Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8a/944896-3c41-4710-86d2-005a929ac124/1/T3zlnkdBgWbSD1FkhW-HkzmRidA.mft
File: T3zlnkdBgWbSD1FkhW-HkzmRidA.mft (raw, json)
Hash identifier: w4JTEUhm7d4emHbieLrZueT2JB8W0r01N1rBhLJ9YBM=
Subject key identifier: C0:EB:39:39:6D:54:3C:23:FB:5A:12:FB:D3:4D:09:F5:FE:E7:B1:89
Authority key identifier: 4F:7C:E5:9E:47:41:81:66:D2:0F:51:64:85:6F:87:93:39:91:89:D0
Certificate issuer: /CN=4f7ce59e47418166d20f5164856f8793399189d0
Certificate serial: 01A0C47BAA3B3DE7F1CA8B091E902770E492
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T3zlnkdBgWbSD1FkhW-HkzmRidA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/944896-3c41-4710-86d2-005a929ac124/1/T3zlnkdBgWbSD1FkhW-HkzmRidA.mft
Manifest number: DF
Signing time: Mon 21 Sep 2026 15:00:33 +0000
Manifest this update: Mon 21 Sep 2026 15:00:33 +0000
Manifest next update: Tue 22 Sep 2026 15:00:33 +0000
Files and hashes: 1: T3zlnkdBgWbSD1FkhW-HkzmRidA.crl (hash: D58QsXP3VKtH2XRpUAc1JW3qHgvIexd4EZi7NANG87c=)
2: hzeHFDX7-fXakvbRNzVIimetgT0.roa (hash: TTVPslSxsu3A4z0fsBCY/2+kt2uSPjNyxRVnr/wiATk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/944896-3c41-4710-86d2-005a929ac124/1/T3zlnkdBgWbSD1FkhW-HkzmRidA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/944896-3c41-4710-86d2-005a929ac124/1/T3zlnkdBgWbSD1FkhW-HkzmRidA.mft
rsync://rpki.ripe.net/repository/DEFAULT/T3zlnkdBgWbSD1FkhW-HkzmRidA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:7b:aa:3b:3d:e7:f1:ca:8b:09:1e:90:27:70:e4:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f7ce59e47418166d20f5164856f8793399189d0
Validity
Not Before: Sep 21 15:00:33 2026 GMT
Not After : Sep 22 15:00:33 2026 GMT
Subject: CN=c0eb39396d543c23fb5a12fbd34d09f5fee7b189
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:f0:62:e8:2b:56:45:89:b7:99:2c:c9:7b:f8:
b1:20:13:9f:4b:5e:b4:a6:e1:cc:01:6f:dd:0d:6d:
eb:95:66:1f:d7:db:de:0f:14:7d:27:75:ec:ab:ed:
a0:1b:08:9e:15:d8:9c:7d:2f:a4:d4:5f:df:29:f6:
cf:c3:a0:5b:9d:10:99:18:93:31:0e:f0:dc:8c:d3:
6d:a7:47:99:c1:d9:e2:96:f4:0d:c7:4e:26:cc:79:
19:5f:eb:f2:94:bc:fa:a7:a5:53:94:5a:aa:ce:32:
20:9a:b4:6b:44:a7:23:f5:80:76:08:a0:60:23:a3:
85:09:ee:c5:72:0f:fa:d7:f5:fc:87:81:75:ae:78:
1e:b4:db:15:da:3b:82:75:b1:e0:e1:16:62:fb:f4:
4a:1c:7b:fe:f6:c3:a4:9a:71:e6:02:32:3a:63:1e:
b4:7b:fe:19:db:6f:5b:cd:f9:18:35:c5:eb:94:f4:
61:72:34:49:9a:a1:ed:6c:3f:5a:2c:0a:25:58:5b:
c6:e4:5b:df:4f:d2:c5:a4:d9:68:c5:ea:e5:3e:e8:
a5:7f:3f:35:e4:77:62:74:74:57:44:ed:54:f7:b1:
0b:c8:7e:21:5e:39:cd:d9:b4:eb:00:5e:3d:6a:e0:
0e:4b:b9:cd:be:c2:c6:04:60:57:91:0e:52:dd:ce:
e2:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:EB:39:39:6D:54:3C:23:FB:5A:12:FB:D3:4D:09:F5:FE:E7:B1:89
X509v3 Authority Key Identifier:
keyid:4F:7C:E5:9E:47:41:81:66:D2:0F:51:64:85:6F:87:93:39:91:89:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T3zlnkdBgWbSD1FkhW-HkzmRidA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/944896-3c41-4710-86d2-005a929ac124/1/T3zlnkdBgWbSD1FkhW-HkzmRidA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/944896-3c41-4710-86d2-005a929ac124/1/T3zlnkdBgWbSD1FkhW-HkzmRidA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:13:70:13:1c:11:2f:ac:65:39:89:ca:83:00:50:30:a2:02:
06:e4:1d:95:7d:ad:5d:f2:64:64:40:92:65:b8:75:53:18:ff:
bc:ed:8e:8b:83:46:40:87:e7:8c:75:b4:6a:9b:19:b2:c6:47:
be:cc:ba:87:a5:50:81:68:27:8a:6e:45:a8:00:4a:8b:05:71:
af:55:50:c2:3b:11:a1:81:b7:1c:5e:5e:fa:77:55:5c:ff:bd:
e6:c5:98:dd:9e:ab:c0:88:b2:2e:e1:0d:0b:b1:cf:6f:a8:a2:
1a:fa:5f:54:45:7b:82:a0:73:bd:cf:3e:47:08:af:bc:af:75:
7b:a5:b9:ac:13:e5:2f:b3:4c:6c:a1:5e:c7:09:de:8c:42:75:
eb:1f:c8:20:c3:82:4b:d3:6c:36:e5:3a:df:76:05:98:71:3f:
b1:cd:55:b6:a9:d9:cb:d9:84:bd:f4:6d:bd:76:fe:85:59:8a:
68:98:d0:62:3b:e2:54:d4:11:42:6b:ec:38:46:1a:54:1f:8d:
f1:61:b4:76:39:1f:33:5a:df:c3:4f:a5:e4:78:0a:db:ed:7e:
a8:ba:12:65:4c:99:45:b4:69:6a:2a:fc:04:cc:64:1a:c3:e8:
c2:16:ae:2d:ca:cd:13:3c:47:40:ef:2a:47:dd:b1:4d:9d:a7:
54:ec:82:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 21:57:01 2026 by rpki-client