Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/24/9c4fb0-c475-4204-9987-0a91cadbee66/1/T2qURK2qUjxXaOn2vhQGUYOsIKg.mft
File: T2qURK2qUjxXaOn2vhQGUYOsIKg.mft (raw, json)
Hash identifier: gVfw77MjQSosRwBDIjqyNIlMLsFespjBIKWFEB0hJWc=
Subject key identifier: 89:D1:0E:FF:1C:35:45:85:BA:8F:9A:5B:FB:A0:36:D7:0F:B8:6B:13
Authority key identifier: 4F:6A:94:44:AD:AA:52:3C:57:68:E9:F6:BE:14:06:51:83:AC:20:A8
Certificate issuer: /CN=4f6a9444adaa523c5768e9f6be14065183ac20a8
Certificate serial: 01A08AC3D4BFF1F23F7B9BF3B137F25D066E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T2qURK2qUjxXaOn2vhQGUYOsIKg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/9c4fb0-c475-4204-9987-0a91cadbee66/1/T2qURK2qUjxXaOn2vhQGUYOsIKg.mft
Manifest number: 1A47
Signing time: Thu 10 Sep 2026 10:01:24 +0000
Manifest this update: Thu 10 Sep 2026 10:01:24 +0000
Manifest next update: Fri 11 Sep 2026 10:01:24 +0000
Files and hashes: 1: T2qURK2qUjxXaOn2vhQGUYOsIKg.crl (hash: NNKdMemy7f0u81Q4zNU1H9wIaJC1MaEaTHQVrSLZ4oA=)
2: o8tO8stgvhxVUDIUNSKHy-JW2fo.roa (hash: Z08VgX0ivNPtY5zzCzl8jQ6u6U/EFae5aPOCebjGd+I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/9c4fb0-c475-4204-9987-0a91cadbee66/1/T2qURK2qUjxXaOn2vhQGUYOsIKg.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/9c4fb0-c475-4204-9987-0a91cadbee66/1/T2qURK2qUjxXaOn2vhQGUYOsIKg.mft
rsync://rpki.ripe.net/repository/DEFAULT/T2qURK2qUjxXaOn2vhQGUYOsIKg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 10:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:c3:d4:bf:f1:f2:3f:7b:9b:f3:b1:37:f2:5d:06:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f6a9444adaa523c5768e9f6be14065183ac20a8
Validity
Not Before: Sep 10 10:01:24 2026 GMT
Not After : Sep 11 10:01:24 2026 GMT
Subject: CN=89d10eff1c354585ba8f9a5bfba036d70fb86b13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:83:a1:ef:65:00:4c:c8:92:ee:8f:fc:b9:fc:
f9:86:18:cb:cc:fc:b9:c2:a6:05:2f:e8:e7:7e:c4:
97:73:a0:8c:15:57:cc:d2:91:67:d6:9e:77:81:f7:
a5:a4:6a:a0:45:e3:46:c1:bb:05:b9:76:da:56:94:
c5:52:99:b4:ed:0c:3d:99:de:74:55:7c:c7:61:76:
90:57:84:41:ab:da:ad:54:3c:ad:8b:e3:7d:da:5c:
4c:1e:3b:00:8d:a1:4d:f1:37:72:9a:bb:05:6f:6e:
9c:9e:37:78:7b:f9:48:19:2e:2a:61:e2:d2:5e:b2:
38:72:0c:df:1e:d9:8a:52:ea:75:66:7e:67:1e:dc:
3e:75:e3:23:69:cc:5b:72:44:0f:60:53:d5:14:44:
17:8a:07:b8:a2:61:76:cd:ac:cd:4e:e1:2b:41:26:
c7:c9:52:cc:71:29:77:40:f3:7e:a9:c4:48:60:32:
2a:de:71:59:26:ef:45:ad:f8:a5:07:b2:ce:67:ec:
25:98:b5:a0:73:d1:09:54:53:65:fc:c3:5d:73:d1:
69:45:27:c8:d2:38:3d:2d:01:ce:03:06:e0:a5:9e:
ac:9e:98:f0:15:e7:b8:68:aa:d0:5a:62:66:8b:17:
62:b6:6a:78:79:82:79:29:db:a5:20:b8:b6:f6:cf:
f6:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:D1:0E:FF:1C:35:45:85:BA:8F:9A:5B:FB:A0:36:D7:0F:B8:6B:13
X509v3 Authority Key Identifier:
keyid:4F:6A:94:44:AD:AA:52:3C:57:68:E9:F6:BE:14:06:51:83:AC:20:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T2qURK2qUjxXaOn2vhQGUYOsIKg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9c4fb0-c475-4204-9987-0a91cadbee66/1/T2qURK2qUjxXaOn2vhQGUYOsIKg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9c4fb0-c475-4204-9987-0a91cadbee66/1/T2qURK2qUjxXaOn2vhQGUYOsIKg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:02:13:ad:6c:00:a7:ae:f9:f2:dc:ab:f3:c9:2a:f6:4b:b8:
8e:a7:59:14:99:b0:41:53:49:da:1c:e6:c5:af:41:81:ac:52:
34:19:52:f9:e8:8d:e0:b2:48:bf:24:c3:49:bd:9e:3b:72:45:
ee:a7:6e:a3:6a:b7:06:1e:61:f4:e4:e5:cb:ce:8c:d1:42:29:
42:d2:40:48:b1:78:99:65:d7:01:37:62:6e:96:6b:cf:c5:60:
12:fa:e5:0c:54:98:98:ca:f4:17:35:4b:21:d4:ea:80:ee:e7:
b2:0b:c1:82:a4:a7:ac:ac:3e:79:57:e1:ca:5e:9b:41:5e:59:
37:fb:0b:6f:67:2e:cd:ea:81:3a:f2:8f:d1:5c:1f:ab:11:08:
b7:fa:29:92:28:8a:09:97:1e:8b:60:3b:01:81:88:75:c7:4b:
e5:7e:44:55:73:ba:db:52:4e:88:00:7b:bd:3e:24:94:b0:b9:
b3:bb:2c:00:c7:39:68:1a:e8:9f:2f:ef:58:f2:fa:85:af:26:
1a:12:14:f7:9e:87:7a:31:e3:52:b1:65:bc:95:a8:0c:34:6e:
e9:d4:3e:8b:65:ff:01:66:fa:1a:3d:5e:55:78:a1:ad:75:71:
c8:e5:e2:e7:f5:0a:3f:f1:aa:f6:07:96:03:eb:fd:f1:0f:c3:
f7:97:7a:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 19:41:54 2026 by rpki-client