Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/f2a37c-a129-4c0b-9ed1-b18dac2d259b/1/T32IU5OzK17uOgv0M44Pqu88dTw.mft
File: T32IU5OzK17uOgv0M44Pqu88dTw.mft (raw, json)
Hash identifier: lyPVf+Nbt3X6ikC6zFtjktJCBZ0syYTc9BoSVXYKqPM=
Subject key identifier: B4:92:09:71:EE:7E:B8:91:39:D6:48:AC:71:3B:87:BF:97:CD:C3:B8
Authority key identifier: 4F:7D:88:53:93:B3:2B:5E:EE:3A:0B:F4:33:8E:0F:AA:EF:3C:75:3C
Certificate issuer: /CN=4f7d885393b32b5eee3a0bf4338e0faaef3c753c
Certificate serial: 019D394100C96DA939C2AF2885C2886DBBDF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T32IU5OzK17uOgv0M44Pqu88dTw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/f2a37c-a129-4c0b-9ed1-b18dac2d259b/1/T32IU5OzK17uOgv0M44Pqu88dTw.mft
Manifest number: 165E
Signing time: Sun 29 Mar 2026 11:00:54 +0000
Manifest this update: Sun 29 Mar 2026 11:00:54 +0000
Manifest next update: Mon 30 Mar 2026 11:00:54 +0000
Files and hashes: 1: NEc8aQqyyaN5WZ6pcMTuIn3QMww.roa (hash: Nlhcphc0V2UOaAJaYdUoZGpKtvarMlBWXD4y4ZO7raA=)
2: T32IU5OzK17uOgv0M44Pqu88dTw.crl (hash: UwCl3qCARUA+hLpZU2KBPQ9+pV299t+KBE/i0/MUNEM=)
3: h1mmEmquZ99o6cDHP1Sk61I_DC0.roa (hash: zGPSsDsxw4pForFMNU0mmMEvIvjun+XXzgIsgxxZKWw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/f2a37c-a129-4c0b-9ed1-b18dac2d259b/1/T32IU5OzK17uOgv0M44Pqu88dTw.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/f2a37c-a129-4c0b-9ed1-b18dac2d259b/1/T32IU5OzK17uOgv0M44Pqu88dTw.mft
rsync://rpki.ripe.net/repository/DEFAULT/T32IU5OzK17uOgv0M44Pqu88dTw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:00:c9:6d:a9:39:c2:af:28:85:c2:88:6d:bb:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f7d885393b32b5eee3a0bf4338e0faaef3c753c
Validity
Not Before: Mar 29 11:00:54 2026 GMT
Not After : Mar 30 11:00:54 2026 GMT
Subject: CN=b4920971ee7eb89139d648ac713b87bf97cdc3b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d6:59:f0:fa:ee:ee:9b:7f:f4:90:38:cb:29:
a9:9e:8a:69:40:90:5a:ac:d4:f8:93:5c:f3:3c:03:
a2:99:1f:b1:20:4b:63:89:5a:f8:d3:4a:80:bf:02:
ef:b3:d8:9e:c9:5c:1c:e4:52:f0:98:41:59:66:57:
eb:16:68:b2:04:d0:d2:7c:c0:32:62:da:da:e1:f9:
e8:07:81:ce:9e:c5:3e:03:65:5c:f1:f0:b4:ae:2a:
b2:6a:90:45:13:81:8f:2d:c5:97:8a:a2:0d:b6:a0:
fe:63:99:bc:c3:f5:ce:c5:40:c4:3b:44:7e:e8:a6:
2d:8c:07:5e:70:9d:a9:92:d1:3c:46:f4:9a:88:50:
91:c0:be:db:64:8c:6e:72:f7:ff:5f:a0:60:7b:73:
05:71:4b:a8:cb:8b:42:79:21:de:d5:5e:2c:df:f4:
b3:da:f5:3a:e3:92:bb:df:bd:f2:84:68:bf:e5:73:
e8:b8:4c:f1:f4:22:3c:82:97:65:b7:73:cd:01:cb:
dc:f6:dd:93:a7:8a:46:a1:84:0d:af:d1:97:00:7e:
2c:7c:cf:e4:8c:fd:6a:db:34:ce:44:18:de:7a:3e:
01:f1:d1:b3:7c:23:12:01:90:a5:45:06:d3:d0:40:
fe:31:95:99:7e:a4:ca:0c:e6:a3:d8:a2:d7:9f:e3:
be:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:92:09:71:EE:7E:B8:91:39:D6:48:AC:71:3B:87:BF:97:CD:C3:B8
X509v3 Authority Key Identifier:
keyid:4F:7D:88:53:93:B3:2B:5E:EE:3A:0B:F4:33:8E:0F:AA:EF:3C:75:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T32IU5OzK17uOgv0M44Pqu88dTw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f2a37c-a129-4c0b-9ed1-b18dac2d259b/1/T32IU5OzK17uOgv0M44Pqu88dTw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f2a37c-a129-4c0b-9ed1-b18dac2d259b/1/T32IU5OzK17uOgv0M44Pqu88dTw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:0c:cc:b7:57:2e:29:63:61:87:a7:16:6a:3d:2e:1d:19:5f:
8f:3b:50:7c:d5:f7:70:73:c0:4f:99:7e:ba:df:4e:74:33:aa:
96:98:9a:22:00:e4:0d:92:5d:1c:87:27:e8:26:0f:4f:d1:13:
24:0a:42:ab:09:37:7c:1f:7b:d4:b8:03:af:7d:ee:8f:59:38:
94:6a:ef:79:dd:95:c0:e4:e4:59:52:c3:73:e9:5a:5a:a9:91:
93:bf:27:37:9f:ff:d1:ec:1c:84:fd:9c:2b:56:8f:a6:c9:06:
c6:35:54:db:f1:4a:4b:45:69:26:de:eb:ad:e9:22:46:19:47:
b1:b7:bc:c1:64:e3:89:a5:0c:04:04:78:f2:5b:9e:18:6d:ca:
42:66:58:e7:c5:ba:8e:a4:e3:3f:af:c8:88:21:3d:97:02:37:
6b:b7:e0:c7:1d:cd:be:28:37:34:4b:89:21:2c:23:22:b1:5b:
ae:53:3f:cc:7b:f4:9f:d8:7b:cd:78:98:8c:42:32:56:97:53:
1e:12:ea:86:c2:03:9b:11:19:75:d9:88:d1:30:98:91:b4:68:
78:a8:b7:19:c0:59:2f:18:43:12:47:5b:da:59:f2:58:d6:61:
c9:f0:85:b9:46:d6:07:05:53:c3:4c:a6:a1:01:8f:c9:22:5a:
a3:8e:34:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:26:39 2026 by rpki-client