Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/6ef23e-99ba-4c69-92e3-6bb7080409b4/1/T7OopKDYxa4BqWlbBB7SxtApap4.mft
File: T7OopKDYxa4BqWlbBB7SxtApap4.mft (raw, json)
Hash identifier: Nh791oaaoQcrT4YKrZ9eRgIvGD96EGt1UVtYQhS/inA=
Subject key identifier: 30:9E:74:41:D0:00:E0:2A:4B:C5:1E:95:6D:7A:C4:3E:59:0E:BE:73
Authority key identifier: 4F:B3:A8:A4:A0:D8:C5:AE:01:A9:69:5B:04:1E:D2:C6:D0:29:6A:9E
Certificate issuer: /CN=4fb3a8a4a0d8c5ae01a9695b041ed2c6d0296a9e
Certificate serial: 019D984F7E3A3C2C095711393CF58ABC60C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T7OopKDYxa4BqWlbBB7SxtApap4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/6ef23e-99ba-4c69-92e3-6bb7080409b4/1/T7OopKDYxa4BqWlbBB7SxtApap4.mft
Manifest number: 0FB7
Signing time: Thu 16 Apr 2026 22:00:39 +0000
Manifest this update: Thu 16 Apr 2026 22:00:39 +0000
Manifest next update: Fri 17 Apr 2026 22:00:39 +0000
Files and hashes: 1: 2yNvnD1lmLbPPKFlQkp9-VHyRE0.roa (hash: zlpNQG2pRqEeG9wmnXhIHFiAawnx6f7m+aNjLjl7SQw=)
2: T7OopKDYxa4BqWlbBB7SxtApap4.crl (hash: 8X/DjYgufar04N/xCWVrUCC6FBXhaWjiXTR4UgphAj8=)
3: jPtnMh6W4G2WuaIjEWGJ9cYgDew.roa (hash: /8F9d1Hzc1eMJK3xcWh9iLgYlz/NTYIkw82sKvGLhwM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/6ef23e-99ba-4c69-92e3-6bb7080409b4/1/T7OopKDYxa4BqWlbBB7SxtApap4.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/6ef23e-99ba-4c69-92e3-6bb7080409b4/1/T7OopKDYxa4BqWlbBB7SxtApap4.mft
rsync://rpki.ripe.net/repository/DEFAULT/T7OopKDYxa4BqWlbBB7SxtApap4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:4f:7e:3a:3c:2c:09:57:11:39:3c:f5:8a:bc:60:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fb3a8a4a0d8c5ae01a9695b041ed2c6d0296a9e
Validity
Not Before: Apr 16 22:00:39 2026 GMT
Not After : Apr 17 22:00:39 2026 GMT
Subject: CN=309e7441d000e02a4bc51e956d7ac43e590ebe73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:fd:82:df:de:3d:5e:b0:7c:e3:1f:d3:0a:40:
04:97:b4:84:e1:ed:32:49:48:22:6d:d1:92:6c:89:
7e:a3:0a:b9:d1:1f:2f:2e:a4:93:55:64:1a:25:35:
56:37:2a:9a:6c:f6:01:58:ed:da:5e:ef:b8:9a:0b:
1a:74:69:88:31:e1:98:ee:3a:74:43:3c:9d:b4:43:
06:60:3d:81:1c:ad:bf:e4:61:7d:8d:bd:ec:09:9d:
d0:4a:32:89:b4:39:d1:e8:2c:cf:fc:89:66:17:3c:
43:77:e3:3b:79:46:ec:94:cb:a2:82:86:72:36:a2:
16:35:62:30:9d:11:4e:f5:70:8e:3b:ed:de:18:37:
43:ca:80:44:1a:12:7d:de:71:53:4c:2a:0b:35:c9:
58:47:c3:d1:8e:e0:46:42:cc:fa:f5:f4:04:1c:93:
e6:3b:32:c2:d8:08:2f:7a:f7:61:15:fc:c6:42:46:
0d:d1:53:b8:21:bc:8c:ce:44:14:70:46:9b:3f:45:
80:47:a0:48:52:7a:e4:4f:47:68:9f:09:14:55:e8:
f9:95:84:f4:d4:91:2c:48:a1:96:a5:83:c4:7b:fd:
b8:35:f5:28:80:43:40:57:df:a8:a5:7f:f8:16:5b:
06:aa:40:2f:d1:44:ac:dc:aa:0b:14:7e:cc:87:fd:
9b:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:9E:74:41:D0:00:E0:2A:4B:C5:1E:95:6D:7A:C4:3E:59:0E:BE:73
X509v3 Authority Key Identifier:
keyid:4F:B3:A8:A4:A0:D8:C5:AE:01:A9:69:5B:04:1E:D2:C6:D0:29:6A:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T7OopKDYxa4BqWlbBB7SxtApap4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/6ef23e-99ba-4c69-92e3-6bb7080409b4/1/T7OopKDYxa4BqWlbBB7SxtApap4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/6ef23e-99ba-4c69-92e3-6bb7080409b4/1/T7OopKDYxa4BqWlbBB7SxtApap4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:9b:8a:20:48:e5:a7:41:e7:0a:3f:9f:78:09:68:be:fc:07:
4f:da:6b:9e:b8:22:c6:de:80:fb:d5:d1:4f:84:2b:92:3a:02:
6a:16:4e:77:65:dc:92:5c:92:73:39:df:a4:87:89:d6:11:b3:
ec:ae:e7:72:4c:21:33:71:45:01:94:55:19:7c:21:d9:de:c9:
d7:0f:b8:a0:c3:7f:c9:bf:b3:da:0e:b0:f4:2f:f8:c8:9c:59:
f9:44:1e:d1:20:51:f1:f4:6c:af:f3:b9:8b:91:85:dd:d4:52:
0f:a3:2b:5d:b2:e8:bf:16:b9:61:58:ff:cc:b8:37:df:e6:3b:
2b:a3:37:34:2b:88:7d:ab:0a:3e:91:b1:37:e8:ca:f7:fe:45:
f6:1c:0f:b8:55:65:8f:05:a3:ff:0b:7a:41:d2:c0:f2:b1:a2:
4c:7f:7a:ae:a3:b1:ea:d2:d9:56:51:6d:3d:b3:91:c5:ec:09:
af:ab:2d:af:4a:21:b1:fe:2d:ec:7e:78:ef:6f:53:d3:32:b1:
5f:27:de:25:2d:37:ce:0f:c2:9a:51:b3:d6:e2:ca:be:d7:6f:
69:dd:eb:bb:af:79:03:af:57:0f:94:0f:90:0d:a5:c7:01:51:
0e:ca:26:75:48:26:8f:c0:e3:5a:5e:ec:e1:92:59:ac:b9:46:
29:22:20:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:52:17 2026 by rpki-client