Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/21dee2-29d7-4dad-beb9-2b226a23406a/1/T4EisJRezMsfL7mRL72GqgSmGYc.mft
File: T4EisJRezMsfL7mRL72GqgSmGYc.mft (raw, json)
Hash identifier: Rgh2ldVL9/cpHOsoiG52Xc+93ftKNJoJnwhdxQFSyf0=
Subject key identifier: 80:65:22:8A:90:35:5A:62:95:73:2C:0C:AB:A4:6D:8B:E0:F8:ED:33
Authority key identifier: 4F:81:22:B0:94:5E:CC:CB:1F:2F:B9:91:2F:BD:86:AA:04:A6:19:87
Certificate issuer: /CN=4f8122b0945ecccb1f2fb9912fbd86aa04a61987
Certificate serial: 019D38D2E8E754E083F8A2E2F2FFF5712000
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T4EisJRezMsfL7mRL72GqgSmGYc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/21dee2-29d7-4dad-beb9-2b226a23406a/1/T4EisJRezMsfL7mRL72GqgSmGYc.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 09:00:39 +0000
Manifest this update: Sun 29 Mar 2026 09:00:39 +0000
Manifest next update: Mon 30 Mar 2026 09:00:39 +0000
Files and hashes: 1: T4EisJRezMsfL7mRL72GqgSmGYc.crl (hash: 2SNvs4qAuTQ4lB+tipMzVbCyuNw2JYcCaYncG1c/qFk=)
2: uulI6ExTJtP3irGdM2S5HIHQNgA.roa (hash: dOSl4h1kgdktrCS2a2Neg4UQzObDt3tKhXAVO/T4UEs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/21dee2-29d7-4dad-beb9-2b226a23406a/1/T4EisJRezMsfL7mRL72GqgSmGYc.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/21dee2-29d7-4dad-beb9-2b226a23406a/1/T4EisJRezMsfL7mRL72GqgSmGYc.mft
rsync://rpki.ripe.net/repository/DEFAULT/T4EisJRezMsfL7mRL72GqgSmGYc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:e8:e7:54:e0:83:f8:a2:e2:f2:ff:f5:71:20:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f8122b0945ecccb1f2fb9912fbd86aa04a61987
Validity
Not Before: Mar 29 09:00:39 2026 GMT
Not After : Mar 30 09:00:39 2026 GMT
Subject: CN=8065228a90355a6295732c0caba46d8be0f8ed33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:42:d6:01:cf:c6:41:cd:b6:13:6e:eb:47:a8:
6d:af:eb:c4:f6:dd:ef:eb:e2:0a:93:80:b0:3b:73:
8a:c2:e2:4e:99:04:78:a7:0a:85:21:52:15:86:5c:
3e:5f:23:3d:ed:62:fe:cb:5c:7e:a1:43:82:23:98:
a4:76:3d:50:93:05:0a:80:dc:cd:aa:95:65:b8:21:
b5:88:35:d8:9f:b0:a3:c5:07:16:4d:ac:ee:97:56:
bb:5e:6b:31:1a:73:0c:b8:ef:8d:17:cd:d2:03:67:
ea:d2:bb:af:6a:82:45:f5:a2:d5:ef:11:22:91:2c:
5b:e1:0c:ed:f3:b1:fd:ba:cb:8c:d7:5a:c6:9c:2f:
b3:5b:66:ec:ae:92:7e:59:00:bf:eb:b4:ab:86:81:
46:90:84:84:ab:c8:50:3a:e1:0e:e3:d4:e7:27:2d:
44:08:9b:2d:27:95:e7:f2:b3:68:be:5e:5b:8d:d0:
18:34:ac:b7:94:80:5f:f3:4b:b5:a4:4b:a2:c5:df:
3f:19:e9:af:db:ca:bb:7d:2c:20:f3:f6:38:e5:3c:
2b:71:75:85:72:5f:f2:a6:2a:8f:41:d8:f3:0c:b9:
3b:14:db:88:d9:73:d4:4e:67:d9:be:70:e6:1b:01:
45:00:26:89:8d:be:22:4e:3f:13:3d:d5:99:f2:23:
8d:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:65:22:8A:90:35:5A:62:95:73:2C:0C:AB:A4:6D:8B:E0:F8:ED:33
X509v3 Authority Key Identifier:
keyid:4F:81:22:B0:94:5E:CC:CB:1F:2F:B9:91:2F:BD:86:AA:04:A6:19:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T4EisJRezMsfL7mRL72GqgSmGYc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/21dee2-29d7-4dad-beb9-2b226a23406a/1/T4EisJRezMsfL7mRL72GqgSmGYc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/21dee2-29d7-4dad-beb9-2b226a23406a/1/T4EisJRezMsfL7mRL72GqgSmGYc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:c9:55:ea:61:09:68:2b:f4:8b:6c:6c:76:ca:18:46:2c:7c:
f9:5e:f0:e8:1c:30:a6:42:48:51:49:5a:17:f7:b4:80:35:96:
87:62:4d:b7:be:b7:c4:f7:12:7d:09:ef:1c:4e:4a:aa:00:ff:
e1:12:41:98:81:e1:b8:92:13:ba:c1:ed:6a:c7:b7:75:ca:3b:
01:f8:4b:46:8e:19:f8:b1:0a:8b:b5:59:f4:a1:f2:e3:c3:c5:
43:8a:f4:e8:47:09:fd:4a:3c:81:e3:98:6d:b1:38:9c:73:3b:
9b:6c:21:a9:aa:b0:16:fe:c7:66:22:3e:82:c9:ac:9a:31:ac:
0d:28:4a:0c:ad:23:91:b3:0e:24:b6:cf:3a:79:e6:71:65:27:
b9:2d:02:46:cc:48:58:9c:03:f0:3b:12:83:1f:02:7f:8a:f0:
b5:c1:45:e8:77:f2:01:6b:ec:c8:99:c8:82:f7:b9:8a:1f:9d:
54:6f:2d:51:e6:c1:cf:72:5e:52:50:a6:53:94:d9:fb:ff:52:
a9:91:58:75:8e:01:c1:d6:fd:e2:58:3d:b5:cf:a5:fe:e4:3d:
7f:6e:73:c4:f9:e5:5b:32:85:a1:3f:d0:c1:26:73:07:86:46:
fd:91:fd:6a:31:eb:cb:b7:1a:2a:3b:21:2f:b7:9d:e9:12:0b:
2f:f1:51:bd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ040ujnVOCD+KLi8v/1cSAAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmODEyMmIwOTQ1ZWNjY2IxZjJmYjk5MTJmYmQ4NmFhMDRh
NjE5ODcwHhcNMjYwMzI5MDkwMDM5WhcNMjYwMzMwMDkwMDM5WjAzMTEwLwYDVQQD
Eyg4MDY1MjI4YTkwMzU1YTYyOTU3MzJjMGNhYmE0NmQ4YmUwZjhlZDMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArULWAc/GQc22E27rR6htr+vE9t3v
6+IKk4CwO3OKwuJOmQR4pwqFIVIVhlw+XyM97WL+y1x+oUOCI5ikdj1QkwUKgNzN
qpVluCG1iDXYn7CjxQcWTazul1a7XmsxGnMMuO+NF83SA2fq0ruvaoJF9aLV7xEi
kSxb4Qzt87H9usuM11rGnC+zW2bsrpJ+WQC/67SrhoFGkISEq8hQOuEO49TnJy1E
CJstJ5Xn8rNovl5bjdAYNKy3lIBf80u1pEuixd8/Gemv28q7fSwg8/Y45TwrcXWF
cl/ypiqPQdjzDLk7FNuI2XPUTmfZvnDmGwFFACaJjb4iTj8TPdWZ8iONDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIBlIoqQNVpilXMsDKukbYvg+O0zMB8GA1UdIwQY
MBaAFE+BIrCUXszLHy+5kS+9hqoEphmHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDRFaXNKUmV6TXNmTDdtUkw3MkdxZ1NtR1ljLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS8yMWRlZTItMjlkNy00ZGFkLWJlYjkt
MmIyMjZhMjM0MDZhLzEvVDRFaXNKUmV6TXNmTDdtUkw3MkdxZ1NtR1ljLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYS8yMWRlZTItMjlkNy00ZGFkLWJlYjktMmIyMjZhMjM0MDZh
LzEvVDRFaXNKUmV6TXNmTDdtUkw3MkdxZ1NtR1ljLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf8lV6mEJ
aCv0i2xsdsoYRix8+V7w6BwwpkJIUUlaF/e0gDWWh2JNt763xPcSfQnvHE5KqgD/
4RJBmIHhuJITusHtase3dco7AfhLRo4Z+LEKi7VZ9KHy48PFQ4r06EcJ/Uo8geOY
bbE4nHM7m2whqaqwFv7HZiI+gsmsmjGsDShKDK0jkbMOJLbPOnnmcWUnuS0CRsxI
WJwD8DsSgx8Cf4rwtcFF6HfyAWvsyJnIgve5ih+dVG8tUebBz3JeUlCmU5TZ+/9S
qZFYdY4Bwdb94lg9tc+l/uQ9f25zxPnlWzKFoT/QwSZzB4ZG/ZH9ajHry7caKjsh
L7ed6RILL/FRvQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 14:54:36 2026 by rpki-client