Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b0/35c0b9-2855-4b20-8c80-7e280752da21/1/T2ctOZKXMa7Z4BvFqebWgPRlmgs.mft
File: T2ctOZKXMa7Z4BvFqebWgPRlmgs.mft (raw, json)
Hash identifier: BtJNhy0YT3iznOcvGqPAPaS9bcJA4M9TVh6T3JuciNk=
Subject key identifier: 65:E7:4F:28:C8:52:B7:AC:CB:A2:E7:4F:5E:12:AC:4D:6B:E5:CA:6A
Authority key identifier: 4F:67:2D:39:92:97:31:AE:D9:E0:1B:C5:A9:E6:D6:80:F4:65:9A:0B
Certificate issuer: /CN=4f672d39929731aed9e01bc5a9e6d680f4659a0b
Certificate serial: 01A0D6147C22F16BE7E5A98CAFBFA70F738E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T2ctOZKXMa7Z4BvFqebWgPRlmgs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/35c0b9-2855-4b20-8c80-7e280752da21/1/T2ctOZKXMa7Z4BvFqebWgPRlmgs.mft
Manifest number: 15C6
Signing time: Fri 25 Sep 2026 01:01:01 +0000
Manifest this update: Fri 25 Sep 2026 01:01:01 +0000
Manifest next update: Sat 26 Sep 2026 01:01:01 +0000
Files and hashes: 1: 6Zx9YtDEJ49JC-4b71_fvWtzw8s.roa (hash: o/A6dnRcU90/Ns+dOzz+UmVUTf5+OMsC+rgsisi5p8Q=)
2: NIU7fZeJ73Kx7vUBqR7rizpf67w.roa (hash: 2ugysi5XrPkBHFUed+88NeImX7rSdwmGmQYl2PxW7sE=)
3: T2ctOZKXMa7Z4BvFqebWgPRlmgs.crl (hash: xWR1rzufdNEYCuJmRYHktBMIfqYDcTOHvH4EJavrZis=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/35c0b9-2855-4b20-8c80-7e280752da21/1/T2ctOZKXMa7Z4BvFqebWgPRlmgs.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/35c0b9-2855-4b20-8c80-7e280752da21/1/T2ctOZKXMa7Z4BvFqebWgPRlmgs.mft
rsync://rpki.ripe.net/repository/DEFAULT/T2ctOZKXMa7Z4BvFqebWgPRlmgs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d6:14:7c:22:f1:6b:e7:e5:a9:8c:af:bf:a7:0f:73:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f672d39929731aed9e01bc5a9e6d680f4659a0b
Validity
Not Before: Sep 25 01:01:01 2026 GMT
Not After : Sep 26 01:01:01 2026 GMT
Subject: CN=65e74f28c852b7accba2e74f5e12ac4d6be5ca6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:3c:57:4b:87:51:05:1d:15:47:43:40:ca:da:
fa:8c:cc:0b:9b:ec:aa:da:da:79:50:bd:28:8d:dd:
d4:47:be:a2:1b:69:b0:ea:62:9c:90:8a:d5:19:66:
3a:3d:c5:5b:88:37:57:47:8b:1e:ca:e4:eb:e6:53:
73:d8:4f:c2:31:52:bf:6a:d4:cf:ba:21:f9:6c:44:
c8:48:b3:27:2d:8b:27:7c:db:27:56:d4:c9:ae:4a:
42:b4:d2:cd:2e:a3:a6:7f:70:fb:49:c9:08:63:10:
73:78:18:3f:a0:ac:6a:47:8b:0e:25:8a:74:59:b1:
11:23:62:1e:cd:af:3a:28:fa:c0:1c:97:a4:87:67:
63:e1:3e:00:b4:7a:04:da:ea:15:c8:03:fd:77:f2:
f2:49:6a:9e:a7:17:74:fe:56:1f:3e:90:71:1a:fc:
50:1a:36:58:28:79:a4:00:3e:75:84:22:93:24:2c:
68:12:77:66:dd:75:3a:fc:dc:b8:cd:18:ae:dc:bc:
fb:37:38:8b:99:2c:d9:b9:2d:72:4e:17:8c:ff:f7:
50:7b:11:22:5b:32:07:d5:7d:0f:6d:86:8c:3c:c1:
f5:dc:86:dd:22:24:17:3b:6e:64:34:2e:31:a3:2d:
d8:df:02:50:e3:60:fe:86:43:f2:08:fe:a4:37:18:
cc:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:E7:4F:28:C8:52:B7:AC:CB:A2:E7:4F:5E:12:AC:4D:6B:E5:CA:6A
X509v3 Authority Key Identifier:
keyid:4F:67:2D:39:92:97:31:AE:D9:E0:1B:C5:A9:E6:D6:80:F4:65:9A:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T2ctOZKXMa7Z4BvFqebWgPRlmgs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/35c0b9-2855-4b20-8c80-7e280752da21/1/T2ctOZKXMa7Z4BvFqebWgPRlmgs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/35c0b9-2855-4b20-8c80-7e280752da21/1/T2ctOZKXMa7Z4BvFqebWgPRlmgs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:09:31:6d:c1:31:1c:91:19:1c:86:0a:c9:4a:50:fe:98:c8:
73:d2:e4:4f:83:df:2e:df:8c:78:b6:b2:30:e3:3a:dd:14:fd:
a8:46:01:0c:6b:69:c1:d3:0d:d2:f0:a1:b7:a2:f4:ec:c0:22:
c9:a1:c8:23:de:76:e3:28:07:3a:76:c8:6f:42:80:ab:6e:0a:
b7:7a:b4:2e:d4:a8:bd:7c:e4:be:1a:59:7e:39:d2:92:7b:57:
e5:10:99:ac:2d:3a:6f:75:8c:32:71:b3:c9:33:9a:c7:61:fa:
54:19:be:30:bb:48:ac:29:c5:90:ed:7d:5b:da:a8:1f:0d:46:
9b:36:93:ac:0a:50:de:a6:18:e9:34:33:72:a7:61:be:e8:83:
5f:18:34:d2:72:a5:53:ab:8e:3e:7d:f4:f8:b8:60:aa:c6:c2:
76:08:2b:3b:8b:3e:26:88:1c:f6:55:b6:ac:8e:00:0d:47:1c:
a2:dd:e0:ec:3a:d8:c4:88:04:8a:c1:70:a9:06:8f:7c:c1:1c:
26:5b:1f:57:9a:dd:f8:96:b7:52:7e:56:41:ab:13:d7:16:66:
c6:33:69:d4:65:d2:37:fe:bd:03:c6:49:0c:71:68:21:ec:12:
5f:fb:12:93:17:f6:9e:b2:51:33:af:b4:4f:dc:dc:4a:e3:ae:
05:bc:ef:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 07:13:08 2026 by rpki-client