Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/43/836431-b90d-4a98-be2c-955f5cb09893/1/t4cfKQ__DgQmDGdT44fJ77db4pY.mft
File: t4cfKQ__DgQmDGdT44fJ77db4pY.mft (raw, json)
Hash identifier: wx6OKwclOZ6rYbyRaJ3sy6pq3IZKbwG6zZsJ5Cn7fBk=
Subject key identifier: 23:CD:8E:83:9F:A9:50:1B:4A:E9:20:3C:29:14:D5:11:32:4D:57:59
Authority key identifier: B7:87:1F:29:0F:FF:0E:04:26:0C:67:53:E3:87:C9:EF:B7:5B:E2:96
Certificate issuer: /CN=b7871f290fff0e04260c6753e387c9efb75be296
Certificate serial: 01A1551C77427796B493083297EB6800F099
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t4cfKQ__DgQmDGdT44fJ77db4pY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/836431-b90d-4a98-be2c-955f5cb09893/1/t4cfKQ__DgQmDGdT44fJ77db4pY.mft
Manifest number: 0360
Signing time: Mon 19 Oct 2026 17:01:31 +0000
Manifest this update: Mon 19 Oct 2026 17:01:31 +0000
Manifest next update: Tue 20 Oct 2026 17:01:31 +0000
Files and hashes: 1: WESCbQ3vetqiTu5o3qQFVAH2GuY.asa (hash: 1aiCAFq0XN0g2XFeCxMyN7VVcKHWH+2jHOUYyChhHCQ=)
2: Zs7v1NDx63hWaP0rqC9JgN4viuQ.roa (hash: hVIg73QWwWuqnjCLMmbKJMff3qM/nFL/BxoYDSJaxBw=)
3: t4cfKQ__DgQmDGdT44fJ77db4pY.crl (hash: y5WfskpiD/LXfc6XEK+7EIZvh4EqSBrmyGkVYNiDLH4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/836431-b90d-4a98-be2c-955f5cb09893/1/t4cfKQ__DgQmDGdT44fJ77db4pY.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/836431-b90d-4a98-be2c-955f5cb09893/1/t4cfKQ__DgQmDGdT44fJ77db4pY.mft
rsync://rpki.ripe.net/repository/DEFAULT/t4cfKQ__DgQmDGdT44fJ77db4pY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 14:28:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:55:1c:77:42:77:96:b4:93:08:32:97:eb:68:00:f0:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7871f290fff0e04260c6753e387c9efb75be296
Validity
Not Before: Oct 19 17:01:31 2026 GMT
Not After : Oct 20 17:01:31 2026 GMT
Subject: CN=23cd8e839fa9501b4ae9203c2914d511324d5759
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:30:54:f0:b1:5d:e4:de:64:72:5e:c8:53:1e:
63:32:dc:1b:a3:a2:6d:e9:eb:cd:25:a8:80:1d:e4:
b6:17:38:99:8b:52:ef:91:fb:99:2c:5c:4a:2b:82:
52:e3:08:d8:90:cc:4b:5c:5f:d4:d7:e2:1b:b4:55:
98:5a:38:c3:ee:9c:e2:f3:92:14:c8:40:2a:ef:16:
68:1a:e4:6a:dc:48:cb:da:f4:f8:16:a8:c1:75:37:
ae:d7:2a:6d:f6:aa:1a:e9:49:8b:5f:38:d8:3b:ec:
ef:f9:30:db:9c:36:7a:83:27:a3:aa:e1:f2:18:03:
81:ae:d6:c0:1c:be:d8:14:ce:4a:90:d7:34:cc:6e:
b0:d2:3e:1d:b1:62:d6:73:42:41:b4:0f:f6:e0:7a:
2b:80:03:6f:0b:bb:ed:0a:9c:7d:28:3a:c4:7b:1e:
7d:c3:ce:50:6e:71:77:45:d6:c8:9d:cd:f1:c7:b2:
50:9b:a9:f9:85:90:45:7d:c4:af:8d:62:96:7d:28:
c6:51:11:31:6e:d7:f0:16:c8:5f:b2:7e:12:10:88:
b7:f6:2e:a8:3b:5e:77:d3:16:a2:12:54:e8:dd:8b:
0a:c2:4c:7e:5e:8e:73:f4:80:f6:7d:1b:c2:f7:d5:
44:41:c2:70:c1:b0:05:33:93:50:9a:89:99:3e:70:
8b:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:CD:8E:83:9F:A9:50:1B:4A:E9:20:3C:29:14:D5:11:32:4D:57:59
X509v3 Authority Key Identifier:
keyid:B7:87:1F:29:0F:FF:0E:04:26:0C:67:53:E3:87:C9:EF:B7:5B:E2:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t4cfKQ__DgQmDGdT44fJ77db4pY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/836431-b90d-4a98-be2c-955f5cb09893/1/t4cfKQ__DgQmDGdT44fJ77db4pY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/836431-b90d-4a98-be2c-955f5cb09893/1/t4cfKQ__DgQmDGdT44fJ77db4pY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:ee:48:64:c6:00:f4:74:06:5d:c7:5a:81:78:ff:01:ff:2a:
5e:37:17:83:4f:cd:9b:a4:60:38:e5:12:fc:f4:97:fb:bd:fc:
86:1a:38:f2:7c:f9:3e:4a:ab:f7:27:bf:79:e3:cb:fd:c9:6b:
f3:c9:b0:29:9e:52:f9:e4:6f:a4:b3:72:9d:5f:f3:4b:08:cb:
45:7b:b2:e8:59:43:8e:56:02:5d:8d:99:79:83:ed:77:90:7b:
0d:78:78:d8:bf:3d:53:4b:c1:14:c1:66:2e:b6:15:82:5d:58:
e6:19:86:4c:c2:00:ac:17:46:d3:c6:62:ae:cf:c2:de:e7:9d:
7f:c0:26:b6:23:60:d7:aa:5a:7e:aa:5a:9b:2a:26:8a:f6:5f:
58:cd:11:ab:96:3e:80:6b:20:39:90:55:6b:db:76:c9:7b:98:
7c:8c:25:5b:8b:f3:24:dc:df:42:70:aa:8d:ac:01:3e:70:9b:
f7:02:a6:4f:16:2b:76:40:55:a5:92:62:d1:c6:14:ed:30:fc:
25:bb:f2:4a:3a:15:25:1a:46:73:de:6a:4c:40:20:35:ec:b2:
36:73:38:c0:ea:d3:af:42:1d:dc:13:86:99:95:48:b6:d5:c5:
2b:6c:87:cf:3a:f2:f3:15:46:49:f8:b7:a1:90:69:80:72:dd:
da:6c:2c:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 20:43:39 2026 by rpki-client