Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fc/4445d7-ad2d-4445-8dde-2ebd6457ef1e/1/T8muTFD6CwOCrdpfPH30GPeSWGQ.mft
File: T8muTFD6CwOCrdpfPH30GPeSWGQ.mft (raw, json)
Hash identifier: emxG1Oman10pSkuPcTheLfwacfLbyN/jFCyDqueMhg0=
Subject key identifier: F4:71:C4:A9:A8:3B:32:1F:A4:83:E5:AD:FC:81:0B:B3:C9:2E:91:1F
Authority key identifier: 4F:C9:AE:4C:50:FA:0B:03:82:AD:DA:5F:3C:7D:F4:18:F7:92:58:64
Certificate issuer: /CN=4fc9ae4c50fa0b0382adda5f3c7df418f7925864
Certificate serial: 01A0C10CE215B57E9A1EA96060A8E4ABC4AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8muTFD6CwOCrdpfPH30GPeSWGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/4445d7-ad2d-4445-8dde-2ebd6457ef1e/1/T8muTFD6CwOCrdpfPH30GPeSWGQ.mft
Manifest number: 03F0
Signing time: Sun 20 Sep 2026 23:00:41 +0000
Manifest this update: Sun 20 Sep 2026 23:00:41 +0000
Manifest next update: Mon 21 Sep 2026 23:00:41 +0000
Files and hashes: 1: KQelvFl-0S2BnhTjmwfeewzy0K0.roa (hash: eHfnP6Dgwq60SUqBjtwY/17CbS0N6nRtKkrY1JJPGsI=)
2: T8muTFD6CwOCrdpfPH30GPeSWGQ.crl (hash: bGjgpS1TacTV9GFrIF1/t0ERp81M6faAi1SzEqV00Bo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/4445d7-ad2d-4445-8dde-2ebd6457ef1e/1/T8muTFD6CwOCrdpfPH30GPeSWGQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/4445d7-ad2d-4445-8dde-2ebd6457ef1e/1/T8muTFD6CwOCrdpfPH30GPeSWGQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8muTFD6CwOCrdpfPH30GPeSWGQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c1:0c:e2:15:b5:7e:9a:1e:a9:60:60:a8:e4:ab:c4:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc9ae4c50fa0b0382adda5f3c7df418f7925864
Validity
Not Before: Sep 20 23:00:41 2026 GMT
Not After : Sep 21 23:00:41 2026 GMT
Subject: CN=f471c4a9a83b321fa483e5adfc810bb3c92e911f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:3b:c5:33:b7:3a:f8:e6:65:ac:f9:07:00:7d:
4d:2f:8d:01:11:1c:de:67:a7:35:38:6f:6c:41:98:
29:3b:30:de:ca:60:80:0b:3a:44:4d:3c:11:60:ce:
ff:b7:b9:74:b8:52:09:75:46:81:8b:07:0c:2b:aa:
0d:a3:49:88:38:e6:c3:77:4d:cc:7b:ba:35:49:56:
3b:da:33:19:f1:29:71:78:bf:46:a5:6b:23:23:70:
18:e4:66:03:13:80:dd:4c:60:88:7f:eb:7e:99:b4:
1d:8e:d3:38:6f:69:80:3e:4a:14:eb:81:4c:9f:c8:
6b:01:0c:66:f2:e6:f6:e5:47:c6:d4:8a:83:0e:8d:
65:d6:94:34:bc:5e:81:84:fd:6c:6b:d5:63:60:23:
61:e2:d3:cf:6c:c5:76:bb:77:87:0f:85:ec:67:2f:
7a:24:1e:21:08:e3:05:4f:b6:96:bb:85:68:ac:e2:
59:81:76:09:f7:dc:9d:c7:2d:de:ec:59:b9:3d:b1:
7d:71:08:bb:18:51:60:fb:55:7e:f4:d0:42:67:ab:
c3:24:80:9c:83:2f:8e:94:64:30:02:ca:5b:c6:a7:
db:72:07:9e:11:7b:1a:8e:93:3a:f4:fa:8c:62:27:
d2:62:a2:35:c6:b4:f3:d4:bf:21:af:09:8a:89:71:
be:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:71:C4:A9:A8:3B:32:1F:A4:83:E5:AD:FC:81:0B:B3:C9:2E:91:1F
X509v3 Authority Key Identifier:
keyid:4F:C9:AE:4C:50:FA:0B:03:82:AD:DA:5F:3C:7D:F4:18:F7:92:58:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8muTFD6CwOCrdpfPH30GPeSWGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/4445d7-ad2d-4445-8dde-2ebd6457ef1e/1/T8muTFD6CwOCrdpfPH30GPeSWGQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/4445d7-ad2d-4445-8dde-2ebd6457ef1e/1/T8muTFD6CwOCrdpfPH30GPeSWGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:2c:7b:41:26:83:e0:b5:d6:e8:35:15:55:60:73:f5:9a:c5:
7b:3e:77:00:da:55:04:55:44:89:b3:33:af:d0:2c:94:ba:fd:
60:bd:d1:9f:bd:8c:4f:57:b2:91:10:3e:9b:09:2b:fe:21:76:
3d:9a:38:98:89:66:0e:84:f7:9d:3f:7b:64:1c:a5:64:22:34:
50:37:3e:c2:d1:9a:79:7b:c2:0d:ab:dd:ac:42:4c:fb:ce:03:
18:82:64:79:87:12:09:9e:61:f5:22:ae:ba:44:cf:b6:fa:92:
4a:2b:c7:36:0c:fa:f2:66:e3:2c:db:92:7b:f4:f1:74:e7:1a:
44:44:a3:3d:41:4c:c2:85:6c:93:93:39:7a:6b:37:d6:08:96:
9c:43:a1:65:05:78:c6:7b:dc:55:9a:a6:ab:0a:e2:25:e6:fc:
43:39:35:ad:d4:46:eb:f6:81:72:9c:cc:d6:ce:ec:6e:6e:33:
80:e3:4d:6f:70:2b:10:8e:b9:ac:3d:50:e8:04:f3:f4:d2:fc:
de:1f:1a:fb:21:40:30:01:3c:f2:b6:50:bd:55:e5:e2:df:2c:
2e:09:88:d4:65:ce:b5:0a:9a:bf:7e:4c:d9:0f:f0:a2:74:2d:
9f:70:c3:db:92:df:93:63:df:e9:db:79:9b:6e:5c:3c:fb:42:
8f:ec:54:54
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDBDOIVtX6aHqlgYKjkq8SqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmYzlhZTRjNTBmYTBiMDM4MmFkZGE1ZjNjN2RmNDE4Zjc5
MjU4NjQwHhcNMjYwOTIwMjMwMDQxWhcNMjYwOTIxMjMwMDQxWjAzMTEwLwYDVQQD
EyhmNDcxYzRhOWE4M2IzMjFmYTQ4M2U1YWRmYzgxMGJiM2M5MmU5MTFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtzvFM7c6+OZlrPkHAH1NL40BERze
Z6c1OG9sQZgpOzDeymCACzpETTwRYM7/t7l0uFIJdUaBiwcMK6oNo0mIOObDd03M
e7o1SVY72jMZ8SlxeL9GpWsjI3AY5GYDE4DdTGCIf+t+mbQdjtM4b2mAPkoU64FM
n8hrAQxm8ub25UfG1IqDDo1l1pQ0vF6BhP1sa9VjYCNh4tPPbMV2u3eHD4XsZy96
JB4hCOMFT7aWu4VorOJZgXYJ99ydxy3e7Fm5PbF9cQi7GFFg+1V+9NBCZ6vDJICc
gy+OlGQwAspbxqfbcgeeEXsajpM69PqMYifSYqI1xrTz1L8hrwmKiXG+wwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPRxxKmoOzIfpIPlrfyBC7PJLpEfMB8GA1UdIwQY
MBaAFE/JrkxQ+gsDgq3aXzx99Bj3klhkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDhtdVRGRDZDd09DcmRwZlBIMzBHUGVTV0dRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy80NDQ1ZDctYWQyZC00NDQ1LThkZGUt
MmViZDY0NTdlZjFlLzEvVDhtdVRGRDZDd09DcmRwZlBIMzBHUGVTV0dRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy80NDQ1ZDctYWQyZC00NDQ1LThkZGUtMmViZDY0NTdlZjFl
LzEvVDhtdVRGRDZDd09DcmRwZlBIMzBHUGVTV0dRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEix7QSaD
4LXW6DUVVWBz9ZrFez53ANpVBFVEibMzr9AslLr9YL3Rn72MT1eykRA+mwkr/iF2
PZo4mIlmDoT3nT97ZBylZCI0UDc+wtGaeXvCDavdrEJM+84DGIJkeYcSCZ5h9SKu
ukTPtvqSSivHNgz68mbjLNuSe/TxdOcaRESjPUFMwoVsk5M5ems31giWnEOhZQV4
xnvcVZqmqwriJeb8Qzk1rdRG6/aBcpzM1s7sbm4zgONNb3ArEI65rD1Q6ATz9NL8
3h8a+yFAMAE88rZQvVXl4t8sLgmI1GXOtQqav35M2Q/wonQtn3DD25Lfk2Pf6dt5
m25cPPtCj+xUVA==
-----END CERTIFICATE-----
Generated at Mon Sep 21 07:17:45 2026 by rpki-client