Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/35c0b9-2855-4b20-8c80-7e280752da21/1/T2ctOZKXMa7Z4BvFqebWgPRlmgs.mft
File: T2ctOZKXMa7Z4BvFqebWgPRlmgs.mft (raw, json)
Hash identifier: TkDW1U8gf5heEnFn3Q4Z2oJumXcuQSqFC1ru1XfPtDI=
Subject key identifier: 1B:92:E0:FC:62:24:AA:31:3E:F1:2A:0D:CB:21:CF:E4:9C:57:ED:9F
Authority key identifier: 4F:67:2D:39:92:97:31:AE:D9:E0:1B:C5:A9:E6:D6:80:F4:65:9A:0B
Certificate issuer: /CN=4f672d39929731aed9e01bc5a9e6d680f4659a0b
Certificate serial: 019D97AB39036497B7776343171E7B8149E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T2ctOZKXMa7Z4BvFqebWgPRlmgs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/35c0b9-2855-4b20-8c80-7e280752da21/1/T2ctOZKXMa7Z4BvFqebWgPRlmgs.mft
Manifest number: 1418
Signing time: Thu 16 Apr 2026 19:01:14 +0000
Manifest this update: Thu 16 Apr 2026 19:01:14 +0000
Manifest next update: Fri 17 Apr 2026 19:01:14 +0000
Files and hashes: 1: 6Zx9YtDEJ49JC-4b71_fvWtzw8s.roa (hash: o/A6dnRcU90/Ns+dOzz+UmVUTf5+OMsC+rgsisi5p8Q=)
2: NIU7fZeJ73Kx7vUBqR7rizpf67w.roa (hash: 2ugysi5XrPkBHFUed+88NeImX7rSdwmGmQYl2PxW7sE=)
3: T2ctOZKXMa7Z4BvFqebWgPRlmgs.crl (hash: S/0VHzQNbAX0kfw1i9sysbkiN9Kyr6R1L6A9nNhLR0k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/35c0b9-2855-4b20-8c80-7e280752da21/1/T2ctOZKXMa7Z4BvFqebWgPRlmgs.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/35c0b9-2855-4b20-8c80-7e280752da21/1/T2ctOZKXMa7Z4BvFqebWgPRlmgs.mft
rsync://rpki.ripe.net/repository/DEFAULT/T2ctOZKXMa7Z4BvFqebWgPRlmgs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 19:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:97:ab:39:03:64:97:b7:77:63:43:17:1e:7b:81:49:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f672d39929731aed9e01bc5a9e6d680f4659a0b
Validity
Not Before: Apr 16 19:01:14 2026 GMT
Not After : Apr 17 19:01:14 2026 GMT
Subject: CN=1b92e0fc6224aa313ef12a0dcb21cfe49c57ed9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:45:3e:c1:d2:0c:f0:a1:27:78:47:a1:3c:47:
af:b1:d8:2f:c6:c8:4d:fd:3a:7e:55:b8:78:97:01:
ae:a3:aa:aa:6d:a0:57:49:f1:b6:71:c4:a2:57:99:
ba:63:1c:1e:76:d9:5d:66:b1:96:d6:36:ff:f1:d7:
37:42:de:0b:cf:29:0e:60:89:f4:92:82:b2:11:44:
52:e0:c8:47:2e:2c:ce:84:85:c0:3a:1f:ea:ac:0e:
4c:4c:76:b1:eb:25:a7:ba:30:ad:18:87:02:3f:42:
47:0a:1b:66:fa:24:21:4f:e2:56:83:a0:fe:81:8a:
77:43:02:d6:48:8c:e2:49:fa:02:ac:73:8a:96:a9:
ab:28:f0:5e:d6:57:aa:07:a4:a6:83:ce:22:65:1c:
31:d3:f7:02:d6:10:44:a5:2e:5b:24:64:5b:5e:e0:
ed:9b:a1:2b:07:ce:3c:38:7a:d5:9e:2b:3f:57:b2:
8b:37:82:a9:c2:5a:15:d2:f3:fe:9f:16:8c:dc:20:
30:28:04:4c:33:be:85:63:9c:95:a4:78:fe:3c:a6:
ca:fa:2d:84:cc:e3:ef:14:07:15:94:a2:4f:0f:e0:
0a:66:6c:23:02:17:8b:0c:9f:85:b5:db:7b:5e:e0:
06:be:13:ee:15:99:6e:e8:92:88:be:80:ad:ef:9c:
13:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:92:E0:FC:62:24:AA:31:3E:F1:2A:0D:CB:21:CF:E4:9C:57:ED:9F
X509v3 Authority Key Identifier:
keyid:4F:67:2D:39:92:97:31:AE:D9:E0:1B:C5:A9:E6:D6:80:F4:65:9A:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T2ctOZKXMa7Z4BvFqebWgPRlmgs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/35c0b9-2855-4b20-8c80-7e280752da21/1/T2ctOZKXMa7Z4BvFqebWgPRlmgs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/35c0b9-2855-4b20-8c80-7e280752da21/1/T2ctOZKXMa7Z4BvFqebWgPRlmgs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:5a:24:88:47:fb:25:9d:a3:a2:48:d0:d4:da:2e:5b:46:02:
55:09:64:b4:dc:91:12:5b:e6:f7:dc:35:28:7e:3b:00:b1:02:
49:e5:6a:29:23:60:31:67:57:fa:62:ec:94:78:82:c8:4f:17:
df:45:55:e7:28:6d:18:3f:0c:5f:78:26:60:c6:40:d8:49:78:
71:b4:16:ba:04:82:9e:e7:82:b4:69:b7:71:b1:59:84:f5:3d:
f1:c7:f0:b1:ce:fe:1a:85:59:0f:d2:a2:33:22:86:ca:9c:d4:
19:68:0f:5a:bc:9a:68:96:40:91:97:42:4d:57:ba:d8:dd:1d:
55:d7:45:eb:08:ef:e3:d3:d3:69:20:5d:92:5b:17:9f:5a:93:
c7:95:c0:4d:ec:85:56:65:5d:3b:f4:39:7b:b6:df:56:a2:23:
01:af:f0:42:28:f1:3f:a2:a2:47:ac:68:72:5c:5e:09:49:e4:
8f:3e:f6:ea:b3:76:29:d3:2e:02:0b:80:66:77:90:04:fe:1c:
36:e0:55:7d:c0:1a:6e:90:70:ea:19:52:bf:0c:0a:a2:b7:82:
15:c9:67:e6:28:15:6c:ef:13:8d:5d:72:23:fb:af:d8:29:b2:
48:7b:18:56:86:7e:49:e0:eb:e9:35:b9:23:ed:33:b1:c5:45:
a2:b3:5f:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:50:13 2026 by rpki-client