Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/8a140b-0e51-4fc7-9c01-d67b9aca6417/1/T0HFbqBp7nscHfZoa9NuDhRSiiA.mft
File: T0HFbqBp7nscHfZoa9NuDhRSiiA.mft (raw, json)
Hash identifier: Gjfn+U1zwZTQA+QR2SRHL7fMZPqg3vMQIxdmTUO3TXQ=
Subject key identifier: EA:F4:51:4B:CA:A5:A2:12:1B:21:1E:B4:54:3B:AD:EE:22:98:AC:6A
Authority key identifier: 4F:41:C5:6E:A0:69:EE:7B:1C:1D:F6:68:6B:D3:6E:0E:14:52:8A:20
Certificate issuer: /CN=4f41c56ea069ee7b1c1df6686bd36e0e14528a20
Certificate serial: 019D378920BEA4A110AB5A00BA638D24F35C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T0HFbqBp7nscHfZoa9NuDhRSiiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/8a140b-0e51-4fc7-9c01-d67b9aca6417/1/T0HFbqBp7nscHfZoa9NuDhRSiiA.mft
Manifest number: 0FB5
Signing time: Sun 29 Mar 2026 03:00:26 +0000
Manifest this update: Sun 29 Mar 2026 03:00:26 +0000
Manifest next update: Mon 30 Mar 2026 03:00:26 +0000
Files and hashes: 1: 8OKd3CQc6i0WS5lvDDNOUjLhw3g.roa (hash: 2r6wcq8Rpn3z2tzFav+stYWE1p2kymIXK4N4fPkqcPo=)
2: T0HFbqBp7nscHfZoa9NuDhRSiiA.crl (hash: 0eVWzY4HhvcmmNTyhBQU+W68M/Uf9oi1/vh6khD1cAU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/8a140b-0e51-4fc7-9c01-d67b9aca6417/1/T0HFbqBp7nscHfZoa9NuDhRSiiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/8a140b-0e51-4fc7-9c01-d67b9aca6417/1/T0HFbqBp7nscHfZoa9NuDhRSiiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/T0HFbqBp7nscHfZoa9NuDhRSiiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:20:be:a4:a1:10:ab:5a:00:ba:63:8d:24:f3:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f41c56ea069ee7b1c1df6686bd36e0e14528a20
Validity
Not Before: Mar 29 03:00:26 2026 GMT
Not After : Mar 30 03:00:26 2026 GMT
Subject: CN=eaf4514bcaa5a2121b211eb4543badee2298ac6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:20:24:5f:c8:20:90:7e:b8:a2:81:c8:eb:84:
39:f0:8f:1c:0b:c3:b7:95:63:33:f4:b7:d0:2f:45:
88:a3:a7:22:9f:3d:fd:e0:18:0a:69:8e:31:f5:4e:
3a:c3:46:1d:63:f7:ed:65:ad:e4:55:a7:b9:6c:0f:
10:c8:ad:20:c7:f5:65:75:ec:cb:32:d5:40:ff:3c:
ab:4f:15:65:d0:17:f4:7e:29:84:13:f1:01:f4:7e:
b6:60:5e:e0:8e:c8:6e:b8:16:5b:27:0d:d5:8c:45:
99:84:0e:f6:02:c4:7b:c9:70:80:69:e1:d3:83:d3:
2a:d4:4a:09:00:73:26:2e:62:e6:97:7d:e7:0b:00:
e7:dc:d6:23:86:07:5d:7b:a4:42:2c:a1:92:b1:e5:
48:e2:7a:7f:77:62:1a:53:b6:33:2a:db:03:60:23:
2c:c7:49:24:f2:ec:30:6f:8f:af:08:88:4a:25:da:
f4:2c:cd:0d:ca:b3:ab:e4:e9:3a:c0:16:90:13:ea:
5d:38:80:cb:c7:10:b1:d4:02:11:a5:b7:ee:dc:3f:
c9:bc:3a:b1:9a:46:4b:bd:da:2b:32:c9:ec:c7:0f:
70:62:4f:21:bc:9e:1a:2b:b6:b2:f6:88:7e:81:71:
f4:07:0e:67:0e:6e:55:8d:6b:31:45:74:48:66:bb:
85:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:F4:51:4B:CA:A5:A2:12:1B:21:1E:B4:54:3B:AD:EE:22:98:AC:6A
X509v3 Authority Key Identifier:
keyid:4F:41:C5:6E:A0:69:EE:7B:1C:1D:F6:68:6B:D3:6E:0E:14:52:8A:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T0HFbqBp7nscHfZoa9NuDhRSiiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/8a140b-0e51-4fc7-9c01-d67b9aca6417/1/T0HFbqBp7nscHfZoa9NuDhRSiiA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/8a140b-0e51-4fc7-9c01-d67b9aca6417/1/T0HFbqBp7nscHfZoa9NuDhRSiiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:f9:81:d9:a5:06:b1:25:1a:46:ed:f3:12:60:47:bb:a3:7f:
3c:c6:2a:a5:20:20:fc:71:09:55:81:2b:c2:fd:c2:53:15:9f:
de:4b:00:e2:60:99:39:f2:3d:11:95:03:b4:0a:ab:62:66:55:
29:0c:18:60:e0:f1:c3:0b:3f:b9:b5:b3:76:0f:88:32:d0:dc:
76:75:58:de:17:ae:e3:37:89:e2:65:d7:8e:70:ab:91:5e:b9:
92:d5:c4:bf:55:3d:d6:80:e7:10:ca:b2:f7:f2:25:f8:c2:d2:
de:1f:aa:7c:38:a8:91:24:df:67:9a:0e:dc:7a:6c:d3:97:af:
b0:21:d7:6f:28:6f:8a:b3:35:b7:09:f4:89:a6:79:57:01:75:
59:51:b5:4c:56:0f:26:a9:22:af:74:da:dd:71:1d:18:c0:8f:
21:dc:01:bd:61:21:ac:9a:1b:81:9c:6f:c0:84:36:e5:4b:d8:
98:b6:ad:ec:05:3b:d3:f6:71:ec:2c:9e:ac:c0:7d:74:f0:a8:
7c:06:b8:02:44:19:30:cf:9c:53:f0:41:ad:dd:7f:75:8f:54:
99:f3:ce:c5:f4:de:70:37:3e:55:6a:90:ba:bb:d1:49:e2:18:
79:3d:42:73:f3:94:bc:78:f6:7a:07:ff:dc:50:80:c2:2b:de:
0a:ad:3d:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:25:23 2026 by rpki-client