Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/775190-cb94-4063-8c1a-ad147d915791/1/T4R35WnR19YPBGmnzIp_R0YDm7c.mft
File: T4R35WnR19YPBGmnzIp_R0YDm7c.mft (raw, json)
Hash identifier: bSJKb53LeMb3LJZ8dwmFXE5zAtdyTafU8lDHOF8qnWQ=
Subject key identifier: C5:43:63:B3:05:AC:75:36:BE:85:32:C0:48:A1:E8:DF:A5:6A:E6:65
Authority key identifier: 4F:84:77:E5:69:D1:D7:D6:0F:04:69:A7:CC:8A:7F:47:46:03:9B:B7
Certificate issuer: /CN=4f8477e569d1d7d60f0469a7cc8a7f4746039bb7
Certificate serial: 019F86E92C43CFC1C36745F4E570C2C858C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T4R35WnR19YPBGmnzIp_R0YDm7c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/775190-cb94-4063-8c1a-ad147d915791/1/T4R35WnR19YPBGmnzIp_R0YDm7c.mft
Manifest number: 1625
Signing time: Tue 21 Jul 2026 23:00:55 +0000
Manifest this update: Tue 21 Jul 2026 23:00:55 +0000
Manifest next update: Wed 22 Jul 2026 23:00:55 +0000
Files and hashes: 1: DnWfHELWv6ZXmwtakQ_6GSkBnMs.roa (hash: sD3OKMp3tJ9sJrkja6bcQY3bU7GkERVJF54ua1KO+ik=)
2: T4R35WnR19YPBGmnzIp_R0YDm7c.crl (hash: c8vf57xkJaCwnY+veJSmTZ6VMTsNbScpjRMNzkVnMA4=)
3: yIPdIGKPSnnWaFjIROBzg5HRQN4.roa (hash: mQmVzMDOZ6m+DVFs/cWi/nLMKKEFrfsoFqYmCDlkyPg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/775190-cb94-4063-8c1a-ad147d915791/1/T4R35WnR19YPBGmnzIp_R0YDm7c.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/775190-cb94-4063-8c1a-ad147d915791/1/T4R35WnR19YPBGmnzIp_R0YDm7c.mft
rsync://rpki.ripe.net/repository/DEFAULT/T4R35WnR19YPBGmnzIp_R0YDm7c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:86:e9:2c:43:cf:c1:c3:67:45:f4:e5:70:c2:c8:58:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f8477e569d1d7d60f0469a7cc8a7f4746039bb7
Validity
Not Before: Jul 21 23:00:55 2026 GMT
Not After : Jul 22 23:00:55 2026 GMT
Subject: CN=c54363b305ac7536be8532c048a1e8dfa56ae665
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:c9:95:4e:2f:65:a7:73:5f:de:5e:cd:6c:a1:
b9:0d:a4:09:31:74:44:a9:9c:c7:ef:b9:86:b7:3b:
bd:5f:ec:63:fc:7f:09:f0:81:05:26:09:b6:2a:ea:
76:e3:36:7f:d5:c9:7f:f0:bf:11:17:0f:eb:c5:eb:
76:88:e9:bb:0c:fe:15:e7:80:bd:27:34:93:c2:5b:
5f:d3:8a:27:bb:61:8c:3a:a9:4e:ea:4b:2d:59:2f:
7d:df:ef:01:a8:44:ed:14:b2:0d:13:26:b0:c6:b6:
e0:45:5a:41:e3:4d:bd:cb:89:6e:5b:1c:c0:e7:c8:
68:09:51:5f:09:05:fc:6f:c7:fe:30:89:0a:44:e5:
a0:07:4c:15:47:c6:44:5b:70:bb:c7:fb:4d:f3:91:
b2:bc:fd:c6:14:b0:9a:6e:c6:e9:4b:10:24:20:9f:
98:ec:da:0f:5d:6a:c2:7b:50:5c:5b:8d:9c:e9:c6:
4b:1d:eb:2e:b3:fc:29:a8:ba:aa:05:43:85:c5:5c:
04:9e:0e:f8:44:55:b7:d2:43:dd:92:d8:28:35:2b:
dc:65:6a:f1:c6:08:77:16:3d:17:f6:e3:02:78:2e:
6a:1d:57:de:fe:99:97:3c:33:14:ba:3b:f9:90:dd:
9a:96:38:56:09:08:6c:d2:7b:2d:bc:3e:0f:8f:6d:
4b:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:43:63:B3:05:AC:75:36:BE:85:32:C0:48:A1:E8:DF:A5:6A:E6:65
X509v3 Authority Key Identifier:
keyid:4F:84:77:E5:69:D1:D7:D6:0F:04:69:A7:CC:8A:7F:47:46:03:9B:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T4R35WnR19YPBGmnzIp_R0YDm7c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/775190-cb94-4063-8c1a-ad147d915791/1/T4R35WnR19YPBGmnzIp_R0YDm7c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/775190-cb94-4063-8c1a-ad147d915791/1/T4R35WnR19YPBGmnzIp_R0YDm7c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:e3:b8:8d:bf:f2:c9:d4:ae:c8:79:e5:8b:34:e2:20:7b:19:
1c:3c:8d:09:bb:83:1d:e4:86:41:35:4d:f3:24:ac:95:76:b0:
af:61:05:94:d7:72:03:04:7a:17:ae:48:72:24:ee:98:b3:a2:
7e:b6:53:b8:9d:66:6c:06:41:5d:6d:0d:71:0d:ae:f1:f9:9e:
a1:e6:47:5e:bc:87:1c:e1:1a:83:41:5f:69:3a:8d:e7:7b:b9:
f3:9f:cc:1d:a9:2e:6b:89:9f:a4:fd:ac:57:2f:a4:a7:1c:a6:
94:b0:df:a8:0f:27:ec:84:c7:b4:93:26:a1:82:9c:93:d1:e1:
72:6b:a3:c6:1d:32:b6:66:6a:1a:0c:a1:f3:dd:45:61:ec:81:
73:a6:68:5f:96:02:0e:04:4b:c0:9f:78:c5:58:92:b7:bf:9e:
79:e5:3a:d4:94:88:23:ec:3c:89:2d:a3:17:dd:99:83:3e:2a:
8f:5a:d5:fd:b3:21:53:6c:68:b7:34:b8:a5:7a:2e:d1:90:7a:
74:58:66:13:69:8f:da:71:d2:1a:77:e1:5a:d9:5c:8d:8c:03:
00:78:9e:a2:b5:32:38:2a:54:b8:16:20:58:bb:bf:16:1f:a7:
0d:e3:05:9d:77:74:eb:49:0a:29:3c:91:b5:cb:c2:b7:8b:37:
87:34:31:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 02:10:59 2026 by rpki-client