Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/79/dcf969-3859-4dca-acf4-e2fedab3cb09/1/T2wXG0x11lCorxdohtAjWjTlnfA.mft
File: T2wXG0x11lCorxdohtAjWjTlnfA.mft (raw, json)
Hash identifier: Uz8pbHJ0ckyhWPOc6QJLk7KWzvOIqkVprftOmqy5038=
Subject key identifier: 7B:03:69:36:27:EF:0B:C3:9E:64:B6:FE:E5:18:06:A9:32:E8:39:38
Authority key identifier: 4F:6C:17:1B:4C:75:D6:50:A8:AF:17:68:86:D0:23:5A:34:E5:9D:F0
Certificate issuer: /CN=4f6c171b4c75d650a8af176886d0235a34e59df0
Certificate serial: 01A0ED9BB48ED47EBEFCC1B297E22B5D4B11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T2wXG0x11lCorxdohtAjWjTlnfA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/dcf969-3859-4dca-acf4-e2fedab3cb09/1/T2wXG0x11lCorxdohtAjWjTlnfA.mft
Manifest number: 0324
Signing time: Tue 29 Sep 2026 14:39:59 +0000
Manifest this update: Tue 29 Sep 2026 14:39:59 +0000
Manifest next update: Wed 30 Sep 2026 14:39:59 +0000
Files and hashes: 1: T2wXG0x11lCorxdohtAjWjTlnfA.crl (hash: Ylg54CinNHrt6yQi8lV8yzmUtCDRbdYebt1nE4Ym3+U=)
2: ghrKVF9FWib3Hu7p0PLQBqt4JyU.asa (hash: /trveC4IM5mT0pqf0QHgZvWakdn0yO3z422rCAbhLqA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/dcf969-3859-4dca-acf4-e2fedab3cb09/1/T2wXG0x11lCorxdohtAjWjTlnfA.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/dcf969-3859-4dca-acf4-e2fedab3cb09/1/T2wXG0x11lCorxdohtAjWjTlnfA.mft
rsync://rpki.ripe.net/repository/DEFAULT/T2wXG0x11lCorxdohtAjWjTlnfA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 14:39:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ed:9b:b4:8e:d4:7e:be:fc:c1:b2:97:e2:2b:5d:4b:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f6c171b4c75d650a8af176886d0235a34e59df0
Validity
Not Before: Sep 29 14:39:59 2026 GMT
Not After : Sep 30 14:39:59 2026 GMT
Subject: CN=7b03693627ef0bc39e64b6fee51806a932e83938
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ca:61:6d:95:10:12:8d:d3:5b:47:60:e1:52:
74:f4:ac:89:27:57:97:fd:e1:21:72:0d:42:fd:d4:
67:14:4b:e9:06:f7:fc:c2:2c:01:30:4f:d5:50:a6:
c2:c2:90:99:8a:4d:89:a0:20:dd:70:ab:16:f8:9b:
34:70:bc:ae:3e:46:bf:bd:82:04:b3:a6:aa:2a:38:
f5:00:74:39:e5:4d:58:8e:b8:9e:6f:8e:7b:71:eb:
2c:e4:7d:b8:dc:cd:84:50:bf:ce:ba:c4:61:32:98:
6d:a4:7b:4c:8d:32:32:28:90:fd:13:0c:ed:3c:ac:
44:1b:9c:d6:1b:a2:30:0f:36:62:2f:d3:1b:40:26:
56:65:70:8e:ec:9e:21:33:76:bb:ee:4f:52:a4:1b:
29:77:3c:21:77:ae:09:ba:4c:cf:15:7a:15:8e:30:
e6:72:49:c2:5a:22:20:c3:bd:72:e2:56:93:f9:a3:
a9:96:27:01:78:ef:f9:e6:21:da:ca:55:76:05:bb:
d6:74:0e:f7:62:f4:c3:f8:21:ad:bf:71:5b:89:cd:
60:79:d2:9b:6b:5b:7d:b9:77:df:6a:c3:e0:74:d5:
30:09:d2:d6:27:b9:b8:c9:75:75:f7:53:f5:a0:95:
ef:a5:28:4b:e9:fc:24:46:68:ee:00:27:8a:ad:cc:
0b:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:03:69:36:27:EF:0B:C3:9E:64:B6:FE:E5:18:06:A9:32:E8:39:38
X509v3 Authority Key Identifier:
keyid:4F:6C:17:1B:4C:75:D6:50:A8:AF:17:68:86:D0:23:5A:34:E5:9D:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T2wXG0x11lCorxdohtAjWjTlnfA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/dcf969-3859-4dca-acf4-e2fedab3cb09/1/T2wXG0x11lCorxdohtAjWjTlnfA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/dcf969-3859-4dca-acf4-e2fedab3cb09/1/T2wXG0x11lCorxdohtAjWjTlnfA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:d0:15:46:cf:60:06:d5:b2:dc:42:bd:18:bc:ba:f2:19:8b:
18:84:74:22:92:c7:da:1d:d9:61:5d:49:c3:3d:f0:76:f3:51:
38:bd:0c:b4:8a:e4:bd:5b:cd:9c:d9:61:12:4b:71:5d:24:af:
01:6a:0c:c3:e5:91:b5:e8:ad:4d:93:3e:5c:12:f3:71:ce:f1:
db:b8:e8:a1:65:7c:36:67:f8:d2:a5:db:61:18:7c:1d:70:01:
75:c4:93:15:f3:52:51:91:a2:54:c5:bc:60:04:d8:cb:d9:d2:
de:41:f6:0e:ac:b1:a6:79:17:d9:89:a1:a8:43:8e:1d:c0:28:
c7:36:b2:65:7b:9d:b8:43:7d:51:e1:1c:c9:f4:cb:8b:9c:df:
2b:00:ac:24:5a:3c:f4:d2:f6:74:df:9c:7d:ba:20:8c:e9:a1:
c9:7a:14:d0:cc:84:64:ef:ee:b6:30:56:bb:35:0d:98:f6:28:
8d:67:62:2d:fa:e9:ce:ca:21:8f:00:d3:2b:f5:7a:b3:b4:11:
41:98:87:a7:56:16:7e:ec:3a:fe:66:03:ce:74:2f:2a:f0:d8:
62:cf:26:09:8c:0c:51:97:21:d5:3b:aa:1f:b7:04:e0:66:b6:
cd:62:75:0b:64:fb:93:6f:97:eb:c8:43:4a:80:68:cf:55:03:
19:3d:79:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 00:56:17 2026 by rpki-client