Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/836431-b90d-4a98-be2c-955f5cb09893/1/t4cfKQ__DgQmDGdT44fJ77db4pY.mft
File: t4cfKQ__DgQmDGdT44fJ77db4pY.mft (raw, json)
Hash identifier: oxLKNREkVaqCNUFhBlEX/WoZY4E0woQeI6MKkXZkhWQ=
Subject key identifier: DC:A9:12:03:DA:48:CB:77:67:99:D7:C1:24:85:F2:A7:EB:DD:AA:D0
Authority key identifier: B7:87:1F:29:0F:FF:0E:04:26:0C:67:53:E3:87:C9:EF:B7:5B:E2:96
Certificate issuer: /CN=b7871f290fff0e04260c6753e387c9efb75be296
Certificate serial: 019E28B8BAA9DBB1694C4FB3C48F76BD305F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t4cfKQ__DgQmDGdT44fJ77db4pY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/836431-b90d-4a98-be2c-955f5cb09893/1/t4cfKQ__DgQmDGdT44fJ77db4pY.mft
Manifest number: 01B8
Signing time: Thu 14 May 2026 23:00:55 +0000
Manifest this update: Thu 14 May 2026 23:00:55 +0000
Manifest next update: Fri 15 May 2026 23:00:55 +0000
Files and hashes: 1: 3zIrc0aWYxX9dKMnCfOMwQPa5t8.asa (hash: cnCGcJrQuR05fmoh1KvgU/rA+KkWRXV4v1npDlI9OnU=)
2: Erb818ffjnKFyiFLXrdFbiFYOSI.roa (hash: Olz1fwb3G3mD1eaDlk7aaaY6S5htT2DXXobUdGYkCz4=)
3: t4cfKQ__DgQmDGdT44fJ77db4pY.crl (hash: tc5NDB1/W7rb5zKKAMUXKHrkwKdZX/oOnYz6KdrYmkg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/836431-b90d-4a98-be2c-955f5cb09893/1/t4cfKQ__DgQmDGdT44fJ77db4pY.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/836431-b90d-4a98-be2c-955f5cb09893/1/t4cfKQ__DgQmDGdT44fJ77db4pY.mft
rsync://rpki.ripe.net/repository/DEFAULT/t4cfKQ__DgQmDGdT44fJ77db4pY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 15 May 2026 23:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:28:b8:ba:a9:db:b1:69:4c:4f:b3:c4:8f:76:bd:30:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7871f290fff0e04260c6753e387c9efb75be296
Validity
Not Before: May 14 23:00:55 2026 GMT
Not After : May 15 23:00:55 2026 GMT
Subject: CN=dca91203da48cb776799d7c12485f2a7ebddaad0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:cc:57:f8:d9:02:f5:7c:01:8f:bb:d3:45:7c:
a6:46:95:08:95:15:be:53:68:72:70:6a:3d:e4:06:
2a:68:eb:2d:85:57:17:c8:83:38:17:6f:e2:9d:f8:
c5:9b:73:7a:96:48:3e:5f:0a:5a:b6:ae:5e:1c:9c:
82:4a:ae:9f:c4:3b:e0:98:24:31:26:96:96:30:d2:
25:21:b0:84:f5:06:79:2c:b4:e7:20:a7:a2:a3:fd:
bf:25:66:d9:81:81:6e:af:75:7b:42:11:a2:df:cb:
30:2a:98:b4:cf:25:23:e6:0d:8e:58:f9:0b:aa:33:
72:b4:8b:c2:84:5c:5d:1d:a2:15:47:88:81:33:08:
b7:32:40:20:12:ce:ec:80:11:18:44:d7:4e:8a:d4:
36:c2:0e:60:d0:9b:66:8c:37:a5:77:cb:61:5c:82:
ed:38:4f:06:48:24:e3:06:52:1b:b3:8e:30:a8:b8:
6b:92:d1:57:50:fd:89:c4:0a:78:de:01:3a:36:01:
90:7b:b6:79:b0:75:20:3b:f1:c9:58:f3:8f:10:68:
74:13:94:bd:95:3c:b4:23:1e:a3:86:68:9e:78:7b:
5d:0d:3e:8e:35:5c:50:ad:d4:12:31:39:ac:23:35:
e1:79:19:e1:69:4f:27:40:16:41:c6:e3:32:03:b7:
5b:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:A9:12:03:DA:48:CB:77:67:99:D7:C1:24:85:F2:A7:EB:DD:AA:D0
X509v3 Authority Key Identifier:
keyid:B7:87:1F:29:0F:FF:0E:04:26:0C:67:53:E3:87:C9:EF:B7:5B:E2:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t4cfKQ__DgQmDGdT44fJ77db4pY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/836431-b90d-4a98-be2c-955f5cb09893/1/t4cfKQ__DgQmDGdT44fJ77db4pY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/836431-b90d-4a98-be2c-955f5cb09893/1/t4cfKQ__DgQmDGdT44fJ77db4pY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:a1:4d:5d:61:1b:1a:35:68:c9:0c:e6:02:88:4f:87:4a:ed:
2a:12:04:38:cc:71:ea:d2:7f:0e:2d:90:a4:b9:e1:b8:a6:28:
b1:30:1f:2a:1d:a3:ac:a7:97:83:cc:8e:60:af:bf:22:1d:46:
d6:82:ac:29:d1:0e:4f:c9:25:36:2d:81:2a:5f:8c:cd:bd:9e:
fe:a2:15:dc:5d:8e:8d:13:7a:80:36:dc:da:58:bb:00:01:49:
b9:0b:b4:f4:16:77:00:66:f3:4f:7d:7e:4c:53:99:6b:37:0c:
a1:a1:93:d3:8d:a7:e4:05:34:82:4a:c5:e1:fa:b3:cc:76:f6:
bf:bd:ec:35:77:10:f8:72:65:fb:25:a2:67:e0:bd:1b:e3:86:
21:dc:ec:c6:5c:12:a6:93:7a:33:aa:b0:38:53:ad:5c:33:b6:
cf:b2:bd:f4:62:a0:16:df:63:d5:8d:1f:b4:07:25:a1:d3:2a:
6f:79:a2:f9:8f:e5:76:22:16:44:02:f8:05:26:4c:8a:96:78:
15:e9:68:a0:84:b8:d1:64:4c:b0:b7:80:de:e5:1a:40:47:83:
fa:8f:f4:65:78:f4:6c:58:76:98:90:72:0c:bc:dd:3d:fa:18:
5c:5a:ff:42:45:46:13:28:a2:83:7e:ba:c6:12:c2:91:df:35:
8f:ce:97:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 06:58:37 2026 by rpki-client