Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3a/21dee2-29d7-4dad-beb9-2b226a23406a/1/T4EisJRezMsfL7mRL72GqgSmGYc.mft
File: T4EisJRezMsfL7mRL72GqgSmGYc.mft (raw, json)
Hash identifier: RQSVEoUJZerkR5uHW9bDUE2jDUWktO2WvjFCKD/BUE8=
Subject key identifier: 34:A6:A7:63:F7:94:5A:FC:23:63:50:1E:5D:A5:63:82:30:CC:5B:E4
Authority key identifier: 4F:81:22:B0:94:5E:CC:CB:1F:2F:B9:91:2F:BD:86:AA:04:A6:19:87
Certificate issuer: /CN=4f8122b0945ecccb1f2fb9912fbd86aa04a61987
Certificate serial: 01A119072FF2FC154FC43FB5B2EB994CE448
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T4EisJRezMsfL7mRL72GqgSmGYc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/21dee2-29d7-4dad-beb9-2b226a23406a/1/T4EisJRezMsfL7mRL72GqgSmGYc.mft
Manifest number: 1A91
Signing time: Thu 08 Oct 2026 01:01:03 +0000
Manifest this update: Thu 08 Oct 2026 01:01:03 +0000
Manifest next update: Fri 09 Oct 2026 01:01:03 +0000
Files and hashes: 1: QTRMtFoOW3Na9Q55kjNuxm41uuE.roa (hash: pLBNua0p1PO6zDb7MzcwoLxSSVrUFoLKBy/Xu8ILddg=)
2: T4EisJRezMsfL7mRL72GqgSmGYc.crl (hash: HWpCdOPQRyFZOHHNVuh0t0nyaStY7OZEemhNM77mAw4=)
3: Unh6jdcSJxudNFyv1JxZ0OwDByI.roa (hash: ZP3ianjjsAEeUKwTMzmvqvt0Yzwm5Qrx7Exl6hWMZbI=)
4: uulI6ExTJtP3irGdM2S5HIHQNgA.roa (hash: dOSl4h1kgdktrCS2a2Neg4UQzObDt3tKhXAVO/T4UEs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/21dee2-29d7-4dad-beb9-2b226a23406a/1/T4EisJRezMsfL7mRL72GqgSmGYc.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/21dee2-29d7-4dad-beb9-2b226a23406a/1/T4EisJRezMsfL7mRL72GqgSmGYc.mft
rsync://rpki.ripe.net/repository/DEFAULT/T4EisJRezMsfL7mRL72GqgSmGYc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 01:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:19:07:2f:f2:fc:15:4f:c4:3f:b5:b2:eb:99:4c:e4:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f8122b0945ecccb1f2fb9912fbd86aa04a61987
Validity
Not Before: Oct 8 01:01:03 2026 GMT
Not After : Oct 9 01:01:03 2026 GMT
Subject: CN=34a6a763f7945afc2363501e5da5638230cc5be4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:f5:69:8d:7c:a0:4c:0b:68:5f:8e:c8:e3:07:
b4:0c:c8:ac:53:4c:87:49:d3:04:7b:c9:26:f5:58:
7e:28:96:7d:7f:1c:57:7c:a2:d7:31:06:de:76:5c:
89:01:3e:a7:4e:ec:c4:ff:10:c6:10:b5:80:0f:25:
f8:9f:ba:73:4e:b8:20:2d:84:c1:be:d5:5c:5d:57:
ac:cc:20:ed:15:16:d9:ab:9c:7e:77:6f:45:ce:c7:
c9:69:bb:02:b5:9f:d3:5d:a4:54:4c:50:d5:02:c5:
1a:1e:29:27:5d:38:b3:be:93:8e:78:40:2d:ef:68:
1a:1c:a3:8c:f5:d7:4c:29:6b:2e:63:45:1b:fa:2f:
26:0c:de:b7:18:dd:92:77:0d:db:f3:f4:cf:a7:10:
b6:b0:46:0a:53:10:1d:4e:62:64:ed:ac:72:b8:9b:
87:4b:ca:9f:bd:f7:68:bd:5a:0e:9a:eb:e4:88:29:
b2:97:06:25:30:59:6b:2a:76:23:65:c1:61:40:a6:
c4:0a:ae:a9:53:3a:bf:38:4a:f7:7b:7b:14:84:8a:
0b:7c:41:42:75:a8:b6:b8:9a:1f:35:e9:4a:39:cf:
c7:a2:ac:46:29:5c:78:f1:1c:c5:15:80:4d:77:23:
ab:e3:42:a0:b5:17:fc:80:f7:e2:4f:90:22:35:8c:
44:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:A6:A7:63:F7:94:5A:FC:23:63:50:1E:5D:A5:63:82:30:CC:5B:E4
X509v3 Authority Key Identifier:
keyid:4F:81:22:B0:94:5E:CC:CB:1F:2F:B9:91:2F:BD:86:AA:04:A6:19:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T4EisJRezMsfL7mRL72GqgSmGYc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/21dee2-29d7-4dad-beb9-2b226a23406a/1/T4EisJRezMsfL7mRL72GqgSmGYc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/21dee2-29d7-4dad-beb9-2b226a23406a/1/T4EisJRezMsfL7mRL72GqgSmGYc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:17:fe:53:35:cd:8f:94:93:c1:7f:d3:dd:94:e8:a8:da:3f:
ad:78:f5:67:78:5e:5f:f0:a1:ff:35:fd:ab:15:7a:59:af:c9:
a1:db:8e:19:7d:4c:8a:6d:ac:65:7f:e8:e3:1c:cf:af:1e:a5:
4c:d9:17:6d:32:a1:ee:1e:d9:32:90:49:e5:24:ba:98:9d:bc:
e0:9c:9a:00:e6:2c:7a:c9:f3:70:3d:72:9d:52:19:22:e5:f4:
3e:97:a6:d3:a4:a6:cf:66:3e:c0:12:f7:c7:d2:d3:b0:59:0f:
52:ba:6d:f7:49:26:ca:59:71:46:f4:c0:d4:74:d7:6b:68:c7:
5f:40:21:f8:9f:52:43:d5:5a:98:0d:88:8e:46:c8:aa:1f:8b:
56:cf:95:a4:e9:ee:e1:70:b0:a3:c6:e3:64:41:47:c5:29:82:
18:3f:f2:4e:6c:17:e0:dd:d5:27:0b:6d:50:ab:af:d1:02:6b:
d8:05:17:08:a9:54:6d:8d:41:83:b5:34:48:4e:65:55:ea:60:
a5:b1:63:6e:66:51:33:d7:69:e3:4b:0f:f9:2c:8c:d0:75:11:
fe:b2:2b:0a:e0:ad:81:a8:1d:f0:5b:93:12:23:86:a9:8b:4b:
ea:f5:f6:81:ab:e7:80:e4:09:f1:5a:73:46:8e:25:65:fb:70:
cb:5f:9a:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 10:55:48 2026 by rpki-client