Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/bff465-b547-4152-a765-47dfdf2b0fd6/1/T9IH_FrQdzw9jpPkswYZwTuoHLQ.mft
File: T9IH_FrQdzw9jpPkswYZwTuoHLQ.mft (raw, json)
Hash identifier: tkPWs609ujtnCsacJ7bm9OQa0iuNCa6kYfnkGl1WclM=
Subject key identifier: 41:FA:06:1D:DB:5C:74:2C:C9:CE:A0:06:52:14:34:6E:89:97:3E:4F
Authority key identifier: 4F:D2:07:FC:5A:D0:77:3C:3D:8E:93:E4:B3:06:19:C1:3B:A8:1C:B4
Certificate issuer: /CN=4fd207fc5ad0773c3d8e93e4b30619c13ba81cb4
Certificate serial: 019D390A5448CAE5E717338816516607722F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T9IH_FrQdzw9jpPkswYZwTuoHLQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/bff465-b547-4152-a765-47dfdf2b0fd6/1/T9IH_FrQdzw9jpPkswYZwTuoHLQ.mft
Manifest number: 053B
Signing time: Sun 29 Mar 2026 10:01:11 +0000
Manifest this update: Sun 29 Mar 2026 10:01:11 +0000
Manifest next update: Mon 30 Mar 2026 10:01:11 +0000
Files and hashes: 1: Dpnv4EUcYX-n8qPbHdIk5R_FJW4.roa (hash: 358iegoNsmqH7oFOcFPF51BllDNQ4FiGmVnnkcdD73M=)
2: T9IH_FrQdzw9jpPkswYZwTuoHLQ.crl (hash: qhI46seBarYtaHlyveDjkXp+EsjuyYtE9RaIHXZp+4E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/bff465-b547-4152-a765-47dfdf2b0fd6/1/T9IH_FrQdzw9jpPkswYZwTuoHLQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/bff465-b547-4152-a765-47dfdf2b0fd6/1/T9IH_FrQdzw9jpPkswYZwTuoHLQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/T9IH_FrQdzw9jpPkswYZwTuoHLQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:0a:54:48:ca:e5:e7:17:33:88:16:51:66:07:72:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fd207fc5ad0773c3d8e93e4b30619c13ba81cb4
Validity
Not Before: Mar 29 10:01:11 2026 GMT
Not After : Mar 30 10:01:11 2026 GMT
Subject: CN=41fa061ddb5c742cc9cea0065214346e89973e4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:8a:ed:05:a6:d1:dd:b5:91:ad:e8:6d:0c:cc:
c6:83:a9:d0:20:e9:ca:67:df:f0:7d:5c:ea:de:fd:
01:3c:80:ea:c2:ea:ce:46:da:e6:a2:5b:ca:68:2b:
59:cb:a3:9f:61:e2:d4:53:cc:15:d5:18:8b:04:5f:
17:72:26:8c:a0:86:7b:00:74:be:b7:79:8d:6d:d2:
b7:88:36:04:6f:a4:4a:55:bb:b0:ff:47:c9:f6:88:
aa:36:54:25:10:61:1f:a1:a1:05:97:ef:c9:3e:8f:
9d:22:21:b9:49:2c:d3:7b:67:fe:4a:68:d5:49:9b:
97:88:a5:cb:09:e0:3b:6a:a0:bd:11:71:a0:d5:f1:
30:91:9f:3d:7b:08:fc:1c:66:1f:38:22:e8:8d:e6:
6f:45:12:f1:9c:e4:93:e8:7f:e4:b6:50:37:15:e6:
55:70:9f:14:89:07:6e:69:ea:dd:85:ed:d6:eb:62:
84:de:2a:c9:81:1f:a4:7f:55:05:ab:4b:b7:20:a5:
59:69:93:c2:16:b9:f6:87:af:8e:70:cb:68:88:16:
c3:a9:eb:ce:7c:02:45:bd:4b:4c:b4:e7:3c:4e:eb:
b0:cd:a2:8b:85:63:6f:78:d0:b5:6d:c2:fa:4c:04:
8f:57:9b:cf:d2:6b:f4:b2:55:ed:f0:1e:ea:2a:1c:
d6:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:FA:06:1D:DB:5C:74:2C:C9:CE:A0:06:52:14:34:6E:89:97:3E:4F
X509v3 Authority Key Identifier:
keyid:4F:D2:07:FC:5A:D0:77:3C:3D:8E:93:E4:B3:06:19:C1:3B:A8:1C:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T9IH_FrQdzw9jpPkswYZwTuoHLQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/bff465-b547-4152-a765-47dfdf2b0fd6/1/T9IH_FrQdzw9jpPkswYZwTuoHLQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/bff465-b547-4152-a765-47dfdf2b0fd6/1/T9IH_FrQdzw9jpPkswYZwTuoHLQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:24:47:54:05:18:11:ee:8c:3a:5c:fa:f1:56:e4:1d:bc:9a:
94:91:fc:66:20:f8:3a:8a:9c:b5:e9:e5:39:09:57:53:27:68:
6f:f9:8f:56:f4:f8:71:3b:be:71:c9:c6:57:52:e2:9b:66:25:
5b:60:47:92:2c:63:6d:14:b5:7b:52:fa:23:c1:fc:72:04:db:
72:aa:fa:2a:16:50:74:dd:75:0b:ec:eb:fe:1a:31:fa:3e:5a:
71:b8:b1:72:50:be:a9:73:e7:ca:c7:6a:bb:14:b4:e9:cb:a8:
97:21:32:a8:73:a5:14:7d:3e:74:b2:17:c4:dc:2d:e0:09:b7:
77:2f:1d:4e:9c:d1:d4:3c:65:2c:75:4f:3f:05:41:e5:c7:31:
38:fa:19:de:8a:a2:ed:30:73:05:75:9d:53:f0:16:94:09:37:
cb:66:db:63:1f:9f:d2:46:bb:f6:09:29:b9:46:6a:0b:ce:d9:
23:cf:d4:4a:5c:31:ac:a2:84:91:b0:b7:94:20:6f:62:7c:1e:
8c:e2:d0:91:64:c6:40:e8:7b:66:0b:6a:9a:50:b7:1c:8f:c7:
d1:63:f9:40:33:a7:d0:e0:9d:29:c2:ac:b9:5f:dd:dd:43:4b:
72:65:3d:b6:2b:69:10:7e:1f:5f:a0:d0:5a:21:84:ea:e1:c9:
0e:e8:84:b9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05ClRIyuXnFzOIFlFmB3IvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmZDIwN2ZjNWFkMDc3M2MzZDhlOTNlNGIzMDYxOWMxM2Jh
ODFjYjQwHhcNMjYwMzI5MTAwMTExWhcNMjYwMzMwMTAwMTExWjAzMTEwLwYDVQQD
Eyg0MWZhMDYxZGRiNWM3NDJjYzljZWEwMDY1MjE0MzQ2ZTg5OTczZTRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArIrtBabR3bWRrehtDMzGg6nQIOnK
Z9/wfVzq3v0BPIDqwurORtrmolvKaCtZy6OfYeLUU8wV1RiLBF8XciaMoIZ7AHS+
t3mNbdK3iDYEb6RKVbuw/0fJ9oiqNlQlEGEfoaEFl+/JPo+dIiG5SSzTe2f+SmjV
SZuXiKXLCeA7aqC9EXGg1fEwkZ89ewj8HGYfOCLojeZvRRLxnOST6H/ktlA3FeZV
cJ8UiQduaerdhe3W62KE3irJgR+kf1UFq0u3IKVZaZPCFrn2h6+OcMtoiBbDqevO
fAJFvUtMtOc8TuuwzaKLhWNveNC1bcL6TASPV5vP0mv0slXt8B7qKhzWWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEH6Bh3bXHQsyc6gBlIUNG6Jlz5PMB8GA1UdIwQY
MBaAFE/SB/xa0Hc8PY6T5LMGGcE7qBy0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDlJSF9GclFkenc5anBQa3N3WVp3VHVvSExRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My9iZmY0NjUtYjU0Ny00MTUyLWE3NjUt
NDdkZmRmMmIwZmQ2LzEvVDlJSF9GclFkenc5anBQa3N3WVp3VHVvSExRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85My9iZmY0NjUtYjU0Ny00MTUyLWE3NjUtNDdkZmRmMmIwZmQ2
LzEvVDlJSF9GclFkenc5anBQa3N3WVp3VHVvSExRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMyRHVAUY
Ee6MOlz68VbkHbyalJH8ZiD4OoqctenlOQlXUydob/mPVvT4cTu+ccnGV1Lim2Yl
W2BHkixjbRS1e1L6I8H8cgTbcqr6KhZQdN11C+zr/hox+j5acbixclC+qXPnysdq
uxS06cuolyEyqHOlFH0+dLIXxNwt4Am3dy8dTpzR1DxlLHVPPwVB5ccxOPoZ3oqi
7TBzBXWdU/AWlAk3y2bbYx+f0ka79gkpuUZqC87ZI8/USlwxrKKEkbC3lCBvYnwe
jOLQkWTGQOh7ZgtqmlC3HI/H0WP5QDOn0OCdKcKsuV/d3UNLcmU9titpEH4fX6DQ
WiGE6uHJDuiEuQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 15:38:20 2026 by rpki-client