Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/775190-cb94-4063-8c1a-ad147d915791/1/T4R35WnR19YPBGmnzIp_R0YDm7c.mft
File: T4R35WnR19YPBGmnzIp_R0YDm7c.mft (raw, json)
Hash identifier: /SJD5szOePgH9PfpbVxsC2jP2z5D0dz8xhmYARmnaaQ=
Subject key identifier: 10:3F:3A:1C:E8:0A:6B:FF:99:6E:E5:89:CB:39:2C:7D:CB:04:CC:40
Authority key identifier: 4F:84:77:E5:69:D1:D7:D6:0F:04:69:A7:CC:8A:7F:47:46:03:9B:B7
Certificate issuer: /CN=4f8477e569d1d7d60f0469a7cc8a7f4746039bb7
Certificate serial: 019DB1A1A5339F36E5B6DE678EDA5C556C47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T4R35WnR19YPBGmnzIp_R0YDm7c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/775190-cb94-4063-8c1a-ad147d915791/1/T4R35WnR19YPBGmnzIp_R0YDm7c.mft
Manifest number: 1532
Signing time: Tue 21 Apr 2026 20:00:53 +0000
Manifest this update: Tue 21 Apr 2026 20:00:53 +0000
Manifest next update: Wed 22 Apr 2026 20:00:53 +0000
Files and hashes: 1: DnWfHELWv6ZXmwtakQ_6GSkBnMs.roa (hash: sD3OKMp3tJ9sJrkja6bcQY3bU7GkERVJF54ua1KO+ik=)
2: T4R35WnR19YPBGmnzIp_R0YDm7c.crl (hash: 5RlHpiak745oDHYseKppXwY71W+f+7QT1xlsW1PnPq0=)
3: yIPdIGKPSnnWaFjIROBzg5HRQN4.roa (hash: mQmVzMDOZ6m+DVFs/cWi/nLMKKEFrfsoFqYmCDlkyPg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/775190-cb94-4063-8c1a-ad147d915791/1/T4R35WnR19YPBGmnzIp_R0YDm7c.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/775190-cb94-4063-8c1a-ad147d915791/1/T4R35WnR19YPBGmnzIp_R0YDm7c.mft
rsync://rpki.ripe.net/repository/DEFAULT/T4R35WnR19YPBGmnzIp_R0YDm7c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Apr 2026 20:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:b1:a1:a5:33:9f:36:e5:b6:de:67:8e:da:5c:55:6c:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f8477e569d1d7d60f0469a7cc8a7f4746039bb7
Validity
Not Before: Apr 21 20:00:53 2026 GMT
Not After : Apr 22 20:00:53 2026 GMT
Subject: CN=103f3a1ce80a6bff996ee589cb392c7dcb04cc40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:84:48:dc:14:fd:30:f0:36:12:af:26:14:c3:
de:7d:03:19:69:c9:28:35:5e:60:2a:11:f8:a4:71:
f7:d8:2e:e4:a7:89:36:b6:6c:61:d8:7c:96:c1:12:
92:b2:d3:26:47:b4:99:a6:c3:70:69:b3:5f:c3:a3:
da:f4:5b:d5:7f:bb:61:99:5a:32:41:e9:48:27:86:
ef:ce:ac:ac:9f:1d:fa:58:74:aa:3d:c0:aa:89:d2:
6f:2a:68:4e:3a:bb:f3:b0:46:77:00:f2:0f:8a:f8:
0c:2f:bb:69:9b:8b:4a:96:49:47:52:5e:1f:cb:a8:
59:2a:d0:9e:1e:32:72:5b:53:d7:35:c5:91:22:b2:
bf:87:b9:45:73:b6:00:03:a3:a1:07:27:f6:87:35:
4d:73:a4:aa:0c:4a:26:8f:79:05:86:8b:ed:88:f1:
ad:5d:53:d6:9d:8c:15:de:bd:54:fb:c0:3c:95:23:
f8:8c:92:9d:66:67:66:17:7b:3f:ff:3b:c5:d5:4e:
18:6b:86:8e:fc:15:a0:83:96:fd:05:75:87:48:9d:
dc:83:a2:c8:23:12:17:c2:10:77:db:cd:7c:b3:c0:
9c:08:a9:be:5c:4a:87:f2:4d:a8:8a:b8:6f:8d:b3:
a1:70:8d:13:07:d6:2b:f8:92:38:2a:09:31:a0:69:
78:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:3F:3A:1C:E8:0A:6B:FF:99:6E:E5:89:CB:39:2C:7D:CB:04:CC:40
X509v3 Authority Key Identifier:
keyid:4F:84:77:E5:69:D1:D7:D6:0F:04:69:A7:CC:8A:7F:47:46:03:9B:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T4R35WnR19YPBGmnzIp_R0YDm7c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/775190-cb94-4063-8c1a-ad147d915791/1/T4R35WnR19YPBGmnzIp_R0YDm7c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/775190-cb94-4063-8c1a-ad147d915791/1/T4R35WnR19YPBGmnzIp_R0YDm7c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:b8:11:ec:3d:8f:6f:8d:1e:ff:9f:6e:3a:5c:1b:96:71:68:
a4:e7:e9:6b:3b:22:9b:5f:13:75:48:82:f0:08:fa:73:b1:68:
96:0e:eb:c5:22:53:26:a8:62:9e:d7:4c:2f:74:c6:f6:61:57:
07:ca:85:7b:6c:00:ea:7b:6c:5f:d7:f4:d6:5a:4f:85:bb:bb:
5c:f3:d2:b5:86:df:3e:9c:2b:54:65:6d:9c:de:b6:68:23:8c:
0d:4b:19:5e:10:28:41:b6:5a:fa:03:d3:f0:aa:ef:48:21:d6:
ad:0e:d5:30:d8:fc:6b:4c:6c:3b:cc:91:5b:0f:bd:b7:b0:3d:
51:48:89:66:fe:02:e9:0b:cf:1d:3d:99:1e:8b:bb:ed:fd:a8:
2f:b1:7f:11:bf:36:78:a0:cf:09:d6:9a:37:eb:16:91:f4:4c:
3e:88:f1:5b:99:a2:77:0f:fa:bf:1b:a5:d1:13:67:aa:e1:c2:
41:15:33:de:d1:84:c1:ec:f5:57:86:b8:4b:93:5b:2c:56:f2:
7c:a7:bf:03:a7:cc:2d:ad:f7:8c:a8:17:c4:76:3d:40:84:7c:
20:e7:f4:b7:07:96:53:be:26:31:1e:31:b5:3d:d5:35:26:d7:
22:2d:4f:c3:81:99:32:a8:2f:d4:a8:8a:1f:88:96:e6:73:7c:
4c:15:fa:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 22 01:46:23 2026 by rpki-client