Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/b85caf-f20e-4b67-98a0-ff7f48f93f01/1/T6iT4zqCH_ZtOPDrzkmRHzpflk4.mft
File: T6iT4zqCH_ZtOPDrzkmRHzpflk4.mft (raw, json)
Hash identifier: TOixhCn1k+IgTFYXE5477ZKqHpSldRolZWKOfgoCHOE=
Subject key identifier: 8F:4F:8B:E4:BB:3D:08:3F:22:F9:2E:31:A5:FB:04:BC:95:CF:34:DB
Authority key identifier: 4F:A8:93:E3:3A:82:1F:F6:6D:38:F0:EB:CE:49:91:1F:3A:5F:96:4E
Certificate issuer: /CN=4fa893e33a821ff66d38f0ebce49911f3a5f964e
Certificate serial: 019D3940FEF03265AEC5403C414438B33B7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T6iT4zqCH_ZtOPDrzkmRHzpflk4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/b85caf-f20e-4b67-98a0-ff7f48f93f01/1/T6iT4zqCH_ZtOPDrzkmRHzpflk4.mft
Manifest number: 0974
Signing time: Sun 29 Mar 2026 11:00:53 +0000
Manifest this update: Sun 29 Mar 2026 11:00:53 +0000
Manifest next update: Mon 30 Mar 2026 11:00:53 +0000
Files and hashes: 1: T6iT4zqCH_ZtOPDrzkmRHzpflk4.crl (hash: SQoyE8Q6pzEmMl1h/vhQd4B+A7EtnR6Stk23d3xZWxQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/b85caf-f20e-4b67-98a0-ff7f48f93f01/1/T6iT4zqCH_ZtOPDrzkmRHzpflk4.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/b85caf-f20e-4b67-98a0-ff7f48f93f01/1/T6iT4zqCH_ZtOPDrzkmRHzpflk4.mft
rsync://rpki.ripe.net/repository/DEFAULT/T6iT4zqCH_ZtOPDrzkmRHzpflk4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:fe:f0:32:65:ae:c5:40:3c:41:44:38:b3:3b:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fa893e33a821ff66d38f0ebce49911f3a5f964e
Validity
Not Before: Mar 29 11:00:53 2026 GMT
Not After : Mar 30 11:00:53 2026 GMT
Subject: CN=8f4f8be4bb3d083f22f92e31a5fb04bc95cf34db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:24:c5:06:b0:93:41:64:2b:56:8e:07:31:30:
36:f2:2f:d0:3c:75:dd:22:d0:e7:9a:bc:12:42:eb:
b9:df:76:b0:98:89:80:bf:f6:d7:a5:8a:6e:92:bb:
1d:95:85:a4:1e:4b:2a:a5:07:2d:d4:a8:f1:a8:33:
66:7a:e8:e4:90:92:6f:d2:d6:d9:28:c2:31:3a:c0:
4c:6f:55:a6:64:f2:c1:20:65:78:44:e5:de:d8:3c:
39:31:85:0d:cc:d4:6f:9a:f5:54:80:73:8a:33:48:
ad:d2:0d:d8:72:ba:fb:02:2e:e1:08:01:d7:83:26:
1d:61:88:b0:fc:1a:8a:b9:d5:7b:ee:00:5c:4c:5f:
43:25:08:aa:85:0d:c5:47:ee:0f:fe:41:2e:73:7a:
c9:e1:e7:e2:10:21:8c:cd:95:39:e9:14:20:8a:c2:
87:eb:65:f1:b3:76:ca:f9:7c:36:3f:0b:d4:e9:13:
21:6c:fc:58:cf:cf:f3:cc:4a:13:2a:5f:35:00:81:
1b:5f:d8:6f:52:30:a1:ae:93:d7:c3:1c:bc:67:8c:
69:4e:33:22:4e:a2:17:d8:1d:fd:8a:d0:46:35:82:
33:ad:f7:23:9e:18:60:dd:58:0f:13:84:e6:d9:e8:
65:bb:56:b1:a0:55:c5:33:9e:ec:71:81:12:dc:7c:
82:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:4F:8B:E4:BB:3D:08:3F:22:F9:2E:31:A5:FB:04:BC:95:CF:34:DB
X509v3 Authority Key Identifier:
keyid:4F:A8:93:E3:3A:82:1F:F6:6D:38:F0:EB:CE:49:91:1F:3A:5F:96:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T6iT4zqCH_ZtOPDrzkmRHzpflk4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/b85caf-f20e-4b67-98a0-ff7f48f93f01/1/T6iT4zqCH_ZtOPDrzkmRHzpflk4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/b85caf-f20e-4b67-98a0-ff7f48f93f01/1/T6iT4zqCH_ZtOPDrzkmRHzpflk4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:db:b7:a6:8a:59:54:59:4b:5c:8f:2f:7e:7f:03:7b:3e:3c:
99:90:60:ae:08:61:de:20:17:11:d9:b3:15:4e:41:4c:bc:0b:
4d:eb:2a:5e:3f:96:6e:87:e4:46:9d:ba:9b:a2:50:2e:38:60:
55:62:9e:96:86:04:69:ac:c7:92:2e:26:32:7d:7e:81:4a:00:
c5:66:ea:cb:d0:0d:91:7e:93:89:31:7f:f7:fb:b1:0f:0a:06:
f9:0b:76:97:51:10:b5:43:06:a3:d4:fa:73:40:9b:d3:12:a7:
d7:f6:99:06:c2:a0:aa:47:b0:2a:ba:4c:38:80:d7:68:7b:33:
ce:53:c0:0f:12:fa:50:bb:53:ee:91:da:1c:46:40:5f:23:07:
e6:68:20:40:47:53:59:68:c4:e7:8d:34:36:18:0b:f9:02:6d:
71:37:db:c9:3e:ca:b0:75:eb:6c:0d:79:54:78:26:d1:dc:7c:
5a:82:6c:30:64:28:86:24:53:97:8c:c0:d4:a9:a8:d4:59:82:
e1:a1:8c:ba:8f:63:e0:e2:b8:35:db:a9:33:07:bd:f3:6a:9b:
a0:95:8b:bd:02:fc:cb:78:2e:7d:4d:7f:97:29:23:38:f4:e1:
c8:1d:2c:e4:2e:ca:9d:03:05:5f:e2:62:77:cc:93:3d:63:ee:
e3:1e:33:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 18:38:22 2026 by rpki-client