Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/f4b609-ce5d-49f0-9136-2eca76bc7fca/1/T4zW4dX8wEW55lmcDK6hfUdoX5U.mft
File: T4zW4dX8wEW55lmcDK6hfUdoX5U.mft (raw, json)
Hash identifier: XygcQL6kv/C8vZVKdSfPZGxjDjs3ih4igSB9Q1C0Odo=
Subject key identifier: 07:C2:48:8B:33:82:EF:81:E6:B7:DE:7F:47:01:00:44:36:99:9B:F3
Authority key identifier: 4F:8C:D6:E1:D5:FC:C0:45:B9:E6:59:9C:0C:AE:A1:7D:47:68:5F:95
Certificate issuer: /CN=4f8cd6e1d5fcc045b9e6599c0caea17d47685f95
Certificate serial: 019CAB6C0D704DFA27EA35878D8241E04973
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T4zW4dX8wEW55lmcDK6hfUdoX5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/f4b609-ce5d-49f0-9136-2eca76bc7fca/1/T4zW4dX8wEW55lmcDK6hfUdoX5U.mft
Manifest number: 1387
Signing time: Sun 01 Mar 2026 22:01:51 +0000
Manifest this update: Sun 01 Mar 2026 22:01:51 +0000
Manifest next update: Mon 02 Mar 2026 22:01:51 +0000
Files and hashes: 1: T4zW4dX8wEW55lmcDK6hfUdoX5U.crl (hash: Gh9NZd7xAOgDKgAWPBko4T3+oaBD8RatUGKRXPEsR7w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/f4b609-ce5d-49f0-9136-2eca76bc7fca/1/T4zW4dX8wEW55lmcDK6hfUdoX5U.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/f4b609-ce5d-49f0-9136-2eca76bc7fca/1/T4zW4dX8wEW55lmcDK6hfUdoX5U.mft
rsync://rpki.ripe.net/repository/DEFAULT/T4zW4dX8wEW55lmcDK6hfUdoX5U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6c:0d:70:4d:fa:27:ea:35:87:8d:82:41:e0:49:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f8cd6e1d5fcc045b9e6599c0caea17d47685f95
Validity
Not Before: Mar 1 22:01:51 2026 GMT
Not After : Mar 2 22:01:51 2026 GMT
Subject: CN=07c2488b3382ef81e6b7de7f4701004436999bf3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:17:f6:58:41:af:38:dd:76:71:a5:c0:19:06:
0a:22:9c:ff:ee:ae:93:8c:08:2e:be:00:01:f8:64:
5a:c1:2b:9a:53:39:a3:88:e8:ef:a2:4b:4b:50:d6:
dd:7a:ed:77:99:2d:f8:90:be:75:9d:2c:93:ca:0a:
8f:71:06:ab:07:6f:1a:0c:ad:24:90:33:6d:91:24:
84:0e:94:b4:d6:02:f1:1f:68:08:6a:41:e9:2a:55:
93:9c:2a:0b:8d:d0:30:39:1e:57:8e:a9:31:3b:fe:
62:dd:89:a7:c1:d8:3c:ad:33:95:16:b9:1e:89:31:
20:8f:e9:78:6c:4e:1d:9c:5b:1b:2a:f8:c3:14:6d:
6a:6c:07:b4:91:ee:22:8f:2c:4f:28:29:63:b5:33:
83:93:7d:ab:23:df:5b:5d:c9:6a:42:d3:c0:d3:ca:
26:7b:4c:d7:91:d9:fb:74:bc:9e:67:7d:61:ea:2a:
55:f8:ac:55:7f:c6:0b:a8:a4:8b:e7:8e:62:d3:0f:
36:0a:64:c7:12:b8:4f:23:59:50:7c:5e:17:02:93:
41:28:55:58:93:04:99:e8:53:42:42:90:b5:10:d0:
37:ab:57:6d:9d:50:d7:b0:97:4d:ef:bd:fa:ba:89:
6c:14:95:11:f1:74:4c:56:fe:dd:26:23:46:c1:cf:
bd:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:C2:48:8B:33:82:EF:81:E6:B7:DE:7F:47:01:00:44:36:99:9B:F3
X509v3 Authority Key Identifier:
keyid:4F:8C:D6:E1:D5:FC:C0:45:B9:E6:59:9C:0C:AE:A1:7D:47:68:5F:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T4zW4dX8wEW55lmcDK6hfUdoX5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/f4b609-ce5d-49f0-9136-2eca76bc7fca/1/T4zW4dX8wEW55lmcDK6hfUdoX5U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/f4b609-ce5d-49f0-9136-2eca76bc7fca/1/T4zW4dX8wEW55lmcDK6hfUdoX5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:3e:b5:7c:c6:a9:7b:bc:e2:6e:7c:1e:69:29:dc:91:8c:12:
d8:d1:e7:60:bf:67:9a:1d:36:6b:6a:2f:61:b8:07:ae:e0:55:
96:e0:4b:3e:d7:4b:40:f9:3b:d8:af:95:a5:a7:c4:54:30:35:
90:02:b7:a6:5a:e8:66:b4:19:6b:57:1b:c2:3a:42:e4:6b:5c:
81:2a:e0:86:b9:f4:67:dc:9e:2e:89:cf:df:e4:f4:a6:4f:b2:
a7:ab:d3:2b:81:87:de:ed:a2:c2:99:14:e3:44:57:d3:90:5b:
ac:2e:be:86:cf:f2:be:d0:b3:d2:18:aa:dd:a3:2d:0f:3d:b8:
22:84:66:a7:83:7a:b7:08:37:09:2c:70:1f:6c:ce:cf:5f:8e:
72:54:84:21:79:60:f3:c4:40:ca:fa:e9:3a:1e:bd:03:b5:b5:
68:83:2b:10:4b:e5:26:43:b8:27:63:13:7b:23:cd:6a:42:1e:
0b:7a:64:fa:74:76:07:6f:8d:00:e7:2c:69:f0:be:b9:ce:ff:
d8:32:f7:58:0b:33:c3:fc:b4:2a:dc:e5:3d:29:ac:e8:b0:11:
a9:bf:15:ca:b7:53:74:ea:31:02:8a:08:88:a9:be:07:fc:ab:
da:b3:b2:8f:5a:e8:7f:b9:1b:b9:ae:13:16:c2:4d:dd:fe:cf:
14:7f:1e:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:51:59 2026 by rpki-client