1Cg3MccQpI-QHARvSEq-lxi5Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/30a2bf-b51e-4d72-b409-ca8b2758be15/1/T1Cg3MccQpI-QHARvSEq-lxi5Z0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/30a2bf-b51e-4d72-b409-ca8b2758be15/1/T1Cg3MccQpI-QHARvSEq-lxi5Z0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:0d:a7:b3:f6:5b:8f:65:e4:1b:76:cd:8c:72:26:ab:4a:3c:
3c:f9:ac:2d:28:4d:b6:2a:4a:af:7f:94:70:64:1d:48:9c:c7:
e1:30:80:ac:20:ab:7d:2b:58:9f:a3:5d:5e:9f:9d:0c:35:d2:
f8:d8:3c:17:ad:97:8a:59:33:47:5b:a0:94:b8:05:ac:52:d2:
6c:c2:20:0c:e5:ee:41:75:d3:78:67:eb:75:1f:df:5c:64:fd:
75:51:05:2d:a5:90:07:57:e8:91:34:78:7a:00:50:b6:d7:d5:
10:ea:a9:38:7d:60:b8:8a:f9:41:90:d9:53:be:b2:52:c2:66:
1e:aa:c1:af:6d:b3:70:43:5b:b7:13:9c:96:4c:7a:9e:35:3a:
0f:14:4c:5e:81:ac:b6:2a:f1:97:63:ab:d9:37:33:06:1a:3f:
56:e5:22:e9:20:d6:0c:c9:01:1f:1c:93:98:2c:b2:f4:42:25:
56:c9:39:48:eb:0e:b1:55:81:b6:ea:f7:89:c2:8c:14:3f:41:
4b:1b:f3:51:1c:85:19:ca:c8:50:d7:97:26:47:38:3e:1f:82:
62:c6:39:5d:25:eb:e9:ef:97:a9:5f:81:31:9c:a4:48:99:a7:
7b:5a:24:28:bb:61:eb:25:a5:e4:97:39:99:33:d4:ce:73:3f:
17:6b:14:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:34:32 2026 by rpki-client