Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/66bd3a-5121-490d-8c92-6ea94a961d4c/1/T02gn7vpD7efDwiyB_g18PDaKf4.mft
File: T02gn7vpD7efDwiyB_g18PDaKf4.mft (raw, json)
Hash identifier: uDEu95L34Rua0QaiGNAcBDH+U9DKL6HMHpJIjcuavP8=
Subject key identifier: 67:3B:D1:0E:3B:A2:C4:F5:9D:94:5F:35:CD:CA:B0:F5:3A:7C:CD:82
Authority key identifier: 4F:4D:A0:9F:BB:E9:0F:B7:9F:0F:08:B2:07:F8:35:F0:F0:DA:29:FE
Certificate issuer: /CN=4f4da09fbbe90fb79f0f08b207f835f0f0da29fe
Certificate serial: 019FA229AECA40100E708EFB8D24CFC6AC75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T02gn7vpD7efDwiyB_g18PDaKf4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/66bd3a-5121-490d-8c92-6ea94a961d4c/1/T02gn7vpD7efDwiyB_g18PDaKf4.mft
Manifest number: 19D3
Signing time: Mon 27 Jul 2026 06:01:08 +0000
Manifest this update: Mon 27 Jul 2026 06:01:08 +0000
Manifest next update: Tue 28 Jul 2026 06:01:08 +0000
Files and hashes: 1: J-GnCjEevLnsSylTNN_DRQKgLxU.roa (hash: Ih+rPEkL3JjpnefkXhpQxgVK3VfQEJZ/zybpvC3KpeM=)
2: T02gn7vpD7efDwiyB_g18PDaKf4.crl (hash: J6+ceckLGPTKiJwmdsOrX+KYOie7kfh30avFP6EgtR0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/66bd3a-5121-490d-8c92-6ea94a961d4c/1/T02gn7vpD7efDwiyB_g18PDaKf4.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/66bd3a-5121-490d-8c92-6ea94a961d4c/1/T02gn7vpD7efDwiyB_g18PDaKf4.mft
rsync://rpki.ripe.net/repository/DEFAULT/T02gn7vpD7efDwiyB_g18PDaKf4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 06:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a2:29:ae:ca:40:10:0e:70:8e:fb:8d:24:cf:c6:ac:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f4da09fbbe90fb79f0f08b207f835f0f0da29fe
Validity
Not Before: Jul 27 06:01:08 2026 GMT
Not After : Jul 28 06:01:08 2026 GMT
Subject: CN=673bd10e3ba2c4f59d945f35cdcab0f53a7ccd82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:cc:51:1c:1e:d8:ec:64:10:3e:ca:28:5a:32:
26:30:d3:b9:7d:89:99:45:70:cd:f8:d4:14:95:0d:
57:52:87:3a:56:0d:45:05:a9:d7:12:23:af:60:eb:
3a:28:33:c4:10:70:04:a9:f8:fe:9b:b3:4e:d3:9f:
2b:8e:42:61:42:7e:29:c7:0f:72:31:b6:4c:02:92:
5b:14:ec:0f:35:03:04:d1:fe:54:5a:37:3f:1b:42:
58:cf:ea:8c:de:36:41:80:7c:e7:4b:b3:82:87:b9:
c8:2e:f4:b4:85:45:1a:e9:c5:59:f5:cb:a9:43:03:
68:62:1a:54:99:10:13:e9:72:ee:b9:f5:b8:56:fc:
90:c1:71:32:e0:26:07:b9:78:bb:6e:1c:04:f9:77:
31:87:c5:c9:9c:d5:49:22:0c:dc:84:f3:68:3a:83:
3b:3a:a8:4f:ee:47:93:d9:fc:4f:15:8e:b9:e0:cc:
60:1c:92:8e:5a:a3:04:fc:95:5d:11:4d:a4:cd:31:
b6:02:02:57:b6:70:aa:3e:d3:0f:bb:26:08:73:09:
4e:2c:44:35:80:83:20:fd:0e:2e:7a:4a:72:1e:91:
27:23:0f:96:08:9c:f3:6d:97:13:a2:d2:c3:89:46:
7e:7c:85:09:92:2f:15:6a:15:8f:4c:d4:cb:00:21:
ae:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:3B:D1:0E:3B:A2:C4:F5:9D:94:5F:35:CD:CA:B0:F5:3A:7C:CD:82
X509v3 Authority Key Identifier:
keyid:4F:4D:A0:9F:BB:E9:0F:B7:9F:0F:08:B2:07:F8:35:F0:F0:DA:29:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T02gn7vpD7efDwiyB_g18PDaKf4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/66bd3a-5121-490d-8c92-6ea94a961d4c/1/T02gn7vpD7efDwiyB_g18PDaKf4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/66bd3a-5121-490d-8c92-6ea94a961d4c/1/T02gn7vpD7efDwiyB_g18PDaKf4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:d0:98:a6:fd:eb:84:f4:3c:d3:b8:54:47:72:a4:f1:6d:a0:
d6:2a:29:5b:67:7b:50:64:12:3e:2a:a3:26:eb:03:c8:f2:03:
c0:30:87:af:61:29:3c:30:13:6b:85:4e:0d:c6:d7:f7:5a:1d:
53:4c:a7:a8:b0:6b:ba:87:75:8b:01:b9:03:52:06:3e:42:d6:
b2:7d:19:a8:ee:60:d0:3e:0a:62:aa:40:3d:cb:17:2c:ec:a5:
f7:f0:ea:b3:33:17:56:d8:ef:e3:4e:93:0e:d0:7b:20:2e:0d:
91:bd:30:81:8d:4e:19:7e:27:2c:e3:a0:fb:a0:be:df:e4:cc:
28:65:65:57:99:12:c2:40:64:33:fb:25:fb:d5:a4:6d:4a:63:
37:58:d1:10:17:37:84:71:03:83:82:64:c2:a4:2e:4e:55:04:
cf:b8:b9:73:73:12:d6:cd:e9:34:9a:c1:43:78:5c:4d:81:8e:
35:6b:9e:04:2d:e5:b4:d4:2b:60:5e:29:8d:cf:d5:3f:ca:fe:
42:0a:02:e5:fc:ad:e1:c4:0e:bc:82:4e:a5:5f:9c:54:b0:4a:
8b:2d:b2:5d:87:e9:e9:f5:05:83:bb:62:b3:bd:44:cb:ba:90:
ab:54:41:7a:3c:82:60:bc:29:4e:64:a8:47:5c:f6:fa:e2:aa:
cd:c8:8f:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 11:35:58 2026 by rpki-client