Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/8d2d0a-2f70-4859-bb44-5b5078625dea/1/T43nLlAGr221URXhtwkyAjzuy6Q.mft
File: T43nLlAGr221URXhtwkyAjzuy6Q.mft (raw, json)
Hash identifier: 7TFAILrJ7//+U4/pKEcRNxQnCVBgrzoTXebx9xKTwtE=
Subject key identifier: C5:69:55:9E:51:F7:27:CD:9D:0F:53:1E:4F:18:E5:09:0E:3D:4F:A9
Authority key identifier: 4F:8D:E7:2E:50:06:AF:6D:B5:51:15:E1:B7:09:32:02:3C:EE:CB:A4
Certificate issuer: /CN=4f8de72e5006af6db55115e1b70932023ceecba4
Certificate serial: 019F189EDB7DF21E502D0B8471C6E26DD90E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T43nLlAGr221URXhtwkyAjzuy6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/8d2d0a-2f70-4859-bb44-5b5078625dea/1/T43nLlAGr221URXhtwkyAjzuy6Q.mft
Manifest number: 0749
Signing time: Tue 30 Jun 2026 13:01:31 +0000
Manifest this update: Tue 30 Jun 2026 13:01:31 +0000
Manifest next update: Wed 01 Jul 2026 13:01:31 +0000
Files and hashes: 1: T43nLlAGr221URXhtwkyAjzuy6Q.crl (hash: h316r9UrZ3KtqNA1kN4xxIZoiQV2sj3kgfeWOPFtPso=)
2: wx17y-l3HkSd9N9CZPeZR_8bXnw.roa (hash: yiL1AQyzbftZhvbhGblm6UfDIK9AiqPEBKJPPMrVRRI=)
3: yBDJ-pAMP7frPncua7RF2hKXfCY.roa (hash: mFraCdKMiItFoo5vBUABj/Wg3IFn64JvQY/DrrUSa88=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/8d2d0a-2f70-4859-bb44-5b5078625dea/1/T43nLlAGr221URXhtwkyAjzuy6Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/8d2d0a-2f70-4859-bb44-5b5078625dea/1/T43nLlAGr221URXhtwkyAjzuy6Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/T43nLlAGr221URXhtwkyAjzuy6Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 13:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:9e:db:7d:f2:1e:50:2d:0b:84:71:c6:e2:6d:d9:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f8de72e5006af6db55115e1b70932023ceecba4
Validity
Not Before: Jun 30 13:01:31 2026 GMT
Not After : Jul 1 13:01:31 2026 GMT
Subject: CN=c569559e51f727cd9d0f531e4f18e5090e3d4fa9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:f7:fa:01:ee:3f:fa:7c:c9:31:9d:58:96:9d:
04:df:2e:09:03:d5:4f:56:ae:1a:e0:10:7a:ee:58:
2c:7d:b1:3f:04:42:a0:fb:5f:b3:63:8b:ba:6f:af:
37:94:67:29:8d:24:e5:42:82:7c:d2:64:3a:cc:81:
16:c3:6b:7d:ea:8d:eb:a4:35:dc:6b:c6:e0:72:24:
81:4d:b3:39:6c:d4:8e:6e:74:c2:30:87:6b:e1:25:
57:00:0d:31:23:77:d7:d1:88:ce:74:a0:8a:15:cb:
3d:cf:6f:ff:22:de:75:4f:22:b5:16:bb:19:c7:be:
76:3c:21:99:01:d4:59:08:37:80:56:65:8b:08:2a:
e4:3e:4b:68:66:36:14:ec:e4:e7:27:a8:0d:f8:fa:
1b:28:ae:02:1a:c3:4b:46:c7:f0:ab:df:dd:de:df:
2c:da:aa:21:da:5f:47:59:1e:cb:24:39:6c:70:37:
0d:91:6a:91:86:d3:69:c1:e0:59:33:71:e0:69:0c:
9b:cb:e9:01:a8:f5:81:f5:a1:de:df:71:00:f0:68:
db:f7:2e:a9:8a:6e:98:b8:ea:78:eb:01:ff:02:97:
96:33:0d:c8:c3:91:0f:9c:c2:25:6e:87:34:5f:9f:
06:23:5c:57:9e:66:e1:f8:b7:d9:d3:9e:26:11:e2:
93:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:69:55:9E:51:F7:27:CD:9D:0F:53:1E:4F:18:E5:09:0E:3D:4F:A9
X509v3 Authority Key Identifier:
keyid:4F:8D:E7:2E:50:06:AF:6D:B5:51:15:E1:B7:09:32:02:3C:EE:CB:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T43nLlAGr221URXhtwkyAjzuy6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/8d2d0a-2f70-4859-bb44-5b5078625dea/1/T43nLlAGr221URXhtwkyAjzuy6Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/8d2d0a-2f70-4859-bb44-5b5078625dea/1/T43nLlAGr221URXhtwkyAjzuy6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:21:d1:c6:0c:a8:62:62:46:8c:85:d1:8b:9b:59:02:49:28:
d6:65:83:35:35:a5:3d:e9:77:40:72:11:8d:9d:02:94:18:61:
41:20:fa:aa:97:33:52:7a:1e:9f:e6:04:6b:33:8a:51:d2:da:
d9:fb:1c:95:c3:59:6b:35:ef:fb:11:1a:c7:ec:8f:14:db:22:
3e:c7:12:7d:ef:db:05:e6:c5:8a:1d:76:94:a6:33:30:51:e4:
f6:9c:e0:33:10:57:f1:7f:35:92:45:8c:36:53:3f:87:33:18:
f1:80:5c:62:c8:7c:4d:53:48:e9:82:3e:fd:b4:e9:92:f1:8f:
e1:dc:25:fc:fe:1e:98:a8:24:bb:a2:8f:ec:fb:c7:1b:29:3f:
8b:bd:8b:ca:76:b7:4b:07:1d:0e:19:66:b5:62:ee:1c:2e:9d:
b7:e9:1d:f5:e1:3d:ac:1e:02:15:db:a8:eb:b0:43:8f:db:f2:
44:98:86:1d:7d:54:87:62:b1:08:3f:87:c1:77:b3:49:f1:38:
a7:a0:c5:42:74:8e:e3:63:07:0b:2e:99:3a:5a:08:6e:25:d8:
ac:d6:56:f0:b0:28:ac:76:0f:eb:f3:f0:17:b3:1c:71:19:63:
f1:9d:3c:09:2e:7c:09:8a:ba:26:ee:f1:82:c0:33:a3:9d:a6:
a2:f2:83:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 22:44:45 2026 by rpki-client