Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8a/944896-3c41-4710-86d2-005a929ac124/1/T3zlnkdBgWbSD1FkhW-HkzmRidA.mft
File: T3zlnkdBgWbSD1FkhW-HkzmRidA.mft (raw, json)
Hash identifier: zY2Ko6NkYpzwvHo1y3T2TxaQeIiYwJ+hG8oolnyfN7s=
Subject key identifier: 6E:8D:B6:51:4F:C4:C8:5A:87:C4:2C:8F:32:4A:8E:9F:53:0F:2B:71
Authority key identifier: 4F:7C:E5:9E:47:41:81:66:D2:0F:51:64:85:6F:87:93:39:91:89:D0
Certificate issuer: /CN=4f7ce59e47418166d20f5164856f8793399189d0
Certificate serial: 01A18977D1AE4037E6D623BC4AA9D890AD2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T3zlnkdBgWbSD1FkhW-HkzmRidA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/944896-3c41-4710-86d2-005a929ac124/1/T3zlnkdBgWbSD1FkhW-HkzmRidA.mft
Manifest number: 0145
Signing time: Thu 29 Oct 2026 21:01:33 +0000
Manifest this update: Thu 29 Oct 2026 21:01:33 +0000
Manifest next update: Fri 30 Oct 2026 21:01:33 +0000
Files and hashes: 1: T3zlnkdBgWbSD1FkhW-HkzmRidA.crl (hash: 2KHB4DngrAL5CQOqaL2wvKmSWXGUyVQssFkMoF2CwJM=)
2: hzeHFDX7-fXakvbRNzVIimetgT0.roa (hash: TTVPslSxsu3A4z0fsBCY/2+kt2uSPjNyxRVnr/wiATk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/944896-3c41-4710-86d2-005a929ac124/1/T3zlnkdBgWbSD1FkhW-HkzmRidA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/944896-3c41-4710-86d2-005a929ac124/1/T3zlnkdBgWbSD1FkhW-HkzmRidA.mft
rsync://rpki.ripe.net/repository/DEFAULT/T3zlnkdBgWbSD1FkhW-HkzmRidA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Oct 2026 21:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:89:77:d1:ae:40:37:e6:d6:23:bc:4a:a9:d8:90:ad:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f7ce59e47418166d20f5164856f8793399189d0
Validity
Not Before: Oct 29 21:01:33 2026 GMT
Not After : Oct 30 21:01:33 2026 GMT
Subject: CN=6e8db6514fc4c85a87c42c8f324a8e9f530f2b71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:54:09:aa:f1:05:57:29:84:ae:40:f0:13:bd:
2c:95:ba:77:48:bb:be:48:62:61:65:c6:80:db:e1:
a9:15:ca:fd:28:f6:69:41:0b:cd:a1:6b:45:fd:ed:
16:26:2a:16:35:4e:7e:37:d8:c6:02:34:8c:27:8b:
1f:e7:86:46:f2:13:dc:ba:c5:31:1a:ce:c4:4d:3c:
4a:de:16:5d:78:2e:aa:06:ce:e2:9a:31:fb:37:95:
e7:85:3c:78:e9:dd:4c:6b:06:fb:f8:1f:a2:42:f3:
3d:da:3c:c5:ad:19:9f:d7:e9:e6:3e:95:49:26:e0:
d4:c6:29:0f:1d:62:6a:8b:9b:31:97:2b:22:dd:c0:
c7:df:49:ae:af:31:54:ad:2b:15:b5:5f:77:e6:77:
d8:50:5a:51:76:08:0a:51:3a:26:4e:89:f5:f6:79:
fe:f9:92:be:73:c1:9c:c4:7e:ce:1a:af:35:78:50:
d7:b7:07:53:5c:8b:82:6a:46:40:d1:9a:13:63:35:
7a:4e:b2:7a:0a:b2:85:3e:a4:fe:ac:be:3b:68:af:
df:02:b9:b3:d9:b2:b3:f9:78:08:25:b6:70:52:c7:
a0:a0:f1:ac:b3:33:eb:2d:4d:f1:7c:9e:c5:cd:a4:
f0:e9:00:16:32:22:f8:5f:ec:29:a5:d5:98:ed:85:
c3:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:8D:B6:51:4F:C4:C8:5A:87:C4:2C:8F:32:4A:8E:9F:53:0F:2B:71
X509v3 Authority Key Identifier:
keyid:4F:7C:E5:9E:47:41:81:66:D2:0F:51:64:85:6F:87:93:39:91:89:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T3zlnkdBgWbSD1FkhW-HkzmRidA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/944896-3c41-4710-86d2-005a929ac124/1/T3zlnkdBgWbSD1FkhW-HkzmRidA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/944896-3c41-4710-86d2-005a929ac124/1/T3zlnkdBgWbSD1FkhW-HkzmRidA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c8:8c:df:69:c3:5b:50:49:29:ec:25:bf:b5:bd:d1:75:9e:f8:
74:d4:51:3f:a2:50:4d:f5:8f:6a:81:fc:52:cd:f4:47:16:93:
2b:4b:9c:29:7e:97:f0:0b:60:32:db:07:28:98:91:93:f3:ba:
84:e2:f1:10:7f:4e:70:88:df:c1:83:a2:6d:d8:8b:fb:79:61:
7f:c7:87:47:4a:1f:12:63:96:55:ad:82:53:b6:77:01:30:e6:
63:b0:c2:32:91:8e:b2:2d:bc:9c:d9:b5:48:7a:3b:01:5a:dc:
57:ef:86:3e:93:d3:00:82:ab:48:11:99:65:5e:9a:d0:59:3f:
79:53:bc:fb:db:e4:10:62:ca:fd:5a:db:a7:d0:da:83:c3:26:
d1:36:54:61:ab:e7:39:36:14:c4:e8:e9:dd:cb:78:8d:74:3c:
f1:83:6c:e9:e0:92:3c:93:4f:f8:7a:41:dc:3b:bb:58:c8:73:
fd:68:4b:a8:7d:e3:49:da:13:31:bb:07:fe:c1:7e:46:40:71:
b9:59:e0:a5:72:e7:6a:fb:01:e8:86:14:45:87:9c:a8:b1:be:
45:df:fc:14:42:ed:55:13:29:de:4b:56:ca:5d:30:a4:25:c3:
c8:2c:64:51:44:9f:a4:15:ea:c6:7b:97:c7:f4:7e:9b:77:d4:
68:d0:73:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 02:51:30 2026 by rpki-client