Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/5855da-1cb4-4325-903c-7e021e92ba38/1/T6SrVjZVqRUiJNqbgzr2Nq36DL4.mft
File: T6SrVjZVqRUiJNqbgzr2Nq36DL4.mft (raw, json)
Hash identifier: Yq1H0L5wG5M1lezrNVz45aabCQIxt0t6hxavwhJNBdQ=
Subject key identifier: F9:3B:CA:31:E7:93:0F:CF:CF:A1:A4:2C:81:EB:E5:CA:4E:76:94:F6
Authority key identifier: 4F:A4:AB:56:36:55:A9:15:22:24:DA:9B:83:3A:F6:36:AD:FA:0C:BE
Certificate issuer: /CN=4fa4ab563655a9152224da9b833af636adfa0cbe
Certificate serial: 019D382E3ABF0B1D25989DE419507323E860
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T6SrVjZVqRUiJNqbgzr2Nq36DL4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/5855da-1cb4-4325-903c-7e021e92ba38/1/T6SrVjZVqRUiJNqbgzr2Nq36DL4.mft
Manifest number: AE
Signing time: Sun 29 Mar 2026 06:00:46 +0000
Manifest this update: Sun 29 Mar 2026 06:00:46 +0000
Manifest next update: Mon 30 Mar 2026 06:00:46 +0000
Files and hashes: 1: 8xsBxJRzOoadcm0DdrJ3Vg3opRE.asa (hash: n9nxUGOX/1EnSOvWwvl5Nqo9r6LfqvrkZ6aWm3oj7S0=)
2: T6SrVjZVqRUiJNqbgzr2Nq36DL4.crl (hash: MsYvM+hVN4g/p8X72mouDLUujujUAVQ/1Oe5dlBSBwM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/5855da-1cb4-4325-903c-7e021e92ba38/1/T6SrVjZVqRUiJNqbgzr2Nq36DL4.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/5855da-1cb4-4325-903c-7e021e92ba38/1/T6SrVjZVqRUiJNqbgzr2Nq36DL4.mft
rsync://rpki.ripe.net/repository/DEFAULT/T6SrVjZVqRUiJNqbgzr2Nq36DL4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:3a:bf:0b:1d:25:98:9d:e4:19:50:73:23:e8:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fa4ab563655a9152224da9b833af636adfa0cbe
Validity
Not Before: Mar 29 06:00:46 2026 GMT
Not After : Mar 30 06:00:46 2026 GMT
Subject: CN=f93bca31e7930fcfcfa1a42c81ebe5ca4e7694f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:6f:d8:d5:59:f5:9e:f3:1f:02:3e:b6:2f:44:
62:e9:3b:cb:57:ae:b9:92:d9:b5:b2:7a:d8:fb:fe:
eb:51:bc:fb:c0:35:40:91:d1:3d:03:aa:39:4b:3e:
76:ae:09:08:33:2f:83:a6:45:c1:9e:d8:4f:bb:94:
f3:e8:2e:c0:c7:d0:42:1c:1f:7b:e0:79:50:f9:5b:
a3:3c:e5:01:05:e9:94:81:5e:b5:c1:df:0e:4b:55:
7e:95:c5:d3:ac:ab:1a:df:5c:f4:dd:dc:40:62:4b:
40:a7:ea:36:fb:70:fe:32:c0:e7:c3:f4:bf:62:bb:
ad:8a:09:b1:48:50:66:a2:cb:3c:19:ac:fd:d4:db:
94:2c:5d:e9:8b:d6:27:60:8c:d4:c7:8b:ae:d5:ac:
f0:c9:90:d6:92:b3:b4:19:77:f6:c9:b2:db:d8:76:
fd:6a:b1:f3:3d:54:4c:27:8e:a6:f2:17:f2:9c:0c:
4a:af:22:fb:c4:62:65:93:6a:c7:58:a4:9f:0c:81:
2a:73:4f:c2:6e:e3:11:f8:03:b1:01:ca:86:92:0c:
29:25:bc:09:10:e0:80:fd:2a:5e:44:9a:7c:7e:06:
11:56:ff:bb:18:0f:1a:34:33:80:1a:a1:1b:66:da:
b1:dc:7f:cb:1e:2b:47:bd:a0:8d:ad:d8:86:c4:32:
be:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:3B:CA:31:E7:93:0F:CF:CF:A1:A4:2C:81:EB:E5:CA:4E:76:94:F6
X509v3 Authority Key Identifier:
keyid:4F:A4:AB:56:36:55:A9:15:22:24:DA:9B:83:3A:F6:36:AD:FA:0C:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T6SrVjZVqRUiJNqbgzr2Nq36DL4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/5855da-1cb4-4325-903c-7e021e92ba38/1/T6SrVjZVqRUiJNqbgzr2Nq36DL4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/5855da-1cb4-4325-903c-7e021e92ba38/1/T6SrVjZVqRUiJNqbgzr2Nq36DL4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:3c:0c:e8:ef:a2:8d:db:00:e2:5e:50:72:8b:e4:f8:02:63:
8f:23:e0:40:2f:9b:96:11:f6:2b:d2:57:b6:0b:18:fc:f6:bb:
48:33:b6:dd:74:ab:17:1a:f3:e2:97:7c:88:3c:5d:e2:90:ee:
05:66:63:c8:34:5c:09:64:b2:77:38:02:ae:1a:9d:33:60:12:
eb:25:a9:d6:90:cb:26:10:13:82:43:38:97:93:9b:4d:69:90:
f0:aa:42:d9:6f:85:98:f2:bf:5e:1c:f1:85:d2:8e:31:2b:2f:
c5:6b:06:64:82:90:24:37:04:43:24:89:10:7d:42:a9:d0:25:
89:ab:7c:26:fa:18:62:91:56:05:84:39:78:f5:41:9c:e9:9f:
9d:60:c3:b4:bb:38:62:ce:75:8e:24:06:1c:1c:a8:13:05:45:
90:ea:83:f5:f9:5a:fd:35:5b:ff:66:3b:59:52:03:5b:8c:b8:
85:5e:db:f2:a8:6e:d3:8b:43:a8:77:40:53:f9:86:93:89:e6:
a5:25:99:61:44:b1:66:00:2f:ed:b9:ea:9b:9a:6d:df:26:a8:
45:3e:80:b4:dd:15:91:81:f9:46:0d:e5:58:1f:ca:73:0b:d6:
46:2a:ba:b7:96:b0:d9:0c:2a:f7:0c:11:f9:86:b9:a1:fa:7d:
23:f0:e2:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:54:01 2026 by rpki-client