Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/35c0b9-2855-4b20-8c80-7e280752da21/1/T2ctOZKXMa7Z4BvFqebWgPRlmgs.mft
File: T2ctOZKXMa7Z4BvFqebWgPRlmgs.mft (raw, json)
Hash identifier: Q6J4b0kc3/NDLXCVoC2m1S+6Qxr3R+4S1zAnk+F70sM=
Subject key identifier: DF:D3:07:2F:48:96:83:4A:9C:5B:D6:FF:1C:FE:C0:6A:90:DE:4E:6F
Authority key identifier: 4F:67:2D:39:92:97:31:AE:D9:E0:1B:C5:A9:E6:D6:80:F4:65:9A:0B
Certificate issuer: /CN=4f672d39929731aed9e01bc5a9e6d680f4659a0b
Certificate serial: 019CAC1028C37BE4FE5B05205DDE1134F198
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T2ctOZKXMa7Z4BvFqebWgPRlmgs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/35c0b9-2855-4b20-8c80-7e280752da21/1/T2ctOZKXMa7Z4BvFqebWgPRlmgs.mft
Manifest number: 139E
Signing time: Mon 02 Mar 2026 01:01:06 +0000
Manifest this update: Mon 02 Mar 2026 01:01:06 +0000
Manifest next update: Tue 03 Mar 2026 01:01:06 +0000
Files and hashes: 1: 6Zx9YtDEJ49JC-4b71_fvWtzw8s.roa (hash: o/A6dnRcU90/Ns+dOzz+UmVUTf5+OMsC+rgsisi5p8Q=)
2: NIU7fZeJ73Kx7vUBqR7rizpf67w.roa (hash: 2ugysi5XrPkBHFUed+88NeImX7rSdwmGmQYl2PxW7sE=)
3: T2ctOZKXMa7Z4BvFqebWgPRlmgs.crl (hash: qUJONxX8MZcLP4L1ZHFLBfJARqVAJPmRbQuPCwsmQfo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/35c0b9-2855-4b20-8c80-7e280752da21/1/T2ctOZKXMa7Z4BvFqebWgPRlmgs.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/35c0b9-2855-4b20-8c80-7e280752da21/1/T2ctOZKXMa7Z4BvFqebWgPRlmgs.mft
rsync://rpki.ripe.net/repository/DEFAULT/T2ctOZKXMa7Z4BvFqebWgPRlmgs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:10:28:c3:7b:e4:fe:5b:05:20:5d:de:11:34:f1:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f672d39929731aed9e01bc5a9e6d680f4659a0b
Validity
Not Before: Mar 2 01:01:06 2026 GMT
Not After : Mar 3 01:01:06 2026 GMT
Subject: CN=dfd3072f4896834a9c5bd6ff1cfec06a90de4e6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:01:0e:25:6b:ab:dc:8b:58:e6:1f:24:ad:7f:
00:a8:fb:c2:16:5f:1f:41:c8:0a:4c:6c:b7:53:29:
37:b1:8c:fa:8f:a8:17:75:9a:6f:0e:ca:51:ec:75:
72:f2:dd:b5:d7:e1:6d:c8:b7:14:9c:39:fc:c3:8f:
60:b0:ee:5f:08:8e:b4:4b:4e:4f:64:dc:ec:97:5a:
04:a1:2c:6f:1c:d1:27:d8:9d:fa:15:f5:35:25:28:
05:1a:23:34:91:6a:46:fb:3f:48:e0:0a:5c:f9:91:
cc:65:92:2c:c8:e5:1e:43:a1:94:00:60:d2:0a:f0:
f0:6b:ef:e7:e4:48:5d:57:8f:05:bf:5c:08:3b:3f:
12:2b:69:be:72:54:94:94:a4:5a:5d:25:7b:43:89:
b7:47:a7:3b:12:db:ab:9a:93:1f:e4:e7:28:f1:93:
0b:97:e9:fd:a4:9a:f4:87:3d:39:de:f1:d4:ce:fb:
8c:c2:c0:88:b0:98:97:6c:ed:6c:6e:f5:ae:eb:d5:
2e:af:b2:51:eb:22:4b:15:c9:7d:d1:0a:91:10:5a:
f0:71:eb:c4:b9:91:7f:e2:77:93:4e:dc:c0:89:95:
1f:d1:1d:d8:ba:cb:e6:4d:3f:8e:62:06:00:db:bd:
42:9d:cb:14:87:91:fb:ec:21:ed:23:29:d8:a9:37:
7b:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:D3:07:2F:48:96:83:4A:9C:5B:D6:FF:1C:FE:C0:6A:90:DE:4E:6F
X509v3 Authority Key Identifier:
keyid:4F:67:2D:39:92:97:31:AE:D9:E0:1B:C5:A9:E6:D6:80:F4:65:9A:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T2ctOZKXMa7Z4BvFqebWgPRlmgs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/35c0b9-2855-4b20-8c80-7e280752da21/1/T2ctOZKXMa7Z4BvFqebWgPRlmgs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/35c0b9-2855-4b20-8c80-7e280752da21/1/T2ctOZKXMa7Z4BvFqebWgPRlmgs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:bb:28:e4:48:91:9f:70:94:2d:74:4c:e4:b2:15:85:0a:ab:
93:c5:93:f9:68:fb:18:72:5d:9f:13:52:9e:6c:e5:b3:77:58:
93:9b:3e:fc:a5:64:12:28:f7:c6:1e:e9:28:a3:2b:7b:9f:12:
b7:f3:4c:3c:51:21:19:f9:f2:79:b7:fd:6b:f2:ae:71:2f:44:
ae:98:7f:74:92:e1:38:88:e6:07:b9:72:15:af:04:2b:57:1a:
bc:b1:57:50:75:fd:78:c9:68:0c:91:a8:b4:35:e9:8a:6a:43:
d3:22:86:af:02:e0:ab:59:d3:5e:24:f5:8a:83:db:cd:ed:11:
f3:09:38:36:08:b8:5a:f8:f7:a9:80:12:64:50:08:29:c7:b2:
52:9a:c6:ed:50:e5:6d:de:59:3f:00:60:aa:29:68:7e:12:73:
aa:52:2e:e0:26:6f:73:64:94:f1:cb:a3:10:55:8b:31:5b:cd:
74:e1:9d:1e:23:74:ab:93:66:13:a0:fe:c4:b7:f6:b2:97:60:
46:91:f4:06:41:d9:cc:c1:14:25:2d:13:ba:9c:b0:3e:10:52:
3c:70:0a:fa:dc:55:83:2a:12:ba:c8:df:db:7a:de:26:35:c5:
4a:e0:a7:cd:a3:60:f1:a5:dd:3e:5d:33:52:b9:89:96:a3:ac:
9f:23:74:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:38:11 2026 by rpki-client