Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/42/b8f50e-475f-4b47-85c0-5f123555cfb1/1/T-uUV-xRnoI3hncQvMgvow6uZ8A.mft
File: T-uUV-xRnoI3hncQvMgvow6uZ8A.mft (raw, json)
Hash identifier: KFCIw4bthfMjs0fx/BCY7bAut2eztsSLmUbL0KoeFCk=
Subject key identifier: 70:E4:60:7F:5A:43:E0:07:FC:05:84:62:22:F3:52:DB:D5:41:63:72
Authority key identifier: 4F:EB:94:57:EC:51:9E:82:37:86:77:10:BC:C8:2F:A3:0E:AE:67:C0
Certificate issuer: /CN=4feb9457ec519e8237867710bcc82fa30eae67c0
Certificate serial: 01A139A478D4AE00AC850A9746CA669349A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T-uUV-xRnoI3hncQvMgvow6uZ8A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/b8f50e-475f-4b47-85c0-5f123555cfb1/1/T-uUV-xRnoI3hncQvMgvow6uZ8A.mft
Manifest number: 1AA2
Signing time: Wed 14 Oct 2026 09:00:42 +0000
Manifest this update: Wed 14 Oct 2026 09:00:42 +0000
Manifest next update: Thu 15 Oct 2026 09:00:42 +0000
Files and hashes: 1: T-uUV-xRnoI3hncQvMgvow6uZ8A.crl (hash: F1yGpX3ru2ZLwpbZzlsaV5Mi7KjNuqE2wVf/wwN357k=)
2: YrHkJUDzzHYV4NSM8kuc3mWA3No.roa (hash: XN+H9pEw3/RHdNbn4FFCp9WEa3ViQ6Ir6r897iLElR0=)
3: eczTTw63Z89Bvx_PDTMEgnxlsuM.roa (hash: EGjQDsuLjtgXMDaJKqFFVXP8wORi9rfRbOBnhjq8cf8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/b8f50e-475f-4b47-85c0-5f123555cfb1/1/T-uUV-xRnoI3hncQvMgvow6uZ8A.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/b8f50e-475f-4b47-85c0-5f123555cfb1/1/T-uUV-xRnoI3hncQvMgvow6uZ8A.mft
rsync://rpki.ripe.net/repository/DEFAULT/T-uUV-xRnoI3hncQvMgvow6uZ8A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 09:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:39:a4:78:d4:ae:00:ac:85:0a:97:46:ca:66:93:49:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4feb9457ec519e8237867710bcc82fa30eae67c0
Validity
Not Before: Oct 14 09:00:42 2026 GMT
Not After : Oct 15 09:00:42 2026 GMT
Subject: CN=70e4607f5a43e007fc05846222f352dbd5416372
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:4a:1b:a5:df:ea:71:b3:ba:f9:31:94:5a:4d:
86:32:60:52:56:c0:bd:c1:06:f7:57:02:76:e5:74:
9e:fe:a0:ef:d8:92:7c:db:62:61:52:d0:b9:20:37:
c2:cf:04:10:c5:6a:ca:33:ac:0b:ac:d3:0b:e9:55:
bd:f5:9c:7f:81:21:0a:e8:d5:1d:e9:f7:a8:43:bd:
1a:b9:46:16:df:d4:47:3f:9d:61:58:ac:4e:de:d2:
6f:19:66:d1:a4:c0:dd:3c:3d:14:d1:29:5e:11:02:
e9:fe:a7:89:40:c4:b2:ff:6d:11:9f:eb:49:bf:5c:
4e:c2:56:3b:cb:ed:31:e0:76:14:bb:8e:9a:48:31:
0c:57:5d:cf:dd:14:0b:bd:e9:dc:c3:f3:d2:49:26:
e3:f0:89:64:82:f9:cf:89:b6:d8:6c:94:99:60:cb:
f2:2a:65:18:5a:51:40:0f:f3:62:bf:f4:2b:af:52:
a0:c8:26:25:e4:3c:c6:da:c9:8a:3e:ed:3b:a7:af:
b9:2c:97:2a:5f:b6:30:f3:04:df:39:1f:6c:b4:70:
d6:9d:48:d1:e9:2d:5e:0b:d6:58:3e:fe:9e:86:82:
f2:3d:fe:1d:64:b8:56:57:01:4c:7e:b0:07:c0:4e:
9a:06:c5:13:af:55:bf:7e:77:0e:bf:5a:a4:f3:82:
08:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:E4:60:7F:5A:43:E0:07:FC:05:84:62:22:F3:52:DB:D5:41:63:72
X509v3 Authority Key Identifier:
keyid:4F:EB:94:57:EC:51:9E:82:37:86:77:10:BC:C8:2F:A3:0E:AE:67:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T-uUV-xRnoI3hncQvMgvow6uZ8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/b8f50e-475f-4b47-85c0-5f123555cfb1/1/T-uUV-xRnoI3hncQvMgvow6uZ8A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/b8f50e-475f-4b47-85c0-5f123555cfb1/1/T-uUV-xRnoI3hncQvMgvow6uZ8A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:0c:dc:56:bf:5f:ab:2d:b3:8c:bd:37:44:8e:f9:96:3c:d6:
1f:ea:58:6d:19:10:63:5e:72:0f:10:9c:c5:6c:c8:01:13:fe:
be:ea:b5:cd:99:ba:1b:7f:e9:d7:21:6a:b8:ee:ed:f4:c4:37:
e3:af:74:c8:b9:9e:be:e5:ea:8d:98:21:97:4d:41:db:99:bc:
6c:fa:df:e0:bc:61:b1:24:00:25:50:5e:f6:aa:b3:81:ed:46:
13:83:da:a5:31:7b:37:9d:ed:da:dc:d7:fb:83:d4:e7:ef:ea:
69:a3:96:f2:4b:ff:09:c8:b7:7c:b4:99:de:94:22:a9:ce:21:
0b:00:7a:81:37:0c:65:13:0d:2f:a5:fc:29:47:4a:62:95:3f:
be:4e:1d:ab:32:19:97:89:38:ff:a3:b0:b5:82:b7:8d:e7:fe:
af:04:aa:dd:46:61:c1:96:74:07:74:e9:1c:38:bb:73:d3:87:
37:a6:90:13:4a:25:ff:ba:6c:f6:30:9e:56:87:01:4f:1f:7e:
a9:b9:34:b6:ba:75:31:33:f1:26:0d:9f:4d:e3:49:a4:24:50:
17:bf:fb:a8:8b:27:a7:d6:96:ac:4a:17:84:b1:b9:4c:ee:a9:
f7:f6:0f:db:90:ec:09:36:52:42:22:e8:df:f0:0f:07:08:e9:
41:a8:6f:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 20:31:55 2026 by rpki-client