Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/cd0a81-64b9-4cec-bad8-8ec1bf9fda2b/1/T0d31JE06rdaecERgyrX7OcmcUU.mft
File: T0d31JE06rdaecERgyrX7OcmcUU.mft (raw, json)
Hash identifier: 0Weygf5fbu98rlOMxW6fpb6+IE7Pf0VPJv9IhzKxWRg=
Subject key identifier: 3C:80:7A:7F:D2:B6:1D:40:D8:0A:75:81:98:16:A1:70:9E:88:FA:A7
Authority key identifier: 4F:47:77:D4:91:34:EA:B7:5A:79:C1:11:83:2A:D7:EC:E7:26:71:45
Certificate issuer: /CN=4f4777d49134eab75a79c111832ad7ece7267145
Certificate serial: 019D38D344FB77049AE06AD9D0B1DD0CA005
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T0d31JE06rdaecERgyrX7OcmcUU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/cd0a81-64b9-4cec-bad8-8ec1bf9fda2b/1/T0d31JE06rdaecERgyrX7OcmcUU.mft
Manifest number: 07FC
Signing time: Sun 29 Mar 2026 09:01:02 +0000
Manifest this update: Sun 29 Mar 2026 09:01:02 +0000
Manifest next update: Mon 30 Mar 2026 09:01:02 +0000
Files and hashes: 1: RnxHD11Uhdt01kVBb1Rpc2SkWqI.roa (hash: EZi5XsUOzo8BaayU9rrJ+Q6qQj+QhPGNjhAuWPOc7h8=)
2: T0d31JE06rdaecERgyrX7OcmcUU.crl (hash: qHkk+6Ct77WGuvNPMoU6hN99iY5n/P3eVud1tA0u+3Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/cd0a81-64b9-4cec-bad8-8ec1bf9fda2b/1/T0d31JE06rdaecERgyrX7OcmcUU.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/cd0a81-64b9-4cec-bad8-8ec1bf9fda2b/1/T0d31JE06rdaecERgyrX7OcmcUU.mft
rsync://rpki.ripe.net/repository/DEFAULT/T0d31JE06rdaecERgyrX7OcmcUU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:44:fb:77:04:9a:e0:6a:d9:d0:b1:dd:0c:a0:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f4777d49134eab75a79c111832ad7ece7267145
Validity
Not Before: Mar 29 09:01:02 2026 GMT
Not After : Mar 30 09:01:02 2026 GMT
Subject: CN=3c807a7fd2b61d40d80a75819816a1709e88faa7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:47:45:b0:54:81:60:48:aa:5e:b9:a9:63:7b:
7e:22:c7:73:0d:fc:14:ad:2d:e7:95:8b:3d:70:27:
a6:0e:2b:22:c9:57:d6:ee:3e:40:6e:93:37:92:f7:
cb:f9:2e:f8:26:70:36:dc:d7:2d:a6:23:04:12:c1:
23:6b:fa:95:3e:a6:fe:7c:7f:95:1c:e8:9a:47:02:
e6:d4:0e:a8:74:70:ad:b8:3c:b3:4f:f9:00:89:f4:
9e:ea:fd:fb:a8:a3:7a:67:e9:6a:de:f7:30:ca:5c:
d1:c2:d1:e1:84:d0:e9:c2:17:78:1e:e8:90:31:2f:
58:5e:6f:2d:75:fc:d5:77:5a:87:b5:b7:fa:6b:dc:
05:de:37:ac:7d:03:4c:08:44:65:40:88:c8:31:36:
f7:fb:8d:d3:7e:0b:cc:6e:82:56:04:4c:25:05:4c:
5a:89:1e:d2:bd:f7:96:68:ed:a5:13:fa:be:a9:85:
67:61:e8:dd:2d:8b:8c:54:96:bb:5d:1a:22:4c:c0:
a3:9f:a8:c2:13:8b:5f:73:ab:37:59:57:98:b2:41:
6f:f7:11:b1:a7:68:92:ec:74:b9:e0:61:3c:72:b8:
32:10:dd:6e:7a:bd:21:ae:e6:86:20:a1:aa:34:d5:
9a:7e:fd:71:fb:3a:dd:39:c3:f7:07:e7:ae:08:a7:
99:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:80:7A:7F:D2:B6:1D:40:D8:0A:75:81:98:16:A1:70:9E:88:FA:A7
X509v3 Authority Key Identifier:
keyid:4F:47:77:D4:91:34:EA:B7:5A:79:C1:11:83:2A:D7:EC:E7:26:71:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T0d31JE06rdaecERgyrX7OcmcUU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cd0a81-64b9-4cec-bad8-8ec1bf9fda2b/1/T0d31JE06rdaecERgyrX7OcmcUU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cd0a81-64b9-4cec-bad8-8ec1bf9fda2b/1/T0d31JE06rdaecERgyrX7OcmcUU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:93:9e:5e:4f:3b:48:67:d1:d1:2c:2b:46:30:ec:a0:7c:97:
17:fd:c8:65:f0:8b:4a:10:0b:99:25:60:7f:74:1c:d1:be:56:
94:5e:69:7d:73:b7:29:ca:8d:41:61:25:53:2a:22:9e:fa:0b:
54:cd:41:37:54:49:64:8c:69:39:73:f6:e8:9c:d4:f9:e4:c4:
0c:24:7a:50:5b:e2:0b:ca:7c:d9:27:e7:5f:21:9e:7d:11:78:
4c:7f:1f:5f:6f:ae:47:95:76:3f:75:d0:f1:49:4f:f2:ad:f8:
56:62:07:51:a5:c3:6c:74:51:c0:0d:1a:05:17:7c:70:4b:e2:
e1:9f:b8:39:0b:cf:e9:16:a6:c3:00:5e:be:9e:7f:18:7c:bb:
1f:6f:d5:35:23:59:03:3b:dc:b7:61:41:3f:2b:ba:f1:3f:5c:
cb:f3:64:f0:96:36:68:2b:6b:f4:95:04:30:61:ac:79:63:3f:
93:c4:94:80:e4:cb:d8:41:0c:9e:98:e4:91:a9:08:7c:d2:8d:
5c:65:40:e0:44:dd:ff:7d:65:ef:5c:d4:4e:6b:7f:11:f2:cb:
9a:b8:03:94:9d:cf:27:1d:a0:b1:23:f5:54:fb:fa:38:d3:a3:
78:54:e1:17:e2:50:60:79:75:72:5e:3a:cc:24:0a:6e:7d:37:
bb:48:fc:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:28:37 2026 by rpki-client