Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/0c3b1f-dab8-4762-9d04-f941cc39a71e/1/T9ZCEC691_ImjBTCfj678mtMr-s.mft
File: T9ZCEC691_ImjBTCfj678mtMr-s.mft (raw, json)
Hash identifier: T8KBtG5gfnNwKUhDxin+IS26ce/wSYX1Tg+DiDppHWw=
Subject key identifier: 56:33:AC:74:98:DF:F5:21:AF:4E:28:54:79:92:A5:82:D2:5C:60:A3
Authority key identifier: 4F:D6:42:10:2E:BD:D7:F2:26:8C:14:C2:7E:3E:BB:F2:6B:4C:AF:EB
Certificate issuer: /CN=4fd642102ebdd7f2268c14c27e3ebbf26b4cafeb
Certificate serial: 019D389C61413C5DE2A2B848C76F582A07ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T9ZCEC691_ImjBTCfj678mtMr-s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/0c3b1f-dab8-4762-9d04-f941cc39a71e/1/T9ZCEC691_ImjBTCfj678mtMr-s.mft
Manifest number: B1
Signing time: Sun 29 Mar 2026 08:01:05 +0000
Manifest this update: Sun 29 Mar 2026 08:01:05 +0000
Manifest next update: Mon 30 Mar 2026 08:01:05 +0000
Files and hashes: 1: FXU6diYKcbRIsw4MmevlGTpvGb0.roa (hash: aFnvjS1XXi7qixi4xTsDLaU24Ku8jOZbxW9SYMuhSJc=)
2: T9ZCEC691_ImjBTCfj678mtMr-s.crl (hash: c9nfz+5MTz2cTb3lZsG4muURjkPG/FArRmBZxpiFEUs=)
3: ZTOkVo51zjkueJP-_jF8sE0dlwI.roa (hash: qWI1aXm7aJOa2gqUSo121mJhm0HQWb9xB4CjBEm9B2Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/0c3b1f-dab8-4762-9d04-f941cc39a71e/1/T9ZCEC691_ImjBTCfj678mtMr-s.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/0c3b1f-dab8-4762-9d04-f941cc39a71e/1/T9ZCEC691_ImjBTCfj678mtMr-s.mft
rsync://rpki.ripe.net/repository/DEFAULT/T9ZCEC691_ImjBTCfj678mtMr-s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:61:41:3c:5d:e2:a2:b8:48:c7:6f:58:2a:07:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fd642102ebdd7f2268c14c27e3ebbf26b4cafeb
Validity
Not Before: Mar 29 08:01:05 2026 GMT
Not After : Mar 30 08:01:05 2026 GMT
Subject: CN=5633ac7498dff521af4e28547992a582d25c60a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:6c:aa:13:3d:20:ef:85:b1:0d:fe:c9:f6:59:
19:c2:ae:be:05:86:35:5a:91:50:61:87:8d:33:4c:
f2:cc:10:64:68:7a:d4:c7:6d:89:8f:59:b4:74:d9:
0a:fc:38:5f:57:4e:16:7e:22:b3:f7:63:5f:95:04:
79:76:79:9b:41:02:4d:3d:7b:5d:1e:69:29:bb:77:
45:c0:be:e7:dc:b5:11:5c:06:3c:9c:51:9e:d0:aa:
0c:9b:3e:a7:f9:b2:ca:d2:45:98:f7:ad:39:4f:37:
8c:0a:7b:f7:a3:c3:1d:43:c7:20:f7:26:c3:cd:de:
76:88:52:3d:fe:ff:54:85:d4:6b:30:27:d5:e6:ac:
55:9f:96:aa:ab:95:9b:1f:33:53:7e:90:10:b7:ee:
9a:3b:f3:72:c8:86:37:c2:36:98:e1:66:c5:2b:2c:
64:71:b4:4c:ae:40:2c:c4:ae:c8:5c:59:70:75:7f:
ca:52:ec:37:c9:55:df:f8:49:d4:2e:e2:09:ca:7f:
be:c3:c1:7a:8e:f2:45:d9:75:ec:b6:de:97:1b:24:
1f:64:59:78:6a:9c:82:4b:95:b4:48:a7:9c:7d:ec:
72:b9:5b:c0:14:15:ba:54:85:df:89:15:15:1a:07:
9e:28:cb:36:2e:16:30:df:55:8e:90:56:37:1a:00:
e0:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:33:AC:74:98:DF:F5:21:AF:4E:28:54:79:92:A5:82:D2:5C:60:A3
X509v3 Authority Key Identifier:
keyid:4F:D6:42:10:2E:BD:D7:F2:26:8C:14:C2:7E:3E:BB:F2:6B:4C:AF:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T9ZCEC691_ImjBTCfj678mtMr-s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/0c3b1f-dab8-4762-9d04-f941cc39a71e/1/T9ZCEC691_ImjBTCfj678mtMr-s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/0c3b1f-dab8-4762-9d04-f941cc39a71e/1/T9ZCEC691_ImjBTCfj678mtMr-s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:41:1b:c3:b3:12:a3:76:51:91:67:01:32:eb:47:f6:d4:ff:
ca:35:cb:89:5d:e7:5b:73:5a:8e:7b:52:79:f7:da:dc:1b:86:
9f:81:8d:a2:ee:a7:42:0a:60:cd:d5:91:c5:75:49:9a:e1:58:
6c:4e:bb:00:aa:3e:96:ed:bd:f2:b7:97:a8:59:34:86:0f:1c:
f3:5f:55:ae:64:c8:d6:5f:f2:49:00:a5:b2:e3:b2:50:7e:c5:
4a:7e:7a:51:db:43:ca:b8:c2:5e:de:fa:d8:fb:3e:b0:0f:b7:
e4:7b:73:0e:39:15:57:ac:88:26:72:37:74:ab:89:2f:f8:b0:
9b:47:fd:5c:8a:9c:17:7f:47:5a:d8:d4:46:97:42:16:d9:a2:
d4:e9:79:51:04:12:f3:3c:50:08:1c:a2:f9:51:58:7b:c0:51:
24:0f:4f:1a:ea:55:81:1c:69:27:7c:35:95:e6:62:a5:39:0a:
3b:b6:5d:12:0c:aa:d0:b8:54:71:5c:82:ae:45:4e:cb:d2:10:
ae:40:c2:36:4b:d5:78:a3:f4:a5:b9:e1:1b:02:93:46:83:a6:
0f:bc:6e:d9:cf:60:89:31:71:eb:ce:21:c4:71:2b:9f:0a:90:
29:b2:36:bf:28:64:c3:37:8f:09:f2:60:c5:37:33:89:97:da:
43:4b:7d:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:53:09 2026 by rpki-client