Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/30b8e9-e7d4-40cc-ad5f-3c741220ea00/1/t4zdv8dr2iagKeqAyJh3mHRfHwI.mft
File: t4zdv8dr2iagKeqAyJh3mHRfHwI.mft (raw, json)
Hash identifier: UlZzmq9o81yHLZf9ohYZmgOcBXb6jEOrKeGAH4rgM1Q=
Subject key identifier: B7:93:3F:85:26:A5:93:54:ED:EC:8A:30:39:1E:CF:1C:5A:06:01:FE
Authority key identifier: B7:8C:DD:BF:C7:6B:DA:26:A0:29:EA:80:C8:98:77:98:74:5F:1F:02
Certificate issuer: /CN=b78cddbfc76bda26a029ea80c8987798745f1f02
Certificate serial: 019D04E59EA33BBAF8A8723B7B83BAB819E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t4zdv8dr2iagKeqAyJh3mHRfHwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/30b8e9-e7d4-40cc-ad5f-3c741220ea00/1/t4zdv8dr2iagKeqAyJh3mHRfHwI.mft
Manifest number: 1529
Signing time: Thu 19 Mar 2026 07:00:50 +0000
Manifest this update: Thu 19 Mar 2026 07:00:50 +0000
Manifest next update: Fri 20 Mar 2026 07:00:50 +0000
Files and hashes: 1: 2cs6BtaFV3H5PXU6nZOA8Uu_NwQ.roa (hash: VpwFMCxf02N3s6qbKcrB7OwUNutAGhYjp7y72GSVaW4=)
2: fZqDSJnUbHG62IvLERx4tiEWKgg.roa (hash: GDZnevYXZ2UVLkiVPlwZRqNZ2Bo/evXbLjj481Slbr4=)
3: t4zdv8dr2iagKeqAyJh3mHRfHwI.crl (hash: C/JpHhY3iqPV9MCKDtjCExLwsnhIzt6lYkFXO0nXlBc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/30b8e9-e7d4-40cc-ad5f-3c741220ea00/1/t4zdv8dr2iagKeqAyJh3mHRfHwI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/30b8e9-e7d4-40cc-ad5f-3c741220ea00/1/t4zdv8dr2iagKeqAyJh3mHRfHwI.mft
rsync://rpki.ripe.net/repository/DEFAULT/t4zdv8dr2iagKeqAyJh3mHRfHwI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Mar 2026 07:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:04:e5:9e:a3:3b:ba:f8:a8:72:3b:7b:83:ba:b8:19:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b78cddbfc76bda26a029ea80c8987798745f1f02
Validity
Not Before: Mar 19 07:00:50 2026 GMT
Not After : Mar 20 07:00:50 2026 GMT
Subject: CN=b7933f8526a59354edec8a30391ecf1c5a0601fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:4f:c8:39:4e:84:8e:e4:d1:bd:17:78:2d:ca:
85:cb:9d:6d:c5:f7:23:dd:20:71:69:27:35:ef:0e:
fe:04:b9:0c:21:a2:9d:b4:54:bc:b9:99:46:e6:fb:
d3:b9:57:36:1e:90:58:7e:89:81:a3:65:05:c2:98:
2e:4d:66:83:ae:c0:35:f3:1d:98:18:8b:2e:d6:21:
bd:6e:ab:24:ac:a2:49:7b:52:7d:63:5d:04:31:5e:
47:0b:09:23:be:34:b6:a4:87:3f:d3:5f:d2:ae:b9:
f1:62:60:16:5b:82:1e:cf:39:f8:d2:7d:f9:e0:ca:
66:4d:cb:6c:16:61:80:bf:9c:dd:13:86:83:72:95:
ba:78:d9:e4:ce:5a:a4:83:b2:f2:82:22:26:f0:8f:
bd:80:d5:4c:34:e8:91:80:a7:c8:c9:7c:a9:bc:c2:
d8:92:4e:66:35:64:c3:df:e8:8f:b8:9e:73:46:8a:
36:de:8a:a0:32:d9:68:8a:9f:21:f9:a8:a4:73:23:
d2:6c:14:c5:46:53:92:d9:68:93:ea:c1:45:74:f1:
de:67:f4:5c:66:64:88:f9:4b:a4:19:51:40:c0:64:
4e:4f:8f:0c:49:57:d5:f0:bb:c9:67:cc:2a:70:64:
04:56:b5:5e:0d:7f:83:2f:b6:d0:99:74:89:2b:f0:
8e:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:93:3F:85:26:A5:93:54:ED:EC:8A:30:39:1E:CF:1C:5A:06:01:FE
X509v3 Authority Key Identifier:
keyid:B7:8C:DD:BF:C7:6B:DA:26:A0:29:EA:80:C8:98:77:98:74:5F:1F:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t4zdv8dr2iagKeqAyJh3mHRfHwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/30b8e9-e7d4-40cc-ad5f-3c741220ea00/1/t4zdv8dr2iagKeqAyJh3mHRfHwI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/30b8e9-e7d4-40cc-ad5f-3c741220ea00/1/t4zdv8dr2iagKeqAyJh3mHRfHwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:1b:f2:0c:2a:88:bd:03:5a:c6:55:54:7f:d7:fe:fe:96:5e:
66:76:bd:66:3b:5a:e0:df:91:8b:87:af:d9:ae:6c:a3:0f:cd:
ac:00:ea:a2:af:aa:e4:74:b7:3b:6e:cb:c9:2f:9d:28:3d:5d:
8c:7e:2f:98:58:63:ec:91:0b:51:50:92:7b:b1:42:29:b3:41:
3f:50:ff:92:6c:21:03:15:03:c9:eb:03:38:01:5b:4f:45:4b:
8a:9c:ee:bc:d5:d6:82:d4:b0:b5:d4:1b:c7:ce:0e:ea:69:43:
f7:a0:4c:2d:8a:f3:3c:0a:a9:63:6d:83:4e:b3:33:1d:0d:76:
51:61:0a:b3:5b:ab:43:9e:37:0e:25:71:da:18:ac:d4:2f:61:
74:13:13:34:24:92:4e:69:55:93:28:6a:0b:25:47:22:d3:47:
a7:2d:8a:c3:51:63:74:72:ef:38:e6:e0:cf:ad:32:e1:c0:f6:
fb:2f:05:04:70:59:eb:01:e0:ab:77:d9:b1:a9:c6:6a:69:df:
c4:88:06:57:c8:7c:2d:e6:16:20:9e:e8:6c:bf:92:d2:f8:cc:
42:ea:9d:23:1a:45:fc:0a:e9:34:ab:5d:19:d8:cd:e4:90:ac:
34:d5:1b:81:ff:5d:47:04:8d:ec:ae:bd:f9:7f:26:6f:01:b2:
16:98:7e:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 14:02:16 2026 by rpki-client