Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/3328da-aa4e-445b-9da9-d053745c2acc/1/T4lf8Omad8AX6KODKSy1xvgmESA.mft
File: T4lf8Omad8AX6KODKSy1xvgmESA.mft (raw, json)
Hash identifier: 55D5ra8I+om6Y7wzsSB9DGMX4TKGstVnY1wZn+DKalk=
Subject key identifier: 27:2C:81:DD:41:29:BC:BB:FA:1A:30:15:53:78:B0:D1:84:AD:8F:DC
Authority key identifier: 4F:89:5F:F0:E9:9A:77:C0:17:E8:A3:83:29:2C:B5:C6:F8:26:11:20
Certificate issuer: /CN=4f895ff0e99a77c017e8a383292cb5c6f8261120
Certificate serial: 019D9818D6F4596BD3882610D3BC6EBE1D7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T4lf8Omad8AX6KODKSy1xvgmESA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/3328da-aa4e-445b-9da9-d053745c2acc/1/T4lf8Omad8AX6KODKSy1xvgmESA.mft
Manifest number: 0E15
Signing time: Thu 16 Apr 2026 21:00:57 +0000
Manifest this update: Thu 16 Apr 2026 21:00:57 +0000
Manifest next update: Fri 17 Apr 2026 21:00:57 +0000
Files and hashes: 1: 6dxV01X9vg2jPotO5hv9PQEuxwo.roa (hash: +esdA25t1mMRXF/ctuGaJFSpgAhjXcMWg4MEVFS8LMo=)
2: G2_PiUJpUwNaL9OFJdICG-GBzaI.roa (hash: lDduugUTdXOP9UBT5qryDM5SzsJ+d6xRkObDWeT06oc=)
3: IXCeJ_byCNVELvp9jRcWKh_bBvc.roa (hash: HLRQyauNlxqkbbZVe7bwHpiiXRRzErR+W+RnPz3utM0=)
4: T4lf8Omad8AX6KODKSy1xvgmESA.crl (hash: +b2/b6ThgemjZNS4w23D/Kt/a538eeXSqZViyYRms/A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/3328da-aa4e-445b-9da9-d053745c2acc/1/T4lf8Omad8AX6KODKSy1xvgmESA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/3328da-aa4e-445b-9da9-d053745c2acc/1/T4lf8Omad8AX6KODKSy1xvgmESA.mft
rsync://rpki.ripe.net/repository/DEFAULT/T4lf8Omad8AX6KODKSy1xvgmESA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 21:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:18:d6:f4:59:6b:d3:88:26:10:d3:bc:6e:be:1d:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f895ff0e99a77c017e8a383292cb5c6f8261120
Validity
Not Before: Apr 16 21:00:57 2026 GMT
Not After : Apr 17 21:00:57 2026 GMT
Subject: CN=272c81dd4129bcbbfa1a30155378b0d184ad8fdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:a1:d1:59:1a:ad:05:9e:1b:14:84:92:91:75:
6d:55:02:bb:d7:dc:7a:03:7a:c1:2b:78:9c:af:56:
69:d7:c5:db:83:5a:51:99:d5:fc:63:ec:31:fd:9c:
38:75:05:66:6d:12:43:3d:c7:80:16:7d:7e:bd:ed:
9f:fc:70:e1:fb:d7:d8:16:e2:f6:0a:0d:fa:f9:4b:
0f:73:26:84:3f:88:9b:3a:91:a3:8e:b2:e0:92:26:
10:0f:8b:69:f8:57:53:44:3d:e8:af:f8:84:33:3d:
66:d1:6f:74:7e:dc:03:33:7f:15:77:95:09:32:6b:
3a:25:ca:a4:33:c3:b8:82:d6:aa:93:be:e5:95:64:
6c:8b:89:f1:48:7b:3a:6f:b1:c4:99:c4:80:89:e5:
2e:85:bb:7e:c0:0f:42:1e:7a:5c:26:e6:18:59:4d:
14:44:56:db:80:a2:3f:f0:83:fe:2f:66:26:e2:44:
b6:aa:0c:a3:98:3c:98:4a:69:81:4b:3a:9b:2c:2a:
79:9a:55:5c:0e:3e:17:d2:81:7e:3e:1d:2d:21:5d:
87:21:e1:ea:f6:cc:2f:f7:9c:f7:ca:76:2f:c6:fb:
2f:69:88:a4:61:d3:b3:e2:6f:c7:b7:51:3a:ab:f6:
38:60:80:1a:28:10:d0:11:ad:2a:7e:ec:e6:f1:2b:
97:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:2C:81:DD:41:29:BC:BB:FA:1A:30:15:53:78:B0:D1:84:AD:8F:DC
X509v3 Authority Key Identifier:
keyid:4F:89:5F:F0:E9:9A:77:C0:17:E8:A3:83:29:2C:B5:C6:F8:26:11:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T4lf8Omad8AX6KODKSy1xvgmESA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/3328da-aa4e-445b-9da9-d053745c2acc/1/T4lf8Omad8AX6KODKSy1xvgmESA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/3328da-aa4e-445b-9da9-d053745c2acc/1/T4lf8Omad8AX6KODKSy1xvgmESA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:20:bb:15:67:1e:7d:28:e7:37:5d:16:6a:4e:fb:46:2c:82:
5a:07:11:85:9b:e2:12:8d:bd:c2:4a:e4:a0:1e:03:f5:d3:62:
c8:5a:10:58:4b:63:19:1a:e8:fd:50:86:97:91:e3:fb:49:e2:
88:f9:40:24:7b:51:fc:98:b7:35:95:68:72:21:97:75:e9:ff:
2b:dc:82:21:fd:2a:45:30:43:56:25:43:05:ce:29:49:08:81:
6e:95:3c:0e:e4:ac:1e:7c:c7:56:fb:fb:5e:8c:d0:0b:73:02:
b1:69:a5:82:0a:a6:01:e0:20:55:b9:5f:ac:fe:1d:1e:90:3a:
12:bc:4d:39:ee:a2:3b:e8:b2:8f:78:eb:ae:80:63:37:1b:99:
3b:2a:8a:a0:16:0d:0a:04:9a:85:35:13:ce:7d:5f:f9:e3:d1:
6e:9a:cb:a4:cc:b7:1e:92:ed:d4:49:a2:db:5e:f3:e1:5f:d6:
9e:1e:dc:a3:a1:2b:05:3e:9d:d0:33:05:a3:a6:c1:e3:57:4c:
21:be:c6:3e:9b:3a:94:aa:46:b2:bb:d1:5c:e7:2a:27:ff:69:
16:1d:3f:b4:85:1d:39:44:78:34:69:31:b7:fe:b3:0b:43:10:
f1:60:5f:f8:00:9a:e1:98:f6:9b:03:c3:60:84:aa:74:c9:b7:
4b:3e:12:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:26:59 2026 by rpki-client