Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/dcf969-3859-4dca-acf4-e2fedab3cb09/1/T2wXG0x11lCorxdohtAjWjTlnfA.mft
File: T2wXG0x11lCorxdohtAjWjTlnfA.mft (raw, json)
Hash identifier: DuQDNs7OBmPAMpKa7yY2mAteci0PFj9iUd8OdmDrJpE=
Subject key identifier: C0:AE:EE:84:1F:73:0D:B3:B5:64:16:DA:7A:E4:82:14:8C:59:D7:6B
Authority key identifier: 4F:6C:17:1B:4C:75:D6:50:A8:AF:17:68:86:D0:23:5A:34:E5:9D:F0
Certificate issuer: /CN=4f6c171b4c75d650a8af176886d0235a34e59df0
Certificate serial: 019CA7FC7F82C1704DB78118D49E0E36AFE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T2wXG0x11lCorxdohtAjWjTlnfA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/dcf969-3859-4dca-acf4-e2fedab3cb09/1/T2wXG0x11lCorxdohtAjWjTlnfA.mft
Manifest number: ED
Signing time: Sun 01 Mar 2026 06:01:08 +0000
Manifest this update: Sun 01 Mar 2026 06:01:08 +0000
Manifest next update: Mon 02 Mar 2026 06:01:08 +0000
Files and hashes: 1: 3pzPfip2XT8VFVQRc6zhDFom7z4.asa (hash: KHMn3BeOnJHGQkWq9E9H+WYoE/KxiD16e8EHfT7Wrxo=)
2: T2wXG0x11lCorxdohtAjWjTlnfA.crl (hash: 6bRByvvChhgDcJoRWWNCnXQT4D/0waeWfzaf1zFI1zk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/dcf969-3859-4dca-acf4-e2fedab3cb09/1/T2wXG0x11lCorxdohtAjWjTlnfA.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/dcf969-3859-4dca-acf4-e2fedab3cb09/1/T2wXG0x11lCorxdohtAjWjTlnfA.mft
rsync://rpki.ripe.net/repository/DEFAULT/T2wXG0x11lCorxdohtAjWjTlnfA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a7:fc:7f:82:c1:70:4d:b7:81:18:d4:9e:0e:36:af:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f6c171b4c75d650a8af176886d0235a34e59df0
Validity
Not Before: Mar 1 06:01:08 2026 GMT
Not After : Mar 2 06:01:08 2026 GMT
Subject: CN=c0aeee841f730db3b56416da7ae482148c59d76b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:a0:1d:bc:35:a9:24:fb:29:b2:ad:22:d6:5c:
1c:7f:b9:9f:cf:69:4d:ec:e9:4f:de:4f:64:d3:7f:
02:8a:69:07:fe:4c:8d:88:13:4d:13:31:e6:09:e5:
91:9c:6b:60:54:60:dd:36:8a:57:6e:fe:36:db:ed:
58:cf:8d:b7:dc:a7:b9:f3:9c:d1:00:8f:fd:f5:f6:
c7:6b:4d:63:ea:93:6b:75:c2:fa:e0:1a:7a:f0:b8:
72:6c:84:a4:50:e7:6e:de:7e:df:56:10:ee:8f:d2:
67:50:56:a8:b6:66:e7:f3:d9:6b:59:05:b3:cb:dd:
22:15:40:f7:ea:04:e6:2c:c4:c8:a5:61:00:2a:fe:
bc:01:90:96:30:cf:6d:2f:38:d1:f4:e7:32:33:23:
b0:19:a6:7d:05:64:5a:11:4f:01:45:63:f8:22:58:
b1:6a:48:69:b1:4e:f1:6e:78:ac:4c:64:b7:25:39:
7c:ab:18:a1:c3:25:de:ed:29:97:a1:b1:0a:fb:68:
d0:94:07:9b:93:f3:93:ca:79:68:71:de:65:34:32:
c2:33:2a:59:9d:0a:fc:22:8a:32:98:f4:34:74:ed:
0f:0e:1e:29:6d:b2:8a:56:ba:9e:ab:05:9a:64:0a:
f6:3f:d6:f0:7e:c9:16:37:78:3f:9e:b4:bd:b1:cc:
c9:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:AE:EE:84:1F:73:0D:B3:B5:64:16:DA:7A:E4:82:14:8C:59:D7:6B
X509v3 Authority Key Identifier:
keyid:4F:6C:17:1B:4C:75:D6:50:A8:AF:17:68:86:D0:23:5A:34:E5:9D:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T2wXG0x11lCorxdohtAjWjTlnfA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/dcf969-3859-4dca-acf4-e2fedab3cb09/1/T2wXG0x11lCorxdohtAjWjTlnfA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/dcf969-3859-4dca-acf4-e2fedab3cb09/1/T2wXG0x11lCorxdohtAjWjTlnfA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:26:4e:de:08:c5:a2:39:3f:6e:20:c3:62:ea:c4:b2:de:82:
2b:da:32:a5:cb:1d:10:92:60:c8:6b:33:88:4d:25:3f:6a:79:
ed:c8:56:f1:fd:ab:96:6f:85:9e:6a:dc:77:e3:d8:18:b1:d2:
63:43:6c:7f:d6:6a:99:6a:f4:9c:b6:bc:cc:af:55:0a:c7:f4:
36:13:5d:42:d0:cf:fd:8c:82:9f:82:f2:9e:db:fb:e1:8a:17:
d1:89:e3:3c:40:bf:2f:99:80:30:09:ae:f5:f7:20:2e:35:b9:
16:1f:43:4e:df:9d:91:d9:f1:5c:f8:5a:9c:a3:8f:5f:4c:db:
dd:c4:5a:b8:04:f9:e9:bd:50:cd:86:79:6a:a4:97:5b:08:3b:
71:a5:af:36:10:24:0e:e0:33:ba:7b:2e:7f:d5:6b:db:9f:29:
44:5b:75:d9:e7:ad:20:85:dc:d8:30:86:47:35:36:41:98:d4:
f1:3a:13:67:c9:0f:31:46:82:9e:d1:c9:40:b5:1a:66:fc:1d:
ec:d1:a8:9e:66:b3:be:b3:15:7b:88:67:96:30:8b:20:ea:53:
9b:ed:a1:4c:08:c5:2b:6f:d2:d7:26:9b:cf:96:ec:40:c7:7b:
2f:07:ab:98:10:e9:40:b1:aa:33:50:a4:d5:02:a6:50:8a:0b:
d7:6e:f8:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 16:29:34 2026 by rpki-client