Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/836431-b90d-4a98-be2c-955f5cb09893/1/t4cfKQ__DgQmDGdT44fJ77db4pY.mft
File: t4cfKQ__DgQmDGdT44fJ77db4pY.mft (raw, json)
Hash identifier: wbUt6K7H4aCYhH077GzkDwXicJsTWX+5Yu31MtyiLG4=
Subject key identifier: 68:DF:08:18:7E:8E:42:FB:DC:A7:45:81:F4:37:A8:C9:15:3A:04:0D
Authority key identifier: B7:87:1F:29:0F:FF:0E:04:26:0C:67:53:E3:87:C9:EF:B7:5B:E2:96
Certificate issuer: /CN=b7871f290fff0e04260c6753e387c9efb75be296
Certificate serial: 019D375260CA9F39D1F194372F3AA8768178
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t4cfKQ__DgQmDGdT44fJ77db4pY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/836431-b90d-4a98-be2c-955f5cb09893/1/t4cfKQ__DgQmDGdT44fJ77db4pY.mft
Manifest number: 013A
Signing time: Sun 29 Mar 2026 02:00:38 +0000
Manifest this update: Sun 29 Mar 2026 02:00:38 +0000
Manifest next update: Mon 30 Mar 2026 02:00:38 +0000
Files and hashes: 1: Erb818ffjnKFyiFLXrdFbiFYOSI.roa (hash: Olz1fwb3G3mD1eaDlk7aaaY6S5htT2DXXobUdGYkCz4=)
2: t4cfKQ__DgQmDGdT44fJ77db4pY.crl (hash: UKDnDS4pOHuRsDRBQuviCKj/ARpYUukz4FJ2yeqnHlU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/836431-b90d-4a98-be2c-955f5cb09893/1/t4cfKQ__DgQmDGdT44fJ77db4pY.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/836431-b90d-4a98-be2c-955f5cb09893/1/t4cfKQ__DgQmDGdT44fJ77db4pY.mft
rsync://rpki.ripe.net/repository/DEFAULT/t4cfKQ__DgQmDGdT44fJ77db4pY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:60:ca:9f:39:d1:f1:94:37:2f:3a:a8:76:81:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7871f290fff0e04260c6753e387c9efb75be296
Validity
Not Before: Mar 29 02:00:38 2026 GMT
Not After : Mar 30 02:00:38 2026 GMT
Subject: CN=68df08187e8e42fbdca74581f437a8c9153a040d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:69:cb:05:98:89:69:a6:55:4e:0b:45:54:de:
56:c3:39:8f:bb:c6:4c:03:ed:80:e1:e3:5b:71:72:
e8:cc:d9:51:c6:da:b3:78:3e:1c:80:aa:ae:73:8b:
3c:08:6d:ef:c4:1b:a4:e0:ea:fa:da:29:14:b8:33:
71:ac:95:3e:33:d8:65:a8:f6:23:1a:e5:c8:de:86:
c3:6f:f9:86:09:3d:47:00:6e:e6:98:21:6c:b4:79:
c2:67:56:7c:15:6a:e4:53:b1:b8:77:fd:0b:5d:7d:
26:77:b3:27:69:4c:70:96:0d:13:67:b9:31:f4:d4:
67:3e:34:46:54:31:bc:fc:84:df:c4:78:8a:ec:0b:
eb:89:ad:f5:ba:6c:51:6b:ef:87:ba:bb:a4:3f:78:
fa:b6:b0:6c:16:db:9a:a8:47:6e:9b:57:73:a8:39:
41:b9:cf:48:4d:10:31:18:ae:fa:11:2c:93:24:a9:
97:88:31:23:ab:56:d9:14:a8:9f:a9:cd:1f:49:87:
42:ed:2d:dd:74:dc:c7:2a:01:7e:06:ce:1f:10:e8:
86:d9:fe:bc:c7:48:58:0f:8d:c2:31:97:89:a6:f4:
3d:c8:66:68:75:d1:11:e7:88:7c:13:89:75:15:f9:
dc:79:91:26:42:89:7a:e8:ec:98:7d:de:bb:33:47:
ec:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:DF:08:18:7E:8E:42:FB:DC:A7:45:81:F4:37:A8:C9:15:3A:04:0D
X509v3 Authority Key Identifier:
keyid:B7:87:1F:29:0F:FF:0E:04:26:0C:67:53:E3:87:C9:EF:B7:5B:E2:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t4cfKQ__DgQmDGdT44fJ77db4pY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/836431-b90d-4a98-be2c-955f5cb09893/1/t4cfKQ__DgQmDGdT44fJ77db4pY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/836431-b90d-4a98-be2c-955f5cb09893/1/t4cfKQ__DgQmDGdT44fJ77db4pY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:2d:3e:86:83:a6:ce:70:da:75:15:c7:30:44:c7:1f:5c:19:
8a:01:8e:ac:4c:dc:b1:e7:12:38:06:46:59:13:71:c2:8b:57:
02:e7:6d:78:bb:27:ed:5c:65:4a:5a:cb:98:2a:87:bf:1f:3b:
e2:fc:14:8e:11:f3:0d:dd:ce:f2:74:d6:14:5d:7a:a8:6e:5b:
0d:30:e6:28:78:2b:49:d4:1f:a6:b3:b5:2f:fd:a5:86:1e:18:
82:80:80:8c:1e:be:64:40:b5:6b:c6:b8:8a:60:20:02:82:bd:
f7:10:01:b2:f3:f4:22:92:72:93:9f:53:ce:0a:76:52:03:b3:
d9:2c:eb:d9:6e:49:8d:fe:86:ec:f7:a7:85:e9:6c:45:2a:4b:
2c:88:52:37:af:8c:f6:0a:15:18:1e:38:62:b3:f6:48:68:ce:
83:4b:ec:63:b4:62:8a:73:ef:11:59:b8:6e:99:73:68:9d:7a:
2d:1c:88:4b:e7:18:82:ee:a2:46:75:09:2c:e4:9b:d4:22:33:
8e:60:31:52:b0:e2:43:93:e4:52:5b:cb:ab:2b:0e:aa:11:9d:
e2:3f:8e:3d:c8:e7:eb:20:1a:a9:70:74:60:00:cd:7c:d3:ae:
05:0b:7e:a4:26:e2:76:53:7b:e6:71:7a:31:d4:65:53:d4:17:
c1:47:1c:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:32:01 2026 by rpki-client