Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/775190-cb94-4063-8c1a-ad147d915791/1/T4R35WnR19YPBGmnzIp_R0YDm7c.mft
File: T4R35WnR19YPBGmnzIp_R0YDm7c.mft (raw, json)
Hash identifier: NF6gfw/39y7Hl+15/pwFsHqCJ5UBrW3WUTx6nxwl2Jg=
Subject key identifier: 2D:33:07:15:4A:8E:06:D7:1C:12:8B:6C:4C:76:1E:06:26:D5:21:E2
Authority key identifier: 4F:84:77:E5:69:D1:D7:D6:0F:04:69:A7:CC:8A:7F:47:46:03:9B:B7
Certificate issuer: /CN=4f8477e569d1d7d60f0469a7cc8a7f4746039bb7
Certificate serial: 019CC7F50DCC76E3938105DB2BAB83F06221
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T4R35WnR19YPBGmnzIp_R0YDm7c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/775190-cb94-4063-8c1a-ad147d915791/1/T4R35WnR19YPBGmnzIp_R0YDm7c.mft
Manifest number: 14B9
Signing time: Sat 07 Mar 2026 11:00:51 +0000
Manifest this update: Sat 07 Mar 2026 11:00:51 +0000
Manifest next update: Sun 08 Mar 2026 11:00:51 +0000
Files and hashes: 1: DnWfHELWv6ZXmwtakQ_6GSkBnMs.roa (hash: sD3OKMp3tJ9sJrkja6bcQY3bU7GkERVJF54ua1KO+ik=)
2: T4R35WnR19YPBGmnzIp_R0YDm7c.crl (hash: 6GD7U2EZzlb6yxjTRBcMoSsv0iNKVeHX1DFjywWDop4=)
3: yIPdIGKPSnnWaFjIROBzg5HRQN4.roa (hash: mQmVzMDOZ6m+DVFs/cWi/nLMKKEFrfsoFqYmCDlkyPg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/775190-cb94-4063-8c1a-ad147d915791/1/T4R35WnR19YPBGmnzIp_R0YDm7c.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/775190-cb94-4063-8c1a-ad147d915791/1/T4R35WnR19YPBGmnzIp_R0YDm7c.mft
rsync://rpki.ripe.net/repository/DEFAULT/T4R35WnR19YPBGmnzIp_R0YDm7c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Mar 2026 10:49:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:c7:f5:0d:cc:76:e3:93:81:05:db:2b:ab:83:f0:62:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f8477e569d1d7d60f0469a7cc8a7f4746039bb7
Validity
Not Before: Mar 7 11:00:51 2026 GMT
Not After : Mar 8 11:00:51 2026 GMT
Subject: CN=2d3307154a8e06d71c128b6c4c761e0626d521e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:d4:81:c1:64:45:d6:a8:ae:7e:dd:ce:59:91:
0e:86:5b:08:7a:38:74:97:71:0d:f0:bb:c9:66:a9:
5c:6a:06:e2:c0:4c:b3:2f:5c:9b:24:e5:ed:f0:8d:
f0:b2:f5:ea:b3:f8:0b:a5:f8:2e:74:e2:e4:72:45:
b1:f4:04:dc:a7:78:00:ab:c9:36:aa:39:d4:cd:04:
3c:d0:7d:d0:a2:83:64:be:80:0a:7f:7d:ed:9f:ff:
5f:c2:72:c8:8f:89:0a:68:b3:0e:44:54:47:7a:e8:
2f:c4:e5:7d:0d:97:c1:30:8d:26:01:49:f9:53:e2:
32:14:a8:06:a7:d3:78:00:a0:60:0e:75:23:f2:62:
13:a4:84:27:b9:44:6c:92:37:c9:28:23:cf:23:6d:
f8:3e:80:e6:f1:fc:46:ba:9a:a2:6b:80:5c:c3:d0:
d1:e2:96:d4:d4:5d:e9:22:91:88:fb:cb:51:29:08:
62:d5:fb:9c:4e:45:79:8d:ba:a7:6c:a1:8a:60:55:
e3:ca:1a:7c:2e:b6:ad:75:1a:c2:12:c2:00:37:6c:
5b:fd:a5:e6:35:6a:39:11:5d:8c:ae:d1:80:b5:da:
a8:e0:fa:55:b0:d1:24:f5:7a:7e:97:d1:ef:6b:f3:
5a:6c:f4:c8:79:5f:0e:b5:d0:c0:03:35:fc:7a:62:
6b:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:33:07:15:4A:8E:06:D7:1C:12:8B:6C:4C:76:1E:06:26:D5:21:E2
X509v3 Authority Key Identifier:
keyid:4F:84:77:E5:69:D1:D7:D6:0F:04:69:A7:CC:8A:7F:47:46:03:9B:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T4R35WnR19YPBGmnzIp_R0YDm7c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/775190-cb94-4063-8c1a-ad147d915791/1/T4R35WnR19YPBGmnzIp_R0YDm7c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/775190-cb94-4063-8c1a-ad147d915791/1/T4R35WnR19YPBGmnzIp_R0YDm7c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:9f:b1:6c:b3:f6:c6:dc:e3:ad:47:41:88:ac:1d:e0:0b:89:
88:a1:8d:af:55:a7:f3:70:84:02:b9:96:76:d3:3c:e5:ba:c9:
8c:0e:34:68:6d:a4:c7:b1:cf:d8:2a:73:ce:8e:63:a2:5c:b8:
6d:eb:a6:86:5d:ab:bb:7a:27:f6:bd:d6:c4:79:38:4b:e6:5c:
20:f7:61:9a:db:38:d3:b4:66:83:83:9c:70:aa:4f:96:aa:2b:
36:08:60:ca:ea:d3:a8:45:c1:25:4c:92:db:2a:f6:db:bb:0b:
22:e7:f9:e6:c8:ae:a0:e4:97:5c:03:17:58:bd:d2:7f:d0:7e:
ee:6a:57:01:71:cc:a3:02:4c:32:86:0c:39:a3:4b:94:7d:ab:
8f:ba:73:28:6c:54:78:4d:4f:1b:62:a2:a1:25:ec:4f:49:4d:
6b:b2:99:ec:8d:29:d2:a2:d0:28:de:23:f7:34:c4:38:a6:0f:
fd:66:75:19:73:7b:c0:35:8a:c8:01:15:d2:60:0f:7a:0c:37:
a4:54:92:1b:d4:bc:5f:69:5a:f6:f3:d9:ab:d3:5e:dd:98:03:
99:f3:4f:29:93:4a:34:ba:42:f0:30:8e:4a:59:ab:f8:6b:56:
ab:33:b0:62:06:2d:c7:53:05:25:b6:99:15:70:dc:0b:d5:a7:
51:14:15:44
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZzH9Q3MduOTgQXbK6uD8GIhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmODQ3N2U1NjlkMWQ3ZDYwZjA0NjlhN2NjOGE3ZjQ3NDYw
MzliYjcwHhcNMjYwMzA3MTEwMDUxWhcNMjYwMzA4MTEwMDUxWjAzMTEwLwYDVQQD
EygyZDMzMDcxNTRhOGUwNmQ3MWMxMjhiNmM0Yzc2MWUwNjI2ZDUyMWUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9tSBwWRF1qiuft3OWZEOhlsIejh0
l3EN8LvJZqlcagbiwEyzL1ybJOXt8I3wsvXqs/gLpfgudOLkckWx9ATcp3gAq8k2
qjnUzQQ80H3QooNkvoAKf33tn/9fwnLIj4kKaLMORFRHeugvxOV9DZfBMI0mAUn5
U+IyFKgGp9N4AKBgDnUj8mITpIQnuURskjfJKCPPI234PoDm8fxGupqia4Bcw9DR
4pbU1F3pIpGI+8tRKQhi1fucTkV5jbqnbKGKYFXjyhp8LratdRrCEsIAN2xb/aXm
NWo5EV2MrtGAtdqo4PpVsNEk9Xp+l9Hva/NabPTIeV8OtdDAAzX8emJrWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC0zBxVKjgbXHBKLbEx2HgYm1SHiMB8GA1UdIwQY
MBaAFE+Ed+Vp0dfWDwRpp8yKf0dGA5u3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDRSMzVXblIxOVlQQkdtbnpJcF9SMFlEbTdjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZC83NzUxOTAtY2I5NC00MDYzLThjMWEt
YWQxNDdkOTE1NzkxLzEvVDRSMzVXblIxOVlQQkdtbnpJcF9SMFlEbTdjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZC83NzUxOTAtY2I5NC00MDYzLThjMWEtYWQxNDdkOTE1Nzkx
LzEvVDRSMzVXblIxOVlQQkdtbnpJcF9SMFlEbTdjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJZ+xbLP2
xtzjrUdBiKwd4AuJiKGNr1Wn83CEArmWdtM85brJjA40aG2kx7HP2Cpzzo5joly4
beumhl2ru3on9r3WxHk4S+ZcIPdhmts407Rmg4OccKpPlqorNghgyurTqEXBJUyS
2yr227sLIuf55siuoOSXXAMXWL3Sf9B+7mpXAXHMowJMMoYMOaNLlH2rj7pzKGxU
eE1PG2KioSXsT0lNa7KZ7I0p0qLQKN4j9zTEOKYP/WZ1GXN7wDWKyAEV0mAPegw3
pFSSG9S8X2la9vPZq9Ne3ZgDmfNPKZNKNLpC8DCOSlmr+GtWqzOwYgYtx1MFJbaZ
FXDcC9WnURQVRA==
-----END CERTIFICATE-----
Generated at Sat Mar 7 19:21:00 2026 by rpki-client