Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/f4b609-ce5d-49f0-9136-2eca76bc7fca/1/T4zW4dX8wEW55lmcDK6hfUdoX5U.mft
File: T4zW4dX8wEW55lmcDK6hfUdoX5U.mft (raw, json)
Hash identifier: Psijb/W0VSeF4QM04/v93HmUbjkg8ThOy0T3z5lOgQo=
Subject key identifier: 07:42:F6:04:D4:0C:07:D3:7B:21:E9:FC:32:6A:35:76:58:90:D8:DB
Authority key identifier: 4F:8C:D6:E1:D5:FC:C0:45:B9:E6:59:9C:0C:AE:A1:7D:47:68:5F:95
Certificate issuer: /CN=4f8cd6e1d5fcc045b9e6599c0caea17d47685f95
Certificate serial: 019D98F4DFD4ACD3B875AF91DD7CE1B38A43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T4zW4dX8wEW55lmcDK6hfUdoX5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/f4b609-ce5d-49f0-9136-2eca76bc7fca/1/T4zW4dX8wEW55lmcDK6hfUdoX5U.mft
Manifest number: 1402
Signing time: Fri 17 Apr 2026 01:01:18 +0000
Manifest this update: Fri 17 Apr 2026 01:01:18 +0000
Manifest next update: Sat 18 Apr 2026 01:01:18 +0000
Files and hashes: 1: T4zW4dX8wEW55lmcDK6hfUdoX5U.crl (hash: X/FOIvWFlN2z0NUtOC7P49hUKpS0ror405lmkUG6wbA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/f4b609-ce5d-49f0-9136-2eca76bc7fca/1/T4zW4dX8wEW55lmcDK6hfUdoX5U.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/f4b609-ce5d-49f0-9136-2eca76bc7fca/1/T4zW4dX8wEW55lmcDK6hfUdoX5U.mft
rsync://rpki.ripe.net/repository/DEFAULT/T4zW4dX8wEW55lmcDK6hfUdoX5U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 01:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:df:d4:ac:d3:b8:75:af:91:dd:7c:e1:b3:8a:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f8cd6e1d5fcc045b9e6599c0caea17d47685f95
Validity
Not Before: Apr 17 01:01:18 2026 GMT
Not After : Apr 18 01:01:18 2026 GMT
Subject: CN=0742f604d40c07d37b21e9fc326a35765890d8db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:2d:13:03:7f:0e:a2:3b:67:a3:7c:da:47:18:
52:ac:4a:b7:1b:23:72:49:83:ef:b7:a3:6a:c3:82:
56:f2:ef:56:22:7c:dd:16:eb:c3:52:c9:2a:05:d8:
42:a1:bf:d7:51:1a:86:64:13:c5:34:b5:ef:a3:26:
07:c0:6d:be:fc:d3:01:45:26:ae:21:6f:c9:8e:ff:
e5:77:d0:9f:76:e0:cd:04:c9:b2:c2:b1:d0:42:e3:
4b:7f:5f:7b:51:34:f5:9c:f5:ff:6f:57:f3:8c:17:
3a:ad:45:d3:af:72:ce:03:a8:78:6b:0f:1e:f6:07:
a2:0c:5a:40:d6:5e:50:3e:bc:64:c4:00:fc:36:f0:
74:57:7d:44:82:d6:5f:f3:4e:02:e4:91:08:51:6c:
01:88:d9:60:2b:c9:00:70:d9:47:0e:0f:93:cd:e0:
19:2a:42:dd:ee:f2:78:86:40:cd:ee:b3:5f:4b:55:
78:66:74:5e:67:b4:09:cf:37:b3:7d:ef:2b:a4:95:
fc:8a:ad:b8:d3:8a:f1:d1:6e:c1:54:3a:a2:f9:03:
69:ef:91:d8:2b:73:d1:6c:b3:96:2b:c5:f4:c1:2f:
bf:da:4b:47:63:68:29:f5:27:54:c8:5e:fd:56:39:
a2:61:fc:27:eb:a3:c5:52:dd:e7:75:c4:bd:b7:47:
30:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:42:F6:04:D4:0C:07:D3:7B:21:E9:FC:32:6A:35:76:58:90:D8:DB
X509v3 Authority Key Identifier:
keyid:4F:8C:D6:E1:D5:FC:C0:45:B9:E6:59:9C:0C:AE:A1:7D:47:68:5F:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T4zW4dX8wEW55lmcDK6hfUdoX5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/f4b609-ce5d-49f0-9136-2eca76bc7fca/1/T4zW4dX8wEW55lmcDK6hfUdoX5U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/f4b609-ce5d-49f0-9136-2eca76bc7fca/1/T4zW4dX8wEW55lmcDK6hfUdoX5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:ae:11:12:b4:0f:c4:f8:a9:15:00:87:37:c9:77:d3:97:ce:
e4:d4:4b:b5:0c:ef:87:52:9a:c7:2e:f9:1d:e9:7f:7a:7c:6e:
29:56:86:de:24:8a:f9:fe:3a:26:f9:b8:14:80:9c:28:c8:75:
c5:3a:c5:92:c2:12:dc:3a:fb:be:f5:7b:e1:cc:17:28:bf:19:
f8:90:33:e0:54:a9:da:9d:24:1c:b5:64:97:d7:c9:2b:3e:d4:
9a:52:3d:b9:04:69:2b:12:92:25:60:c9:75:bf:92:40:1b:3e:
34:b8:9f:8e:9e:36:77:ce:9f:ba:ea:27:03:cc:03:e9:d2:ab:
d7:8d:5a:c7:65:21:f5:58:db:ba:04:92:a9:f2:41:db:17:0a:
12:db:ba:35:d5:28:89:e3:6d:fd:5d:64:ab:ff:90:bc:b8:5e:
db:b6:61:a2:5f:a7:f4:81:e3:f0:5b:34:07:55:c5:dd:f4:71:
dc:af:6a:4b:f7:e6:6b:b4:dc:1a:65:06:27:ac:bb:f8:e4:e7:
68:09:e0:0f:14:25:a9:6d:5a:64:b3:26:e4:89:34:a2:88:ca:
ef:68:7f:b9:87:07:08:21:35:98:83:38:c5:b7:af:04:37:02:
9a:a8:39:50:dd:45:0e:d1:e0:1e:08:37:85:01:67:60:95:d0:
42:4d:37:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:38:47 2026 by rpki-client