Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/f2a37c-a129-4c0b-9ed1-b18dac2d259b/1/T32IU5OzK17uOgv0M44Pqu88dTw.mft
File: T32IU5OzK17uOgv0M44Pqu88dTw.mft (raw, json)
Hash identifier: BOAMtEqfuN3oMwY/8Qq92mMe7nnoXyMlXH26ctGQwNw=
Subject key identifier: 9A:6E:0C:19:74:3A:7E:07:2B:BD:89:39:74:95:A7:22:B3:37:D1:06
Authority key identifier: 4F:7D:88:53:93:B3:2B:5E:EE:3A:0B:F4:33:8E:0F:AA:EF:3C:75:3C
Certificate issuer: /CN=4f7d885393b32b5eee3a0bf4338e0faaef3c753c
Certificate serial: 01A020C37A9C8DDE6D1CF626152F97920C2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T32IU5OzK17uOgv0M44Pqu88dTw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/f2a37c-a129-4c0b-9ed1-b18dac2d259b/1/T32IU5OzK17uOgv0M44Pqu88dTw.mft
Manifest number: 17DF
Signing time: Thu 20 Aug 2026 20:01:16 +0000
Manifest this update: Thu 20 Aug 2026 20:01:16 +0000
Manifest next update: Fri 21 Aug 2026 20:01:16 +0000
Files and hashes: 1: NEc8aQqyyaN5WZ6pcMTuIn3QMww.roa (hash: Nlhcphc0V2UOaAJaYdUoZGpKtvarMlBWXD4y4ZO7raA=)
2: T32IU5OzK17uOgv0M44Pqu88dTw.crl (hash: 0HTDLFxKh+aG7EM5o/vAsTOIrtgTLqumBBRab9D15go=)
3: h1mmEmquZ99o6cDHP1Sk61I_DC0.roa (hash: zGPSsDsxw4pForFMNU0mmMEvIvjun+XXzgIsgxxZKWw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/f2a37c-a129-4c0b-9ed1-b18dac2d259b/1/T32IU5OzK17uOgv0M44Pqu88dTw.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/f2a37c-a129-4c0b-9ed1-b18dac2d259b/1/T32IU5OzK17uOgv0M44Pqu88dTw.mft
rsync://rpki.ripe.net/repository/DEFAULT/T32IU5OzK17uOgv0M44Pqu88dTw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Aug 2026 13:32:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:20:c3:7a:9c:8d:de:6d:1c:f6:26:15:2f:97:92:0c:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f7d885393b32b5eee3a0bf4338e0faaef3c753c
Validity
Not Before: Aug 20 20:01:16 2026 GMT
Not After : Aug 21 20:01:16 2026 GMT
Subject: CN=9a6e0c19743a7e072bbd89397495a722b337d106
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:82:df:53:a4:cb:e9:e9:32:73:82:08:8d:fa:
a7:12:78:c8:11:bc:ef:c3:06:2a:dd:4d:3f:5c:49:
a5:d6:cb:8f:5e:0c:a6:e2:6a:e0:3e:8b:65:aa:bb:
d4:09:d7:e3:24:03:30:c6:ed:af:55:41:3b:7e:62:
22:61:86:40:7b:6d:c2:a7:c3:2e:0e:aa:c1:42:9c:
3c:bb:4b:40:30:35:8e:5e:54:2d:50:77:8c:71:6f:
74:02:2f:7e:f1:ec:70:67:ff:8f:e2:5f:fc:87:ab:
b9:fa:c5:94:34:7c:74:60:1b:ae:fb:04:b3:a4:0f:
a2:50:5a:ab:43:fa:d1:64:cc:3b:9e:c7:22:7f:fc:
75:11:37:45:ea:1f:46:d4:19:99:86:5f:ac:4a:52:
62:39:0b:14:da:6b:f3:6c:6c:56:03:33:a3:de:4a:
7e:e1:f4:da:16:7f:df:01:17:42:fd:96:f7:3c:d1:
87:ed:1f:5d:d4:8f:bf:21:01:60:d9:26:32:20:58:
c2:3c:1a:67:be:d6:52:20:cd:cb:45:b1:35:b3:cf:
50:4c:95:cb:eb:33:e6:9a:66:12:ce:ad:9c:a7:57:
43:d0:0a:1a:4c:a8:24:57:75:8e:16:8e:8c:ba:5c:
0c:20:be:12:20:45:c1:d5:1b:72:42:b8:f2:90:b1:
5e:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:6E:0C:19:74:3A:7E:07:2B:BD:89:39:74:95:A7:22:B3:37:D1:06
X509v3 Authority Key Identifier:
keyid:4F:7D:88:53:93:B3:2B:5E:EE:3A:0B:F4:33:8E:0F:AA:EF:3C:75:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T32IU5OzK17uOgv0M44Pqu88dTw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f2a37c-a129-4c0b-9ed1-b18dac2d259b/1/T32IU5OzK17uOgv0M44Pqu88dTw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f2a37c-a129-4c0b-9ed1-b18dac2d259b/1/T32IU5OzK17uOgv0M44Pqu88dTw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:64:87:54:e5:96:65:82:d6:84:44:9f:0f:ab:7e:e8:bd:e6:
fa:36:ae:5d:ac:54:9d:b2:dc:f2:54:ed:29:cb:26:9c:7e:98:
6d:79:72:31:1a:68:75:60:bf:b9:c3:34:a6:d9:70:07:49:da:
a5:e5:90:de:36:56:fe:97:4f:be:4e:c1:92:9b:24:39:04:5a:
b2:53:5c:09:9f:08:42:2a:df:02:37:cb:ff:38:96:ab:5d:10:
57:b8:7d:8e:32:2e:0f:b2:5a:3c:98:f3:70:d9:53:fa:81:68:
e8:a6:91:b5:af:ad:90:42:ab:81:78:99:e4:b0:d6:dc:f5:d6:
49:19:25:ec:ee:95:2b:6d:4f:ee:e8:dc:bd:de:ef:94:83:5d:
d5:40:93:4e:22:e0:84:9f:b1:30:e0:6d:44:0d:37:c5:b7:36:
72:fe:56:9e:5e:de:15:ca:e7:01:91:d4:0d:f2:c9:1a:b1:06:
92:81:60:d7:22:6d:78:98:1b:50:41:25:8d:70:53:fa:60:c5:
65:ec:4d:8b:a6:45:02:7b:01:2c:97:4d:04:29:f9:07:c1:5c:
e2:de:b9:2a:0b:8a:8d:51:6e:e1:50:33:57:e5:e4:58:2d:e8:
c9:05:37:8f:3c:17:57:a0:66:9e:d1:d9:f8:fa:7d:c5:7d:77:
ea:20:da:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 20 23:36:02 2026 by rpki-client