Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/dcf969-3859-4dca-acf4-e2fedab3cb09/1/T2wXG0x11lCorxdohtAjWjTlnfA.mft
File: T2wXG0x11lCorxdohtAjWjTlnfA.mft (raw, json)
Hash identifier: BGKOYZFv9Mj6PscmGRqxgbE4jCpGCtS+LyesT9eLgfg=
Subject key identifier: ED:BD:0C:5B:A5:4F:74:F1:F0:1E:C5:EB:99:4D:FC:69:FF:6F:14:B3
Authority key identifier: 4F:6C:17:1B:4C:75:D6:50:A8:AF:17:68:86:D0:23:5A:34:E5:9D:F0
Certificate issuer: /CN=4f6c171b4c75d650a8af176886d0235a34e59df0
Certificate serial: 019D98BDAE00061441715ED11A003AF82AB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T2wXG0x11lCorxdohtAjWjTlnfA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/dcf969-3859-4dca-acf4-e2fedab3cb09/1/T2wXG0x11lCorxdohtAjWjTlnfA.mft
Manifest number: 016A
Signing time: Fri 17 Apr 2026 00:01:00 +0000
Manifest this update: Fri 17 Apr 2026 00:01:00 +0000
Manifest next update: Sat 18 Apr 2026 00:01:00 +0000
Files and hashes: 1: T2wXG0x11lCorxdohtAjWjTlnfA.crl (hash: CQWkBPTpK0kgbiIM4eeYlNxPhamGKneCFegD/uTqGn4=)
2: qv6fqIT_HxplbWbHeHLDw8kKvqc.asa (hash: LDWPXovcnYz6cBlpTtVE4gUuZ/XS8QlQCCpREXOSdRM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/dcf969-3859-4dca-acf4-e2fedab3cb09/1/T2wXG0x11lCorxdohtAjWjTlnfA.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/dcf969-3859-4dca-acf4-e2fedab3cb09/1/T2wXG0x11lCorxdohtAjWjTlnfA.mft
rsync://rpki.ripe.net/repository/DEFAULT/T2wXG0x11lCorxdohtAjWjTlnfA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 00:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:bd:ae:00:06:14:41:71:5e:d1:1a:00:3a:f8:2a:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f6c171b4c75d650a8af176886d0235a34e59df0
Validity
Not Before: Apr 17 00:01:00 2026 GMT
Not After : Apr 18 00:01:00 2026 GMT
Subject: CN=edbd0c5ba54f74f1f01ec5eb994dfc69ff6f14b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:9e:94:ff:9b:62:1a:23:09:45:f9:6b:dd:89:
43:74:82:59:64:7f:df:44:bc:1e:08:f3:f3:c3:e5:
d8:d6:54:19:80:d2:79:93:76:21:85:db:32:b9:6f:
4a:b5:6d:f6:e7:de:c9:5b:c6:e3:93:f2:7b:31:04:
55:05:e3:35:eb:f2:ec:f7:19:b7:8b:c9:0f:c4:ef:
ce:4f:8e:a9:d4:2a:13:2b:c9:ab:68:f6:79:18:8c:
e1:b8:f6:a8:17:b0:1e:5f:b8:c3:31:b3:b6:cc:4f:
52:1b:c6:05:2a:a7:ad:74:50:dd:ff:1c:f7:0f:0d:
19:73:d9:f2:6d:0b:6d:89:8e:58:ec:57:b4:37:3d:
27:72:06:ce:94:2b:43:e1:db:6e:66:71:1f:af:39:
94:9d:3b:35:a2:a6:7a:da:cc:5f:4c:5e:37:ec:ca:
01:87:f5:9c:c3:db:15:cb:ac:6d:3a:29:04:db:27:
ab:c4:7a:1d:fc:58:56:7c:3f:53:99:8a:85:59:e0:
19:e1:be:4e:55:28:12:16:b1:db:44:59:80:d9:e9:
2f:1a:d8:65:4a:76:c1:91:be:ae:24:2f:b0:85:bd:
cd:12:d3:fc:2b:89:bf:bb:84:9c:c7:05:3d:fc:34:
a9:23:f0:c9:48:8d:5f:f2:41:8d:ee:89:bf:13:23:
03:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:BD:0C:5B:A5:4F:74:F1:F0:1E:C5:EB:99:4D:FC:69:FF:6F:14:B3
X509v3 Authority Key Identifier:
keyid:4F:6C:17:1B:4C:75:D6:50:A8:AF:17:68:86:D0:23:5A:34:E5:9D:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T2wXG0x11lCorxdohtAjWjTlnfA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/dcf969-3859-4dca-acf4-e2fedab3cb09/1/T2wXG0x11lCorxdohtAjWjTlnfA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/dcf969-3859-4dca-acf4-e2fedab3cb09/1/T2wXG0x11lCorxdohtAjWjTlnfA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:70:8b:a0:0d:d1:12:ff:d5:d2:6a:52:48:18:ac:2f:55:c0:
a1:09:49:79:ab:1b:30:6c:8e:f5:74:a1:06:1a:d1:8f:a2:6a:
de:56:24:03:c7:26:db:09:55:44:f7:93:10:61:f2:f4:5a:c5:
77:3d:9f:13:a9:7c:ce:fd:c0:05:4c:5f:b8:dc:a1:e8:c8:9c:
36:e0:6e:65:8d:26:9d:c1:b3:c3:b6:bd:55:3e:32:79:f7:0b:
9b:8e:cf:cf:65:df:00:55:15:e9:14:fc:cb:db:88:40:55:d7:
0c:d7:00:89:d2:d5:9c:ab:43:8e:81:38:e2:52:8b:71:23:9e:
2d:6e:c5:73:ce:4b:d5:75:3f:f0:a7:9c:d9:7b:5b:f1:49:43:
6c:44:4a:65:39:38:d6:4f:a5:f1:3a:58:4a:77:3d:d6:e4:98:
80:5a:db:ad:98:d3:cf:31:74:cf:7b:f4:d6:43:b7:af:7b:ed:
1c:66:bc:29:56:1e:14:94:29:c2:90:4e:07:6f:a4:12:97:87:
82:76:3e:9e:28:95:29:5b:01:ad:ff:97:03:dc:12:6a:39:88:
1a:ef:f6:ae:72:d8:f2:7e:43:e1:79:da:7a:a0:f3:60:a5:9d:
05:76:47:7e:a1:03:6e:84:e3:e5:58:f4:fe:bf:b1:b9:d4:a0:
89:4d:63:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:36:39 2026 by rpki-client