Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/c991ee-bd41-4ad1-b88d-6fc5fca09629/1/T_hs8z4V6kCJ2inip4gddG34Ju8.mft
File: T_hs8z4V6kCJ2inip4gddG34Ju8.mft (raw, json)
Hash identifier: /qq2+W7ggGkes8QTNG3EAzm4LhZZSdH8A8RsRQjs8hY=
Subject key identifier: 46:B7:83:88:8D:3E:7B:2E:E7:FE:F3:84:FB:AC:29:34:57:B3:1D:3D
Authority key identifier: 4F:F8:6C:F3:3E:15:EA:40:89:DA:29:E2:A7:88:1D:74:6D:F8:26:EF
Certificate issuer: /CN=4ff86cf33e15ea4089da29e2a7881d746df826ef
Certificate serial: 019D39AF1E8D529E44F9F02997CB49D72EFE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T_hs8z4V6kCJ2inip4gddG34Ju8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/c991ee-bd41-4ad1-b88d-6fc5fca09629/1/T_hs8z4V6kCJ2inip4gddG34Ju8.mft
Manifest number: 11F2
Signing time: Sun 29 Mar 2026 13:01:11 +0000
Manifest this update: Sun 29 Mar 2026 13:01:11 +0000
Manifest next update: Mon 30 Mar 2026 13:01:11 +0000
Files and hashes: 1: 1v3IPl8M1eJPBhCAK7u4vq4rUaI.roa (hash: fKYCNJCehScelohhLM2BpKiOwF7K+yob2FjJd+Ycr6M=)
2: T_hs8z4V6kCJ2inip4gddG34Ju8.crl (hash: HqBMKFh4idWfNNsxfAwQm9V4ZZT0YXNCLE797wobx8M=)
3: pxD_Y88xrQvnAVjSRtOa0jsr7OQ.roa (hash: +SNLZHSRdVfvPSo1qQ3dQv0AK0ZdBnAQ1eRjccxs6zQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/c991ee-bd41-4ad1-b88d-6fc5fca09629/1/T_hs8z4V6kCJ2inip4gddG34Ju8.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/c991ee-bd41-4ad1-b88d-6fc5fca09629/1/T_hs8z4V6kCJ2inip4gddG34Ju8.mft
rsync://rpki.ripe.net/repository/DEFAULT/T_hs8z4V6kCJ2inip4gddG34Ju8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:af:1e:8d:52:9e:44:f9:f0:29:97:cb:49:d7:2e:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ff86cf33e15ea4089da29e2a7881d746df826ef
Validity
Not Before: Mar 29 13:01:11 2026 GMT
Not After : Mar 30 13:01:11 2026 GMT
Subject: CN=46b783888d3e7b2ee7fef384fbac293457b31d3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:ec:26:fe:8a:d3:74:c4:8b:39:8b:f1:0e:59:
02:00:46:85:34:ff:36:47:da:2f:6a:66:4c:b2:6c:
5a:ac:c0:0d:5e:90:a9:25:7b:2a:a8:c4:19:8b:f7:
94:9b:1e:61:6f:ef:18:ed:b9:3c:4a:ca:8e:50:c3:
47:10:20:20:ba:c0:70:b2:b4:b1:8b:9d:fc:b8:a9:
7d:2c:d7:fc:aa:26:6f:31:c2:37:1d:49:45:38:62:
05:f5:1a:ac:bd:ae:f9:da:da:5e:8c:3e:6e:3d:13:
cf:2d:2f:f3:db:ff:45:b1:2d:6b:17:ca:78:1b:ab:
e3:a3:79:08:4f:7b:fb:f8:0a:5e:be:11:ee:89:68:
c2:8f:e2:a1:46:2e:80:9d:e2:64:a0:44:00:4e:a2:
04:0f:eb:67:53:69:a2:e0:35:ed:5c:14:19:de:e2:
61:8a:ee:a4:dd:1b:82:17:5b:a7:5a:f1:84:3d:ef:
04:ba:6f:0a:c9:05:37:9d:3b:cf:a5:0e:eb:91:1b:
b0:2a:a9:8c:46:c9:c1:bb:6f:6f:1e:ab:e0:76:aa:
40:9e:85:25:f9:32:f9:1e:d9:5a:89:4a:9f:70:1c:
ee:1a:c9:18:96:19:b1:ce:6d:7e:bc:4b:79:35:80:
18:c4:03:b7:ce:e1:47:39:a3:62:b4:1b:56:ca:75:
06:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:B7:83:88:8D:3E:7B:2E:E7:FE:F3:84:FB:AC:29:34:57:B3:1D:3D
X509v3 Authority Key Identifier:
keyid:4F:F8:6C:F3:3E:15:EA:40:89:DA:29:E2:A7:88:1D:74:6D:F8:26:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T_hs8z4V6kCJ2inip4gddG34Ju8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/c991ee-bd41-4ad1-b88d-6fc5fca09629/1/T_hs8z4V6kCJ2inip4gddG34Ju8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/c991ee-bd41-4ad1-b88d-6fc5fca09629/1/T_hs8z4V6kCJ2inip4gddG34Ju8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:a7:22:f0:02:b1:10:7b:1f:d3:15:00:79:f1:56:12:32:12:
7d:06:67:85:45:ff:12:23:e5:6f:c7:a9:24:e8:1a:52:50:1a:
7d:a8:ce:8b:46:94:ee:d2:97:20:ea:83:2c:c8:5a:14:09:25:
2d:7d:36:bf:de:71:30:01:b5:37:8c:90:ff:92:d2:30:60:36:
b5:4b:06:b4:27:94:47:68:e3:df:96:66:fa:7b:48:f4:25:b6:
dd:13:8f:c2:9b:22:8c:56:b3:a9:1b:90:9d:86:db:32:0c:0b:
45:fb:fe:d4:a0:b9:06:51:a4:48:e1:8e:c4:c6:fb:9e:37:75:
62:a8:0c:2f:db:67:dc:ae:55:d6:48:03:75:64:bc:00:ad:df:
e8:26:70:8e:d8:3d:67:ec:cc:70:c4:2c:50:be:d1:ab:e0:7d:
53:41:81:67:67:ae:90:52:da:e9:62:3a:78:05:51:f5:e3:e0:
40:c0:da:e0:8a:8b:e6:58:06:13:01:d2:ec:e8:80:3f:84:e2:
a5:22:be:80:47:ee:2c:31:5e:6a:ba:62:e2:31:7c:c7:42:e1:
44:a9:6c:1a:73:be:cc:db:ae:9b:d0:63:45:50:59:23:97:74:
6a:93:33:e4:65:43:7f:ed:c9:8d:a6:e5:d2:15:2a:a4:87:2e:
8c:05:0f:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 16:27:36 2026 by rpki-client