Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/a59ee9-33cd-47df-8403-b9472a2c5b3e/1/T7tj3wbeAMhD2mOXc0lZVHHlGiY.mft
File: T7tj3wbeAMhD2mOXc0lZVHHlGiY.mft (raw, json)
Hash identifier: ITsAkejc0PLTaKwLyM+H4aaCtDWtzreQosakDbas8DU=
Subject key identifier: 7A:29:56:D9:A9:0A:C3:93:35:D2:4B:FA:98:89:53:1E:A0:F0:07:80
Authority key identifier: 4F:BB:63:DF:06:DE:00:C8:43:DA:63:97:73:49:59:54:71:E5:1A:26
Certificate issuer: /CN=4fbb63df06de00c843da63977349595471e51a26
Certificate serial: 019CAED9CBC2D62C3078FA4969892FED1AFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T7tj3wbeAMhD2mOXc0lZVHHlGiY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/a59ee9-33cd-47df-8403-b9472a2c5b3e/1/T7tj3wbeAMhD2mOXc0lZVHHlGiY.mft
Manifest number: 1848
Signing time: Mon 02 Mar 2026 14:00:34 +0000
Manifest this update: Mon 02 Mar 2026 14:00:34 +0000
Manifest next update: Tue 03 Mar 2026 14:00:34 +0000
Files and hashes: 1: A8xv8vtzPNYcudy_CkqqgALd8rQ.roa (hash: Z6P1U4fiAAFfK/T39wGFzFC2aSrZXB1b41nd+Paxb+Y=)
2: PZ4pye6_7166g23AECIvJy9Vhao.roa (hash: 4jYAbauCnevFtoSRsUY9ZzLogbgVs0jCgKmDbNXpnd8=)
3: T7tj3wbeAMhD2mOXc0lZVHHlGiY.crl (hash: jo2dyfUrZUhUqJHp2B8FwvpVxfkHbZgtWoc+OzUDFmA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/a59ee9-33cd-47df-8403-b9472a2c5b3e/1/T7tj3wbeAMhD2mOXc0lZVHHlGiY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/a59ee9-33cd-47df-8403-b9472a2c5b3e/1/T7tj3wbeAMhD2mOXc0lZVHHlGiY.mft
rsync://rpki.ripe.net/repository/DEFAULT/T7tj3wbeAMhD2mOXc0lZVHHlGiY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 14:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:d9:cb:c2:d6:2c:30:78:fa:49:69:89:2f:ed:1a:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbb63df06de00c843da63977349595471e51a26
Validity
Not Before: Mar 2 14:00:34 2026 GMT
Not After : Mar 3 14:00:34 2026 GMT
Subject: CN=7a2956d9a90ac39335d24bfa9889531ea0f00780
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:45:d3:64:97:d8:eb:e2:7b:71:a7:67:41:d0:
72:94:94:e5:3d:50:44:fe:8e:ed:66:76:3f:33:36:
4d:60:cf:72:1a:d5:c3:97:04:10:47:a0:93:07:c7:
4c:02:58:ea:66:5b:90:5a:c0:3f:84:53:9d:b5:ec:
6e:eb:dd:b8:89:3a:53:de:e9:78:fd:03:45:d3:f9:
9d:66:a7:01:00:26:3d:89:f2:cc:d0:8a:c8:be:0f:
25:de:4c:19:76:9c:b5:da:c4:df:8e:95:68:4e:bf:
70:3f:c4:85:3a:3e:84:f1:b2:e3:e0:8e:58:6a:bf:
b6:e9:93:c8:fe:02:d7:12:c3:96:4e:a4:7d:b4:1b:
d5:f4:cb:56:a4:34:23:df:22:c8:88:37:fa:f8:0e:
18:af:c6:4d:0d:b1:01:c0:93:5b:74:bf:a9:bf:0f:
ea:5e:ff:9a:e6:83:b4:09:92:26:79:af:17:09:a9:
a1:1b:1d:2a:08:bd:ef:bd:22:35:3a:46:14:25:ef:
8a:22:b1:84:be:99:63:53:df:9b:75:ff:b3:17:b1:
f6:f4:d4:db:f6:67:70:37:dd:b9:a9:72:bd:4a:3a:
f2:e3:67:a5:f0:af:27:a0:2a:62:db:1f:13:2a:c2:
a4:83:a8:2f:3b:db:83:f4:b9:4d:bc:f3:74:16:59:
c9:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:29:56:D9:A9:0A:C3:93:35:D2:4B:FA:98:89:53:1E:A0:F0:07:80
X509v3 Authority Key Identifier:
keyid:4F:BB:63:DF:06:DE:00:C8:43:DA:63:97:73:49:59:54:71:E5:1A:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T7tj3wbeAMhD2mOXc0lZVHHlGiY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/a59ee9-33cd-47df-8403-b9472a2c5b3e/1/T7tj3wbeAMhD2mOXc0lZVHHlGiY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/a59ee9-33cd-47df-8403-b9472a2c5b3e/1/T7tj3wbeAMhD2mOXc0lZVHHlGiY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:ea:47:f4:99:13:29:b0:17:b8:b1:86:39:f9:da:14:55:88:
8d:0f:17:d9:52:64:72:92:4f:7b:7e:5e:6c:2c:59:57:ab:32:
9f:f8:5b:fd:c1:2f:cf:99:bb:71:30:4d:d1:93:d0:7a:11:7a:
f7:0a:6a:d2:a8:3c:02:03:4c:11:83:2a:01:2c:5d:e4:0b:58:
3c:fd:16:f3:e8:d1:06:9e:12:e8:a2:b7:eb:79:b5:37:63:28:
ab:dc:f7:0f:89:7f:79:fe:29:c3:19:f7:4c:a0:83:e7:8a:69:
e0:f8:bd:d6:cd:6d:44:44:9a:81:8a:c9:b2:c1:ab:de:cd:a0:
aa:a2:8f:68:1d:97:cd:86:70:75:02:48:4e:d9:a4:32:74:03:
c0:c1:2a:0c:cf:f8:7b:8f:5e:9e:9b:24:6d:aa:a6:c5:11:f2:
2b:c7:97:64:6d:49:1d:8d:f6:36:39:f3:14:bb:a7:42:1f:39:
38:71:ca:77:b1:54:b1:70:1f:20:d1:a2:8a:d5:6c:89:27:04:
ef:4a:f9:12:5c:8c:29:02:c5:ce:8e:6b:35:e1:70:ae:8a:4b:
27:80:93:fa:60:9f:9d:26:56:31:d3:a5:52:84:df:7c:5e:40:
88:0b:2c:f4:08:5d:24:bd:b4:9f:a7:0e:6e:ef:57:34:f4:ee:
b1:17:c9:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:54:29 2026 by rpki-client