Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/6ef23e-99ba-4c69-92e3-6bb7080409b4/1/T7OopKDYxa4BqWlbBB7SxtApap4.mft
File: T7OopKDYxa4BqWlbBB7SxtApap4.mft (raw, json)
Hash identifier: h9rjIqz69iYaO4P98C+Gex9MOrcIbgw4+srZEZXNSL0=
Subject key identifier: 7B:2B:84:0B:4A:0A:37:E2:12:C0:30:13:1D:ED:D8:06:73:3E:4B:B2
Authority key identifier: 4F:B3:A8:A4:A0:D8:C5:AE:01:A9:69:5B:04:1E:D2:C6:D0:29:6A:9E
Certificate issuer: /CN=4fb3a8a4a0d8c5ae01a9695b041ed2c6d0296a9e
Certificate serial: 019CAAC6A6C22E3DBA9864EA79CDAC106D51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T7OopKDYxa4BqWlbBB7SxtApap4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/6ef23e-99ba-4c69-92e3-6bb7080409b4/1/T7OopKDYxa4BqWlbBB7SxtApap4.mft
Manifest number: 0F3C
Signing time: Sun 01 Mar 2026 19:01:11 +0000
Manifest this update: Sun 01 Mar 2026 19:01:11 +0000
Manifest next update: Mon 02 Mar 2026 19:01:11 +0000
Files and hashes: 1: 2yNvnD1lmLbPPKFlQkp9-VHyRE0.roa (hash: zlpNQG2pRqEeG9wmnXhIHFiAawnx6f7m+aNjLjl7SQw=)
2: T7OopKDYxa4BqWlbBB7SxtApap4.crl (hash: OsZV+JUdGfxufCYC8R92n2P7rQ2FTJrL2/+T7byd/Eg=)
3: jPtnMh6W4G2WuaIjEWGJ9cYgDew.roa (hash: /8F9d1Hzc1eMJK3xcWh9iLgYlz/NTYIkw82sKvGLhwM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/6ef23e-99ba-4c69-92e3-6bb7080409b4/1/T7OopKDYxa4BqWlbBB7SxtApap4.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/6ef23e-99ba-4c69-92e3-6bb7080409b4/1/T7OopKDYxa4BqWlbBB7SxtApap4.mft
rsync://rpki.ripe.net/repository/DEFAULT/T7OopKDYxa4BqWlbBB7SxtApap4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:a6:c2:2e:3d:ba:98:64:ea:79:cd:ac:10:6d:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fb3a8a4a0d8c5ae01a9695b041ed2c6d0296a9e
Validity
Not Before: Mar 1 19:01:11 2026 GMT
Not After : Mar 2 19:01:11 2026 GMT
Subject: CN=7b2b840b4a0a37e212c030131dedd806733e4bb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:13:b9:cd:17:47:51:47:9c:3d:e6:f7:73:a4:
e5:b8:bf:6a:bd:76:7b:72:21:7d:6f:52:04:13:e5:
0e:8e:dd:e1:5e:7e:e7:21:48:d3:49:ae:05:8c:e7:
e0:50:bf:7e:c2:6e:64:c5:aa:70:83:cf:86:7d:26:
69:6d:4d:fa:08:df:56:4d:f8:0c:fd:75:92:33:cd:
92:7f:a9:16:2c:36:aa:a1:38:3d:01:fa:f5:7f:ae:
8a:8f:f3:a1:c4:03:f4:cc:7b:4d:f7:c0:fa:de:c6:
d4:ac:af:9d:34:79:6f:53:5b:c5:aa:a3:1b:ea:26:
38:00:81:64:35:9e:71:55:f1:71:47:d4:94:7d:91:
77:67:cd:56:22:76:05:fd:34:e6:6b:5f:35:37:62:
0a:70:a8:d4:88:90:d7:ac:23:d9:fb:e5:ef:11:ae:
d7:ad:ba:06:5e:87:ef:b0:44:7c:51:1f:b3:b4:c5:
59:3a:b3:4e:57:d4:d6:b5:2b:5d:bf:3d:a5:17:4a:
87:46:73:e2:43:fe:d7:68:e2:25:45:bf:e8:4c:09:
ed:cd:cd:4c:32:e1:37:86:c1:9f:00:a7:32:37:af:
7a:20:0f:7c:c6:2d:7a:1b:0a:da:a0:a3:3d:4f:79:
db:e5:f9:b0:b3:2d:72:ba:03:60:6b:f1:e7:27:d5:
74:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:2B:84:0B:4A:0A:37:E2:12:C0:30:13:1D:ED:D8:06:73:3E:4B:B2
X509v3 Authority Key Identifier:
keyid:4F:B3:A8:A4:A0:D8:C5:AE:01:A9:69:5B:04:1E:D2:C6:D0:29:6A:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T7OopKDYxa4BqWlbBB7SxtApap4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/6ef23e-99ba-4c69-92e3-6bb7080409b4/1/T7OopKDYxa4BqWlbBB7SxtApap4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/6ef23e-99ba-4c69-92e3-6bb7080409b4/1/T7OopKDYxa4BqWlbBB7SxtApap4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:84:d8:b1:e1:df:a1:63:53:90:41:0e:34:6a:cd:a6:44:59:
02:d4:7d:3d:80:6f:e5:50:bd:fb:a2:9d:6b:c0:aa:00:bb:39:
c7:b3:17:5b:84:21:04:bb:59:08:b8:fe:7e:dc:0e:e3:48:d8:
bd:6a:32:ce:f0:f7:9f:06:87:28:c8:27:a5:d3:8d:82:52:4e:
18:bb:fb:8a:f9:ee:90:ad:21:ea:0a:a6:74:f7:11:5b:b6:b7:
c6:4e:a2:64:b8:97:a5:ed:c1:9f:9e:61:ec:4a:49:5c:5a:80:
66:84:d6:f7:05:a9:08:a1:e0:71:f3:c1:54:08:19:ef:16:4e:
0a:e2:d4:f6:4a:10:f0:ec:43:ad:3f:78:f3:ee:15:e6:6f:6b:
7f:fd:4e:b9:79:0b:9f:46:a4:79:73:e4:18:b7:b8:28:b2:96:
bf:22:41:b0:c9:b0:60:f0:63:03:43:9b:b8:96:a1:a7:5f:a3:
86:fb:a2:a0:2e:e7:ee:5a:73:55:87:0a:9a:4b:27:d6:d0:c8:
2f:c8:4e:9a:23:59:07:9b:3b:9a:59:bc:9f:aa:1a:0d:35:dc:
08:af:98:9b:07:45:65:2d:5f:93:24:8a:44:38:3a:f4:be:5b:
bc:eb:b1:cc:c7:0b:67:74:80:6d:4a:62:2c:64:0d:d8:0a:c9:
96:13:65:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:43:36 2026 by rpki-client