Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/20e95b-af0c-4796-abe2-e7cc87023961/1/T0n-B0Y1HIfDQYrNOYbnYoxFh2c.mft
File: T0n-B0Y1HIfDQYrNOYbnYoxFh2c.mft (raw, json)
Hash identifier: uSKVv61Qk02uKCWpGPCwl9Ai1Lf3KJRn8h2MlLUPX/Q=
Subject key identifier: 7D:6E:1B:A9:FF:F3:06:8F:0A:53:30:EC:52:B6:D5:7D:24:EF:C7:70
Authority key identifier: 4F:49:FE:07:46:35:1C:87:C3:41:8A:CD:39:86:E7:62:8C:45:87:67
Certificate issuer: /CN=4f49fe0746351c87c3418acd3986e7628c458767
Certificate serial: 019D38D2A81A87608B74976212B82D6F99D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T0n-B0Y1HIfDQYrNOYbnYoxFh2c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/20e95b-af0c-4796-abe2-e7cc87023961/1/T0n-B0Y1HIfDQYrNOYbnYoxFh2c.mft
Manifest number: 030C
Signing time: Sun 29 Mar 2026 09:00:22 +0000
Manifest this update: Sun 29 Mar 2026 09:00:22 +0000
Manifest next update: Mon 30 Mar 2026 09:00:22 +0000
Files and hashes: 1: T0n-B0Y1HIfDQYrNOYbnYoxFh2c.crl (hash: N2lTexEKZXWYKX6S2XhEcwMe1qE8Ap8rwRfgbuAs3tE=)
2: fxg-toqpHRaP4ghSh5xl_zw2dIs.roa (hash: csJ927dQ/OGFVXUR29yJ4G8BgtCcMI++AUL4mpClHs4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/20e95b-af0c-4796-abe2-e7cc87023961/1/T0n-B0Y1HIfDQYrNOYbnYoxFh2c.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/20e95b-af0c-4796-abe2-e7cc87023961/1/T0n-B0Y1HIfDQYrNOYbnYoxFh2c.mft
rsync://rpki.ripe.net/repository/DEFAULT/T0n-B0Y1HIfDQYrNOYbnYoxFh2c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:a8:1a:87:60:8b:74:97:62:12:b8:2d:6f:99:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f49fe0746351c87c3418acd3986e7628c458767
Validity
Not Before: Mar 29 09:00:22 2026 GMT
Not After : Mar 30 09:00:22 2026 GMT
Subject: CN=7d6e1ba9fff3068f0a5330ec52b6d57d24efc770
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:49:76:33:eb:26:09:d7:ce:5b:93:16:6c:92:
cf:95:8a:b1:da:dd:d7:59:86:ae:28:ea:d4:ef:be:
a6:e7:71:ee:b3:82:b5:f1:b6:92:66:9f:5d:e0:7b:
b1:b3:b1:cc:13:bc:88:c0:26:72:cd:6c:3e:7c:c1:
c9:46:28:c1:fb:64:cf:26:fc:71:37:66:99:84:d8:
9e:75:4a:7a:7c:a5:5b:fc:31:e6:9c:14:ab:f3:21:
d1:cb:1b:7b:db:0f:81:cc:5f:b0:c6:bd:e4:f7:de:
d6:a6:bf:60:ee:9f:3f:d4:52:7f:cf:72:1b:92:0f:
6b:33:e8:68:bc:6a:6b:e3:ec:cb:ab:dd:7d:3d:5d:
e2:5a:37:26:a1:09:58:50:61:d7:4e:3e:0c:fa:76:
b5:8a:2e:8a:e6:e2:91:ef:65:78:b0:6a:f5:d3:b6:
20:2e:e7:6a:46:4d:49:44:46:86:23:05:9a:a4:63:
1a:0b:2f:ed:5f:cd:35:00:1b:fb:69:1c:cb:99:2d:
cc:cf:c5:e6:81:dd:38:d3:ac:3a:b0:b0:6f:99:78:
dd:56:d6:89:e6:59:0c:d7:8e:42:58:37:0f:cd:43:
94:1e:ad:09:91:b7:7f:4d:17:87:de:fb:e0:49:1a:
52:f7:9f:7e:5d:67:02:fa:b7:7b:c6:dc:a9:01:53:
f2:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:6E:1B:A9:FF:F3:06:8F:0A:53:30:EC:52:B6:D5:7D:24:EF:C7:70
X509v3 Authority Key Identifier:
keyid:4F:49:FE:07:46:35:1C:87:C3:41:8A:CD:39:86:E7:62:8C:45:87:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T0n-B0Y1HIfDQYrNOYbnYoxFh2c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/20e95b-af0c-4796-abe2-e7cc87023961/1/T0n-B0Y1HIfDQYrNOYbnYoxFh2c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/20e95b-af0c-4796-abe2-e7cc87023961/1/T0n-B0Y1HIfDQYrNOYbnYoxFh2c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:9d:36:67:5b:ec:17:99:40:f5:ca:0b:77:67:c8:70:95:4b:
51:c0:c0:e4:62:9a:5f:c8:8e:f2:67:4e:6d:89:42:ef:12:77:
61:c7:47:55:ca:2c:c3:53:b5:1e:35:d6:d5:95:bd:e3:46:97:
10:83:35:8e:fe:8a:1a:61:a8:43:52:75:64:7b:85:b4:fb:7b:
f3:6c:7f:a0:8d:bf:d3:5d:3f:1e:00:81:46:64:25:82:f2:36:
54:91:4e:94:fd:5c:df:ba:fa:54:f0:a2:ba:a9:18:ae:34:99:
56:1a:19:39:29:23:9f:4e:3c:f9:23:b5:93:50:f4:74:55:b0:
27:9d:1c:90:3c:63:43:9e:f3:17:ee:32:b6:6e:f7:2c:a0:c7:
ba:c7:e8:f6:87:8e:f3:64:d8:23:09:fd:b6:0b:3b:c7:fb:73:
bf:e8:c3:f3:32:b3:f8:6d:28:53:33:9c:20:8d:a9:5c:9f:4c:
f2:5c:4b:da:fc:aa:a8:c6:15:34:43:61:d9:a4:b5:28:55:5f:
b3:0b:bd:f4:0a:be:88:72:a4:a8:fc:b4:98:5d:75:c9:6b:c5:
f0:8d:31:4f:db:1e:0a:ed:11:0e:f7:60:0f:3e:4c:62:b8:5e:
12:6c:27:5e:a2:67:2a:07:48:29:72:68:17:e0:ea:65:b5:ca:
07:f4:61:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:45:50 2026 by rpki-client