Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ae/a59ee9-33cd-47df-8403-b9472a2c5b3e/1/T7tj3wbeAMhD2mOXc0lZVHHlGiY.mft
File: T7tj3wbeAMhD2mOXc0lZVHHlGiY.mft (raw, json)
Hash identifier: eu2AW96lK6ePch0Tf7cF/MgBRdGhaz58RPoAxdBjML8=
Subject key identifier: D5:76:1F:17:ED:53:F2:1C:BA:6B:12:2F:01:6E:C1:A1:C9:E3:46:3F
Authority key identifier: 4F:BB:63:DF:06:DE:00:C8:43:DA:63:97:73:49:59:54:71:E5:1A:26
Certificate issuer: /CN=4fbb63df06de00c843da63977349595471e51a26
Certificate serial: 01A0CD47AA1B848DA4B0B6FD946BB97C43C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T7tj3wbeAMhD2mOXc0lZVHHlGiY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/a59ee9-33cd-47df-8403-b9472a2c5b3e/1/T7tj3wbeAMhD2mOXc0lZVHHlGiY.mft
Manifest number: 1A6A
Signing time: Wed 23 Sep 2026 08:00:20 +0000
Manifest this update: Wed 23 Sep 2026 08:00:20 +0000
Manifest next update: Thu 24 Sep 2026 08:00:20 +0000
Files and hashes: 1: A8xv8vtzPNYcudy_CkqqgALd8rQ.roa (hash: Z6P1U4fiAAFfK/T39wGFzFC2aSrZXB1b41nd+Paxb+Y=)
2: PZ4pye6_7166g23AECIvJy9Vhao.roa (hash: 4jYAbauCnevFtoSRsUY9ZzLogbgVs0jCgKmDbNXpnd8=)
3: T7tj3wbeAMhD2mOXc0lZVHHlGiY.crl (hash: 65ltHKhCAmHoqwowaoI4cK1+X47/CiM/F0gZbZNbzVs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/a59ee9-33cd-47df-8403-b9472a2c5b3e/1/T7tj3wbeAMhD2mOXc0lZVHHlGiY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/a59ee9-33cd-47df-8403-b9472a2c5b3e/1/T7tj3wbeAMhD2mOXc0lZVHHlGiY.mft
rsync://rpki.ripe.net/repository/DEFAULT/T7tj3wbeAMhD2mOXc0lZVHHlGiY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 08:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:47:aa:1b:84:8d:a4:b0:b6:fd:94:6b:b9:7c:43:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbb63df06de00c843da63977349595471e51a26
Validity
Not Before: Sep 23 08:00:20 2026 GMT
Not After : Sep 24 08:00:20 2026 GMT
Subject: CN=d5761f17ed53f21cba6b122f016ec1a1c9e3463f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:10:ef:27:21:40:74:b8:38:64:24:aa:e5:98:
f6:2b:2f:13:c4:65:bc:74:f7:d3:0d:02:b0:ec:40:
d0:95:b0:3e:7e:bc:cd:ba:43:47:99:88:47:d2:d9:
e2:ca:e4:7f:a4:74:4f:d4:46:98:7e:97:64:1a:6a:
f5:88:e5:5b:4a:e9:0b:ae:19:be:80:48:0a:42:f4:
d6:69:aa:ff:fd:40:e6:74:7b:55:bd:60:7d:65:66:
99:68:4b:0a:9a:4f:7c:78:18:88:88:46:08:e5:ed:
63:3f:80:f2:22:b8:b4:56:cf:92:fa:bb:87:09:90:
13:f6:f2:2b:ef:e5:aa:27:c0:2a:ef:fd:40:49:ab:
0e:e0:ac:0c:0e:45:35:e6:d3:5a:5d:bf:c0:b9:5c:
1c:c0:44:61:f5:27:f8:40:11:09:1b:f8:3f:fb:b0:
5a:8c:0a:83:52:b4:ac:ed:36:cc:c9:f8:cc:80:8b:
23:5d:a8:f1:35:90:fe:69:02:90:d3:df:f2:0c:79:
8e:bb:d7:85:57:9e:b4:32:39:88:12:a1:b8:d0:50:
66:e3:63:9b:7e:a3:89:c6:1e:3d:01:c7:68:23:dc:
98:af:41:ba:34:e7:1b:f3:3d:54:c9:ec:03:15:b2:
ff:0b:63:b3:bf:70:f0:f4:e5:85:18:c4:e9:5b:3a:
ac:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:76:1F:17:ED:53:F2:1C:BA:6B:12:2F:01:6E:C1:A1:C9:E3:46:3F
X509v3 Authority Key Identifier:
keyid:4F:BB:63:DF:06:DE:00:C8:43:DA:63:97:73:49:59:54:71:E5:1A:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T7tj3wbeAMhD2mOXc0lZVHHlGiY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/a59ee9-33cd-47df-8403-b9472a2c5b3e/1/T7tj3wbeAMhD2mOXc0lZVHHlGiY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/a59ee9-33cd-47df-8403-b9472a2c5b3e/1/T7tj3wbeAMhD2mOXc0lZVHHlGiY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:cc:1a:d6:68:b7:18:63:31:00:2f:39:71:63:76:67:ce:33:
a2:25:68:27:af:01:e1:a4:42:b4:c8:a5:aa:76:37:2e:4f:1d:
c9:54:98:ad:d7:90:2e:29:60:4a:1d:ff:f3:84:f7:49:56:55:
8d:ce:cf:0c:7e:cc:c9:dd:78:8e:43:39:25:a4:f1:20:17:5a:
25:07:ae:08:08:a6:31:3a:99:f7:1c:13:4f:7f:28:7a:bd:52:
e9:61:b8:9c:1a:36:ad:bd:c1:11:c0:f5:6c:bc:86:d4:9d:79:
75:18:7e:8b:5b:bc:52:80:a1:12:eb:76:bf:54:f2:71:98:1e:
4d:e4:6c:cd:99:99:76:27:08:ce:dc:06:cc:83:77:b0:6c:7d:
bf:42:b5:ae:9a:a4:7a:79:87:d1:f9:59:18:bf:e3:cc:a5:d9:
1a:94:b7:2c:a0:dc:03:1f:9e:ac:06:26:42:81:f6:cc:70:0e:
32:cd:c8:19:60:40:d4:e5:c1:0c:8e:3f:ba:e5:25:74:35:0d:
7d:ee:ce:e2:8d:21:20:ef:d3:c5:32:cf:93:09:a6:80:f5:48:
08:4f:49:5e:7a:33:36:2e:72:46:48:c7:db:54:05:aa:5a:ee:
0c:0f:04:ef:fa:97:9e:a4:aa:c2:91:7a:cb:3d:09:b4:cd:6f:
54:e0:e5:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 17:23:36 2026 by rpki-client