Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/9c4fb0-c475-4204-9987-0a91cadbee66/1/T2qURK2qUjxXaOn2vhQGUYOsIKg.mft
File: T2qURK2qUjxXaOn2vhQGUYOsIKg.mft (raw, json)
Hash identifier: iSe6bORab5bXRUSdKifl3mq35pQ8Ljtl0Mn5rXdZEdM=
Subject key identifier: F4:5F:84:B4:ED:9B:0B:21:83:12:FF:0E:3F:AF:AD:FE:57:3B:83:17
Authority key identifier: 4F:6A:94:44:AD:AA:52:3C:57:68:E9:F6:BE:14:06:51:83:AC:20:A8
Certificate issuer: /CN=4f6a9444adaa523c5768e9f6be14065183ac20a8
Certificate serial: 019CE411301BB62DC80C298BB9AB60C9EBC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T2qURK2qUjxXaOn2vhQGUYOsIKg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/9c4fb0-c475-4204-9987-0a91cadbee66/1/T2qURK2qUjxXaOn2vhQGUYOsIKg.mft
Manifest number: 1863
Signing time: Thu 12 Mar 2026 22:00:57 +0000
Manifest this update: Thu 12 Mar 2026 22:00:57 +0000
Manifest next update: Fri 13 Mar 2026 22:00:57 +0000
Files and hashes: 1: T2qURK2qUjxXaOn2vhQGUYOsIKg.crl (hash: hZSoK4bZ+CWEtr6uM3QKkEnEzXFpQ96McL6Pj4eu6CI=)
2: o8tO8stgvhxVUDIUNSKHy-JW2fo.roa (hash: Z08VgX0ivNPtY5zzCzl8jQ6u6U/EFae5aPOCebjGd+I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/9c4fb0-c475-4204-9987-0a91cadbee66/1/T2qURK2qUjxXaOn2vhQGUYOsIKg.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/9c4fb0-c475-4204-9987-0a91cadbee66/1/T2qURK2qUjxXaOn2vhQGUYOsIKg.mft
rsync://rpki.ripe.net/repository/DEFAULT/T2qURK2qUjxXaOn2vhQGUYOsIKg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 22:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e4:11:30:1b:b6:2d:c8:0c:29:8b:b9:ab:60:c9:eb:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f6a9444adaa523c5768e9f6be14065183ac20a8
Validity
Not Before: Mar 12 22:00:57 2026 GMT
Not After : Mar 13 22:00:57 2026 GMT
Subject: CN=f45f84b4ed9b0b218312ff0e3fafadfe573b8317
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:22:e6:ce:e7:ed:7b:5c:97:48:bb:56:9f:d3:
15:a1:09:79:1a:02:97:37:00:d2:72:a8:79:75:01:
ea:07:72:e0:c8:0b:d7:c7:69:5f:59:07:b6:09:69:
f2:4b:26:7b:8f:4b:20:ef:85:4c:30:59:ac:ed:35:
b6:35:62:d0:7f:b5:b7:3e:d1:a7:b0:85:c2:57:b5:
2e:3b:80:ef:5a:0b:50:24:9f:0a:2a:65:ce:c4:be:
ae:6c:61:a3:3c:83:0a:08:d4:b0:13:07:19:81:5a:
22:63:77:8d:58:48:bc:fb:ac:e6:71:0e:09:b9:df:
1f:f5:c5:df:df:f7:ce:06:76:5a:54:5d:f7:89:ff:
f6:0b:0f:3e:cb:b5:dd:28:cf:06:21:7b:32:a0:9d:
f6:f8:a7:e9:30:a5:a9:7e:b4:6b:d3:0b:3e:a9:84:
2f:a2:1f:c0:34:da:dd:8a:6c:20:b0:b4:f6:30:c4:
ed:59:eb:57:aa:2b:26:73:a0:0b:ac:a4:ae:52:e4:
d6:23:a3:04:5f:44:62:56:2c:48:bf:95:4c:db:e0:
d5:37:e4:b8:c9:7d:25:43:b7:58:52:20:74:03:59:
4d:e5:a4:a6:24:d6:5c:8d:6a:69:19:31:1f:dc:5d:
da:d6:38:0f:55:7b:c7:8f:a1:2c:4b:08:16:17:f9:
10:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:5F:84:B4:ED:9B:0B:21:83:12:FF:0E:3F:AF:AD:FE:57:3B:83:17
X509v3 Authority Key Identifier:
keyid:4F:6A:94:44:AD:AA:52:3C:57:68:E9:F6:BE:14:06:51:83:AC:20:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T2qURK2qUjxXaOn2vhQGUYOsIKg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9c4fb0-c475-4204-9987-0a91cadbee66/1/T2qURK2qUjxXaOn2vhQGUYOsIKg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9c4fb0-c475-4204-9987-0a91cadbee66/1/T2qURK2qUjxXaOn2vhQGUYOsIKg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:d3:95:be:a2:24:36:be:60:1f:aa:b2:4b:3a:44:bd:56:62:
1d:d4:30:50:7f:9f:48:d7:56:bc:b2:34:44:15:ef:14:c1:40:
7a:66:3b:21:34:21:68:a0:53:3f:d9:38:2e:ba:95:87:fd:2f:
11:84:bf:5f:cc:2d:a2:01:1e:c6:ba:7e:87:da:49:69:36:fb:
c7:e5:33:e9:ac:6c:40:89:a6:8f:08:14:86:72:2a:52:e3:16:
43:1a:07:67:8f:b4:4b:2e:bd:76:a5:f6:73:fa:7a:8b:fc:f2:
7f:47:16:2e:a5:e4:57:4c:19:7e:dd:4f:7f:6a:d6:5f:27:ab:
f1:46:03:01:ce:8b:6b:e4:48:1d:57:93:93:7e:c0:a7:21:16:
d4:a8:57:b8:87:6a:0c:1d:ef:c9:71:96:7b:d3:79:9d:aa:14:
58:a6:80:e2:86:94:6f:23:05:43:33:02:2b:49:be:66:f6:cd:
b8:7a:4e:dc:cb:ed:bd:eb:6c:32:ac:ec:08:7a:b6:1a:41:61:
fe:57:7a:17:ca:f7:ce:bb:95:40:2d:a6:8d:53:f9:67:cd:ac:
fc:d5:a4:23:3f:4b:2e:f0:10:22:70:a5:86:32:8b:96:e6:55:
39:89:6e:0f:e6:c9:ee:80:30:01:4b:bb:51:d2:f7:fe:b0:0b:
07:17:29:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 07:47:03 2026 by rpki-client