Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/1b1272-83c1-4864-9cd3-027c7f7dc6d5/1/T2F9awPi_l-JEcvrX64tyjvWZ38.mft
File: T2F9awPi_l-JEcvrX64tyjvWZ38.mft (raw, json)
Hash identifier: WMyzj/cd/YWoa7ABeFoLe7Acl1kSQ1FsgxmWh5NgQOA=
Subject key identifier: 21:C9:E2:7A:0E:77:1C:C0:79:E3:F8:82:DB:1F:FC:30:FE:F0:A2:A1
Authority key identifier: 4F:61:7D:6B:03:E2:FE:5F:89:11:CB:EB:5F:AE:2D:CA:3B:D6:67:7F
Certificate issuer: /CN=4f617d6b03e2fe5f8911cbeb5fae2dca3bd6677f
Certificate serial: 019D39AF700AB91AB24E2E12D034BBDC5911
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T2F9awPi_l-JEcvrX64tyjvWZ38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/1b1272-83c1-4864-9cd3-027c7f7dc6d5/1/T2F9awPi_l-JEcvrX64tyjvWZ38.mft
Manifest number: 1571
Signing time: Sun 29 Mar 2026 13:01:31 +0000
Manifest this update: Sun 29 Mar 2026 13:01:31 +0000
Manifest next update: Mon 30 Mar 2026 13:01:31 +0000
Files and hashes: 1: T2F9awPi_l-JEcvrX64tyjvWZ38.crl (hash: OyrZZcattFVsVmbH+2z9wDHGIkN0icuihTvwl4LE1VA=)
2: xwOmHY94ffmWcpPf6KqXYjilQDE.roa (hash: XM6OGxdr30fmSiTDSkJNnhkS4Ouwvsq+nWxnRyN80J8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/1b1272-83c1-4864-9cd3-027c7f7dc6d5/1/T2F9awPi_l-JEcvrX64tyjvWZ38.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/1b1272-83c1-4864-9cd3-027c7f7dc6d5/1/T2F9awPi_l-JEcvrX64tyjvWZ38.mft
rsync://rpki.ripe.net/repository/DEFAULT/T2F9awPi_l-JEcvrX64tyjvWZ38.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:af:70:0a:b9:1a:b2:4e:2e:12:d0:34:bb:dc:59:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f617d6b03e2fe5f8911cbeb5fae2dca3bd6677f
Validity
Not Before: Mar 29 13:01:31 2026 GMT
Not After : Mar 30 13:01:31 2026 GMT
Subject: CN=21c9e27a0e771cc079e3f882db1ffc30fef0a2a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:8e:47:a1:21:0f:5e:41:79:c2:f9:4d:15:b7:
ac:b7:a6:e1:c9:2e:5c:cc:de:47:95:95:4e:f3:23:
f8:f4:4d:8f:c8:34:5b:87:9c:85:99:a4:12:23:12:
19:3b:e8:b1:d6:94:57:34:a8:af:9c:17:fd:41:07:
72:31:a0:02:0d:1a:20:97:86:04:28:6e:43:ae:b8:
71:76:2a:00:68:c2:bb:99:e1:d2:c3:d2:f1:52:78:
a4:9f:ec:c6:cb:33:2e:23:c1:f8:21:82:9d:84:88:
5f:4c:5c:97:40:0d:b6:bd:94:84:22:1c:15:75:bd:
ab:a2:32:72:dc:4a:e5:85:e8:14:e8:72:de:45:8d:
d3:10:05:c4:ed:6d:8f:47:49:63:bf:03:48:e9:ed:
ff:7d:7d:dd:98:8b:5b:f5:f1:d3:ee:e9:11:90:54:
6b:20:d1:1a:87:f1:4a:87:cd:2b:81:d2:1e:e2:1d:
58:d8:ec:e5:2a:9c:d8:18:2f:86:78:f0:5a:3f:59:
22:da:ba:9b:69:7c:08:fc:1b:d7:2b:84:8b:fa:a0:
b1:f6:2f:2a:b7:9b:35:e4:4a:38:34:8e:25:fa:40:
f8:24:ad:69:73:5b:61:40:fe:81:ac:8f:dc:72:21:
13:23:e8:ac:52:cf:0e:a6:df:a9:25:51:fb:90:e6:
12:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:C9:E2:7A:0E:77:1C:C0:79:E3:F8:82:DB:1F:FC:30:FE:F0:A2:A1
X509v3 Authority Key Identifier:
keyid:4F:61:7D:6B:03:E2:FE:5F:89:11:CB:EB:5F:AE:2D:CA:3B:D6:67:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T2F9awPi_l-JEcvrX64tyjvWZ38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/1b1272-83c1-4864-9cd3-027c7f7dc6d5/1/T2F9awPi_l-JEcvrX64tyjvWZ38.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/1b1272-83c1-4864-9cd3-027c7f7dc6d5/1/T2F9awPi_l-JEcvrX64tyjvWZ38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:7a:56:ef:b2:82:7c:ec:3e:58:78:8b:68:b4:23:71:f9:c4:
47:0f:13:c2:67:e6:8d:ff:1d:44:a1:2a:9a:12:51:b6:e7:fd:
c8:e0:7e:67:b6:10:ba:ef:72:db:17:fb:3b:07:bd:e6:7c:ee:
18:39:54:90:ec:ec:a5:7c:24:be:bb:7d:74:ed:b5:48:f1:49:
70:a4:e7:fe:07:78:c1:b0:b6:5c:17:cd:46:a4:a5:b8:84:ff:
a1:d9:e4:3e:9f:c9:73:e8:ce:b7:6c:2b:f2:0c:62:07:3a:13:
fd:d3:3f:a6:67:a4:8b:e1:0f:59:58:38:65:70:bd:9b:71:b9:
cc:72:cf:db:8e:a0:c4:d0:e6:62:ec:bd:ad:73:24:f5:88:ae:
d1:84:7f:9c:81:4a:47:2e:95:e9:e5:ab:d0:51:79:e9:bb:47:
f3:bc:91:03:44:43:f3:c9:4d:37:29:47:f8:7b:4e:b6:43:4e:
44:53:b3:7a:95:8b:11:c4:5a:a7:a8:2b:16:8a:1c:8e:56:fa:
3a:5f:44:44:8b:e1:5d:c4:5e:f9:bb:d7:31:34:e5:b4:f7:76:
29:21:56:e1:72:f4:6a:46:cc:40:f0:4b:e5:1e:2b:02:da:5d:
b2:f1:c1:3e:05:7a:23:67:49:4b:0f:bc:98:cc:7a:ce:98:cb:
f2:fd:4d:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 16:26:34 2026 by rpki-client