Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/33816b-145b-47f8-85fa-76a5385c515a/1/T9ZkbJPCl0eJ7O97REZW7mQWFyk.mft
File: T9ZkbJPCl0eJ7O97REZW7mQWFyk.mft (raw, json)
Hash identifier: 6xr6ro948lwle7sWKRyXAjMQnrcLCYbF0gOa8i0mDRI=
Subject key identifier: 7A:DB:F9:E2:DB:62:4D:30:5E:0B:54:A7:98:D1:78:B0:1D:13:FC:44
Authority key identifier: 4F:D6:64:6C:93:C2:97:47:89:EC:EF:7B:44:46:56:EE:64:16:17:29
Certificate issuer: /CN=4fd6646c93c2974789ecef7b444656ee64161729
Certificate serial: 019CACB55C5B8CBB67E7163958983DF1A580
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T9ZkbJPCl0eJ7O97REZW7mQWFyk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/33816b-145b-47f8-85fa-76a5385c515a/1/T9ZkbJPCl0eJ7O97REZW7mQWFyk.mft
Manifest number: 1847
Signing time: Mon 02 Mar 2026 04:01:32 +0000
Manifest this update: Mon 02 Mar 2026 04:01:32 +0000
Manifest next update: Tue 03 Mar 2026 04:01:32 +0000
Files and hashes: 1: T9ZkbJPCl0eJ7O97REZW7mQWFyk.crl (hash: R2gMOvRJt4fqVC4NOw9ZUkrmtNEelrDY+2m0LXF+ZrY=)
2: VCFuIr9pM3EPsu68pVpUibKxyQU.roa (hash: apjsLzO5pIx4dzE8WjhYaxZke8s33ArYirHyx0Ruf9w=)
3: XlTxg3kTbgQ4ffELpk85x3UUxbA.roa (hash: hgNyQsC5iaVhcyee4oBmWD68ihN6089j1kYflggiKFM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/33816b-145b-47f8-85fa-76a5385c515a/1/T9ZkbJPCl0eJ7O97REZW7mQWFyk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/33816b-145b-47f8-85fa-76a5385c515a/1/T9ZkbJPCl0eJ7O97REZW7mQWFyk.mft
rsync://rpki.ripe.net/repository/DEFAULT/T9ZkbJPCl0eJ7O97REZW7mQWFyk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 04:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b5:5c:5b:8c:bb:67:e7:16:39:58:98:3d:f1:a5:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fd6646c93c2974789ecef7b444656ee64161729
Validity
Not Before: Mar 2 04:01:32 2026 GMT
Not After : Mar 3 04:01:32 2026 GMT
Subject: CN=7adbf9e2db624d305e0b54a798d178b01d13fc44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:a6:93:b4:f4:3c:41:6a:2a:4c:00:22:5b:f5:
f5:72:e3:9a:b7:5d:7a:d6:a0:2f:97:2c:57:9f:8e:
95:a0:fc:b3:18:90:c6:8c:c7:12:06:9f:ae:18:5f:
fa:02:40:89:eb:3b:53:0c:37:63:95:25:0d:97:d2:
e7:3f:de:e5:c2:69:c8:f4:65:0e:55:10:b5:26:a6:
98:69:66:d0:d5:59:e0:cf:31:03:28:1e:78:e6:b2:
c2:87:c4:9f:7a:75:20:8e:ea:18:8d:88:14:e2:2e:
ce:2e:9e:9a:66:e0:2a:af:bf:47:b2:e2:fa:f7:ed:
93:95:2a:29:7f:e9:72:90:55:ee:60:46:14:3e:0a:
f4:bd:c2:6d:85:bc:58:89:af:28:05:0a:19:c5:fd:
cc:9d:87:ea:f0:4e:96:7a:f7:8a:73:10:08:1b:5f:
cb:70:51:a7:a4:68:85:5b:b3:3c:6e:46:4d:3a:c1:
4e:fe:b0:fd:6d:d5:d9:d0:71:5e:cf:f2:7c:97:48:
ed:07:51:21:a0:89:11:df:77:9a:78:e8:6e:9d:6f:
96:64:11:a6:97:e4:9b:db:56:88:20:76:44:4a:35:
29:00:5f:2a:df:6b:61:9f:6a:01:5f:47:8a:ca:d5:
20:be:96:91:d1:74:0e:f2:40:74:c8:8f:a5:0a:f0:
e4:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:DB:F9:E2:DB:62:4D:30:5E:0B:54:A7:98:D1:78:B0:1D:13:FC:44
X509v3 Authority Key Identifier:
keyid:4F:D6:64:6C:93:C2:97:47:89:EC:EF:7B:44:46:56:EE:64:16:17:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T9ZkbJPCl0eJ7O97REZW7mQWFyk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/33816b-145b-47f8-85fa-76a5385c515a/1/T9ZkbJPCl0eJ7O97REZW7mQWFyk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/33816b-145b-47f8-85fa-76a5385c515a/1/T9ZkbJPCl0eJ7O97REZW7mQWFyk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:92:3a:96:b2:31:16:3e:9d:a6:c9:b1:b4:1f:8a:48:34:18:
c8:8b:9c:76:e3:3a:c4:19:f2:47:df:3e:85:14:9c:ae:45:ec:
fe:ad:92:71:02:7a:1f:2d:69:e7:a4:e6:02:10:e2:f6:e7:9a:
39:60:c9:d4:a1:61:f2:c7:97:10:f0:84:a3:6d:02:a3:04:59:
85:ed:fc:12:f2:b4:52:d0:9f:03:80:dd:b5:1d:72:72:7c:5d:
a2:77:43:5d:a2:55:14:a5:91:84:35:aa:96:f7:3a:b8:d7:f1:
f3:9d:33:e5:dc:f1:f0:8b:3c:d2:53:cd:44:92:dc:ab:5f:d4:
3a:8a:36:41:39:b6:2a:5c:5f:9d:7d:d6:53:26:81:56:b9:da:
cd:dc:3d:0a:c4:b6:10:f9:33:f6:0a:83:ee:40:d7:b4:78:4d:
6a:44:f9:5c:85:02:7c:af:6c:f2:d0:74:76:8f:d1:66:c6:b7:
61:d2:45:34:d8:6f:16:f1:83:f0:f8:f7:28:58:5a:13:72:71:
82:60:97:24:58:6d:d2:e7:77:31:68:84:59:0a:44:77:08:7f:
3e:17:30:cf:0a:21:87:c4:f0:6c:87:ab:44:cc:bc:c6:64:f0:
0b:f4:89:f9:61:cd:66:64:d8:14:29:a2:12:89:92:fa:f7:f7:
d0:a5:a8:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:08:07 2026 by rpki-client