Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e9/3328da-aa4e-445b-9da9-d053745c2acc/1/T4lf8Omad8AX6KODKSy1xvgmESA.mft
File: T4lf8Omad8AX6KODKSy1xvgmESA.mft (raw, json)
Hash identifier: Wv70dap66xLgHqBKn1EifoeF+9KWpZeOY5T93UYw4+Q=
Subject key identifier: 8C:86:88:3D:AE:CE:8A:36:AB:C8:F8:53:61:C3:BB:58:C7:B8:B5:76
Authority key identifier: 4F:89:5F:F0:E9:9A:77:C0:17:E8:A3:83:29:2C:B5:C6:F8:26:11:20
Certificate issuer: /CN=4f895ff0e99a77c017e8a383292cb5c6f8261120
Certificate serial: 01A0C3D6A3B5F26BF4E59105D270C5F94AC1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T4lf8Omad8AX6KODKSy1xvgmESA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/3328da-aa4e-445b-9da9-d053745c2acc/1/T4lf8Omad8AX6KODKSy1xvgmESA.mft
Manifest number: 0FBA
Signing time: Mon 21 Sep 2026 12:00:18 +0000
Manifest this update: Mon 21 Sep 2026 12:00:18 +0000
Manifest next update: Tue 22 Sep 2026 12:00:18 +0000
Files and hashes: 1: 1tI6G_uipCGYM7G28gO9zYS_vd0.roa (hash: jQHm0OXPGE8VAsUUw4pohYSxJ7gjNdv50GcJUwt6Vgs=)
2: 6dxV01X9vg2jPotO5hv9PQEuxwo.roa (hash: +esdA25t1mMRXF/ctuGaJFSpgAhjXcMWg4MEVFS8LMo=)
3: IXCeJ_byCNVELvp9jRcWKh_bBvc.roa (hash: HLRQyauNlxqkbbZVe7bwHpiiXRRzErR+W+RnPz3utM0=)
4: T4lf8Omad8AX6KODKSy1xvgmESA.crl (hash: TzQgzSathIERPuux8f0cRvwklOvKwY5G6cNtR64vUww=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/3328da-aa4e-445b-9da9-d053745c2acc/1/T4lf8Omad8AX6KODKSy1xvgmESA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/3328da-aa4e-445b-9da9-d053745c2acc/1/T4lf8Omad8AX6KODKSy1xvgmESA.mft
rsync://rpki.ripe.net/repository/DEFAULT/T4lf8Omad8AX6KODKSy1xvgmESA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 12:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c3:d6:a3:b5:f2:6b:f4:e5:91:05:d2:70:c5:f9:4a:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f895ff0e99a77c017e8a383292cb5c6f8261120
Validity
Not Before: Sep 21 12:00:18 2026 GMT
Not After : Sep 22 12:00:18 2026 GMT
Subject: CN=8c86883daece8a36abc8f85361c3bb58c7b8b576
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:66:32:20:16:62:2d:7b:ad:89:b6:91:4b:0e:
da:85:1a:ca:68:24:37:08:79:00:4d:42:d2:9d:ff:
ed:37:82:02:3c:26:5d:82:e7:90:d4:81:f5:71:42:
09:ab:77:87:e9:1b:61:47:1c:57:c9:c3:77:4c:7d:
03:6c:e8:af:4a:f0:ad:b3:ca:3d:a2:69:47:f6:70:
94:0a:37:e8:cc:36:8a:28:db:ca:95:3d:58:63:ea:
d0:e1:0b:21:6e:76:c2:e7:09:b8:d2:97:6f:53:6e:
0d:33:4f:2f:df:9d:93:a6:78:61:1e:35:69:81:2a:
7f:f0:34:1b:14:e7:08:5c:91:42:8e:50:4a:c3:e3:
db:c5:b0:3b:3d:db:09:58:ca:1b:69:01:a2:69:06:
6c:45:9a:b0:69:6b:1f:09:11:47:4c:29:e4:1b:2a:
5b:f6:ac:62:c9:57:70:4d:7b:7a:2e:28:bd:9d:36:
02:dd:3d:7b:11:08:87:ea:aa:68:d2:f2:2a:a7:65:
b2:5d:29:80:5d:82:24:e8:8d:c2:7c:cb:bb:e5:38:
3a:38:17:64:4f:d3:8a:54:b7:1e:df:a1:cb:26:f8:
e7:fc:17:07:85:c2:9e:88:7a:f9:7d:f4:98:12:dd:
15:1d:62:d2:74:7c:80:df:94:f4:63:6e:0c:65:98:
21:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:86:88:3D:AE:CE:8A:36:AB:C8:F8:53:61:C3:BB:58:C7:B8:B5:76
X509v3 Authority Key Identifier:
keyid:4F:89:5F:F0:E9:9A:77:C0:17:E8:A3:83:29:2C:B5:C6:F8:26:11:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T4lf8Omad8AX6KODKSy1xvgmESA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/3328da-aa4e-445b-9da9-d053745c2acc/1/T4lf8Omad8AX6KODKSy1xvgmESA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/3328da-aa4e-445b-9da9-d053745c2acc/1/T4lf8Omad8AX6KODKSy1xvgmESA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:a3:85:95:d5:f8:42:1d:80:a7:50:2f:9f:11:6c:8a:b9:8e:
ff:4e:6b:cb:b9:c6:49:25:54:52:e7:86:f3:70:92:14:e9:9a:
38:f6:46:a4:da:c6:32:ef:cc:1f:be:d9:c5:e7:60:25:09:e1:
84:69:40:39:4e:a5:3d:49:5d:00:4f:33:27:18:64:fa:a2:4d:
34:7d:ca:d3:44:43:aa:10:4a:92:d1:9e:e7:8d:77:ca:7e:36:
6d:9d:7c:10:e3:33:6d:69:5c:e1:88:94:47:9e:c3:30:a1:e3:
28:d9:08:29:1f:bd:7d:62:2a:66:91:de:5f:0d:76:88:8a:09:
6e:07:18:51:f1:d7:02:6d:d5:82:dd:e3:1b:0f:30:50:1b:c8:
e2:25:e1:59:84:19:ae:c2:5d:3e:98:dd:f4:18:b7:5e:59:b2:
7f:5f:88:78:70:a1:23:2c:ae:ca:9c:a4:7f:51:2c:af:42:16:
2a:aa:47:2e:c3:3a:8b:6e:6d:62:17:44:ba:14:ab:49:ce:be:
ff:81:bb:5f:c5:d5:f8:9a:67:dc:1b:ee:2c:6b:f9:1a:f2:72:
53:e9:cd:12:b9:71:25:27:20:3f:54:53:d9:ea:1d:f7:fa:66:
ad:22:ef:80:65:18:bf:b6:98:4b:88:98:ed:22:f0:38:4f:10:
97:7a:a9:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 15:56:46 2026 by rpki-client