Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/43/836431-b90d-4a98-be2c-955f5cb09893/1/t4cfKQ__DgQmDGdT44fJ77db4pY.mft
File: t4cfKQ__DgQmDGdT44fJ77db4pY.mft (raw, json)
Hash identifier: +6L/Ji0rjOl3uQ1bK17kvw0rVF0rO8/D9MQrZ61kl2s=
Subject key identifier: FB:BC:5D:E8:5D:6B:CA:E1:30:81:42:AE:EA:7A:96:B3:D4:14:B9:F8
Authority key identifier: B7:87:1F:29:0F:FF:0E:04:26:0C:67:53:E3:87:C9:EF:B7:5B:E2:96
Certificate issuer: /CN=b7871f290fff0e04260c6753e387c9efb75be296
Certificate serial: 01A1532DA986A23377CF543F3A22B67289DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t4cfKQ__DgQmDGdT44fJ77db4pY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/836431-b90d-4a98-be2c-955f5cb09893/1/t4cfKQ__DgQmDGdT44fJ77db4pY.mft
Manifest number: 035F
Signing time: Mon 19 Oct 2026 08:01:03 +0000
Manifest this update: Mon 19 Oct 2026 08:01:03 +0000
Manifest next update: Tue 20 Oct 2026 08:01:03 +0000
Files and hashes: 1: WESCbQ3vetqiTu5o3qQFVAH2GuY.asa (hash: 1aiCAFq0XN0g2XFeCxMyN7VVcKHWH+2jHOUYyChhHCQ=)
2: Zs7v1NDx63hWaP0rqC9JgN4viuQ.roa (hash: hVIg73QWwWuqnjCLMmbKJMff3qM/nFL/BxoYDSJaxBw=)
3: t4cfKQ__DgQmDGdT44fJ77db4pY.crl (hash: bRgvtO7PGFSfTQTkrVsqZCWRMIJ9jJKBbTXJWYNWtkU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/836431-b90d-4a98-be2c-955f5cb09893/1/t4cfKQ__DgQmDGdT44fJ77db4pY.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/836431-b90d-4a98-be2c-955f5cb09893/1/t4cfKQ__DgQmDGdT44fJ77db4pY.mft
rsync://rpki.ripe.net/repository/DEFAULT/t4cfKQ__DgQmDGdT44fJ77db4pY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 08:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:53:2d:a9:86:a2:33:77:cf:54:3f:3a:22:b6:72:89:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7871f290fff0e04260c6753e387c9efb75be296
Validity
Not Before: Oct 19 08:01:03 2026 GMT
Not After : Oct 20 08:01:03 2026 GMT
Subject: CN=fbbc5de85d6bcae1308142aeea7a96b3d414b9f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:2f:3b:ce:22:ce:9c:f5:ab:8e:70:92:cb:47:
81:6e:a3:6c:33:d6:bf:c0:41:b7:b9:fa:8d:ce:41:
dd:84:eb:72:56:6d:d8:b4:a3:fc:92:5e:be:42:6e:
8a:bb:09:ea:a1:43:6d:4a:ad:05:50:5c:4a:73:8a:
41:0e:f7:41:ff:94:96:ae:0b:f6:c1:34:4f:f5:d8:
f8:dc:03:84:c6:08:2f:7e:7f:35:66:c2:43:3d:00:
e5:89:ce:1d:68:7a:c9:94:07:ca:09:7d:03:4c:96:
ac:76:50:de:95:5b:6d:29:69:99:26:80:43:84:ed:
5c:1f:62:8a:46:76:95:1d:46:bd:80:fe:22:df:ae:
40:c1:8f:b6:88:5d:d8:f2:9c:bc:68:e8:c6:a2:2c:
b0:c4:5b:54:21:86:31:fa:67:18:01:7a:9c:09:36:
4f:1b:3b:97:f9:da:da:77:31:1c:c7:10:f5:b7:60:
2e:bb:9b:a5:23:08:c2:d8:49:e0:bc:25:22:ea:04:
2a:71:10:f8:19:1d:7f:a0:ca:10:97:23:5f:ff:e2:
b8:6b:23:ab:9d:f9:3c:9d:dd:a2:03:5d:7a:49:86:
18:ef:b7:75:6d:d0:71:26:98:05:f2:4b:bf:72:9f:
a1:b4:3f:e8:9f:3b:03:b4:a6:9b:62:53:4a:9c:4b:
bc:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:BC:5D:E8:5D:6B:CA:E1:30:81:42:AE:EA:7A:96:B3:D4:14:B9:F8
X509v3 Authority Key Identifier:
keyid:B7:87:1F:29:0F:FF:0E:04:26:0C:67:53:E3:87:C9:EF:B7:5B:E2:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t4cfKQ__DgQmDGdT44fJ77db4pY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/836431-b90d-4a98-be2c-955f5cb09893/1/t4cfKQ__DgQmDGdT44fJ77db4pY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/836431-b90d-4a98-be2c-955f5cb09893/1/t4cfKQ__DgQmDGdT44fJ77db4pY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:05:61:20:59:7e:96:ce:0f:60:11:59:9e:ea:0a:2d:e7:d7:
03:f2:9c:43:fa:0a:ac:21:cd:c0:eb:4b:80:d4:4a:18:e6:8f:
c4:c7:29:87:9b:33:7f:c1:b5:fc:a2:dd:69:72:ec:c1:1f:58:
52:4b:49:1a:9d:22:c4:c2:df:b0:a8:c2:11:36:84:ee:94:51:
24:d2:99:a5:40:7e:49:f2:b3:b4:54:3d:cd:c5:7d:1c:88:e3:
0c:70:2a:57:59:d2:89:78:f4:63:4b:66:2d:78:20:ae:de:39:
20:67:d0:38:5d:4f:88:e7:2d:02:c1:fa:dc:ec:0a:c7:81:b1:
e1:68:42:09:86:28:87:bb:62:d0:d5:01:c3:95:11:97:7a:02:
b8:0f:4b:eb:8e:2e:25:29:c7:7f:6a:10:4c:b9:05:7a:65:06:
da:36:1e:62:95:81:c5:8c:1f:75:3a:8c:96:3d:fc:f0:cf:af:
c1:c1:0b:29:94:39:76:7a:61:6f:f3:8c:da:db:ec:a1:75:c2:
02:a9:a7:cc:8c:54:4d:97:39:4a:4c:67:66:c1:5c:d6:96:43:
64:22:d3:b4:da:b2:05:a5:aa:8c:3b:ed:f1:a9:a4:b3:2b:01:
cf:a2:b5:e2:f4:57:6e:9a:dc:6a:63:4c:1b:04:bd:8c:5c:51:
c3:87:c6:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 15:56:53 2026 by rpki-client