Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/35c0b9-2855-4b20-8c80-7e280752da21/1/T2ctOZKXMa7Z4BvFqebWgPRlmgs.mft
File: T2ctOZKXMa7Z4BvFqebWgPRlmgs.mft (raw, json)
Hash identifier: XkYcxoTubrUqd9sJdRohAOEMLduMjZzWN/tV0joM3zs=
Subject key identifier: 03:71:4A:8B:56:49:A2:1E:89:7F:BA:72:7E:39:93:9C:E3:87:40:0F
Authority key identifier: 4F:67:2D:39:92:97:31:AE:D9:E0:1B:C5:A9:E6:D6:80:F4:65:9A:0B
Certificate issuer: /CN=4f672d39929731aed9e01bc5a9e6d680f4659a0b
Certificate serial: 019FAABE6456ECFFA3798088B53898057EFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T2ctOZKXMa7Z4BvFqebWgPRlmgs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/35c0b9-2855-4b20-8c80-7e280752da21/1/T2ctOZKXMa7Z4BvFqebWgPRlmgs.mft
Manifest number: 152B
Signing time: Tue 28 Jul 2026 22:00:31 +0000
Manifest this update: Tue 28 Jul 2026 22:00:31 +0000
Manifest next update: Wed 29 Jul 2026 22:00:31 +0000
Files and hashes: 1: 6Zx9YtDEJ49JC-4b71_fvWtzw8s.roa (hash: o/A6dnRcU90/Ns+dOzz+UmVUTf5+OMsC+rgsisi5p8Q=)
2: NIU7fZeJ73Kx7vUBqR7rizpf67w.roa (hash: 2ugysi5XrPkBHFUed+88NeImX7rSdwmGmQYl2PxW7sE=)
3: T2ctOZKXMa7Z4BvFqebWgPRlmgs.crl (hash: tMXtiGChtmW7qKuF3xy1ozaLoNwIK9K8StDgVSG7h48=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/35c0b9-2855-4b20-8c80-7e280752da21/1/T2ctOZKXMa7Z4BvFqebWgPRlmgs.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/35c0b9-2855-4b20-8c80-7e280752da21/1/T2ctOZKXMa7Z4BvFqebWgPRlmgs.mft
rsync://rpki.ripe.net/repository/DEFAULT/T2ctOZKXMa7Z4BvFqebWgPRlmgs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 22:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:be:64:56:ec:ff:a3:79:80:88:b5:38:98:05:7e:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f672d39929731aed9e01bc5a9e6d680f4659a0b
Validity
Not Before: Jul 28 22:00:31 2026 GMT
Not After : Jul 29 22:00:31 2026 GMT
Subject: CN=03714a8b5649a21e897fba727e39939ce387400f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:65:cf:ae:69:b1:f2:56:85:4f:7e:8c:ce:ed:
6e:a6:e9:0f:0d:16:78:54:7b:c0:ed:66:70:4d:92:
89:c1:ef:1a:3d:c3:a6:93:8a:24:b8:63:58:39:5b:
8f:65:b5:39:19:e5:6b:74:4d:2b:29:4e:08:fa:f6:
09:d8:f5:f8:ac:f5:65:60:61:f6:04:23:55:d9:61:
da:07:30:73:d1:cc:69:6e:c8:f3:ad:c9:e3:df:64:
ed:aa:99:91:8d:fa:9e:e2:e0:d2:2e:f1:0f:5a:89:
22:08:7b:a0:05:b5:23:c1:9d:72:b1:56:38:71:ce:
54:05:06:82:3e:76:ab:db:fe:b4:7b:65:8c:62:83:
91:21:85:68:25:05:1e:f2:b9:a5:41:90:c8:84:18:
59:a1:d9:47:8c:3f:29:cd:0b:97:f6:9d:fa:e7:0e:
05:d0:1b:f5:3e:df:d3:b3:b6:26:f9:27:e1:3b:c5:
17:47:ea:07:60:4f:af:d6:8f:ba:98:c5:7d:6d:6d:
e7:fc:80:1e:2d:a1:34:17:db:af:89:9c:57:ce:aa:
fb:08:2d:3e:20:2d:ad:4a:c6:6a:27:07:90:74:27:
f3:7b:26:49:3e:63:77:5c:79:86:06:f4:14:f1:4c:
18:1a:ea:a0:43:87:f6:1a:b2:f6:d8:4b:f8:e6:a5:
3f:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:71:4A:8B:56:49:A2:1E:89:7F:BA:72:7E:39:93:9C:E3:87:40:0F
X509v3 Authority Key Identifier:
keyid:4F:67:2D:39:92:97:31:AE:D9:E0:1B:C5:A9:E6:D6:80:F4:65:9A:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T2ctOZKXMa7Z4BvFqebWgPRlmgs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/35c0b9-2855-4b20-8c80-7e280752da21/1/T2ctOZKXMa7Z4BvFqebWgPRlmgs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/35c0b9-2855-4b20-8c80-7e280752da21/1/T2ctOZKXMa7Z4BvFqebWgPRlmgs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:10:50:9a:2e:17:6c:21:17:00:5f:cb:02:c4:33:a6:57:2a:
ed:c9:2d:ca:0f:e5:a7:c4:3c:8d:16:06:25:24:c8:d7:bd:cc:
ff:d2:83:1e:a3:81:8c:d7:1b:d0:29:e0:4a:47:57:8f:b3:0b:
14:0e:26:94:92:f3:bb:ce:c4:d5:e2:49:c4:69:8d:24:9e:72:
51:e9:6e:8c:b8:19:71:11:85:b3:c0:53:30:30:6d:92:01:59:
dc:6c:16:ab:7e:da:ad:17:1f:5b:b9:47:93:41:19:27:4f:99:
53:47:9d:23:fb:bf:07:ad:5b:82:34:ac:a8:dd:da:2c:d0:ad:
0e:ca:10:2d:9c:5a:47:00:73:b8:64:83:bb:38:c4:98:ae:5b:
a9:1f:1e:6c:c5:44:73:ab:01:49:63:c2:7f:47:57:95:a9:8a:
a1:de:53:f3:57:8b:cc:4b:b7:0f:57:c8:56:5f:bc:91:a1:d3:
0d:2c:00:fc:42:48:66:c1:2e:20:05:62:94:e3:63:45:e1:d4:
bd:5e:a8:c3:78:9c:c2:54:19:63:c0:a6:9d:42:e8:c4:da:6b:
bc:4c:04:24:52:11:61:4f:05:65:e6:81:02:58:0f:e0:2a:63:
ff:69:dc:bc:0f:ed:80:a9:89:ae:ec:5a:03:8b:4c:29:ec:ab:
5d:12:78:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:34:33 2026 by rpki-client