Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/3328da-aa4e-445b-9da9-d053745c2acc/1/T4lf8Omad8AX6KODKSy1xvgmESA.mft
File: T4lf8Omad8AX6KODKSy1xvgmESA.mft (raw, json)
Hash identifier: R2qTpZYDOK+6HZ0QJoN1v22Wf2Tp8Evb5J4S06+Vmz8=
Subject key identifier: 69:24:D5:0A:65:DC:9B:EE:6B:B4:B4:0F:6E:31:F4:75:E7:90:0E:2B
Authority key identifier: 4F:89:5F:F0:E9:9A:77:C0:17:E8:A3:83:29:2C:B5:C6:F8:26:11:20
Certificate issuer: /CN=4f895ff0e99a77c017e8a383292cb5c6f8261120
Certificate serial: 019CA8A146F3673A53763FAC01E3E2D1E439
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T4lf8Omad8AX6KODKSy1xvgmESA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/3328da-aa4e-445b-9da9-d053745c2acc/1/T4lf8Omad8AX6KODKSy1xvgmESA.mft
Manifest number: 0D99
Signing time: Sun 01 Mar 2026 09:01:07 +0000
Manifest this update: Sun 01 Mar 2026 09:01:07 +0000
Manifest next update: Mon 02 Mar 2026 09:01:07 +0000
Files and hashes: 1: 6dxV01X9vg2jPotO5hv9PQEuxwo.roa (hash: +esdA25t1mMRXF/ctuGaJFSpgAhjXcMWg4MEVFS8LMo=)
2: G2_PiUJpUwNaL9OFJdICG-GBzaI.roa (hash: lDduugUTdXOP9UBT5qryDM5SzsJ+d6xRkObDWeT06oc=)
3: IXCeJ_byCNVELvp9jRcWKh_bBvc.roa (hash: HLRQyauNlxqkbbZVe7bwHpiiXRRzErR+W+RnPz3utM0=)
4: T4lf8Omad8AX6KODKSy1xvgmESA.crl (hash: 5C3ZZruCuzq8fJMKEDzdhp69uKQwm3ZnYN7OkaYJ6zY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/3328da-aa4e-445b-9da9-d053745c2acc/1/T4lf8Omad8AX6KODKSy1xvgmESA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/3328da-aa4e-445b-9da9-d053745c2acc/1/T4lf8Omad8AX6KODKSy1xvgmESA.mft
rsync://rpki.ripe.net/repository/DEFAULT/T4lf8Omad8AX6KODKSy1xvgmESA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a8:a1:46:f3:67:3a:53:76:3f:ac:01:e3:e2:d1:e4:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f895ff0e99a77c017e8a383292cb5c6f8261120
Validity
Not Before: Mar 1 09:01:07 2026 GMT
Not After : Mar 2 09:01:07 2026 GMT
Subject: CN=6924d50a65dc9bee6bb4b40f6e31f475e7900e2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:b7:1b:d2:93:bb:e2:f6:5c:c7:d9:fc:5e:99:
5b:97:20:76:ed:92:4c:5e:0e:57:b5:df:7f:65:e2:
79:b6:38:d1:72:e0:61:60:b8:85:87:0a:c5:52:fc:
84:a4:90:45:19:9e:0f:5f:12:bd:8c:4d:0b:0e:cf:
89:b7:d8:19:e9:b5:a0:0d:ec:53:bd:1f:cd:7d:bd:
29:b8:9f:9e:a7:15:10:cf:51:74:88:4b:0b:77:7a:
ce:34:20:f5:03:19:af:39:c2:41:2a:b9:b3:32:2b:
78:e5:81:dc:fb:e4:38:d4:78:dc:4a:f4:27:03:a3:
4e:99:10:f8:c5:0b:d8:2c:73:95:1e:9a:03:f2:c2:
b5:34:45:be:5e:bd:f1:9b:4b:bc:00:98:35:ef:07:
39:ee:bb:f7:fb:c4:57:67:4d:cb:46:b5:9e:9c:b3:
bc:18:ac:b8:35:3c:53:1c:e9:9b:76:5f:ed:83:fb:
dd:c8:97:9d:8a:a5:31:30:23:c8:20:67:2a:04:2b:
1b:b8:18:d1:5f:94:73:70:b3:7f:db:c3:b4:b5:c6:
02:f3:17:29:fa:7b:c0:4f:30:05:84:71:eb:d7:76:
7f:1d:57:c4:74:e5:62:d5:ac:e3:86:7c:d5:d2:49:
0e:66:cc:7e:56:ba:18:96:a5:0c:de:21:36:17:e2:
3d:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:24:D5:0A:65:DC:9B:EE:6B:B4:B4:0F:6E:31:F4:75:E7:90:0E:2B
X509v3 Authority Key Identifier:
keyid:4F:89:5F:F0:E9:9A:77:C0:17:E8:A3:83:29:2C:B5:C6:F8:26:11:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T4lf8Omad8AX6KODKSy1xvgmESA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/3328da-aa4e-445b-9da9-d053745c2acc/1/T4lf8Omad8AX6KODKSy1xvgmESA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/3328da-aa4e-445b-9da9-d053745c2acc/1/T4lf8Omad8AX6KODKSy1xvgmESA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:29:8a:b8:70:06:6e:c4:5d:14:08:51:cd:78:d6:70:ca:1d:
ee:e0:d9:d3:8c:7c:23:25:ca:28:07:33:2f:72:06:eb:f2:64:
74:b9:cc:4d:d9:83:33:e3:21:56:04:40:9a:a6:e5:5e:5f:72:
23:27:c6:61:13:6c:cf:bc:ef:2e:1b:94:e5:59:ba:ea:ff:99:
5e:e9:80:8c:0a:02:92:98:fc:2c:d5:d8:77:ca:84:1f:1d:11:
d7:58:2f:90:5d:85:9c:bd:00:29:d5:f1:39:e0:15:7d:eb:0f:
7d:3d:67:3e:be:20:d3:6b:f1:ba:1d:65:d1:18:51:95:a8:75:
f0:1a:40:f2:6f:5d:55:b7:cc:14:1b:b1:0b:27:54:e3:59:ee:
6c:f8:b6:ce:b3:2d:bf:b0:9b:00:7e:58:f2:8e:fc:ec:53:5f:
c8:fe:98:a6:25:52:42:2d:05:7f:f4:d1:c7:8e:cf:1c:dc:35:
6b:47:e2:6e:c3:04:1b:81:6f:17:2c:2b:5e:c9:d9:1f:f1:2a:
48:67:97:7e:92:27:2a:2c:fd:41:a6:d7:7b:f4:f5:2c:a0:21:
81:7a:b0:94:74:c8:bc:e4:f3:14:fe:35:b0:82:42:e6:d4:eb:
70:53:40:d6:d3:a1:aa:6c:82:8c:99:19:e7:75:90:4b:85:df:
40:09:28:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 16:27:43 2026 by rpki-client