Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/21dee2-29d7-4dad-beb9-2b226a23406a/1/T4EisJRezMsfL7mRL72GqgSmGYc.mft
File: T4EisJRezMsfL7mRL72GqgSmGYc.mft (raw, json)
Hash identifier: +4k7wPdc6BpV+GshHSUW5KlYmEoJOCMx0GM6BIp660A=
Subject key identifier: F2:1C:37:0F:1E:30:8B:6F:F5:F2:50:8D:03:A3:73:D8:27:BA:2D:CA
Authority key identifier: 4F:81:22:B0:94:5E:CC:CB:1F:2F:B9:91:2F:BD:86:AA:04:A6:19:87
Certificate issuer: /CN=4f8122b0945ecccb1f2fb9912fbd86aa04a61987
Certificate serial: 019FFBA545CF4C84A0D75DD8CDD4CEDA810B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T4EisJRezMsfL7mRL72GqgSmGYc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/21dee2-29d7-4dad-beb9-2b226a23406a/1/T4EisJRezMsfL7mRL72GqgSmGYc.mft
Manifest number: 19FD
Signing time: Thu 13 Aug 2026 15:02:20 +0000
Manifest this update: Thu 13 Aug 2026 15:02:20 +0000
Manifest next update: Fri 14 Aug 2026 15:02:20 +0000
Files and hashes: 1: T4EisJRezMsfL7mRL72GqgSmGYc.crl (hash: dhxhew5zwXFrUGYxZssoU3uzOQ7Mo1zjI4wdD25vKkM=)
2: uulI6ExTJtP3irGdM2S5HIHQNgA.roa (hash: dOSl4h1kgdktrCS2a2Neg4UQzObDt3tKhXAVO/T4UEs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/21dee2-29d7-4dad-beb9-2b226a23406a/1/T4EisJRezMsfL7mRL72GqgSmGYc.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/21dee2-29d7-4dad-beb9-2b226a23406a/1/T4EisJRezMsfL7mRL72GqgSmGYc.mft
rsync://rpki.ripe.net/repository/DEFAULT/T4EisJRezMsfL7mRL72GqgSmGYc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 15:02:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:fb:a5:45:cf:4c:84:a0:d7:5d:d8:cd:d4:ce:da:81:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f8122b0945ecccb1f2fb9912fbd86aa04a61987
Validity
Not Before: Aug 13 15:02:20 2026 GMT
Not After : Aug 14 15:02:20 2026 GMT
Subject: CN=f21c370f1e308b6ff5f2508d03a373d827ba2dca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:da:f3:bf:c1:a0:7b:9f:22:ca:17:c1:35:c9:
56:db:bf:97:ce:11:e5:5c:e2:17:25:11:d5:f2:76:
af:9e:2b:84:00:9d:db:6f:81:c6:be:24:48:95:c2:
df:99:cc:73:9c:66:5e:e1:7e:f5:86:27:91:9b:a7:
71:d3:e2:39:97:2f:d5:94:d7:f3:32:74:0e:b0:d3:
37:4c:66:4d:a3:69:f5:91:3e:06:ea:e1:98:d6:3c:
ad:6d:97:06:4d:34:ff:d1:bb:a2:b1:e3:18:55:bc:
38:5e:19:d6:40:63:f0:1b:a8:20:24:1e:1e:e9:ac:
5b:49:6c:cb:56:b8:f7:2b:30:71:47:6f:39:d4:09:
c7:f7:64:a7:13:51:69:e2:53:88:43:49:d3:0f:6e:
0a:ca:55:0b:94:9d:3d:ed:c1:48:fa:ed:c5:04:fe:
2b:c8:e2:8e:35:c8:1d:a3:39:c4:75:5a:d8:45:40:
0a:89:c6:15:fd:73:f3:b3:e6:76:12:66:c7:83:21:
e6:dc:95:cd:b5:82:7c:bc:7e:01:0c:fa:3e:45:c9:
5f:e9:5d:61:63:42:ec:e3:ed:46:f6:f8:64:30:53:
68:03:a3:4f:ec:ac:32:06:0e:8b:9c:6f:47:e3:8b:
af:23:a2:65:27:19:4e:fd:b3:3c:c7:53:cc:8f:1f:
58:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:1C:37:0F:1E:30:8B:6F:F5:F2:50:8D:03:A3:73:D8:27:BA:2D:CA
X509v3 Authority Key Identifier:
keyid:4F:81:22:B0:94:5E:CC:CB:1F:2F:B9:91:2F:BD:86:AA:04:A6:19:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T4EisJRezMsfL7mRL72GqgSmGYc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/21dee2-29d7-4dad-beb9-2b226a23406a/1/T4EisJRezMsfL7mRL72GqgSmGYc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/21dee2-29d7-4dad-beb9-2b226a23406a/1/T4EisJRezMsfL7mRL72GqgSmGYc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:58:0d:be:d7:38:ac:f2:8c:48:60:42:d3:b3:99:89:e0:84:
ee:f8:99:83:55:07:b5:3e:55:d9:f9:80:a3:39:59:61:ee:db:
64:1d:8b:03:fe:67:d9:1a:2f:65:37:75:a4:ec:4f:ef:56:20:
c0:1c:15:c3:28:93:35:4e:aa:eb:0c:ea:97:be:0c:41:19:87:
40:99:4d:e6:80:1c:bd:c6:16:ab:65:38:39:63:df:9d:b7:b0:
80:e1:f1:ec:87:52:e3:9a:72:10:d9:51:25:43:45:57:d9:ce:
c4:9f:42:23:27:62:ab:5e:42:12:9c:5b:eb:94:b5:9d:b6:b6:
95:91:27:6d:2b:76:4e:04:49:a5:3a:19:2a:31:c2:92:48:9a:
f6:39:e7:5c:35:15:20:17:bc:0a:7e:56:a3:d2:e3:50:53:06:
89:3c:34:f3:71:8d:a7:57:06:46:5c:ef:b6:39:ee:91:08:7e:
6e:65:21:92:27:86:c2:c7:e6:ca:15:5b:73:b3:29:60:fb:83:
81:fc:5b:82:64:b5:2a:bf:a2:3a:1f:a8:2c:64:8e:62:d5:9e:
21:7b:d1:ca:99:5e:49:05:83:00:d8:4c:8b:4c:e5:4a:bd:a1:
dc:4c:78:9d:15:27:d7:d4:17:01:92:f9:7c:88:87:90:aa:e0:
7d:e1:39:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 17:11:57 2026 by rpki-client