Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/9c4fb0-c475-4204-9987-0a91cadbee66/1/T2qURK2qUjxXaOn2vhQGUYOsIKg.mft
File: T2qURK2qUjxXaOn2vhQGUYOsIKg.mft (raw, json)
Hash identifier: aJLyqfoGGZq/UoPo1aFTtfHuyhfuIvWLvHC3ka1/MYw=
Subject key identifier: B2:F1:C3:E1:3F:22:74:9B:9F:68:3C:81:9B:A8:9B:4B:7C:82:D8:13
Authority key identifier: 4F:6A:94:44:AD:AA:52:3C:57:68:E9:F6:BE:14:06:51:83:AC:20:A8
Certificate issuer: /CN=4f6a9444adaa523c5768e9f6be14065183ac20a8
Certificate serial: 019DCFABEE3365BD28C9AD87F9F14D363BF4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T2qURK2qUjxXaOn2vhQGUYOsIKg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/9c4fb0-c475-4204-9987-0a91cadbee66/1/T2qURK2qUjxXaOn2vhQGUYOsIKg.mft
Manifest number: 18DD
Signing time: Mon 27 Apr 2026 16:00:44 +0000
Manifest this update: Mon 27 Apr 2026 16:00:44 +0000
Manifest next update: Tue 28 Apr 2026 16:00:44 +0000
Files and hashes: 1: T2qURK2qUjxXaOn2vhQGUYOsIKg.crl (hash: rRs4PBrtps0rC0dMatIwQZMgRAXkbMeucRKYQsds7ck=)
2: o8tO8stgvhxVUDIUNSKHy-JW2fo.roa (hash: Z08VgX0ivNPtY5zzCzl8jQ6u6U/EFae5aPOCebjGd+I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/9c4fb0-c475-4204-9987-0a91cadbee66/1/T2qURK2qUjxXaOn2vhQGUYOsIKg.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/9c4fb0-c475-4204-9987-0a91cadbee66/1/T2qURK2qUjxXaOn2vhQGUYOsIKg.mft
rsync://rpki.ripe.net/repository/DEFAULT/T2qURK2qUjxXaOn2vhQGUYOsIKg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 14:27:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cf:ab:ee:33:65:bd:28:c9:ad:87:f9:f1:4d:36:3b:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f6a9444adaa523c5768e9f6be14065183ac20a8
Validity
Not Before: Apr 27 16:00:44 2026 GMT
Not After : Apr 28 16:00:44 2026 GMT
Subject: CN=b2f1c3e13f22749b9f683c819ba89b4b7c82d813
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:75:e5:b7:e0:2e:0f:38:46:c6:d9:bb:07:ca:
c9:12:fd:8a:69:40:ba:af:07:28:51:3a:d5:41:3f:
2c:ee:cb:e9:3c:45:49:6b:87:1f:04:57:70:c1:18:
66:23:30:71:ee:f0:25:82:92:52:70:99:fc:77:2b:
c4:c8:5f:44:dc:e4:13:7c:8c:42:ec:97:02:62:f8:
6e:2e:ea:7f:24:4a:53:2c:70:54:e0:ed:7d:b9:ea:
98:43:52:d5:17:23:22:bc:95:38:57:b1:66:df:8e:
42:ee:02:ed:1c:7e:b2:10:73:ce:f6:12:b3:c4:0e:
89:cd:9c:e6:ff:79:0f:67:c1:1e:32:18:7c:cf:bc:
52:15:d6:01:d1:87:ab:6d:3d:4a:da:16:e1:1d:2e:
9b:d8:39:0e:63:9b:3f:a6:6c:42:60:51:ac:cc:33:
fa:59:39:fa:43:28:b3:16:ab:24:5f:cb:70:b7:6c:
28:3b:dc:47:8c:ae:96:a2:12:1b:33:b3:c0:7e:4e:
e8:ff:39:b4:d9:5b:a5:81:b2:fa:9b:4f:fd:55:21:
8a:86:aa:fb:e1:c0:ea:98:72:4c:db:39:c2:9a:c1:
af:c4:e9:c2:86:4e:c6:98:3a:17:83:1a:68:18:be:
31:65:03:61:a5:3a:0d:86:b4:f3:7a:cf:87:1c:2d:
18:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:F1:C3:E1:3F:22:74:9B:9F:68:3C:81:9B:A8:9B:4B:7C:82:D8:13
X509v3 Authority Key Identifier:
keyid:4F:6A:94:44:AD:AA:52:3C:57:68:E9:F6:BE:14:06:51:83:AC:20:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T2qURK2qUjxXaOn2vhQGUYOsIKg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9c4fb0-c475-4204-9987-0a91cadbee66/1/T2qURK2qUjxXaOn2vhQGUYOsIKg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9c4fb0-c475-4204-9987-0a91cadbee66/1/T2qURK2qUjxXaOn2vhQGUYOsIKg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:66:55:51:22:c5:d3:91:ef:8a:73:2d:58:f2:c7:13:9e:80:
08:df:55:db:30:c3:ce:ce:29:17:4e:49:9e:12:97:13:86:e8:
b1:bd:e3:82:fc:82:e4:34:48:0e:6f:aa:55:95:aa:60:f0:0b:
1a:60:33:40:a9:8b:81:2b:58:09:57:84:5b:98:c8:35:f8:3f:
e0:11:25:8e:ed:b2:0d:26:a7:bc:9e:f9:f5:94:55:8a:b3:7a:
ac:6b:30:90:c2:cb:a0:cf:41:41:60:16:e7:1e:7f:c0:13:a6:
af:99:4e:de:12:51:93:14:60:a4:4e:42:6f:63:1a:c3:c7:f5:
05:dc:ce:e6:29:45:3c:bb:df:9c:bb:a2:6f:3d:c0:b6:55:66:
db:97:5a:76:c8:92:77:a5:5d:83:30:1c:1f:02:93:ec:50:f7:
7e:a6:96:cf:9b:57:f2:46:eb:2e:3a:b2:bb:fc:3f:4d:6b:78:
db:fc:2c:15:7b:ab:ab:4e:77:94:96:d6:a5:96:4b:9d:b6:b8:
61:1b:e7:ae:bc:32:51:3a:70:05:d7:0e:9d:f1:2f:25:fb:70:
66:25:0a:4a:09:3c:a3:d9:7d:0b:09:22:11:66:81:1e:d5:7f:
41:55:66:59:5c:d6:d5:61:70:ef:ee:31:18:6e:bb:71:55:83:
65:24:ab:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 18:42:50 2026 by rpki-client